2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36144 | HIGH | 7.5 | 1.0% | Jul 2, 2021 | The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/p... |
| CVE-2021-36143 | HIGH | 7.5 | 1.2% | Jul 2, 2021 | ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference. |
| CVE-2021-34527 | HIGH | 8.8 | 99.8% | Jul 2, 2021 | A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file ... |
| CVE-2021-30557 | HIGH | 8.8 | 11.7% | Jul 2, 2021 | Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install ... |
| CVE-2021-30556 | HIGH | 8.8 | 1.7% | Jul 2, 2021 | Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-30555 | HIGH | 8.8 | 1.4% | Jul 2, 2021 | Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a ... |
| CVE-2021-30554 | HIGH | 8.8 | 7.4% | Jul 2, 2021 | Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap co... |
| CVE-2021-27950 | HIGH | 8.8 | 1.7% | Jul 2, 2021 | A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to exec... |
| CVE-2021-3613 | HIGH | 7.8 | 0.5% | Jul 2, 2021 | OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL confi... |
| CVE-2021-3606 | HIGH | 7.8 | 0.3% | Jul 2, 2021 | OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL c... |
| CVE-2021-36132 | HIGH | 8.8 | 1.0% | Jul 2, 2021 | An issue was discovered in the FileImporter extension in MediaWiki through 1.36. For certain relaxed configurations of t... |
| CVE-2021-36125 | HIGH | 7.5 | 1.0% | Jul 2, 2021 | An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is ... |
| CVE-2021-35197 | HIGH | 7.5 | 1.9% | Jul 2, 2021 | In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended... |
| CVE-2021-27412 | HIGH | 7.8 | 1.0% | Jul 2, 2021 | Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attac... |
| CVE-2021-28423 | HIGH | 8.8 | 2.4% | Jul 1, 2021 | Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated user... |
| CVE-2021-28127 | HIGH | 7.5 | 0.9% | Jul 1, 2021 | An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur. |
| CVE-2021-27661 | HIGH | 8.8 | 0.8% | Jul 1, 2021 | Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Contr... |
| CVE-2021-27660 | HIGH | 8.8 | 2.1% | Jul 1, 2021 | An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs. |
| CVE-2021-27477 | HIGH | 7.5 | 1.1% | Jul 1, 2021 | When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus... |
| CVE-2021-20778 | HIGH | 7.5 | 2.1% | Jul 1, 2021 | Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access rest... |
| CVE-2021-36089 | HIGH | 7.8 | 1.2% | Jul 1, 2021 | Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from g... |
| CVE-2021-36082 | HIGH | 8.8 | 1.8% | Jul 1, 2021 | ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. |
| CVE-2021-36081 | HIGH | 7.8 | 0.9% | Jul 1, 2021 | Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call. |
| CVE-2021-36080 | HIGH | 8.8 | 1.3% | Jul 1, 2021 | GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_e... |
| CVE-2021-22352 | HIGH | 7.8 | 0.5% | Jun 30, 2021 | There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may al... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now