2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32136 | HIGH | 7.8 | 1.4% | Sep 13, 2021 | Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or... |
| CVE-2021-22527 | HIGH | 7.5 | 0.7% | Sep 13, 2021 | Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 |
| CVE-2021-40867 | HIGH | 7.1 | 1.4% | Sep 13, 2021 | Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenti... |
| CVE-2021-40866 | HIGH | 8.8 | 1.7% | Sep 13, 2021 | Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (di... |
| CVE-2021-39207 | HIGH | 8.8 | 1.7% | Sep 10, 2021 | parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affec... |
| CVE-2021-37414 | HIGH | 7.5 | 5.3% | Sep 10, 2021 | Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication. |
| CVE-2021-34343 | HIGH | 7.2 | 1.9% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If expl... |
| CVE-2021-28816 | HIGH | 8.8 | 0.9% | Sep 10, 2021 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If expl... |
| CVE-2021-28813 | HIGH | 7.5 | 1.1% | Sep 10, 2021 | A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP... |
| CVE-2021-40839 | HIGH | 7.5 | 5.4% | Sep 10, 2021 | The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabl... |
| CVE-2021-39206 | HIGH | 8.6 | 1.4% | Sep 9, 2021 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization re... |
| CVE-2021-39204 | HIGH | 7.5 | 1.6% | Sep 9, 2021 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting... |
| CVE-2021-39162 | HIGH | 8.6 | 1.6% | Sep 9, 2021 | Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if a... |
| CVE-2021-38324 | HIGH | 7.5 | 1.7% | Sep 9, 2021 | The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shor... |
| CVE-2021-25465 | HIGH | 7 | 0.2% | Sep 9, 2021 | An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-... |
| CVE-2021-25461 | HIGH | 7.8 | 0.2% | Sep 9, 2021 | An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow. |
| CVE-2021-28912 | HIGH | 7.2 | 1.2% | Sep 9, 2021 | BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'ei... |
| CVE-2021-28910 | HIGH | 7.5 | 1.1% | Sep 9, 2021 | BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attacker... |
| CVE-2021-32487 | HIGH | 7.5 | 2.3% | Sep 9, 2021 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser... |
| CVE-2021-32486 | HIGH | 7.5 | 2.3% | Sep 9, 2021 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser... |
| CVE-2021-32485 | HIGH | 7.5 | 2.3% | Sep 9, 2021 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser... |
| CVE-2021-32484 | HIGH | 7.5 | 2.3% | Sep 9, 2021 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of ser... |
| CVE-2021-38723 | HIGH | 8.8 | 1.0% | Sep 9, 2021 | FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items |
| CVE-2021-3761 | HIGH | 7.5 | 1.2% | Sep 9, 2021 | Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR ... |
| CVE-2021-28498 | HIGH | 7.8 | 0.2% | Sep 9, 2021 | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now