2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21779 | HIGH | 8.8 | 2.9% | Jul 8, 2021 | A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A ... |
| CVE-2021-32462 | HIGH | 8.8 | 5.2% | Jul 8, 2021 | Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remo... |
| CVE-2021-32461 | HIGH | 7.8 | 0.4% | Jul 8, 2021 | Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Es... |
| CVE-2021-31817 | HIGH | 7.5 | 0.9% | Jul 8, 2021 | When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database... |
| CVE-2021-31816 | HIGH | 7.5 | 0.9% | Jul 8, 2021 | When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database... |
| CVE-2021-34430 | HIGH | 7.5 | 1.0% | Jul 8, 2021 | Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attacker... |
| CVE-2021-21775 | HIGH | 8 | 1.3% | Jul 7, 2021 | A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGT... |
| CVE-2021-21789 | HIGH | 8.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Priv... |
| CVE-2021-21788 | HIGH | 8.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Priv... |
| CVE-2021-21787 | HIGH | 8.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Priv... |
| CVE-2021-21786 | HIGH | 7.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.... |
| CVE-2021-20474 | HIGH | 7.5 | 0.5% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requir... |
| CVE-2021-20415 | HIGH | 7.5 | 0.9% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker... |
| CVE-2021-20379 | HIGH | 7.5 | 0.5% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could all... |
| CVE-2021-20378 | HIGH | 8.8 | 0.4% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an aut... |
| CVE-2021-33220 | HIGH | 7.8 | 0.3% | Jul 7, 2021 | An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist. |
| CVE-2021-33217 | HIGH | 8.8 | 1.4% | Jul 7, 2021 | An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The Web Application allows Arbitrary Rea... |
| CVE-2021-31925 | HIGH | 7.5 | 1.3% | Jul 7, 2021 | Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a d... |
| CVE-2021-28931 | HIGH | 8.8 | 1.2% | Jul 7, 2021 | Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /them... |
| CVE-2021-32532 | HIGH | 7.5 | 1.7% | Jul 7, 2021 | Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary fi... |
| CVE-2021-32527 | HIGH | 7.5 | 1.7% | Jul 7, 2021 | Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files... |
| CVE-2021-32525 | HIGH | 7.2 | 1.7% | Jul 7, 2021 | The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control int... |
| CVE-2021-32524 | HIGH | 7.2 | 1.7% | Jul 7, 2021 | Command injection vulnerability in QSAN Storage Manager allows remote privileged users to execute arbitrary commands. Su... |
| CVE-2021-32523 | HIGH | 7.2 | 1.5% | Jul 7, 2021 | Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control... |
| CVE-2021-32519 | HIGH | 7.5 | 0.9% | Jul 7, 2021 | Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows re... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now