2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46773 | HIGH | 8.8 | 0.8% | May 9, 2023 | Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a ... |
| CVE-2021-46765 | HIGH | 7.5 | 0.6% | May 9, 2023 | Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads w... |
| CVE-2021-46755 | HIGH | 7.5 | 0.6% | May 9, 2023 | Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attack... |
| CVE-2021-46769 | HIGH | 8.8 | 0.8% | May 9, 2023 | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA cop... |
| CVE-2021-46764 | HIGH | 7.5 | 0.6% | May 9, 2023 | Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the AS... |
| CVE-2021-46763 | HIGH | 7.5 | 0.5% | May 9, 2023 | Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a share... |
| CVE-2021-46749 | HIGH | 7.5 | 0.6% | May 9, 2023 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management... |
| CVE-2021-26406 | HIGH | 7.5 | 0.4% | May 9, 2023 | Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtual... |
| CVE-2021-26397 | HIGH | 7.1 | 0.2% | May 9, 2023 | Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locat... |
| CVE-2021-26365 | HIGH | 8.2 | 0.6% | May 9, 2023 | Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to... |
| CVE-2021-26356 | HIGH | 7.4 | 0.4% | May 9, 2023 | A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially re... |
| CVE-2021-31240 | HIGH | 7.8 | 0.3% | May 9, 2023 | An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS functi... |
| CVE-2021-44283 | HIGH | 7.5 | 0.9% | May 9, 2023 | A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore com... |
| CVE-2021-31239 | HIGH | 7.5 | 2.2% | May 9, 2023 | An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c... |
| CVE-2021-28999 | HIGH | 8.8 | 1.3% | May 8, 2023 | SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via ... |
| CVE-2021-28998 | HIGH | 7.2 | 1.3% | May 8, 2023 | File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via... |
| CVE-2021-27280 | HIGH | 7.8 | 1.0% | May 8, 2023 | OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it g... |
| CVE-2021-40331 | HIGH | 8.1 | 0.9% | May 5, 2023 | An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any u... |
| CVE-2021-45111 | HIGH | 8.1 | 0.8% | Apr 25, 2023 | Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authentica... |
| CVE-2021-23203 | HIGH | 7.5 | 0.9% | Apr 25, 2023 | Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, ... |
| CVE-2021-23186 | HIGH | 8.7 | 0.6% | Apr 25, 2023 | A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administ... |
| CVE-2021-23178 | HIGH | 7.5 | 0.6% | Apr 25, 2023 | Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to vali... |
| CVE-2021-23166 | HIGH | 8.7 | 0.6% | Apr 25, 2023 | A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administ... |
| CVE-2021-33589 | HIGH | 7.5 | 0.5% | Apr 21, 2023 | Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption... |
| CVE-2021-38363 | HIGH | 7.5 | 0.7% | Apr 20, 2023 | An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent (which causes an exception) remain... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now