2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1970 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdr... |
| CVE-2021-1964 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto... |
| CVE-2021-1955 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, S... |
| CVE-2021-1954 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto... |
| CVE-2021-1953 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 fr... |
| CVE-2021-1945 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapd... |
| CVE-2021-1943 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon... |
| CVE-2021-1940 | HIGH | 7.8 | 0.2% | Jul 13, 2021 | Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snap... |
| CVE-2021-1938 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Comp... |
| CVE-2021-1907 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Co... |
| CVE-2021-1890 | HIGH | 7.8 | 0.2% | Jul 13, 2021 | Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, S... |
| CVE-2021-1889 | HIGH | 7.8 | 0.2% | Jul 13, 2021 | Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snap... |
| CVE-2021-1888 | HIGH | 7.8 | 0.2% | Jul 13, 2021 | Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, ... |
| CVE-2021-1887 | HIGH | 7.5 | 0.6% | Jul 13, 2021 | An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon W... |
| CVE-2021-1886 | HIGH | 7.8 | 0.2% | Jul 13, 2021 | Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon A... |
| CVE-2021-32727 | HIGH | 7.5 | 0.7% | Jul 12, 2021 | Nextcloud Android Client is the Android client for Nextcloud. Clients using the Nextcloud end-to-end encryption feature ... |
| CVE-2021-24441 | HIGH | 8 | 1.3% | Jul 12, 2021 | The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the ... |
| CVE-2021-32705 | HIGH | 7.5 | 1.7% | Jul 12, 2021 | Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the... |
| CVE-2021-29794 | HIGH | 7.5 | 0.7% | Jul 12, 2021 | IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expe... |
| CVE-2021-29792 | HIGH | 7.2 | 0.5% | Jul 12, 2021 | IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and ... |
| CVE-2021-33807 | HIGH | 7.5 | 14.1% | Jul 12, 2021 | Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. |
| CVE-2021-30639 | HIGH | 7.5 | 6.9% | Jul 12, 2021 | A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part... |
| CVE-2021-32688 | HIGH | 8.8 | 2.3% | Jul 12, 2021 | Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server supports application specific tokens... |
| CVE-2021-24015 | HIGH | 8.8 | 1.2% | Jul 12, 2021 | An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of Fo... |
| CVE-2021-36377 | HIGH | 7.5 | 0.6% | Jul 12, 2021 | Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now