2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-31680 | HIGH | 7.8 | 0.4% | Jul 31, 2023 | Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml fi... |
| CVE-2021-4322 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a ... |
| CVE-2021-4320 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the render... |
| CVE-2021-4319 | HIGH | 8.8 | 0.6% | Jul 29, 2023 | Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write... |
| CVE-2021-4318 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit objec... |
| CVE-2021-4317 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write... |
| CVE-2021-35391 | HIGH | 7.2 | 0.9% | Jul 21, 2023 | Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary... |
| CVE-2021-39822 | HIGH | 7.8 | 0.3% | Jul 20, 2023 | Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerabilit... |
| CVE-2021-38933 | HIGH | 7.5 | 0.3% | Jul 19, 2023 | IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker... |
| CVE-2021-4428 | HIGH | 7.5 | 15.8% | Jul 18, 2023 | A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. ... |
| CVE-2021-34121 | HIGH | 7.8 | 0.3% | Jul 18, 2023 | An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memor... |
| CVE-2021-34119 | HIGH | 7.8 | 0.3% | Jul 18, 2023 | A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible co... |
| CVE-2021-37386 | HIGH | 7.5 | 0.5% | Jul 17, 2023 | Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injectio... |
| CVE-2021-43757 | HIGH | 7.8 | 0.3% | Jul 12, 2023 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could l... |
| CVE-2021-4406 | HIGH | 7.2 | 0.8% | Jul 10, 2023 | An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager... |
| CVE-2021-42082 | HIGH | 7.8 | 0.2% | Jul 10, 2023 | Local users are able to execute scripts under root privileges. POC On the local host run the following command: curl ... |
| CVE-2021-42081 | HIGH | 7.2 | 1.0% | Jul 10, 2023 | An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC http://<IP_ADDR... |
| CVE-2021-42080 | HIGH | 7.4 | 0.6% | Jul 10, 2023 | An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://<IPADDR... |
| CVE-2021-32494 | HIGH | 7.5 | 0.7% | Jul 7, 2023 | Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create m... |
| CVE-2021-33796 | HIGH | 7.5 | 0.7% | Jul 7, 2023 | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. |
| CVE-2021-46896 | HIGH | 7.5 | 0.7% | Jul 6, 2023 | Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handli... |
| CVE-2021-46892 | HIGH | 7.5 | 0.2% | Jul 6, 2023 | Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service co... |
| CVE-2021-46893 | HIGH | 7.5 | 0.3% | Jul 5, 2023 | Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affec... |
| CVE-2021-4401 | HIGH | 8.8 | 0.4% | Jul 1, 2023 | The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0.... |
| CVE-2021-4399 | HIGH | 8.8 | 0.4% | Jul 1, 2023 | The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now