2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41000 | HIGH | 8.8 | 2.4% | Mar 2, 2022 | Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aru... |
| CVE-2021-38268 | MEDIUM | 6.5 | 1.1% | Mar 2, 2022 | The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.6, and Liferay DXP 7.0 before fix pack 101, 7.1 befo... |
| CVE-2021-43070 | MEDIUM | 6.5 | 0.5% | Mar 2, 2022 | Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and be... |
| CVE-2021-38996 | MEDIUM | 5.5 | 0.2% | Mar 2, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel... |
| CVE-2021-44166 | MEDIUM | 4.1 | 0.6% | Mar 2, 2022 | An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and ... |
| CVE-2021-45864 | MEDIUM | 5.5 | 0.7% | Mar 2, 2022 | tsMuxer git-c6a0277 was discovered to contain a segmentation fault via DTSStreamReader::findFrame in dtsStreamReader.cpp... |
| CVE-2021-45863 | MEDIUM | 5.5 | 0.7% | Mar 2, 2022 | tsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function HevcUnit::updateBits in hevc... |
| CVE-2021-45861 | MEDIUM | 5.5 | 0.7% | Mar 2, 2022 | There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277. |
| CVE-2021-45860 | MEDIUM | 5.5 | 0.7% | Mar 2, 2022 | An integer overflow in DTSStreamReader::findFrame() of tsMuxer git-2678966 allows attackers to cause a Denial of Service... |
| CVE-2021-41652 | HIGH | 7.5 | 1.1% | Mar 1, 2022 | Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database. |
| CVE-2021-41282 | HIGH | 8.8 | 87.1% | Mar 1, 2022 | diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data abo... |
| CVE-2021-43077 | HIGH | 8.8 | 0.8% | Mar 1, 2022 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.... |
| CVE-2021-43075 | HIGH | 8.8 | 1.6% | Mar 1, 2022 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio... |
| CVE-2021-41193 | CRITICAL | 9.8 | 2.3% | Mar 1, 2022 | wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnera... |
| CVE-2021-32586 | CRITICAL | 9.8 | 1.0% | Mar 1, 2022 | An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unaut... |
| CVE-2021-36171 | HIGH | 8.1 | 1.1% | Mar 1, 2022 | The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6... |
| CVE-2021-36166 | CRITICAL | 9.8 | 1.4% | Mar 1, 2022 | An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one ... |
| CVE-2021-38986 | MEDIUM | 5.4 | 0.4% | Mar 1, 2022 | IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to ... |
| CVE-2021-38955 | MEDIUM | 4.4 | 0.2% | Mar 1, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due t... |
| CVE-2021-46387 | MEDIUM | 6.1 | 21.0% | Mar 1, 2022 | ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads t... |
| CVE-2021-44238 | HIGH | 7.2 | 1.8% | Mar 1, 2022 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, |
| CVE-2021-44747 | MEDIUM | 6.5 | 0.6% | Mar 1, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in ce... |
| CVE-2021-4039 | CRITICAL | 9.8 | 71.0% | Mar 1, 2022 | A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exec... |
| CVE-2021-35036 | MEDIUM | 6.5 | 0.5% | Mar 1, 2022 | A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow... |
| CVE-2021-43619 | HIGH | 7.8 | 0.4% | Mar 1, 2022 | Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now