2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32687 | HIGH | 7.5 | 3.8% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Red... |
| CVE-2021-32675 | HIGH | 7.5 | 15.8% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RES... |
| CVE-2021-32628 | HIGH | 7.5 | 3.6% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure... |
| CVE-2021-32627 | HIGH | 7.5 | 3.7% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis... |
| CVE-2021-32626 | HIGH | 8.8 | 15.1% | Oct 4, 2021 | Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts ex... |
| CVE-2021-23858 | HIGH | 7.5 | 1.2% | Oct 4, 2021 | Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected... |
| CVE-2021-23855 | HIGH | 7.5 | 0.6% | Oct 4, 2021 | The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashi... |
| CVE-2021-41593 | HIGH | 8.6 | 1.9% | Oct 4, 2021 | Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure. |
| CVE-2021-41530 | HIGH | 7.5 | 0.9% | Oct 4, 2021 | Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplif... |
| CVE-2021-41103 | HIGH | 7.8 | 0.5% | Oct 4, 2021 | containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was fou... |
| CVE-2021-40683 | HIGH | 7.8 | 0.4% | Oct 4, 2021 | In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquot... |
| CVE-2021-37777 | HIGH | 7.5 | 1.6% | Oct 4, 2021 | Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visib... |
| CVE-2021-36051 | HIGH | 7.8 | 5.4% | Oct 4, 2021 | XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arb... |
| CVE-2021-24465 | HIGH | 8.1 | 1.1% | Oct 4, 2021 | The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery sh... |
| CVE-2021-22557 | HIGH | 7.8 | 1.6% | Oct 4, 2021 | SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within ... |
| CVE-2021-41869 | HIGH | 8.8 | 1.5% | Oct 4, 2021 | SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation. |
| CVE-2021-41322 | HIGH | 8.8 | 1.6% | Oct 4, 2021 | Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 dur... |
| CVE-2021-41285 | HIGH | 7.8 | 0.5% | Oct 4, 2021 | Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vuln... |
| CVE-2021-40325 | HIGH | 7.5 | 1.3% | Oct 4, 2021 | Cobbler before 3.3.0 allows authorization bypass for modification of settings. |
| CVE-2021-40324 | HIGH | 7.5 | 68.6% | Oct 4, 2021 | Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. |
| CVE-2021-41864 | HIGH | 7.8 | 0.4% | Oct 2, 2021 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to tri... |
| CVE-2021-41847 | HIGH | 8.8 | 1.5% | Oct 1, 2021 | An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with ... |
| CVE-2021-38110 | HIGH | 7.8 | 2.1% | Oct 1, 2021 | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsin... |
| CVE-2021-38101 | HIGH | 7.8 | 2.1% | Oct 1, 2021 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing... |
| CVE-2021-38100 | HIGH | 7.8 | 2.1% | Oct 1, 2021 | Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted fil... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now