2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3510 | HIGH | 7.5 | 0.9% | Oct 5, 2021 | Zephyr JSON decoder incorrectly decodes array of array. Zephyr versions >= >1.14.0, >= >2.5.0 contain Attempt to Access ... |
| CVE-2021-41113 | HIGH | 8.8 | 0.6% | Oct 5, 2021 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that ... |
| CVE-2021-39226 | HIGH | 7.3 | 99.9% | Oct 5, 2021 | Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are ... |
| CVE-2021-35497 | HIGH | 7.5 | 0.4% | Oct 5, 2021 | The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO Active... |
| CVE-2021-41286 | HIGH | 7.8 | 0.2% | Oct 5, 2021 | Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the appli... |
| CVE-2021-35491 | HIGH | 8.1 | 0.9% | Oct 5, 2021 | A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to... |
| CVE-2021-41554 | HIGH | 8.8 | 0.8% | Oct 5, 2021 | ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functio... |
| CVE-2021-39893 | HIGH | 7.5 | 1.1% | Oct 5, 2021 | A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without auth... |
| CVE-2021-39867 | HIGH | 8.1 | 0.9% | Oct 5, 2021 | In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by ... |
| CVE-2021-35505 | HIGH | 7.2 | 2.7% | Oct 5, 2021 | Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary... |
| CVE-2021-35504 | HIGH | 7.2 | 3.1% | Oct 5, 2021 | Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary... |
| CVE-2021-41524 | HIGH | 7.5 | 25.0% | Oct 5, 2021 | While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing a... |
| CVE-2021-42008 | HIGH | 7.8 | 1.5% | Oct 5, 2021 | The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds wri... |
| CVE-2021-42006 | HIGH | 8.8 | 1.0% | Oct 4, 2021 | An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault ... |
| CVE-2021-32765 | HIGH | 8.8 | 2.0% | Oct 4, 2021 | Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer... |
| CVE-2021-41092 | HIGH | 7.5 | 1.5% | Oct 4, 2021 | Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where runni... |
| CVE-2021-39433 | HIGH | 7.5 | 8.4% | Oct 4, 2021 | A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific ... |
| CVE-2021-41651 | HIGH | 7.5 | 2.3% | Oct 4, 2021 | A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can r... |
| CVE-2021-41118 | HIGH | 7.5 | 1.1% | Oct 4, 2021 | The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with variou... |
| CVE-2021-41579 | HIGH | 7.8 | 1.2% | Oct 4, 2021 | LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a vict... |
| CVE-2021-41578 | HIGH | 7.8 | 10.4% | Oct 4, 2021 | mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can ... |
| CVE-2021-41099 | HIGH | 7.5 | 3.4% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string libr... |
| CVE-2021-38618 | HIGH | 8.1 | 1.0% | Oct 4, 2021 | In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone... |
| CVE-2021-38392 | HIGH | 7.6 | 0.2% | Oct 4, 2021 | A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to c... |
| CVE-2021-32762 | HIGH | 8.8 | 2.5% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel se... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now