2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23425 | MEDIUM | 5.3 | 1.9% | Aug 18, 2021 | All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string proc... |
| CVE-2021-32728 | MEDIUM | 6.5 | 0.9% | Aug 18, 2021 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nex... |
| CVE-2021-38710 | MEDIUM | 6.1 | 0.6% | Aug 18, 2021 | Static (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An a... |
| CVE-2021-0628 | MEDIUM | 6.7 | 0.1% | Aug 18, 2021 | In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation ... |
| CVE-2021-0627 | MEDIUM | 6.7 | 0.1% | Aug 18, 2021 | In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of pri... |
| CVE-2021-0626 | MEDIUM | 6.7 | 0.1% | Aug 18, 2021 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2021-0420 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local de... |
| CVE-2021-0419 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local... |
| CVE-2021-0418 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local... |
| CVE-2021-0417 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local... |
| CVE-2021-0416 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local... |
| CVE-2021-0415 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In memory management driver, there is a possible information disclosure due to a missing permission check. This could le... |
| CVE-2021-0408 | MEDIUM | 5.5 | 0.1% | Aug 18, 2021 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info... |
| CVE-2021-0407 | MEDIUM | 6.7 | 0.1% | Aug 18, 2021 | In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala... |
| CVE-2021-20792 | MEDIUM | 6.1 | 3.5% | Aug 18, 2021 | Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject... |
| CVE-2021-20775 | MEDIUM | 4.3 | 0.9% | Aug 18, 2021 | Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attac... |
| CVE-2021-20774 | MEDIUM | 5.4 | 0.6% | Aug 18, 2021 | Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authentic... |
| CVE-2021-20773 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to... |
| CVE-2021-20772 | MEDIUM | 4.3 | 0.9% | Aug 18, 2021 | Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker... |
| CVE-2021-20771 | MEDIUM | 6.1 | 0.8% | Aug 18, 2021 | Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker ... |
| CVE-2021-20770 | MEDIUM | 5.4 | 0.6% | Aug 18, 2021 | Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to ... |
| CVE-2021-20769 | MEDIUM | 5.4 | 0.6% | Aug 18, 2021 | Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to... |
| CVE-2021-20768 | MEDIUM | 4.3 | 0.8% | Aug 18, 2021 | Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remo... |
| CVE-2021-20767 | MEDIUM | 5.4 | 0.6% | Aug 18, 2021 | Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated att... |
| CVE-2021-20766 | MEDIUM | 6.1 | 0.8% | Aug 18, 2021 | Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now