2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37197 | HIGH | 8.8 | 0.8% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-37196 | MEDIUM | 6.5 | 0.8% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-37195 | MEDIUM | 6.1 | 0.5% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-36414 | HIGH | 7.8 | 1.1% | Jan 10, 2022 | A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a... |
| CVE-2021-36412 | HIGH | 7.8 | 0.9% | Jan 10, 2022 | A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video functio... |
| CVE-2021-36411 | MEDIUM | 5.5 | 1.2% | Jan 10, 2022 | An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in fun... |
| CVE-2021-36410 | MEDIUM | 5.5 | 0.9% | Jan 10, 2022 | A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running p... |
| CVE-2021-36409 | HIGH | 7.8 | 0.9% | Jan 10, 2022 | There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file,... |
| CVE-2021-36408 | MEDIUM | 5.5 | 0.8% | Jan 10, 2022 | An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265... |
| CVE-2021-35452 | MEDIUM | 6.5 | 1.3% | Jan 10, 2022 | An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc. |
| CVE-2021-29454 | HIGH | 8.8 | 1.9% | Jan 10, 2022 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio... |
| CVE-2021-21408 | HIGH | 8.8 | 2.2% | Jan 10, 2022 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio... |
| CVE-2021-44458 | CRITICAL | 9.6 | 0.4% | Jan 10, 2022 | Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website c... |
| CVE-2021-43951 | MEDIUM | 4.3 | 0.8% | Jan 10, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43949 | MEDIUM | 4.3 | 0.8% | Jan 10, 2022 | Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to vi... |
| CVE-2021-43297 | CRITICAL | 9.8 | 15.3% | Jan 10, 2022 | A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to malic... |
| CVE-2021-25054 | HIGH | 8.8 | 1.3% | Jan 10, 2022 | The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL state... |
| CVE-2021-25053 | HIGH | 8.8 | 0.7% | Jan 10, 2022 | The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file wit... |
| CVE-2021-25052 | HIGH | 8.8 | 3.5% | Jan 10, 2022 | The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary ... |
| CVE-2021-25051 | HIGH | 8.8 | 0.8% | Jan 10, 2022 | The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file... |
| CVE-2021-25047 | MEDIUM | 6.1 | 0.8% | Jan 10, 2022 | The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulner... |
| CVE-2021-25043 | MEDIUM | 6.1 | 0.9% | Jan 10, 2022 | The WOOCS WordPress plugin before 1.3.7.3 does not sanitise and escape the custom_prices parameter before outputting it ... |
| CVE-2021-25032 | CRITICAL | 9.8 | 6.7% | Jan 10, 2022 | The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1... |
| CVE-2021-24949 | CRITICAL | 9.8 | 1.7% | Jan 10, 2022 | The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise an... |
| CVE-2021-24948 | HIGH | 7.5 | 1.8% | Jan 10, 2022 | The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now