2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29216 | MEDIUM | 6.1 | 0.6% | Feb 24, 2022 | A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE... |
| CVE-2021-44665 | MEDIUM | 6.5 | 7.7% | Feb 24, 2022 | A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via... |
| CVE-2021-44664 | HIGH | 8.8 | 12.8% | Feb 24, 2022 | An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupl... |
| CVE-2021-4021 | HIGH | 7.5 | 1.0% | Feb 24, 2022 | A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled w... |
| CVE-2021-44663 | CRITICAL | 9.8 | 3.7% | Feb 24, 2022 | A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file throu... |
| CVE-2021-44662 | MEDIUM | 6.1 | 1.1% | Feb 24, 2022 | A Site Scripting (XSS) vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php... |
| CVE-2021-44533 | MEDIUM | 5.3 | 9.4% | Feb 24, 2022 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly.... |
| CVE-2021-44532 | MEDIUM | 5.3 | 10.4% | Feb 24, 2022 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It u... |
| CVE-2021-44531 | HIGH | 7.4 | 8.4% | Feb 24, 2022 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN t... |
| CVE-2021-3700 | MEDIUM | 6.4 | 0.3% | Feb 24, 2022 | A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in us... |
| CVE-2021-3610 | HIGH | 7.5 | 2.7% | Feb 24, 2022 | A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in... |
| CVE-2021-3608 | MEDIUM | 6 | 0.4% | Feb 24, 2022 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue oc... |
| CVE-2021-3607 | MEDIUM | 6 | 0.3% | Feb 24, 2022 | An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0.... |
| CVE-2021-3596 | MEDIUM | 6.5 | 1.9% | Feb 24, 2022 | A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.... |
| CVE-2021-26252 | HIGH | 7.8 | 0.9% | Feb 24, 2022 | A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf.cxx may lead to execute a... |
| CVE-2021-39038 | MEDIUM | 5.4 | 0.7% | Feb 24, 2022 | IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.2 could allow ... |
| CVE-2021-38995 | MEDIUM | 5.5 | 0.2% | Feb 24, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel... |
| CVE-2021-38994 | MEDIUM | 5.5 | 0.2% | Feb 24, 2022 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel... |
| CVE-2021-4030 | HIGH | 8.8 | 0.4% | Feb 24, 2022 | A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker ... |
| CVE-2021-4029 | HIGH | 8.8 | 0.8% | Feb 24, 2022 | A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execut... |
| CVE-2021-45746 | HIGH | 7.5 | 1.5% | Feb 24, 2022 | A Directory Traversal vulnerability exists in WeBankPartners wecube-platform 3.2.1 via the file variable in PluginPackag... |
| CVE-2021-44967 | HIGH | 8.8 | 12.7% | Feb 24, 2022 | A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install plugins function, which... |
| CVE-2021-44610 | CRITICAL | 9.8 | 1.4% | Feb 24, 2022 | Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2) lang_id, (3) tmpl_id, (... |
| CVE-2021-44608 | MEDIUM | 5.4 | 0.5% | Feb 24, 2022 | Multiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) file parameter and ... |
| CVE-2021-44607 | MEDIUM | 5.4 | 0.5% | Feb 24, 2022 | A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now