2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3575 | HIGH | 7.8 | 1.5% | Mar 4, 2022 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k... |
| CVE-2021-3428 | MEDIUM | 5.5 | 0.3% | Mar 4, 2022 | A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a craf... |
| CVE-2021-20319 | HIGH | 7.8 | 0.5% | Mar 4, 2022 | An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation im... |
| CVE-2021-20303 | MEDIUM | 6.1 | 0.8% | Mar 4, 2022 | A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted fil... |
| CVE-2021-20302 | MEDIUM | 5.5 | 0.9% | Mar 4, 2022 | A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single... |
| CVE-2021-20300 | MEDIUM | 5.5 | 0.9% | Mar 4, 2022 | A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who... |
| CVE-2021-46382 | MEDIUM | 6.1 | 0.7% | Mar 4, 2022 | Unauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple attacks like session h... |
| CVE-2021-46381 | HIGH | 7.5 | 58.0% | Mar 4, 2022 | Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd]... |
| CVE-2021-46380 | — | — | — | Mar 4, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: Reason: This is a duplicate to CVE-2022-22511 Notes |
| CVE-2021-46379 | MEDIUM | 6.1 | 15.7% | Mar 4, 2022 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrust... |
| CVE-2021-3744 | MEDIUM | 5.5 | 0.5% | Mar 4, 2022 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, ... |
| CVE-2021-3743 | HIGH | 7.1 | 0.7% | Mar 4, 2022 | An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing san... |
| CVE-2021-23214 | HIGH | 8.1 | 1.9% | Mar 4, 2022 | When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a... |
| CVE-2021-46378 | HIGH | 7.5 | 31.9% | Mar 4, 2022 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote ... |
| CVE-2021-46394 | CRITICAL | 9.8 | 2.6% | Mar 4, 2022 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. Th... |
| CVE-2021-46393 | CRITICAL | 9.8 | 15.9% | Mar 4, 2022 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. Th... |
| CVE-2021-44321 | MEDIUM | 5 | 0.3% | Mar 4, 2022 | Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF), where an attacker can updat... |
| CVE-2021-43393 | MEDIUM | 6.2 | 0.1% | Mar 4, 2022 | STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. ... |
| CVE-2021-43392 | MEDIUM | 6.2 | 0.2% | Mar 4, 2022 | STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptogr... |
| CVE-2021-3640 | HIGH | 7 | 0.4% | Mar 3, 2022 | A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls i... |
| CVE-2021-3638 | MEDIUM | 6.5 | 0.4% | Mar 3, 2022 | An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_bl... |
| CVE-2021-26948 | HIGH | 7.8 | 0.8% | Mar 3, 2022 | Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a den... |
| CVE-2021-26259 | HIGH | 7.8 | 1.1% | Mar 3, 2022 | A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary c... |
| CVE-2021-4002 | MEDIUM | 4.4 | 0.5% | Mar 3, 2022 | A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memor... |
| CVE-2021-3762 | CRITICAL | 9.8 | 4.5% | Mar 3, 2022 | A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplyin... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now