2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39678 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escalat... |
| CVE-2021-39659 | MEDIUM | 5.5 | 0.1% | Jan 14, 2022 | In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emerg... |
| CVE-2021-39634 | HIGH | 7.8 | 0.2% | Jan 14, 2022 | In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no addition... |
| CVE-2021-39633 | MEDIUM | 5.5 | 0.2% | Jan 14, 2022 | In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to l... |
| CVE-2021-39632 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead t... |
| CVE-2021-39630 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell d... |
| CVE-2021-39629 | HIGH | 7 | 0.1% | Jan 14, 2022 | In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This c... |
| CVE-2021-39628 | LOW | 3.3 | 0.1% | Jan 14, 2022 | In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the ... |
| CVE-2021-39627 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe... |
| CVE-2021-39626 | HIGH | 7.8 | 0.2% | Jan 14, 2022 | In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. Th... |
| CVE-2021-39625 | HIGH | 7.3 | 0.1% | Jan 14, 2022 | In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to... |
| CVE-2021-39623 | CRITICAL | 9.8 | 2.0% | Jan 14, 2022 | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This co... |
| CVE-2021-39622 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead... |
| CVE-2021-39621 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe... |
| CVE-2021-39620 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead... |
| CVE-2021-39618 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user ... |
| CVE-2021-38127 | MEDIUM | 6.1 | 0.6% | Jan 14, 2022 | Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7... |
| CVE-2021-38126 | MEDIUM | 6.1 | 0.6% | Jan 14, 2022 | Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7... |
| CVE-2021-36920 | MEDIUM | 5.4 | 0.6% | Jan 14, 2022 | Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versio... |
| CVE-2021-36199 | MEDIUM | 5.3 | 1.0% | Jan 14, 2022 | Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop. |
| CVE-2021-28507 | HIGH | 7.1 | 0.7% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for Open... |
| CVE-2021-28506 | CRITICAL | 9.1 | 1.4% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentic... |
| CVE-2021-28501 | HIGH | 7.8 | 0.8% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and Ter... |
| CVE-2021-28500 | HIGH | 7.8 | 0.9% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and Ter... |
| CVE-2021-23567 | HIGH | 7.5 | 1.7% | Jan 14, 2022 | The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now