2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38265 | MEDIUM | 5.4 | 0.6% | Mar 3, 2022 | Cross-site scripting (XSS) vulnerability in the Asset module in Liferay Portal 7.3.4 through 7.3.6 allow remote attacker... |
| CVE-2021-38264 | MEDIUM | 6.1 | 0.7% | Mar 3, 2022 | Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote a... |
| CVE-2021-38263 | MEDIUM | 6.1 | 1.1% | Mar 3, 2022 | Cross-site scripting (XSS) vulnerability in the Server module's script console in Liferay Portal 7.3.2 and earlier, and ... |
| CVE-2021-4076 | HIGH | 7.5 | 1.5% | Mar 2, 2022 | A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys. |
| CVE-2021-3772 | MEDIUM | 6.5 | 1.2% | Mar 2, 2022 | A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through inva... |
| CVE-2021-3738 | HIGH | 8.8 | 1.8% | Mar 2, 2022 | In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism... |
| CVE-2021-3716 | LOW | 3.1 | 0.6% | Mar 2, 2022 | A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM ... |
| CVE-2021-3715 | HIGH | 7.8 | 0.4% | Mar 2, 2022 | A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the ... |
| CVE-2021-3677 | MEDIUM | 6.5 | 1.4% | Mar 2, 2022 | A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default config... |
| CVE-2021-3667 | MEDIUM | 6.5 | 1.3% | Mar 2, 2022 | An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePool... |
| CVE-2021-3658 | MEDIUM | 6.5 | 0.8% | Mar 2, 2022 | bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it whe... |
| CVE-2021-3654 | MEDIUM | 6.1 | 27.5% | Mar 2, 2022 | A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to ... |
| CVE-2021-3631 | MEDIUM | 6.3 | 0.5% | Mar 2, 2022 | A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one ... |
| CVE-2021-3623 | MEDIUM | 6.1 | 0.3% | Mar 2, 2022 | A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal val... |
| CVE-2021-38266 | HIGH | 7.5 | 2.2% | Mar 2, 2022 | The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix p... |
| CVE-2021-23222 | MEDIUM | 5.9 | 1.5% | Mar 2, 2022 | A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certif... |
| CVE-2021-23206 | HIGH | 7.8 | 1.4% | Mar 2, 2022 | A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to exe... |
| CVE-2021-23192 | HIGH | 7.5 | 1.9% | Mar 2, 2022 | A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, ... |
| CVE-2021-23191 | HIGH | 7.8 | 1.1% | Mar 2, 2022 | A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() i... |
| CVE-2021-23180 | HIGH | 7.8 | 1.3% | Mar 2, 2022 | A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to ex... |
| CVE-2021-46270 | LOW | 2.7 | 0.6% | Mar 2, 2022 | JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all ... |
| CVE-2021-45074 | MEDIUM | 5.4 | 0.6% | Mar 2, 2022 | JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low-privileged user is able to de... |
| CVE-2021-41003 | MEDIUM | 6.1 | 0.8% | Mar 2, 2022 | Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F... |
| CVE-2021-41002 | HIGH | 8.1 | 0.9% | Mar 2, 2022 | Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aru... |
| CVE-2021-41001 | HIGH | 8.8 | 2.5% | Mar 2, 2022 | An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Arub... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now