2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-40401HIGH8.6A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and d...
CVE-2021-38960HIGH7.5IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID:...
CVE-2021-38130MEDIUM6.5A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Rel...
CVE-2021-36152CRITICAL9.8Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions <= 0.15....
CVE-2021-36151MEDIUM5.5In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. T...
CVE-2021-32732MEDIUM6.5### Impact It's possible to know if a user has or not an account in a wiki related to an email address, and which userna...
CVE-2021-32036HIGH7.1An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at...
CVE-2021-29219HIGH7.8A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Pr...
CVE-2021-29218MEDIUM6.7A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows ...
CVE-2021-28503CRITICAL9.8The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate base...
CVE-2021-22288HIGH7.5Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of ...
CVE-2021-22286HIGH7.5Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of ...
CVE-2021-22285HIGH7.5Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the A...
CVE-2021-22284HIGH8.8Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to exec...
CVE-2021-21971MEDIUM5.9An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1...
CVE-2021-21970HIGH8.1An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConn...
CVE-2021-21969HIGH8.1An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConn...
CVE-2021-21968HIGH8.3A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34...
CVE-2021-21965CRITICAL9.3A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc. SeaC...
CVE-2021-21964HIGH7.4A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc. SeaConnect ...
CVE-2021-21963MEDIUM5.9An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc. SeaConnect 370W...
CVE-2021-21962HIGH8.1A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. S...
CVE-2021-21961CRITICAL10A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc. SeaConnect 370W v...
CVE-2021-21960CRITICAL10A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc. SeaConnect ...
CVE-2021-21959HIGH8.1A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfigur...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now