2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39668 | HIGH | 7.8 | 0.1% | Feb 11, 2022 | In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead... |
| CVE-2021-39666 | MEDIUM | 5.5 | 0.1% | Feb 11, 2022 | In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could le... |
| CVE-2021-39665 | MEDIUM | 6.5 | 0.7% | Feb 11, 2022 | In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul... |
| CVE-2021-39664 | MEDIUM | 5.5 | 0.1% | Feb 11, 2022 | In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This cou... |
| CVE-2021-39663 | HIGH | 7.8 | 0.1% | Feb 11, 2022 | In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due ... |
| CVE-2021-39662 | HIGH | 7.8 | 0.1% | Feb 11, 2022 | In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider co... |
| CVE-2021-39658 | CRITICAL | 9.8 | 0.6% | Feb 11, 2022 | ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does ... |
| CVE-2021-39635 | CRITICAL | 9.1 | 0.5% | Feb 11, 2022 | ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions... |
| CVE-2021-39631 | MEDIUM | 5.5 | 0.1% | Feb 11, 2022 | In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wron... |
| CVE-2021-39619 | HIGH | 7.8 | 0.1% | Feb 11, 2022 | In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings ... |
| CVE-2021-39616 | CRITICAL | 9.8 | 0.6% | Feb 11, 2022 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 |
| CVE-2021-34235 | CRITICAL | 9.8 | 1.9% | Feb 11, 2022 | Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the Field__UserLogin parameter on the l... |
| CVE-2021-31932 | CRITICAL | 9.8 | 21.6% | Feb 11, 2022 | Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can... |
| CVE-2021-22824 | HIGH | 7.5 | 14.2% | Feb 11, 2022 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due t... |
| CVE-2021-22823 | CRITICAL | 9.1 | 21.4% | Feb 11, 2022 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary file... |
| CVE-2021-22806 | HIGH | 7.5 | 0.9% | Feb 11, 2022 | A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unaut... |
| CVE-2021-22805 | CRITICAL | 9.1 | 0.8% | Feb 11, 2022 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary file... |
| CVE-2021-22804 | HIGH | 7.5 | 1.3% | Feb 11, 2022 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure o... |
| CVE-2021-22803 | CRITICAL | 9.8 | 1.9% | Feb 11, 2022 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution... |
| CVE-2021-22802 | CRITICAL | 9.8 | 20.2% | Feb 11, 2022 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution du... |
| CVE-2021-22801 | CRITICAL | 9.8 | 1.5% | Feb 11, 2022 | A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the s... |
| CVE-2021-22800 | HIGH | 7.5 | 1.0% | Feb 11, 2022 | A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is s... |
| CVE-2021-22798 | HIGH | 7.5 | 0.9% | Feb 11, 2022 | A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login crede... |
| CVE-2021-22796 | HIGH | 7.8 | 1.2% | Feb 11, 2022 | A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is ... |
| CVE-2021-22788 | HIGH | 7.5 | 1.0% | Feb 11, 2022 | A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a speciall... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now