2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40981 | HIGH | 7.3 | 0.4% | Sep 27, 2021 | ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the pu... |
| CVE-2021-31606 | HIGH | 7.5 | 2.4% | Sep 27, 2021 | furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients. |
| CVE-2021-31605 | HIGH | 7.5 | 3.3% | Sep 27, 2021 | furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This ca... |
| CVE-2021-34349 | HIGH | 7.2 | 1.5% | Sep 27, 2021 | A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability ... |
| CVE-2021-41617 | HIGH | 7 | 2.5% | Sep 26, 2021 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalatio... |
| CVE-2021-40655 | HIGH | 7.5 | 87.0% | Sep 24, 2021 | An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name... |
| CVE-2021-41504 | HIGH | 8 | 0.5% | Sep 24, 2021 | An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authen... |
| CVE-2021-41503 | HIGH | 8 | 0.4% | Sep 24, 2021 | DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authenticatio... |
| CVE-2021-2464 | HIGH | 7.8 | 0.3% | Sep 24, 2021 | Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitab... |
| CVE-2021-40309 | HIGH | 8.8 | 1.8% | Sep 24, 2021 | A SQL injection vulnerability exists in the Take Attendance functionality of OS4Ed's OpenSIS 8.0. allows an attacker to ... |
| CVE-2021-28130 | HIGH | 7.8 | 0.4% | Sep 24, 2021 | Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload w... |
| CVE-2021-41588 | HIGH | 8.1 | 0.8% | Sep 24, 2021 | In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. Th... |
| CVE-2021-41587 | HIGH | 7.5 | 0.9% | Sep 24, 2021 | In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover cred... |
| CVE-2021-41586 | HIGH | 7.5 | 0.8% | Sep 24, 2021 | In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the sys... |
| CVE-2021-40099 | HIGH | 7.2 | 2.0% | Sep 24, 2021 | An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code ex... |
| CVE-2021-41584 | HIGH | 7.5 | 1.3% | Sep 24, 2021 | Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensi... |
| CVE-2021-41088 | HIGH | 8.8 | 0.5% | Sep 23, 2021 | Elvish is a programming language and interactive shell, combined into one package. In versions prior to 0.14.0 Elvish's ... |
| CVE-2021-38864 | HIGH | 7.5 | 0.7% | Sep 23, 2021 | IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate valida... |
| CVE-2021-36823 | HIGH | 8.2 | 0.7% | Sep 23, 2021 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cusmin AGCA - Abso... |
| CVE-2021-41381 | HIGH | 7.5 | 52.9% | Sep 23, 2021 | Payara Micro Community 5.2021.6 and below allows Directory Traversal. |
| CVE-2021-26750 | HIGH | 7.8 | 0.2% | Sep 23, 2021 | DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows attacker to... |
| CVE-2021-32999 | HIGH | 7.5 | 0.9% | Sep 23, 2021 | Improper handling of exceptional conditions in SuiteLink server while processing command 0x01 |
| CVE-2021-32987 | HIGH | 7.5 | 0.9% | Sep 23, 2021 | Null pointer dereference in SuiteLink server while processing command 0x0b |
| CVE-2021-32979 | HIGH | 7.5 | 0.9% | Sep 23, 2021 | Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a |
| CVE-2021-32971 | HIGH | 7.5 | 0.9% | Sep 23, 2021 | Null pointer dereference in SuiteLink server while processing command 0x07 |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now