2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46671 | MEDIUM | 5.3 | 1.3% | Feb 4, 2022 | options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data t... |
| CVE-2021-45408 | MEDIUM | 6.1 | 0.6% | Feb 4, 2022 | Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect us... |
| CVE-2021-23507 | CRITICAL | 9.8 | 2.1% | Feb 4, 2022 | The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an a... |
| CVE-2021-23497 | CRITICAL | 9.8 | 3.5% | Feb 4, 2022 | This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead ... |
| CVE-2021-23470 | CRITICAL | 9.8 | 1.2% | Feb 4, 2022 | This affects the package putil-merge before 3.8.0. The merge() function does not check the values passed into the argume... |
| CVE-2021-45429 | MEDIUM | 5.5 | 0.8% | Feb 4, 2022 | A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set... |
| CVE-2021-29398 | MEDIUM | 5.3 | 1.8% | Feb 4, 2022 | Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Cl... |
| CVE-2021-29397 | HIGH | 7.5 | 0.8% | Feb 4, 2022 | Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Cl... |
| CVE-2021-29396 | CRITICAL | 9.8 | 1.6% | Feb 4, 2022 | Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated ... |
| CVE-2021-29395 | HIGH | 7.5 | 1.8% | Feb 4, 2022 | Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 al... |
| CVE-2021-29394 | MEDIUM | 6.5 | 0.8% | Feb 4, 2022 | Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 all... |
| CVE-2021-29393 | CRITICAL | 9.8 | 3.4% | Feb 4, 2022 | Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allo... |
| CVE-2021-43635 | MEDIUM | 6.1 | 1.7% | Feb 4, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malic... |
| CVE-2021-46398 | HIGH | 8.8 | 6.7% | Feb 4, 2022 | A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor use... |
| CVE-2021-44978 | CRITICAL | 9.8 | 2.1% | Feb 4, 2022 | iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code ... |
| CVE-2021-44977 | HIGH | 7.5 | 1.6% | Feb 4, 2022 | In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files. |
| CVE-2021-44886 | MEDIUM | 5.3 | 0.9% | Feb 4, 2022 | In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substitute persons didn't h... |
| CVE-2021-43145 | HIGH | 8.1 | 0.9% | Feb 4, 2022 | With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user acco... |
| CVE-2021-44983 | MEDIUM | 4.9 | 1.1% | Feb 4, 2022 | In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Manage... |
| CVE-2021-46320 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent exa... |
| CVE-2021-44903 | HIGH | 7.8 | 0.3% | Feb 4, 2022 | Micro-Star International (MSI) Center Pro <= 2.0.16.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabi... |
| CVE-2021-44901 | HIGH | 7.8 | 0.5% | Feb 4, 2022 | Micro-Star International (MSI) Dragon Center <= 2.0.116.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulne... |
| CVE-2021-44900 | HIGH | 7.8 | 0.3% | Feb 4, 2022 | Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulne... |
| CVE-2021-44899 | HIGH | 7.8 | 0.4% | Feb 4, 2022 | Micro-Star International (MSI) Center <= 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the ... |
| CVE-2021-46457 | CRITICAL | 9.8 | 4.1% | Feb 4, 2022 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgS... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now