2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39253 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22. |
| CVE-2021-39252 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22. |
| CVE-2021-39251 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22. |
| CVE-2021-35267 | HIGH | 7.8 | 0.5% | Sep 7, 2021 | NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror all... |
| CVE-2021-35266 | HIGH | 7.8 | 0.5% | Sep 7, 2021 | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer... |
| CVE-2021-33287 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a he... |
| CVE-2021-33286 | HIGH | 7.8 | 0.5% | Sep 7, 2021 | In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer over... |
| CVE-2021-35269 | HIGH | 7.8 | 0.5% | Sep 7, 2021 | NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_se... |
| CVE-2021-35268 | HIGH | 7.8 | 0.5% | Sep 7, 2021 | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a h... |
| CVE-2021-33289 | HIGH | 7.8 | 0.5% | Sep 7, 2021 | In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflo... |
| CVE-2021-33285 | HIGH | 7.8 | 0.4% | Sep 7, 2021 | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_... |
| CVE-2021-37725 | HIGH | 8.1 | 0.4% | Sep 7, 2021 | A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Ope... |
| CVE-2021-37724 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior t... |
| CVE-2021-37723 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior t... |
| CVE-2021-37722 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating... |
| CVE-2021-37721 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating... |
| CVE-2021-37720 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating... |
| CVE-2021-37719 | HIGH | 7.2 | 2.8% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating... |
| CVE-2021-37718 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating... |
| CVE-2021-37717 | HIGH | 7.2 | 3.0% | Sep 7, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating... |
| CVE-2021-38617 | HIGH | 8.8 | 1.4% | Sep 7, 2021 | In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to cre... |
| CVE-2021-38616 | HIGH | 8.8 | 1.3% | Sep 7, 2021 | In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any l... |
| CVE-2021-38615 | HIGH | 8.1 | 0.9% | Sep 7, 2021 | In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-i... |
| CVE-2021-37219 | HIGH | 8.8 | 1.2% | Sep 7, 2021 | HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by... |
| CVE-2021-37218 | HIGH | 8.8 | 0.7% | Sep 7, 2021 | HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now