2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46319 | CRITICAL | 9.8 | 6.2% | Feb 17, 2022 | Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-... |
| CVE-2021-46315 | CRITICAL | 9.8 | 6.2% | Feb 17, 2022 | Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846... |
| CVE-2021-46314 | CRITICAL | 9.8 | 33.3% | Feb 17, 2022 | A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router... |
| CVE-2021-45382 | CRITICAL | 9.8 | 97.8% | Feb 17, 2022 | A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L... |
| CVE-2021-46247 | HIGH | 7.5 | 1.2% | Feb 17, 2022 | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from A... |
| CVE-2021-39034 | HIGH | 7.5 | 1.2% | Feb 17, 2022 | IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID... |
| CVE-2021-44868 | CRITICAL | 9.8 | 1.4% | Feb 17, 2022 | A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do |
| CVE-2021-46368 | HIGH | 7.8 | 0.4% | Feb 17, 2022 | TRIGONE Remote System Monitor 3.61 is vulnerable to an unquoted path service allowing local users to launch processes wi... |
| CVE-2021-43303 | CRITICAL | 9.8 | 2.3% | Feb 16, 2022 | Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer o... |
| CVE-2021-43302 | CRITICAL | 9.1 | 2.2% | Feb 16, 2022 | Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause... |
| CVE-2021-43301 | CRITICAL | 9.8 | 2.3% | Feb 16, 2022 | Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a... |
| CVE-2021-43300 | CRITICAL | 9.8 | 2.3% | Feb 16, 2022 | Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a b... |
| CVE-2021-43299 | CRITICAL | 9.8 | 2.5% | Feb 16, 2022 | Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buf... |
| CVE-2021-3242 | CRITICAL | 9.8 | 1.2% | Feb 16, 2022 | DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=. |
| CVE-2021-3781 | CRITICAL | 9.9 | 83.9% | Feb 16, 2022 | A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting ... |
| CVE-2021-3773 | CRITICAL | 9.8 | 5.3% | Feb 16, 2022 | A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for furthe... |
| CVE-2021-3760 | HIGH | 7.8 | 0.4% | Feb 16, 2022 | A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidenti... |
| CVE-2021-3753 | MEDIUM | 4.7 | 0.4% | Feb 16, 2022 | A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bo... |
| CVE-2021-3752 | HIGH | 7.1 | 1.8% | Feb 16, 2022 | A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket an... |
| CVE-2021-3578 | HIGH | 7.8 | 1.0% | Feb 16, 2022 | A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised s... |
| CVE-2021-3560 | HIGH | 7.8 | 22.2% | Feb 16, 2022 | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile... |
| CVE-2021-4220 | — | — | — | Feb 16, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-4134 | MEDIUM | 4.9 | 1.4% | Feb 16, 2022 | The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameteriza... |
| CVE-2021-4106 | HIGH | 7.8 | 0.2% | Feb 16, 2022 | A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges.... |
| CVE-2021-3648 | — | — | — | Feb 16, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation du... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now