2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27471 | HIGH | 8.6 | 2.7% | Mar 23, 2022 | The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may all... |
| CVE-2021-27470 | CRITICAL | 9.8 | 3.7% | Mar 23, 2022 | A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre ... |
| CVE-2021-27468 | CRITICAL | 9.8 | 3.4% | Mar 23, 2022 | The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking p... |
| CVE-2021-27466 | CRITICAL | 9.8 | 3.7% | Mar 23, 2022 | A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCen... |
| CVE-2021-27464 | CRITICAL | 9.8 | 3.3% | Mar 23, 2022 | The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacki... |
| CVE-2021-27462 | CRITICAL | 9.8 | 3.7% | Mar 23, 2022 | A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre ... |
| CVE-2021-27460 | CRITICAL | 9.8 | 3.1% | Mar 23, 2022 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deseriali... |
| CVE-2021-27456 | LOW | 2.4 | 0.2% | Mar 23, 2022 | Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-... |
| CVE-2021-27430 | MEDIUM | 6.8 | 0.2% | Mar 23, 2022 | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with phy... |
| CVE-2021-27428 | CRITICAL | 9.8 | 1.2% | Mar 23, 2022 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervi... |
| CVE-2021-27426 | CRITICAL | 9.8 | 1.2% | Mar 23, 2022 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Fac... |
| CVE-2021-27424 | MEDIUM | 5.3 | 0.8% | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made ... |
| CVE-2021-27422 | HIGH | 7.5 | 0.6% | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sens... |
| CVE-2021-27420 | MEDIUM | 5.3 | 1.0% | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs... |
| CVE-2021-27418 | MEDIUM | 6.1 | 0.6% | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly... |
| CVE-2021-38772 | HIGH | 7.5 | 1.2% | Mar 23, 2022 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBi... |
| CVE-2021-38278 | CRITICAL | 9.8 | 1.4% | Mar 23, 2022 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentCont... |
| CVE-2021-46064 | HIGH | 7.8 | 1.4% | Mar 23, 2022 | IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). T... |
| CVE-2021-44139 | HIGH | 7.5 | 6.5% | Mar 23, 2022 | Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF). |
| CVE-2021-43737 | MEDIUM | 6.5 | 0.4% | Mar 23, 2022 | An issus was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can modify administrator account... |
| CVE-2021-43738 | HIGH | 8.8 | 0.5% | Mar 23, 2022 | An issue was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can that can add the administrat... |
| CVE-2021-43736 | CRITICAL | 9.8 | 2.3% | Mar 23, 2022 | CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule |
| CVE-2021-43735 | CRITICAL | 9.8 | 1.2% | Mar 23, 2022 | CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule. |
| CVE-2021-44759 | HIGH | 8.1 | 1.5% | Mar 23, 2022 | Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a m... |
| CVE-2021-44040 | HIGH | 7.5 | 1.9% | Mar 23, 2022 | Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send inva... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now