2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22932 | HIGH | 7.5 | 0.4% | Aug 16, 2021 | An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes... |
| CVE-2021-38758 | HIGH | 7.5 | 2.3% | Aug 16, 2021 | Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.ph... |
| CVE-2021-35392 | HIGH | 7.5 | 83.2% | Aug 16, 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP... |
| CVE-2021-33193 | HIGH | 7.5 | 46.2% | Aug 16, 2021 | A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request spl... |
| CVE-2021-23423 | HIGH | 7.5 | 1.1% | Aug 16, 2021 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include... |
| CVE-2021-23422 | HIGH | 7.8 | 0.8% | Aug 16, 2021 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Comma... |
| CVE-2021-3708 | HIGH | 7.8 | 24.6% | Aug 16, 2021 | D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticate... |
| CVE-2021-38712 | HIGH | 7.5 | 1.1% | Aug 16, 2021 | OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to bl... |
| CVE-2021-38711 | HIGH | 7.5 | 1.3% | Aug 16, 2021 | In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files. |
| CVE-2021-21815 | HIGH | 7.8 | 0.3% | Aug 13, 2021 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs'... |
| CVE-2021-21814 | HIGH | 7.8 | 0.3% | Aug 13, 2021 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the comman... |
| CVE-2021-21813 | HIGH | 7.8 | 0.3% | Aug 13, 2021 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the comman... |
| CVE-2021-21812 | HIGH | 7.8 | 0.3% | Aug 13, 2021 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’... |
| CVE-2021-38623 | HIGH | 7.5 | 1.0% | Aug 13, 2021 | The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service ... |
| CVE-2021-36793 | HIGH | 7.5 | 1.0% | Aug 13, 2021 | The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitiv... |
| CVE-2021-36792 | HIGH | 7.2 | 0.7% | Aug 13, 2021 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various ap... |
| CVE-2021-36786 | HIGH | 7.5 | 1.0% | Aug 13, 2021 | The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credent... |
| CVE-2021-37693 | HIGH | 7.5 | 0.8% | Aug 13, 2021 | Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when ... |
| CVE-2021-34398 | HIGH | 7.8 | 0.3% | Aug 13, 2021 | NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared l... |
| CVE-2021-37349 | HIGH | 7.8 | 0.7% | Aug 13, 2021 | Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php does not sanitise input r... |
| CVE-2021-37348 | HIGH | 7.5 | 2.8% | Aug 13, 2021 | Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.... |
| CVE-2021-37347 | HIGH | 7.8 | 0.8% | Aug 13, 2021 | Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the d... |
| CVE-2021-37345 | HIGH | 7.8 | 0.9% | Aug 13, 2021 | Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is being imported from the... |
| CVE-2021-37343 | HIGH | 8.8 | 23.8% | Aug 13, 2021 | A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au... |
| CVE-2021-38614 | HIGH | 7.5 | 1.2% | Aug 12, 2021 | Polipo through 1.1.1, when NDEBUG is used, allows a heap-based buffer overflow during parsing of a Range header. NOTE: T... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now