2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45342 | HIGH | 7.8 | 1.9% | Jan 25, 2022 | A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker ... |
| CVE-2021-45029 | CRITICAL | 9.8 | 6.0% | Jan 25, 2022 | Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and ... |
| CVE-2021-45341 | HIGH | 8.8 | 6.6% | Jan 25, 2022 | A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker ... |
| CVE-2021-45340 | MEDIUM | 6.5 | 0.9% | Jan 25, 2022 | In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows a... |
| CVE-2021-46483 | HIGH | 7.8 | 0.8% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c. |
| CVE-2021-46482 | HIGH | 7.8 | 0.8% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c. |
| CVE-2021-46481 | MEDIUM | 5.5 | 0.7% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c. |
| CVE-2021-46480 | MEDIUM | 5.5 | 0.7% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability... |
| CVE-2021-46478 | MEDIUM | 5.5 | 0.7% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can... |
| CVE-2021-46477 | MEDIUM | 5.5 | 0.7% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerabil... |
| CVE-2021-46475 | MEDIUM | 5.5 | 0.7% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerabilit... |
| CVE-2021-46474 | MEDIUM | 5.5 | 0.7% | Jan 25, 2022 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability ca... |
| CVE-2021-44994 | MEDIUM | 5.5 | 1.0% | Jan 25, 2022 | There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerrys... |
| CVE-2021-44993 | MEDIUM | 5.5 | 0.8% | Jan 25, 2022 | There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c ... |
| CVE-2021-44992 | MEDIUM | 5.5 | 0.8% | Jan 25, 2022 | There is an Assertion ''ecma_object_is_typedarray (obj_p)'' failed at /jerry-core/ecma/operations/ecma-typedarray-object... |
| CVE-2021-44988 | HIGH | 7.8 | 1.1% | Jan 25, 2022 | Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c. |
| CVE-2021-43394 | CRITICAL | 9.8 | 1.2% | Jan 24, 2022 | Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of... |
| CVE-2021-46451 | CRITICAL | 9.8 | 1.3% | Jan 24, 2022 | An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter i... |
| CVE-2021-45226 | MEDIUM | 6.5 | 1.4% | Jan 24, 2022 | An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, a... |
| CVE-2021-45225 | MEDIUM | 6.1 | 1.1% | Jan 24, 2022 | An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to ref... |
| CVE-2021-45224 | MEDIUM | 6.1 | 1.1% | Jan 24, 2022 | An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript c... |
| CVE-2021-45223 | MEDIUM | 6.5 | 1.6% | Jan 24, 2022 | An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to... |
| CVE-2021-45222 | HIGH | 8.8 | 1.5% | Jan 24, 2022 | An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is... |
| CVE-2021-43589 | MEDIUM | 6.7 | 0.4% | Jan 24, 2022 | Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS)... |
| CVE-2021-43588 | HIGH | 7.5 | 1.2% | Jan 24, 2022 | Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthentica... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now