2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23566 | MEDIUM | 5.5 | 0.4% | Jan 14, 2022 | The package nanoid from 3.0.0 and before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which ... |
| CVE-2021-23157 | HIGH | 7.8 | 8.2% | Jan 14, 2022 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attac... |
| CVE-2021-23138 | HIGH | 7.8 | 9.3% | Jan 14, 2022 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an atta... |
| CVE-2021-20613 | HIGH | 7.5 | 3.6% | Jan 14, 2022 | Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware... |
| CVE-2021-20612 | HIGH | 7.5 | 3.6% | Jan 14, 2022 | Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, ... |
| CVE-2021-1049 | CRITICAL | 9.8 | 0.7% | Jan 14, 2022 | Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 |
| CVE-2021-1037 | MEDIUM | 5.3 | 0.3% | Jan 14, 2022 | The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app... |
| CVE-2021-1036 | HIGH | 7.8 | 0.3% | Jan 14, 2022 | In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This cou... |
| CVE-2021-1035 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary bro... |
| CVE-2021-0959 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could ... |
| CVE-2021-45763 | MEDIUM | 5.5 | 0.7% | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to ... |
| CVE-2021-45762 | MEDIUM | 5.5 | 0.7% | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This... |
| CVE-2021-45761 | HIGH | 7.5 | 1.4% | Jan 14, 2022 | ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function. |
| CVE-2021-45468 | CRITICAL | 9.8 | 4.0% | Jan 14, 2022 | Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encodin... |
| CVE-2021-36736 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-36735 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-36734 | — | — | — | Jan 14, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-24046 | MEDIUM | 5.3 | 0.7% | Jan 14, 2022 | A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modifie... |
| CVE-2021-39032 | MEDIUM | 5.5 | 0.3% | Jan 14, 2022 | IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could b... |
| CVE-2021-32650 | HIGH | 8.8 | 2.1% | Jan 14, 2022 | October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versi... |
| CVE-2021-32649 | HIGH | 8.8 | 1.3% | Jan 14, 2022 | October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versi... |
| CVE-2021-33962 | CRITICAL | 9.8 | 3.7% | Jan 14, 2022 | China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /ap... |
| CVE-2021-36781 | MEDIUM | 4.4 | 0.2% | Jan 14, 2022 | A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitat... |
| CVE-2021-42551 | MEDIUM | 6.1 | 2.7% | Jan 14, 2022 | Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticat... |
| CVE-2021-46255 | HIGH | 8.1 | 1.1% | Jan 14, 2022 | eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now