2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1930 | HIGH | 7.1 | 0.1% | Sep 8, 2021 | Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute... |
| CVE-2021-1923 | HIGH | 7.8 | 0.1% | Sep 8, 2021 | Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon ... |
| CVE-2021-1914 | HIGH | 7.5 | 0.6% | Sep 8, 2021 | Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdra... |
| CVE-2021-36182 | HIGH | 8.8 | 1.9% | Sep 8, 2021 | A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.1... |
| CVE-2021-36179 | HIGH | 8.8 | 1.5% | Sep 8, 2021 | A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute ... |
| CVE-2021-23404 | HIGH | 8.8 | 0.5% | Sep 8, 2021 | This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without... |
| CVE-2021-37145 | HIGH | 7.2 | 2.0% | Sep 7, 2021 | A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3... |
| CVE-2021-32800 | HIGH | 8.1 | 1.7% | Sep 7, 2021 | Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two F... |
| CVE-2021-39500 | HIGH | 7.5 | 1.4% | Sep 7, 2021 | Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, t... |
| CVE-2021-37628 | HIGH | 7.5 | 2.0% | Sep 7, 2021 | Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Uplo... |
| CVE-2021-40143 | HIGH | 8.2 | 2.3% | Sep 7, 2021 | Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP req... |
| CVE-2021-39503 | HIGH | 7.2 | 2.7% | Sep 7, 2021 | PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConf... |
| CVE-2021-38706 | HIGH | 8.8 | 1.0% | Sep 7, 2021 | messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged att... |
| CVE-2021-38705 | HIGH | 8.8 | 0.7% | Sep 7, 2021 | ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). A successful attack would consist of an authenticate... |
| CVE-2021-39197 | HIGH | 8.8 | 0.6% | Sep 7, 2021 | better_errors is an open source replacement for the standard Rails error page with more information rich error pages. It... |
| CVE-2021-38142 | HIGH | 8.8 | 0.5% | Sep 7, 2021 | Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker o... |
| CVE-2021-39263 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_... |
| CVE-2021-39262 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22. |
| CVE-2021-39261 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22. |
| CVE-2021-39260 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22. |
| CVE-2021-39259 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup... |
| CVE-2021-39258 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22. |
| CVE-2021-39256 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22. |
| CVE-2021-39255 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in ... |
| CVE-2021-39254 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function n... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now