2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32558 | HIGH | 7.5 | 9.1% | Jul 30, 2021 | An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x befor... |
| CVE-2021-31799 | HIGH | 7 | 1.5% | Jul 30, 2021 | In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code ... |
| CVE-2021-28966 | HIGH | 7.5 | 58.0% | Jul 30, 2021 | In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter w... |
| CVE-2021-20783 | HIGH | 8.8 | 0.6% | Jul 30, 2021 | Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the auth... |
| CVE-2021-20114 | HIGH | 7.5 | 6.0% | Jul 30, 2021 | When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the ... |
| CVE-2021-29736 | HIGH | 8.8 | 1.1% | Jul 30, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the sys... |
| CVE-2021-36742 | HIGH | 7.8 | 1.5% | Jul 29, 2021 | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B... |
| CVE-2021-36741 | HIGH | 8.8 | 5.0% | Jul 29, 2021 | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free... |
| CVE-2021-23415 | HIGH | 7.5 | 1.7% | Jul 28, 2021 | This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it... |
| CVE-2021-32000 | HIGH | 7.1 | 0.3% | Jul 28, 2021 | A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up i... |
| CVE-2021-34432 | HIGH | 7.5 | 1.2% | Jul 27, 2021 | In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with... |
| CVE-2021-37576 | HIGH | 7.8 | 0.6% | Jul 26, 2021 | arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to c... |
| CVE-2021-32794 | HIGH | 7.5 | 1.0% | Jul 26, 2021 | ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due... |
| CVE-2021-37394 | HIGH | 8.8 | 1.2% | Jul 26, 2021 | In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user reg... |
| CVE-2021-31292 | HIGH | 7.5 | 2.6% | Jul 26, 2021 | An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and... |
| CVE-2021-25804 | HIGH | 7.5 | 1.8% | Jul 26, 2021 | A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the a... |
| CVE-2021-25803 | HIGH | 7.1 | 0.7% | Jul 26, 2021 | A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows att... |
| CVE-2021-25802 | HIGH | 7.1 | 0.7% | Jul 26, 2021 | A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attacker... |
| CVE-2021-25801 | HIGH | 7.1 | 1.5% | Jul 26, 2021 | A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to ca... |
| CVE-2021-32789 | HIGH | 7.5 | 17.2% | Jul 26, 2021 | woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerabilit... |
| CVE-2021-33629 | HIGH | 7.5 | 1.0% | Jul 26, 2021 | isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing exte... |
| CVE-2021-26824 | HIGH | 7.1 | 0.4% | Jul 26, 2021 | DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing lo... |
| CVE-2021-20337 | HIGH | 7.5 | 0.7% | Jul 26, 2021 | IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that cou... |
| CVE-2021-33900 | HIGH | 7.5 | 0.8% | Jul 26, 2021 | While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL auth... |
| CVE-2021-37447 | HIGH | 8.1 | 1.6% | Jul 25, 2021 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now