2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38160 | HIGH | 7.8 | 0.4% | Aug 7, 2021 | In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untru... |
| CVE-2021-38155 | HIGH | 7.5 | 2.5% | Aug 6, 2021 | OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allow... |
| CVE-2021-35312 | HIGH | 7.8 | 1.1% | Aug 6, 2021 | A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Serv... |
| CVE-2021-36795 | HIGH | 7.8 | 0.2% | Aug 6, 2021 | A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.... |
| CVE-2021-20594 | HIGH | 7.5 | 2.4% | Aug 6, 2021 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safet... |
| CVE-2021-36455 | HIGH | 8.8 | 1.1% | Aug 6, 2021 | SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comment... |
| CVE-2021-38137 | HIGH | 8.1 | 0.7% | Aug 6, 2021 | Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, a... |
| CVE-2021-37553 | HIGH | 7.5 | 1.5% | Aug 6, 2021 | In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. |
| CVE-2021-37550 | HIGH | 7.5 | 1.1% | Aug 6, 2021 | In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. |
| CVE-2021-37548 | HIGH | 7.5 | 0.6% | Aug 6, 2021 | In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. |
| CVE-2021-37545 | HIGH | 7.5 | 0.9% | Aug 6, 2021 | In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. |
| CVE-2021-37543 | HIGH | 8.8 | 1.4% | Aug 6, 2021 | In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects. |
| CVE-2021-36708 | HIGH | 7.5 | 1.2% | Aug 6, 2021 | In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows an attacker to reset the... |
| CVE-2021-37381 | HIGH | 8.8 | 0.6% | Aug 6, 2021 | Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos t... |
| CVE-2021-3580 | HIGH | 7.5 | 2.7% | Aug 5, 2021 | A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could us... |
| CVE-2021-37632 | HIGH | 8.1 | 1.7% | Aug 5, 2021 | SuperMartijn642's Config Lib is a library used by a number of mods for the game Minecraft. The versions of SuperMartijn6... |
| CVE-2021-37156 | HIGH | 7.5 | 1.0% | Aug 5, 2021 | Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's ... |
| CVE-2021-35326 | HIGH | 7.5 | 2.5% | Aug 5, 2021 | A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configura... |
| CVE-2021-35325 | HIGH | 7.5 | 13.3% | Aug 5, 2021 | A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers... |
| CVE-2021-34639 | HIGH | 8.8 | 0.6% | Aug 5, 2021 | Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files w... |
| CVE-2021-34634 | HIGH | 8.8 | 0.7% | Aug 5, 2021 | The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function foun... |
| CVE-2021-34633 | HIGH | 8.8 | 0.7% | Aug 5, 2021 | The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in... |
| CVE-2021-28216 | HIGH | 7.8 | 0.4% | Aug 5, 2021 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3S... |
| CVE-2021-26586 | HIGH | 7.5 | 1.6% | Aug 5, 2021 | A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edg... |
| CVE-2021-22928 | HIGH | 7.8 | 0.2% | Aug 5, 2021 | A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Wind... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now