2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32472 | MEDIUM | 4.3 | 0.7% | Mar 11, 2022 | Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle ve... |
| CVE-2021-32009 | MEDIUM | 6.1 | 0.5% | Mar 11, 2022 | Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject java... |
| CVE-2021-27416 | MEDIUM | 5.4 | 0.6% | Mar 11, 2022 | An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versio... |
| CVE-2021-27414 | MEDIUM | 6.1 | 0.6% | Mar 11, 2022 | An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to an... |
| CVE-2021-26401 | MEDIUM | 5.6 | 0.3% | Mar 11, 2022 | LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. |
| CVE-2021-26341 | MEDIUM | 6.5 | 0.3% | Mar 11, 2022 | Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage... |
| CVE-2021-23246 | HIGH | 7.5 | 0.9% | Mar 11, 2022 | In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user i... |
| CVE-2021-44620 | CRITICAL | 9.8 | 2.3% | Mar 11, 2022 | A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime para... |
| CVE-2021-44618 | CRITICAL | 9.8 | 1.3% | Mar 11, 2022 | A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php... |
| CVE-2021-46708 | MEDIUM | 6.1 | 1.4% | Mar 11, 2022 | The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the ... |
| CVE-2021-44597 | — | — | — | Mar 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43857. Reason: This candidate is a reservation d... |
| CVE-2021-44585 | MEDIUM | 6.1 | 0.9% | Mar 10, 2022 | A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event. |
| CVE-2021-41233 | MEDIUM | 5.3 | 0.8% | Mar 10, 2022 | Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with t... |
| CVE-2021-39025 | MEDIUM | 5.3 | 0.6% | Mar 10, 2022 | IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backe... |
| CVE-2021-39022 | HIGH | 8.8 | 0.5% | Mar 10, 2022 | IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV... |
| CVE-2021-38910 | MEDIUM | 5.3 | 1.1% | Mar 10, 2022 | IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused ... |
| CVE-2021-44673 | HIGH | 8.8 | 9.0% | Mar 10, 2022 | A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malic... |
| CVE-2021-4095 | MEDIUM | 5.5 | 0.4% | Mar 10, 2022 | A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU... |
| CVE-2021-4045 | CRITICAL | 9.8 | 72.8% | Mar 10, 2022 | TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerabili... |
| CVE-2021-4023 | MEDIUM | 5.5 | 0.2% | Mar 10, 2022 | A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic... |
| CVE-2021-46408 | HIGH | 7.5 | 1.2% | Mar 10, 2022 | Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability... |
| CVE-2021-44750 | HIGH | 7.3 | 0.7% | Mar 10, 2022 | An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special co... |
| CVE-2021-44632 | CRITICAL | 9.8 | 2.4% | Mar 10, 2022 | A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/upgrade_info f... |
| CVE-2021-44631 | CRITICAL | 9.8 | 2.4% | Mar 10, 2022 | A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/reset_cloud_pw... |
| CVE-2021-44630 | CRITICAL | 9.8 | 2.4% | Mar 10, 2022 | A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/modify_account... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now