2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42146 | HIGH | 7.5 | 0.7% | Jan 24, 2024 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reu... |
| CVE-2021-42145 | HIGH | 7.5 | 0.4% | Jan 24, 2024 | An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 a... |
| CVE-2021-33631 | HIGH | 7.8 | 0.4% | Jan 18, 2024 | Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Ove... |
| CVE-2021-4433 | HIGH | 7.5 | 1.3% | Jan 18, 2024 | A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unkno... |
| CVE-2021-24869 | HIGH | 8.8 | 1.2% | Jan 16, 2024 | The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before u... |
| CVE-2021-24566 | HIGH | 8.8 | 1.3% | Jan 16, 2024 | The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortc... |
| CVE-2021-24151 | HIGH | 7.2 | 0.8% | Jan 16, 2024 | The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated ... |
| CVE-2021-4432 | HIGH | 7.5 | 1.3% | Jan 16, 2024 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part... |
| CVE-2021-3600 | HIGH | 7.8 | 0.3% | Jan 8, 2024 | It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit ... |
| CVE-2021-45465 | HIGH | 7.8 | 0.3% | Jan 4, 2024 | A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation o... |
| CVE-2021-42028 | HIGH | 7.8 | 0.3% | Jan 4, 2024 | A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation o... |
| CVE-2021-40367 | HIGH | 7.8 | 0.3% | Jan 4, 2024 | A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation o... |
| CVE-2021-46901 | HIGH | 7.5 | 0.7% | Dec 31, 2023 | examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a ... |
| CVE-2021-46900 | HIGH | 7.5 | 0.4% | Dec 31, 2023 | Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this paramete... |
| CVE-2021-42797 | HIGH | 7.5 | 1.0% | Dec 16, 2023 | Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthentic... |
| CVE-2021-3187 | HIGH | 8.8 | 0.6% | Dec 11, 2023 | An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can ... |
| CVE-2021-46899 | HIGH | 7.8 | 0.2% | Dec 9, 2023 | SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the ... |
| CVE-2021-27795 | HIGH | 8.1 | 0.2% | Dec 6, 2023 | Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the licen... |
| CVE-2021-37942 | HIGH | 7.8 | 0.2% | Nov 22, 2023 | A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a maliciou... |
| CVE-2021-37937 | HIGH | 8.8 | 0.7% | Nov 22, 2023 | An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with ... |
| CVE-2021-22150 | HIGH | 7.2 | 1.2% | Nov 22, 2023 | It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older versi... |
| CVE-2021-22142 | HIGH | 8.8 | 1.0% | Nov 22, 2023 | Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to generate the downloadable... |
| CVE-2021-38405 | HIGH | 7.8 | 1.3% | Nov 21, 2023 | The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specia... |
| CVE-2021-27504 | HIGH | 7.8 | 0.3% | Nov 21, 2023 | Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values,... |
| CVE-2021-27502 | HIGH | 7.8 | 0.3% | Nov 21, 2023 | Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buff... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now