2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34342 | MEDIUM | 6.5 | 1.1% | Mar 10, 2022 | Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge informa... |
| CVE-2021-34341 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a d... |
| CVE-2021-34340 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that cause... |
| CVE-2021-34339 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direc... |
| CVE-2021-34338 | MEDIUM | 6.5 | 0.9% | Mar 10, 2022 | Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a dire... |
| CVE-2021-34122 | MEDIUM | 5.5 | 0.8% | Mar 10, 2022 | The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference. |
| CVE-2021-33852 | MEDIUM | 5.4 | 0.6% | Mar 10, 2022 | A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an appl... |
| CVE-2021-33851 | MEDIUM | 5.4 | 1.3% | Mar 10, 2022 | A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an appl... |
| CVE-2021-33293 | CRITICAL | 9.1 | 2.1% | Mar 10, 2022 | Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() i... |
| CVE-2021-32505 | — | — | — | Mar 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-32502 | — | — | — | Mar 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-32501 | — | — | — | Mar 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-32436 | MEDIUM | 6.5 | 1.6% | Mar 10, 2022 | An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Den... |
| CVE-2021-32435 | MEDIUM | 5.5 | 1.3% | Mar 10, 2022 | Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a De... |
| CVE-2021-32434 | MEDIUM | 5.5 | 1.0% | Mar 10, 2022 | abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c. |
| CVE-2021-32025 | HIGH | 7.8 | 0.2% | Mar 10, 2022 | An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Plat... |
| CVE-2021-32006 | MEDIUM | 4.3 | 0.6% | Mar 10, 2022 | This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in... |
| CVE-2021-32005 | MEDIUM | 5.4 | 0.6% | Mar 10, 2022 | Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript ... |
| CVE-2021-28488 | MEDIUM | 6.5 | 1.1% | Mar 10, 2022 | Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access ... |
| CVE-2021-20269 | MEDIUM | 5.5 | 0.2% | Mar 10, 2022 | A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to ... |
| CVE-2021-38296 | HIGH | 7.5 | 1.8% | Mar 10, 2022 | Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enable... |
| CVE-2021-22783 | HIGH | 7.6 | 0.4% | Mar 9, 2022 | A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communica... |
| CVE-2021-36777 | HIGH | 8.8 | 0.9% | Mar 9, 2022 | A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service all... |
| CVE-2021-41241 | MEDIUM | 4.3 | 0.8% | Mar 8, 2022 | Nextcloud server is a self hosted system designed to provide cloud style services. The groupfolders application for Next... |
| CVE-2021-41239 | MEDIUM | 5.3 | 1.1% | Mar 8, 2022 | Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now