2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36716 | HIGH | 7.5 | 1.0% | Jul 14, 2021 | A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. ... |
| CVE-2021-22780 | HIGH | 7.1 | 0.2% | Jul 14, 2021 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1... |
| CVE-2021-22778 | HIGH | 7.1 | 0.2% | Jul 14, 2021 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1... |
| CVE-2021-35527 | HIGH | 7.5 | 1.0% | Jul 14, 2021 | Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attack... |
| CVE-2021-0603 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due t... |
| CVE-2021-0602 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi... |
| CVE-2021-0600 | HIGH | 7.8 | 0.4% | Jul 14, 2021 | In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to impr... |
| CVE-2021-0596 | HIGH | 7.5 | 1.1% | Jul 14, 2021 | In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check... |
| CVE-2021-0594 | HIGH | 8 | 1.4% | Jul 14, 2021 | In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validatio... |
| CVE-2021-0592 | HIGH | 8.8 | 1.1% | Jul 14, 2021 | In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could l... |
| CVE-2021-0589 | HIGH | 7.8 | 0.3% | Jul 14, 2021 | In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This coul... |
| CVE-2021-0587 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This ... |
| CVE-2021-0586 | HIGH | 7.8 | 0.3% | Jul 14, 2021 | In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth devi... |
| CVE-2021-0577 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escala... |
| CVE-2021-0514 | HIGH | 8.1 | 1.0% | Jul 14, 2021 | In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to r... |
| CVE-2021-0486 | HIGH | 7.8 | 0.1% | Jul 14, 2021 | In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permis... |
| CVE-2021-0441 | HIGH | 7.3 | 0.1% | Jul 14, 2021 | In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to lo... |
| CVE-2021-35469 | HIGH | 7.8 | 0.2% | Jul 14, 2021 | The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due ... |
| CVE-2021-33677 | HIGH | 7.5 | 1.1% | Jul 14, 2021 | SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to exte... |
| CVE-2021-33676 | HIGH | 7.2 | 0.9% | Jul 14, 2021 | A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with hi... |
| CVE-2021-33671 | HIGH | 8.8 | 0.7% | Jul 14, 2021 | SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perfor... |
| CVE-2021-33670 | HIGH | 7.5 | 3.2% | Jul 14, 2021 | SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows ... |
| CVE-2021-20782 | HIGH | 8.8 | 0.9% | Jul 14, 2021 | Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attack... |
| CVE-2021-20781 | HIGH | 8.8 | 0.8% | Jul 14, 2021 | Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.... |
| CVE-2021-20748 | HIGH | 7.5 | 1.0% | Jul 14, 2021 | Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now