2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-35047HIGH8.8Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker ...
CVE-2021-32717HIGH7.5Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 private files publicly accessible with Cloud...
CVE-2021-35448HIGH7.8Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using...
CVE-2021-32711HIGH7.5Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vuln...
CVE-2021-32710HIGH7.5Shopware is an open source eCommerce platform. Potential session hijacking of store customers in versions below 6.3.5.2....
CVE-2021-3500HIGH7.8A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via c...
CVE-2021-32493HIGH7.8A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted...
CVE-2021-32492HIGH7.8A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via craft...
CVE-2021-32491HIGH7.8A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted dj...
CVE-2021-32490HIGH7.8A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu ...
CVE-2021-29703HIGH7.5Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server termina...
CVE-2021-33004HIGH7.8The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied file...
CVE-2021-33002HIGH7.8Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbi...
CVE-2021-33000HIGH7.8Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perfor...
CVE-2021-32708HIGH8.1Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any ...
CVE-2021-21574HIGH7.5Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce...
CVE-2021-21573HIGH7.5Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce...
CVE-2021-21572HIGH7.5Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local acce...
CVE-2021-32704HIGH8.8DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection s...
CVE-2021-29968HIGH8.1When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firef...
CVE-2021-29967HIGH8.8Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed ev...
CVE-2021-29966HIGH8.8Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corru...
CVE-2021-29964HIGH7.1A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to...
CVE-2021-29952HIGH7.5When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that w...
CVE-2021-29950HIGH7.5Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task ...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now