2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46264 | CRITICAL | 9.8 | 1.7% | Feb 15, 2022 | Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module.... |
| CVE-2021-46263 | CRITICAL | 9.8 | 1.7% | Feb 15, 2022 | Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module. T... |
| CVE-2021-46262 | CRITICAL | 9.8 | 1.7% | Feb 15, 2022 | Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module. This... |
| CVE-2021-37354 | CRITICAL | 9.8 | 1.3% | Feb 15, 2022 | Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE... |
| CVE-2021-33945 | CRITICAL | 9.8 | 1.8% | Feb 15, 2022 | RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500S... |
| CVE-2021-42714 | HIGH | 7.8 | 0.4% | Feb 15, 2022 | Splashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permiss... |
| CVE-2021-42713 | HIGH | 7.8 | 0.3% | Feb 15, 2022 | Splashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permiss... |
| CVE-2021-43050 | HIGH | 7.8 | 0.2% | Feb 15, 2022 | The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitabl... |
| CVE-2021-43049 | CRITICAL | 9.8 | 1.3% | Feb 15, 2022 | The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable v... |
| CVE-2021-44960 | MEDIUM | 6.5 | 1.2% | Feb 15, 2022 | In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument o... |
| CVE-2021-43734 | HIGH | 7.5 | 10.7% | Feb 15, 2022 | kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file l... |
| CVE-2021-42712 | HIGH | 7.8 | 0.3% | Feb 15, 2022 | Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions. |
| CVE-2021-41552 | HIGH | 8.8 | 0.7% | Feb 15, 2022 | CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection. |
| CVE-2021-46558 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Multiple cross-site scripting (XSS) vulnerabilities in the Add User module of Issabel PBX 20200102 allows attackers to e... |
| CVE-2021-46557 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the input tabs. |
| CVE-2021-43948 | MEDIUM | 4.3 | 0.8% | Feb 15, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43941 | MEDIUM | 6.5 | 0.6% | Feb 15, 2022 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including... |
| CVE-2021-43940 | HIGH | 7.8 | 0.3% | Feb 15, 2022 | Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated... |
| CVE-2021-43953 | MEDIUM | 4.3 | 0.5% | Feb 15, 2022 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread C... |
| CVE-2021-43950 | MEDIUM | 4.3 | 0.8% | Feb 15, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43952 | MEDIUM | 4.3 | 0.4% | Feb 15, 2022 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default... |
| CVE-2021-4201 | CRITICAL | 9.8 | 1.9% | Feb 14, 2022 | Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthen... |
| CVE-2021-46463 | CRITICAL | 9.8 | 1.6% | Feb 14, 2022 | njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerabili... |
| CVE-2021-46462 | HIGH | 7.5 | 1.7% | Feb 14, 2022 | njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /sr... |
| CVE-2021-46461 | CRITICAL | 9.8 | 3.1% | Feb 14, 2022 | njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now