2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30632 | HIGH | 8.8 | 64.5% | Oct 8, 2021 | Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c... |
| CVE-2021-30629 | HIGH | 8.8 | 0.9% | Oct 8, 2021 | Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the r... |
| CVE-2021-30628 | HIGH | 8.8 | 0.9% | Oct 8, 2021 | Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit s... |
| CVE-2021-30627 | HIGH | 8.8 | 0.9% | Oct 8, 2021 | Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit h... |
| CVE-2021-30626 | HIGH | 8.8 | 1.0% | Oct 8, 2021 | Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exp... |
| CVE-2021-30625 | HIGH | 8.8 | 10.1% | Oct 8, 2021 | Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user ... |
| CVE-2021-41920 | HIGH | 7.5 | 1.7% | Oct 8, 2021 | webTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection o... |
| CVE-2021-41919 | HIGH | 8.8 | 2.3% | Oct 8, 2021 | webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without... |
| CVE-2021-41916 | HIGH | 8.8 | 0.8% | Oct 8, 2021 | A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to creat... |
| CVE-2021-35979 | HIGH | 8.1 | 0.9% | Oct 8, 2021 | An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle atta... |
| CVE-2021-41133 | HIGH | 7.8 | 0.4% | Oct 8, 2021 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior t... |
| CVE-2021-41947 | HIGH | 7.2 | 1.1% | Oct 8, 2021 | A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode. |
| CVE-2021-42095 | HIGH | 7.5 | 0.9% | Oct 7, 2021 | Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar. |
| CVE-2021-42089 | HIGH | 7.5 | 1.1% | Oct 7, 2021 | An issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information. |
| CVE-2021-42086 | HIGH | 8.8 | 1.1% | Oct 7, 2021 | An issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain admin access, via a c... |
| CVE-2021-42093 | HIGH | 7.2 | 1.3% | Oct 7, 2021 | An issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafted request that manip... |
| CVE-2021-20584 | HIGH | 7.5 | 1.3% | Oct 7, 2021 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by imp... |
| CVE-2021-20489 | HIGH | 8.8 | 0.4% | Oct 7, 2021 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attac... |
| CVE-2021-40726 | HIGH | 7.8 | 5.1% | Oct 7, 2021 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) a... |
| CVE-2021-40725 | HIGH | 7.8 | 5.1% | Oct 7, 2021 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) a... |
| CVE-2021-28129 | HIGH | 7.8 | 0.5% | Oct 7, 2021 | While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but ins... |
| CVE-2021-41794 | HIGH | 7.5 | 1.2% | Oct 7, 2021 | ogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer... |
| CVE-2021-35067 | HIGH | 8.1 | 0.9% | Oct 7, 2021 | Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who snif... |
| CVE-2021-33903 | HIGH | 8.8 | 1.1% | Oct 7, 2021 | In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CL... |
| CVE-2021-40978 | HIGH | 7.5 | 14.5% | Oct 7, 2021 | The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obt... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now