2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0593 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receive... |
| CVE-2021-0591 | HIGH | 7.3 | 0.4% | Aug 17, 2021 | In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast... |
| CVE-2021-0576 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2021-0574 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2021-0573 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2021-0519 | HIGH | 7.8 | 0.2% | Aug 17, 2021 | In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This co... |
| CVE-2021-32830 | HIGH | 7 | 1.9% | Aug 17, 2021 | The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection... |
| CVE-2021-3633 | HIGH | 7.8 | 0.3% | Aug 17, 2021 | A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow ... |
| CVE-2021-3617 | HIGH | 7.2 | 1.7% | Aug 17, 2021 | A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a spec... |
| CVE-2021-25957 | HIGH | 8.8 | 1.1% | Aug 17, 2021 | In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low ... |
| CVE-2021-25956 | HIGH | 7.2 | 0.9% | Aug 17, 2021 | In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other use... |
| CVE-2021-37711 | HIGH | 8.8 | 1.1% | Aug 16, 2021 | Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Ver... |
| CVE-2021-36281 | HIGH | 8.8 | 0.7% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability. A low privile... |
| CVE-2021-36279 | HIGH | 7.8 | 0.2% | Aug 16, 2021 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulner... |
| CVE-2021-32826 | HIGH | 8.1 | 1.1% | Aug 16, 2021 | Proxyee-Down is open source proxy software. An attacker being able to provide an extension script (eg: through a MiTM at... |
| CVE-2021-38608 | HIGH | 7.8 | 0.3% | Aug 16, 2021 | Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to ... |
| CVE-2021-21861 | HIGH | 8.8 | 1.6% | Aug 16, 2021 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A... |
| CVE-2021-21860 | HIGH | 8.8 | 1.6% | Aug 16, 2021 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A... |
| CVE-2021-21859 | HIGH | 8.8 | 1.6% | Aug 16, 2021 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A... |
| CVE-2021-37707 | HIGH | 7.5 | 0.9% | Aug 16, 2021 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulatio... |
| CVE-2021-22940 | HIGH | 7.5 | 14.0% | Aug 16, 2021 | Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to ... |
| CVE-2021-22938 | HIGH | 7.2 | 2.1% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command inje... |
| CVE-2021-22937 | HIGH | 7.2 | 7.8% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write... |
| CVE-2021-22935 | HIGH | 7.2 | 2.1% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command inje... |
| CVE-2021-22934 | HIGH | 7.2 | 4.7% | Aug 16, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Co... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now