2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-41770HIGH7.5Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XM...
CVE-2021-42054HIGH7.5ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.
CVE-2021-26557HIGH7.8When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to a...
CVE-2021-26556HIGH7.8When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an ...
CVE-2021-42040HIGH7.5An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite l...
CVE-2021-41129HIGH8.1Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. A malicious user can modify ...
CVE-2021-34788HIGH7A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS ...
CVE-2021-34780HIGH8.8Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 S...
CVE-2021-34779HIGH8.8Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 S...
CVE-2021-34766HIGH8.8A vulnerability in the web UI of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote...
CVE-2021-34748HIGH8.8A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated...
CVE-2021-34735HIGH7.5Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perfor...
CVE-2021-34710HIGH8.8Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perfor...
CVE-2021-34698HIGH7.5A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthentica...
CVE-2021-1594HIGH8.1A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker ...
CVE-2021-41128HIGH8.8Hygeia is an application for collecting and processing personal and case data in connection with communicable diseases. ...
CVE-2021-41126HIGH7.2October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versio...
CVE-2021-41121HIGH8.8Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a l...
CVE-2021-25498HIGH7.8A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung N...
CVE-2021-25497HIGH7.8A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Not...
CVE-2021-25496HIGH7.8A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Not...
CVE-2021-25495HIGH7.8A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3....
CVE-2021-25494HIGH7.8A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61...
CVE-2021-25493HIGH7.1Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 al...
CVE-2021-25492HIGH7.1Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 al...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now