2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21844 | HIGH | 8.8 | 2.0% | Aug 18, 2021 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project... |
| CVE-2021-21843 | HIGH | 8.8 | 2.0% | Aug 18, 2021 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project... |
| CVE-2021-21839 | HIGH | 8.8 | 2.0% | Aug 18, 2021 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project... |
| CVE-2021-21838 | HIGH | 8.8 | 2.0% | Aug 18, 2021 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project... |
| CVE-2021-21837 | HIGH | 8.8 | 2.0% | Aug 18, 2021 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project... |
| CVE-2021-31820 | HIGH | 7.5 | 0.6% | Aug 18, 2021 | In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the ... |
| CVE-2021-33580 | HIGH | 7.5 | 3.3% | Aug 18, 2021 | User controlled `request.getHeader("Referer")`, `request.getRequestURL()` and `request.getQueryString()` are used to bui... |
| CVE-2021-20758 | HIGH | 8 | 0.5% | Aug 18, 2021 | Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated... |
| CVE-2021-39131 | HIGH | 7.5 | 1.9% | Aug 17, 2021 | ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buf... |
| CVE-2021-0284 | HIGH | 7.5 | 1.0% | Aug 17, 2021 | A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific seq... |
| CVE-2021-28372 | HIGH | 8.3 | 2.5% | Aug 17, 2021 | ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a ... |
| CVE-2021-29990 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed ev... |
| CVE-2021-29989 | HIGH | 8.8 | 1.3% | Aug 17, 2021 | Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed ev... |
| CVE-2021-29988 | HIGH | 8.8 | 1.4% | Aug 17, 2021 | Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory... |
| CVE-2021-29986 | HIGH | 8.1 | 1.3% | Aug 17, 2021 | A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note:... |
| CVE-2021-29985 | HIGH | 8.8 | 1.5% | Aug 17, 2021 | A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash... |
| CVE-2021-29984 | HIGH | 8.8 | 1.4% | Aug 17, 2021 | Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered du... |
| CVE-2021-29981 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures... |
| CVE-2021-29980 | HIGH | 8.8 | 1.4% | Aug 17, 2021 | Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potenti... |
| CVE-2021-39242 | HIGH | 7.5 | 2.3% | Aug 17, 2021 | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situatio... |
| CVE-2021-39240 | HIGH | 7.5 | 2.3% | Aug 17, 2021 | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that t... |
| CVE-2021-25263 | HIGH | 7.8 | 0.3% | Aug 17, 2021 | Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker... |
| CVE-2021-0646 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This cou... |
| CVE-2021-0645 | HIGH | 7.8 | 0.3% | Aug 17, 2021 | In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local... |
| CVE-2021-0640 | HIGH | 7.8 | 0.2% | Aug 17, 2021 | In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now