2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36021 | HIGH | 7.2 | 1.9% | Sep 6, 2023 | Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper input v... |
| CVE-2021-35980 | HIGH | 7.8 | 0.4% | Sep 6, 2023 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) a... |
| CVE-2021-28644 | HIGH | 7.8 | 0.4% | Sep 6, 2023 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) a... |
| CVE-2021-21088 | HIGH | 7.8 | 0.3% | Sep 6, 2023 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e... |
| CVE-2021-32050 | HIGH | 7.5 | 0.5% | Aug 29, 2023 | Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configu... |
| CVE-2021-27932 | HIGH | 7.8 | 0.2% | Aug 25, 2023 | Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions. |
| CVE-2021-46174 | HIGH | 7.5 | 0.7% | Aug 22, 2023 | Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. |
| CVE-2021-40265 | HIGH | 8.8 | 0.7% | Aug 22, 2023 | A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. |
| CVE-2021-40263 | HIGH | 8.8 | 1.0% | Aug 22, 2023 | A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp. |
| CVE-2021-40211 | HIGH | 7.5 | 0.8% | Aug 22, 2023 | An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. |
| CVE-2021-35309 | HIGH | 7.5 | 0.4% | Aug 22, 2023 | An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges vi... |
| CVE-2021-34193 | HIGH | 7.5 | 1.1% | Aug 22, 2023 | Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. |
| CVE-2021-32422 | HIGH | 7.5 | 0.7% | Aug 22, 2023 | dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. |
| CVE-2021-32421 | HIGH | 7.5 | 0.6% | Aug 22, 2023 | dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. |
| CVE-2021-32420 | HIGH | 7.5 | 0.7% | Aug 22, 2023 | dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. |
| CVE-2021-30047 | HIGH | 7.5 | 3.1% | Aug 22, 2023 | VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. |
| CVE-2021-29390 | HIGH | 7.1 | 0.7% | Aug 22, 2023 | libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c. |
| CVE-2021-29378 | HIGH | 8.8 | 0.7% | Aug 11, 2023 | SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via ... |
| CVE-2021-28835 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bi... |
| CVE-2021-28427 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIF... |
| CVE-2021-26504 | HIGH | 7.5 | 1.4% | Aug 11, 2023 | Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sens... |
| CVE-2021-25857 | HIGH | 7.2 | 0.8% | Aug 11, 2023 | An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code vi... |
| CVE-2021-41544 | HIGH | 7.8 | 0.2% | Aug 8, 2023 | A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability coul... |
| CVE-2021-24916 | HIGH | 7.5 | 1.5% | Aug 7, 2023 | The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses vi... |
| CVE-2021-31681 | HIGH | 7.8 | 0.4% | Jul 31, 2023 | Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml fi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now