2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-44649 | MEDIUM | 5.4 | 0.6% | Jan 12, 2022 | Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type,... |
| CVE-2021-44648 | HIGH | 8.8 | 1.9% | Jan 12, 2022 | GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of... |
| CVE-2021-3852 | HIGH | 7.5 | 0.8% | Jan 12, 2022 | growi is vulnerable to Authorization Bypass Through User-Controlled Key |
| CVE-2021-46283 | MEDIUM | 5.5 | 0.3% | Jan 11, 2022 | nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denia... |
| CVE-2021-43999 | HIGH | 8.8 | 1.8% | Jan 11, 2022 | Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML supp... |
| CVE-2021-41767 | MEDIUM | 6.5 | 1.9% | Jan 11, 2022 | Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some ... |
| CVE-2021-43974 | MEDIUM | 5.3 | 1.4% | Jan 11, 2022 | An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, ... |
| CVE-2021-43973 | HIGH | 8.8 | 1.7% | Jan 11, 2022 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated ... |
| CVE-2021-43972 | MEDIUM | 6.5 | 1.5% | Jan 11, 2022 | An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authe... |
| CVE-2021-43971 | HIGH | 8.8 | 1.7% | Jan 11, 2022 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attack... |
| CVE-2021-43055 | HIGH | 8.8 | 0.7% | Jan 11, 2022 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and T... |
| CVE-2021-43054 | HIGH | 8.8 | 0.7% | Jan 11, 2022 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and T... |
| CVE-2021-43053 | HIGH | 7.5 | 0.8% | Jan 11, 2022 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TI... |
| CVE-2021-43052 | HIGH | 7.5 | 0.9% | Jan 11, 2022 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TI... |
| CVE-2021-34704 | HIGH | 7.5 | 1.3% | Jan 11, 2022 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th... |
| CVE-2021-1573 | HIGH | 7.5 | 1.3% | Jan 11, 2022 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th... |
| CVE-2021-38991 | HIGH | 7.8 | 0.3% | Jan 11, 2022 | IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore com... |
| CVE-2021-29701 | MEDIUM | 4.3 | 0.7% | Jan 11, 2022 | IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could a... |
| CVE-2021-43566 | LOW | 2.5 | 0.4% | Jan 11, 2022 | All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directo... |
| CVE-2021-44647 | MEDIUM | 5.5 | 0.4% | Jan 11, 2022 | Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a l... |
| CVE-2021-45460 | HIGH | 8.1 | 0.8% | Jan 11, 2022 | A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted reg... |
| CVE-2021-45034 | HIGH | 7.5 | 2.3% | Jan 11, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER ... |
| CVE-2021-45033 | HIGH | 8.8 | 0.9% | Jan 11, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER ... |
| CVE-2021-41769 | HIGH | 7.5 | 1.0% | Jan 11, 2022 | A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6... |
| CVE-2021-37198 | HIGH | 8.8 | 0.4% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now