2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27665 | HIGH | 7.5 | 1.5% | Oct 11, 2021 | An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a spe... |
| CVE-2021-0583 | HIGH | 7.3 | 0.1% | Oct 11, 2021 | In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjack... |
| CVE-2021-29005 | HIGH | 8.8 | 1.8% | Oct 11, 2021 | Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute ch... |
| CVE-2021-29004 | HIGH | 8.8 | 2.1% | Oct 11, 2021 | rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-... |
| CVE-2021-40884 | HIGH | 8.1 | 0.9% | Oct 11, 2021 | Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids ... |
| CVE-2021-24711 | HIGH | 8.8 | 0.7% | Oct 11, 2021 | The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CS... |
| CVE-2021-24651 | HIGH | 7.5 | 1.6% | Oct 11, 2021 | The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_po... |
| CVE-2021-24546 | HIGH | 8.8 | 1.8% | Oct 11, 2021 | The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Condit... |
| CVE-2021-41832 | HIGH | 7.5 | 1.3% | Oct 11, 2021 | It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apach... |
| CVE-2021-41830 | HIGH | 7.5 | 1.3% | Oct 11, 2021 | It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All ve... |
| CVE-2021-41801 | HIGH | 8.8 | 1.1% | Oct 11, 2021 | The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitti... |
| CVE-2021-41799 | HIGH | 7.5 | 1.6% | Oct 11, 2021 | MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQ... |
| CVE-2021-42135 | HIGH | 8.1 | 0.8% | Oct 11, 2021 | HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policie... |
| CVE-2021-41055 | HIGH | 7.5 | 1.5% | Oct 11, 2021 | Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last ... |
| CVE-2021-25966 | HIGH | 8.8 | 1.0% | Oct 10, 2021 | In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination ... |
| CVE-2021-37975 | HIGH | 8.8 | 34.9% | Oct 8, 2021 | Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2021-37974 | HIGH | 8.8 | 1.3% | Oct 8, 2021 | Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the ... |
| CVE-2021-37972 | HIGH | 8.8 | 1.7% | Oct 8, 2021 | Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially expl... |
| CVE-2021-37970 | HIGH | 8.8 | 1.3% | Oct 8, 2021 | Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploi... |
| CVE-2021-37969 | HIGH | 7.8 | 0.9% | Oct 8, 2021 | Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attack... |
| CVE-2021-37962 | HIGH | 8.8 | 1.2% | Oct 8, 2021 | Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromis... |
| CVE-2021-37961 | HIGH | 8.8 | 1.2% | Oct 8, 2021 | Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-37959 | HIGH | 8.8 | 0.9% | Oct 8, 2021 | Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage ... |
| CVE-2021-37957 | HIGH | 8.8 | 1.2% | Oct 8, 2021 | Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap co... |
| CVE-2021-37956 | HIGH | 8.8 | 1.2% | Oct 8, 2021 | Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compro... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now