2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-36871MEDIUM5.4Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plu...
CVE-2021-36870MEDIUM5.4Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (version...
CVE-2021-20118MEDIUM6.7Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth...
CVE-2021-20117MEDIUM6.7Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth...
CVE-2021-30294MEDIUM5.5Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon ...
CVE-2021-1963MEDIUM6.7Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, S...
CVE-2021-1962MEDIUM6.7Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for inp...
CVE-2021-1961MEDIUM6.7Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdrag...
CVE-2021-1960MEDIUM6.5Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in...
CVE-2021-1958MEDIUM6.4A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon...
CVE-2021-1957MEDIUM6.5Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with pai...
CVE-2021-1956MEDIUM6.5Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdrago...
CVE-2021-1935MEDIUM5.5Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Aut...
CVE-2021-34786MEDIUM4.9Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacke...
CVE-2021-34771MEDIUM5.5A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information t...
CVE-2021-34722MEDIUM6.7Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access...
CVE-2021-34721MEDIUM6.7Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access...
CVE-2021-34709MEDIUM6.4Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only...
CVE-2021-34708MEDIUM6.7Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only...
CVE-2021-40812MEDIUM6.5The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and ...
CVE-2021-40797MEDIUM6.5An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before...
CVE-2021-36215MEDIUM5.3LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling.
CVE-2021-32805MEDIUM6.1Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-App...
CVE-2021-31274MEDIUM5.4In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization ...
CVE-2021-3055MEDIUM6.5An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interf...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now