2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40568 | HIGH | 7.8 | 1.3% | Jan 13, 2022 | A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in... |
| CVE-2021-40567 | MEDIUM | 5.5 | 0.9% | Jan 13, 2022 | Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c ... |
| CVE-2021-39056 | MEDIUM | 6.5 | 1.3% | Jan 13, 2022 | The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to ... |
| CVE-2021-40327 | MEDIUM | 5.9 | 1.2% | Jan 13, 2022 | Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key ... |
| CVE-2021-23824 | MEDIUM | 6.1 | 0.9% | Jan 13, 2022 | This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipu... |
| CVE-2021-45806 | HIGH | 8.8 | 1.7% | Jan 13, 2022 | jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious ... |
| CVE-2021-23514 | HIGH | 7.5 | 1.6% | Jan 13, 2022 | This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the ser... |
| CVE-2021-30353 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Sn... |
| CVE-2021-30330 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdra... |
| CVE-2021-30319 | HIGH | 7.8 | 0.2% | Jan 13, 2022 | Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdr... |
| CVE-2021-30314 | MEDIUM | 5.5 | 0.1% | Jan 13, 2022 | Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Au... |
| CVE-2021-30313 | MEDIUM | 6.4 | 0.1% | Jan 13, 2022 | Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in ... |
| CVE-2021-30311 | HIGH | 7.8 | 0.2% | Jan 13, 2022 | Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, ... |
| CVE-2021-30308 | HIGH | 7.8 | 0.2% | Jan 13, 2022 | Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Sn... |
| CVE-2021-30307 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV qu... |
| CVE-2021-30301 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon ... |
| CVE-2021-30300 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value t... |
| CVE-2021-30287 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon ... |
| CVE-2021-30285 | HIGH | 8.8 | 0.1% | Jan 13, 2022 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon C... |
| CVE-2021-43860 | HIGH | 8.6 | 1.3% | Jan 12, 2022 | Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn... |
| CVE-2021-40566 | MEDIUM | 5.5 | 0.8% | Jan 12, 2022 | A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process ... |
| CVE-2021-40565 | MEDIUM | 5.5 | 0.8% | Jan 12, 2022 | A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_pars... |
| CVE-2021-40564 | MEDIUM | 5.5 | 0.8% | Jan 12, 2022 | A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slic... |
| CVE-2021-40563 | MEDIUM | 5.5 | 0.8% | Jan 12, 2022 | A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_d... |
| CVE-2021-40562 | MEDIUM | 5.5 | 0.8% | Jan 12, 2022 | A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqu... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now