2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4091 | HIGH | 7.5 | 2.0% | Feb 18, 2022 | A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker co... |
| CVE-2021-4090 | HIGH | 7.1 | 0.3% | Feb 18, 2022 | An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write b... |
| CVE-2021-45401 | CRITICAL | 9.8 | 2.5% | Feb 18, 2022 | A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.0... |
| CVE-2021-44968 | HIGH | 7.8 | 0.4% | Feb 18, 2022 | A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using th... |
| CVE-2021-3948 | MEDIUM | 6.3 | 0.6% | Feb 18, 2022 | An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces h... |
| CVE-2021-3947 | MEDIUM | 5.5 | 0.3% | Feb 18, 2022 | A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a maliciou... |
| CVE-2021-3930 | MEDIUM | 6.5 | 0.3% | Feb 18, 2022 | An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands... |
| CVE-2021-3657 | CRITICAL | 9.8 | 3.3% | Feb 18, 2022 | A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals... |
| CVE-2021-39026 | MEDIUM | 5.9 | 0.5% | Feb 18, 2022 | IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, ca... |
| CVE-2021-38935 | HIGH | 7.5 | 1.0% | Feb 18, 2022 | IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it ... |
| CVE-2021-30650 | MEDIUM | 6.1 | 0.7% | Feb 18, 2022 | A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a ... |
| CVE-2021-26619 | CRITICAL | 9.1 | 0.9% | Feb 18, 2022 | An path traversal vulnerability leading to delete arbitrary files was discovered in BigFileAgent. Remote attackers can u... |
| CVE-2021-26618 | CRITICAL | 9.8 | 1.0% | Feb 18, 2022 | An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers u... |
| CVE-2021-20325 | CRITICAL | 9.8 | 1.6% | Feb 18, 2022 | Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5... |
| CVE-2021-20322 | HIGH | 7.4 | 6.8% | Feb 18, 2022 | A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functional... |
| CVE-2021-20321 | MEDIUM | 4.7 | 0.2% | Feb 18, 2022 | A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in s... |
| CVE-2021-20320 | MEDIUM | 5.5 | 0.3% | Feb 18, 2022 | A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a l... |
| CVE-2021-20315 | MEDIUM | 6.1 | 0.2% | Feb 18, 2022 | A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "... |
| CVE-2021-46372 | MEDIUM | 5.4 | 0.6% | Feb 18, 2022 | Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to... |
| CVE-2021-46108 | MEDIUM | 5.4 | 0.8% | Feb 18, 2022 | D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance config... |
| CVE-2021-41599 | HIGH | 8.8 | 2.1% | Feb 18, 2022 | A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a... |
| CVE-2021-4120 | HIGH | 7.8 | 0.4% | Feb 17, 2022 | snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability... |
| CVE-2021-44731 | HIGH | 7.8 | 1.0% | Feb 17, 2022 | A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. Th... |
| CVE-2021-44730 | HIGH | 8.8 | 0.3% | Feb 17, 2022 | snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this b... |
| CVE-2021-3155 | MEDIUM | 5.5 | 0.3% | Feb 17, 2022 | snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now