2021 CVE Vulnerabilities
23,448 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32545 | HIGH | 7.5 | 1.3% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation. |
| CVE-2021-44049 | HIGH | 7.8 | 0.4% | Jan 15, 2022 | CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated priv... |
| CVE-2021-33963 | CRITICAL | 9.8 | 3.1% | Jan 15, 2022 | China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by P... |
| CVE-2021-24044 | CRITICAL | 9.8 | 1.3% | Jan 15, 2022 | By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter func... |
| CVE-2021-46171 | MEDIUM | 5.5 | 0.6% | Jan 14, 2022 | Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c. |
| CVE-2021-46170 | HIGH | 7.5 | 1.2% | Jan 14, 2022 | An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string ... |
| CVE-2021-46169 | MEDIUM | 5.5 | 0.7% | Jan 14, 2022 | Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache. |
| CVE-2021-46168 | MEDIUM | 5.5 | 0.6% | Jan 14, 2022 | Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c. |
| CVE-2021-46195 | MEDIUM | 5.5 | 0.8% | Jan 14, 2022 | GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerab... |
| CVE-2021-46022 | MEDIUM | 5.5 | 1.0% | Jan 14, 2022 | An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentat... |
| CVE-2021-46021 | MEDIUM | 5.5 | 1.0% | Jan 14, 2022 | An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentati... |
| CVE-2021-46020 | HIGH | 7.5 | 1.0% | Jan 14, 2022 | An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. |
| CVE-2021-46019 | MEDIUM | 5.5 | 1.0% | Jan 14, 2022 | An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation faul... |
| CVE-2021-45782 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45781 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45780 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45779 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45778 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45775 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45774 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45773 | HIGH | 7.5 | 1.1% | Jan 14, 2022 | A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e7... |
| CVE-2021-45769 | HIGH | 7.5 | 1.1% | Jan 14, 2022 | A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a... |
| CVE-2021-45767 | MEDIUM | 5.5 | 0.7% | Jan 14, 2022 | GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerab... |
| CVE-2021-45764 | MEDIUM | 5.5 | 0.7% | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra(). |
| CVE-2021-45406 | HIGH | 8.8 | 1.8% | Jan 14, 2022 | In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now