2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30309 | HIGH | 7.8 | 0.1% | Feb 11, 2022 | Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, ... |
| CVE-2021-44970 | MEDIUM | 5.4 | 0.5% | Feb 10, 2022 | MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php. |
| CVE-2021-44969 | MEDIUM | 4.8 | 0.5% | Feb 10, 2022 | Taocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Management Column component. |
| CVE-2021-42000 | MEDIUM | 6.5 | 0.5% | Feb 10, 2022 | When a password reset or password change flow with an authentication policy is configured and the adapter in the reset o... |
| CVE-2021-45364 | CRITICAL | 9.8 | 1.6% | Feb 10, 2022 | A Code Execution vulnerability exists in Statamic Version through 3.2.26 via SettingsController.php. NOTE: the vendor in... |
| CVE-2021-44850 | MEDIUM | 6.8 | 0.2% | Feb 10, 2022 | On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the RO... |
| CVE-2021-45357 | MEDIUM | 6.1 | 0.8% | Feb 10, 2022 | Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.ph... |
| CVE-2021-44892 | HIGH | 8.8 | 1.9% | Feb 10, 2022 | A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let ... |
| CVE-2021-41445 | MEDIUM | 6.1 | 2.4% | Feb 10, 2022 | A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote un... |
| CVE-2021-3398 | MEDIUM | 5.8 | 0.9% | Feb 10, 2022 | Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. |
| CVE-2021-37613 | MEDIUM | 6.5 | 0.4% | Feb 10, 2022 | Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. |
| CVE-2021-31814 | MEDIUM | 6.1 | 0.2% | Feb 10, 2022 | In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sens... |
| CVE-2021-45901 | MEDIUM | 5.3 | 14.3% | Feb 10, 2022 | The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending ... |
| CVE-2021-25992 | CRITICAL | 9.8 | 1.5% | Feb 10, 2022 | In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It ... |
| CVE-2021-44454 | HIGH | 7.8 | 0.3% | Feb 9, 2022 | Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may a... |
| CVE-2021-40696 | — | — | — | Feb 9, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-40045 | MEDIUM | 5.5 | 0.1% | Feb 9, 2022 | There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful ... |
| CVE-2021-40044 | HIGH | 8.8 | 0.3% | Feb 9, 2022 | There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability m... |
| CVE-2021-40015 | MEDIUM | 4.7 | 0.1% | Feb 9, 2022 | There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vul... |
| CVE-2021-39997 | CRITICAL | 9.8 | 0.8% | Feb 9, 2022 | There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this ... |
| CVE-2021-39994 | CRITICAL | 9.8 | 0.8% | Feb 9, 2022 | There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulne... |
| CVE-2021-39992 | HIGH | 7.8 | 0.2% | Feb 9, 2022 | There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerabili... |
| CVE-2021-39991 | MEDIUM | 5.5 | 0.2% | Feb 9, 2022 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitatio... |
| CVE-2021-39986 | MEDIUM | 5.5 | 0.2% | Feb 9, 2022 | There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitatio... |
| CVE-2021-39943 | MEDIUM | 4.3 | 0.9% | Feb 9, 2022 | An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 bef... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now