2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-2328 | HIGH | 7.2 | 1.0% | Jul 21, 2021 | Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2,... |
| CVE-2021-32751 | HIGH | 7.5 | 2.7% | Jul 20, 2021 | Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the `appli... |
| CVE-2021-36230 | HIGH | 8.8 | 1.0% | Jul 20, 2021 | HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API... |
| CVE-2021-33909 | HIGH | 7.8 | 9.8% | Jul 20, 2021 | fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, l... |
| CVE-2021-3246 | HIGH | 8.8 | 3.3% | Jul 20, 2021 | A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary ... |
| CVE-2021-22235 | HIGH | 7.5 | 3.3% | Jul 20, 2021 | Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or ... |
| CVE-2021-32463 | HIGH | 7.8 | 0.4% | Jul 20, 2021 | An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS)... |
| CVE-2021-27021 | HIGH | 8.8 | 1.3% | Jul 20, 2021 | A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tab... |
| CVE-2021-26095 | HIGH | 8.8 | 0.7% | Jul 20, 2021 | The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 thr... |
| CVE-2021-22125 | HIGH | 7.2 | 1.4% | Jul 20, 2021 | An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow ... |
| CVE-2021-35054 | HIGH | 7.5 | 1.4% | Jul 20, 2021 | Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON file... |
| CVE-2021-32773 | HIGH | 7.5 | 0.9% | Jul 20, 2021 | Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior t... |
| CVE-2021-31590 | HIGH | 8.8 | 2.7% | Jul 19, 2021 | PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. ... |
| CVE-2021-34820 | HIGH | 7.5 | 4.0% | Jul 19, 2021 | Web Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the Directory Traversal for ... |
| CVE-2021-36799 | HIGH | 8.8 | 0.4% | Jul 19, 2021 | KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local use... |
| CVE-2021-34676 | HIGH | 7.5 | 1.8% | Jul 19, 2021 | Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation. |
| CVE-2021-34675 | HIGH | 7.5 | 1.8% | Jul 19, 2021 | Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports. |
| CVE-2021-29707 | HIGH | 7.8 | 0.3% | Jul 19, 2021 | IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to... |
| CVE-2021-35449 | HIGH | 7.8 | 1.4% | Jul 19, 2021 | The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below,... |
| CVE-2021-20109 | HIGH | 7.5 | 1.4% | Jul 19, 2021 | Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure t... |
| CVE-2021-20108 | HIGH | 7.5 | 3.0% | Jul 19, 2021 | Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Serve... |
| CVE-2021-31216 | HIGH | 8.1 | 0.7% | Jul 19, 2021 | Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (... |
| CVE-2021-24453 | HIGH | 8.8 | 5.0% | Jul 19, 2021 | The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to ... |
| CVE-2021-36773 | HIGH | 7.5 | 1.3% | Jul 18, 2021 | uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking... |
| CVE-2021-36213 | HIGH | 7.5 | 1.7% | Jul 17, 2021 | HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware inten... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now