2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3557 | MEDIUM | 6.5 | 0.8% | Feb 16, 2022 | A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created Servi... |
| CVE-2021-3551 | HIGH | 7.8 | 0.2% | Feb 16, 2022 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the... |
| CVE-2021-39301 | HIGH | 8.8 | 0.4% | Feb 16, 2022 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o... |
| CVE-2021-39300 | HIGH | 8.8 | 0.4% | Feb 16, 2022 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o... |
| CVE-2021-39299 | HIGH | 8.8 | 0.4% | Feb 16, 2022 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o... |
| CVE-2021-39298 | HIGH | 8.8 | 0.4% | Feb 16, 2022 | A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileg... |
| CVE-2021-39297 | HIGH | 8.8 | 0.4% | Feb 16, 2022 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation o... |
| CVE-2021-23682 | CRITICAL | 9.8 | 2.1% | Feb 16, 2022 | This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, befor... |
| CVE-2021-22050 | HIGH | 7.5 | 2.3% | Feb 16, 2022 | ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to E... |
| CVE-2021-22043 | HIGH | 7.5 | 1.0% | Feb 16, 2022 | VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handl... |
| CVE-2021-22042 | HIGH | 7.8 | 0.3% | Feb 16, 2022 | VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A... |
| CVE-2021-22041 | MEDIUM | 6.7 | 0.6% | Feb 16, 2022 | VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor ... |
| CVE-2021-22040 | MEDIUM | 6.7 | 0.7% | Feb 16, 2022 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious acto... |
| CVE-2021-21966 | MEDIUM | 5.3 | 1.4% | Feb 16, 2022 | An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 S... |
| CVE-2021-21958 | HIGH | 7.8 | 1.0% | Feb 16, 2022 | A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2... |
| CVE-2021-26726 | HIGH | 8.8 | 1.1% | Feb 16, 2022 | A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to e... |
| CVE-2021-45391 | HIGH | 7.5 | 1.8% | Feb 16, 2022 | A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/set... |
| CVE-2021-46388 | — | — | — | Feb 16, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: Reason: The issue is not a vulnerability (fails CNT2) - H... |
| CVE-2021-46252 | MEDIUM | 6.5 | 0.5% | Feb 15, 2022 | A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attac... |
| CVE-2021-46251 | MEDIUM | 6.1 | 0.6% | Feb 15, 2022 | A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows at... |
| CVE-2021-46250 | CRITICAL | 10 | 1.0% | Feb 15, 2022 | An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attacker... |
| CVE-2021-46249 | MEDIUM | 6.5 | 0.6% | Feb 15, 2022 | An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856d... |
| CVE-2021-35380 | HIGH | 7.5 | 39.0% | Feb 15, 2022 | A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthe... |
| CVE-2021-46321 | CRITICAL | 9.8 | 1.7% | Feb 15, 2022 | Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiBasicCfg modul... |
| CVE-2021-46265 | CRITICAL | 9.8 | 1.7% | Feb 15, 2022 | Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wanBasicCfg module... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now