2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4170 | MEDIUM | 5.4 | 0.8% | Jan 16, 2022 | calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-44537 | HIGH | 7.8 | 2.7% | Jan 15, 2022 | ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading t... |
| CVE-2021-33828 | HIGH | 8.8 | 1.2% | Jan 15, 2022 | The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (th... |
| CVE-2021-33827 | HIGH | 7.2 | 2.1% | Jan 15, 2022 | The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings. |
| CVE-2021-42555 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validat... |
| CVE-2021-35969 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validatio... |
| CVE-2021-33499 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2). |
| CVE-2021-33498 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2). |
| CVE-2021-32545 | HIGH | 7.5 | 1.3% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation. |
| CVE-2021-44049 | HIGH | 7.8 | 0.4% | Jan 15, 2022 | CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated priv... |
| CVE-2021-33963 | CRITICAL | 9.8 | 3.1% | Jan 15, 2022 | China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by P... |
| CVE-2021-24044 | CRITICAL | 9.8 | 1.3% | Jan 15, 2022 | By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter func... |
| CVE-2021-46171 | MEDIUM | 5.5 | 0.6% | Jan 14, 2022 | Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c. |
| CVE-2021-46170 | HIGH | 7.5 | 1.2% | Jan 14, 2022 | An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string ... |
| CVE-2021-46169 | MEDIUM | 5.5 | 0.7% | Jan 14, 2022 | Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache. |
| CVE-2021-46168 | MEDIUM | 5.5 | 0.6% | Jan 14, 2022 | Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c. |
| CVE-2021-46195 | MEDIUM | 5.5 | 0.8% | Jan 14, 2022 | GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerab... |
| CVE-2021-46022 | MEDIUM | 5.5 | 1.0% | Jan 14, 2022 | An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentat... |
| CVE-2021-46021 | MEDIUM | 5.5 | 1.0% | Jan 14, 2022 | An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentati... |
| CVE-2021-46020 | HIGH | 7.5 | 1.0% | Jan 14, 2022 | An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. |
| CVE-2021-46019 | MEDIUM | 5.5 | 1.0% | Jan 14, 2022 | An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation faul... |
| CVE-2021-45782 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45781 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45780 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-45779 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now