2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36763 | HIGH | 7.5 | 1.0% | Aug 3, 2021 | In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. |
| CVE-2021-33486 | HIGH | 7.5 | 1.0% | Aug 3, 2021 | All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Impr... |
| CVE-2021-31504 | HIGH | 7.8 | 1.4% | Aug 3, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto... |
| CVE-2021-31503 | HIGH | 7.8 | 1.4% | Aug 3, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto... |
| CVE-2021-32772 | HIGH | 8.8 | 2.4% | Aug 3, 2021 | Poddycast is a podcast app made with Electron. Prior to version 0.8.1, an attacker can create a podcast or episode with ... |
| CVE-2021-31630 | HIGH | 8.8 | 27.1% | Aug 3, 2021 | Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Cod... |
| CVE-2021-27954 | HIGH | 8.2 | 0.9% | Aug 3, 2021 | A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function ... |
| CVE-2021-27953 | HIGH | 7.5 | 1.7% | Aug 3, 2021 | A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Con... |
| CVE-2021-21553 | HIGH | 8.8 | 0.2% | Aug 3, 2021 | Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific condit... |
| CVE-2021-32811 | HIGH | 7.2 | 2.3% | Aug 2, 2021 | Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code executio... |
| CVE-2021-34637 | HIGH | 8.8 | 0.7% | Aug 2, 2021 | The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the ~/... |
| CVE-2021-34632 | HIGH | 8.8 | 0.7% | Aug 2, 2021 | The SEO Backlinks WordPress plugin is vulnerable to Cross-Site Request Forgery via the loc_config function found in the ... |
| CVE-2021-34628 | HIGH | 8.8 | 0.7% | Aug 2, 2021 | The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found ... |
| CVE-2021-27943 | HIGH | 7.5 | 0.9% | Aug 2, 2021 | The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vu... |
| CVE-2021-21866 | HIGH | 7.8 | 1.7% | Aug 2, 2021 | A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality o... |
| CVE-2021-21865 | HIGH | 7.8 | 1.3% | Aug 2, 2021 | A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of ... |
| CVE-2021-21864 | HIGH | 7.8 | 1.7% | Aug 2, 2021 | A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionalit... |
| CVE-2021-37848 | HIGH | 7.5 | 1.5% | Aug 2, 2021 | common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash ... |
| CVE-2021-37847 | HIGH | 7.5 | 1.5% | Aug 2, 2021 | crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest v... |
| CVE-2021-35450 | HIGH | 7.2 | 2.4% | Aug 2, 2021 | A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute ... |
| CVE-2021-3673 | HIGH | 7.5 | 1.8% | Aug 2, 2021 | A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can le... |
| CVE-2021-33198 | HIGH | 7.5 | 3.4% | Aug 2, 2021 | In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString o... |
| CVE-2021-33196 | HIGH | 7.5 | 3.5% | Aug 2, 2021 | In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a ... |
| CVE-2021-33195 | HIGH | 7.3 | 3.2% | Aug 2, 2021 | Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, ... |
| CVE-2021-22447 | HIGH | 7.5 | 0.7% | Aug 2, 2021 | There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitat... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now