2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25487 | HIGH | 7.8 | 0.6% | Oct 6, 2021 | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows... |
| CVE-2021-25485 | HIGH | 8 | 0.2% | Oct 6, 2021 | Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file a... |
| CVE-2021-25480 | HIGH | 7.5 | 0.5% | Oct 6, 2021 | A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 ... |
| CVE-2021-25479 | HIGH | 7.2 | 0.5% | Oct 6, 2021 | A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrar... |
| CVE-2021-25478 | HIGH | 7.2 | 0.5% | Oct 6, 2021 | A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitra... |
| CVE-2021-25471 | HIGH | 7.5 | 0.4% | Oct 6, 2021 | A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial o... |
| CVE-2021-25470 | HIGH | 7.9 | 0.1% | Oct 6, 2021 | An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromis... |
| CVE-2021-38925 | HIGH | 7.5 | 0.7% | Oct 6, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms... |
| CVE-2021-29837 | HIGH | 8.8 | 0.4% | Oct 6, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site request forgery which c... |
| CVE-2021-20264 | HIGH | 7.8 | 0.3% | Oct 6, 2021 | An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw ... |
| CVE-2021-0692 | HIGH | 7.8 | 0.1% | Oct 6, 2021 | In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIn... |
| CVE-2021-0688 | HIGH | 7 | 0.2% | Oct 6, 2021 | In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead t... |
| CVE-2021-0685 | HIGH | 7.8 | 0.2% | Oct 6, 2021 | In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to u... |
| CVE-2021-0684 | HIGH | 7.8 | 0.1% | Oct 6, 2021 | In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This... |
| CVE-2021-0683 | HIGH | 7.8 | 0.2% | Oct 6, 2021 | In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused d... |
| CVE-2021-0636 | HIGH | 7.8 | 0.3% | Oct 6, 2021 | When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video c... |
| CVE-2021-0635 | HIGH | 7.8 | 0.3% | Oct 6, 2021 | When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video c... |
| CVE-2021-0598 | HIGH | 7.3 | 0.1% | Oct 6, 2021 | In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacki... |
| CVE-2021-0595 | HIGH | 7.8 | 0.2% | Oct 6, 2021 | In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profi... |
| CVE-2021-28702 | HIGH | 7.6 | 0.4% | Oct 6, 2021 | PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Region... |
| CVE-2021-31988 | HIGH | 8.8 | 0.9% | Oct 5, 2021 | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the ... |
| CVE-2021-31987 | HIGH | 7.5 | 0.9% | Oct 5, 2021 | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass b... |
| CVE-2021-41124 | HIGH | 7.5 | 1.1% | Oct 5, 2021 | Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected versions users who use [`HttpAu... |
| CVE-2021-41120 | HIGH | 7.5 | 1.5% | Oct 5, 2021 | sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment... |
| CVE-2021-3581 | HIGH | 8.8 | 0.3% | Oct 5, 2021 | Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Len... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now