2021 CVE Vulnerabilities
23,448 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46145 | MEDIUM | 5.3 | 3.6% | Jan 6, 2022 | The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expirin... |
| CVE-2021-46144 | MEDIUM | 6.1 | 1.0% | Jan 6, 2022 | Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets... |
| CVE-2021-46143 | HIGH | 7.8 | 3.8% | Jan 6, 2022 | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. |
| CVE-2021-46142 | MEDIUM | 5.5 | 1.1% | Jan 6, 2022 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. |
| CVE-2021-46141 | MEDIUM | 5.5 | 1.1% | Jan 6, 2022 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeO... |
| CVE-2021-43947 | HIGH | 7.2 | 4.1% | Jan 6, 2022 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execu... |
| CVE-2021-45971 | HIGH | 8.2 | 0.3% | Jan 6, 2022 | An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 be... |
| CVE-2021-41842 | CRITICAL | 9.8 | 1.5% | Jan 6, 2022 | An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3... |
| CVE-2021-46038 | MEDIUM | 5.5 | 0.6% | Jan 5, 2022 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context... |
| CVE-2021-45970 | HIGH | 8.2 | 0.3% | Jan 5, 2022 | An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 befor... |
| CVE-2021-45969 | HIGH | 8.2 | 0.3% | Jan 5, 2022 | An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 befo... |
| CVE-2021-45833 | MEDIUM | 5.5 | 0.7% | Jan 5, 2022 | A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in... |
| CVE-2021-45832 | MEDIUM | 5.5 | 0.7% | Jan 5, 2022 | A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Se... |
| CVE-2021-45831 | MEDIUM | 5.5 | 0.6% | Jan 5, 2022 | A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Serv... |
| CVE-2021-45830 | MEDIUM | 5.5 | 0.7% | Jan 5, 2022 | A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which ... |
| CVE-2021-43816 | CRITICAL | 9.1 | 1.7% | Jan 5, 2022 | containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or S... |
| CVE-2021-43779 | CRITICAL | 9.9 | 9.1% | Jan 5, 2022 | GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in... |
| CVE-2021-38918 | HIGH | 7.5 | 1.2% | Jan 5, 2022 | IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could le... |
| CVE-2021-28713 | MEDIUM | 6.5 | 0.3% | Jan 5, 2022 | Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; ... |
| CVE-2021-28712 | MEDIUM | 6.5 | 0.3% | Jan 5, 2022 | Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; ... |
| CVE-2021-28711 | MEDIUM | 6.5 | 0.3% | Jan 5, 2022 | Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; ... |
| CVE-2021-41043 | MEDIUM | 5.5 | 0.9% | Jan 5, 2022 | Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. |
| CVE-2021-31589 | MEDIUM | 6.1 | 28.3% | Jan 5, 2022 | A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Sof... |
| CVE-2021-22567 | LOW | 3.5 | 0.6% | Jan 5, 2022 | Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be explo... |
| CVE-2021-43946 | MEDIUM | 6.5 | 1.1% | Jan 5, 2022 | Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator gro... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now