2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29949 | HIGH | 7.8 | 0.3% | Jun 24, 2021 | When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to ope... |
| CVE-2021-29947 | HIGH | 8.8 | 0.9% | Jun 24, 2021 | Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed ev... |
| CVE-2021-29946 | HIGH | 8.8 | 1.2% | Jun 24, 2021 | Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking re... |
| CVE-2021-24002 | HIGH | 8.8 | 1.2% | Jun 24, 2021 | When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been inte... |
| CVE-2021-23999 | HIGH | 8.8 | 1.3% | Jun 24, 2021 | If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and gr... |
| CVE-2021-23997 | HIGH | 8.8 | 0.8% | Jun 24, 2021 | Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We p... |
| CVE-2021-23995 | HIGH | 8.8 | 1.2% | Jun 24, 2021 | When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with ... |
| CVE-2021-23994 | HIGH | 8.8 | 1.8% | Jun 24, 2021 | A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vul... |
| CVE-2021-25923 | HIGH | 8.1 | 1.3% | Jun 24, 2021 | In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum pass... |
| CVE-2021-21737 | HIGH | 7.5 | 0.8% | Jun 24, 2021 | A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection ... |
| CVE-2021-25653 | HIGH | 7.8 | 0.6% | Jun 24, 2021 | A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) tha... |
| CVE-2021-25651 | HIGH | 7.8 | 0.5% | Jun 24, 2021 | A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local us... |
| CVE-2021-25650 | HIGH | 8.8 | 0.5% | Jun 24, 2021 | A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local us... |
| CVE-2021-35041 | HIGH | 7.5 | 1.3% | Jun 24, 2021 | The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A mali... |
| CVE-2021-2322 | HIGH | 8.8 | 1.4% | Jun 23, 2021 | Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulne... |
| CVE-2021-20019 | HIGH | 7.5 | 1.4% | Jun 23, 2021 | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this c... |
| CVE-2021-29620 | HIGH | 7.5 | 2.2% | Jun 23, 2021 | Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML par... |
| CVE-2021-28976 | HIGH | 7.2 | 7.5% | Jun 23, 2021 | Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess. |
| CVE-2021-31586 | HIGH | 8.8 | 44.1% | Jun 23, 2021 | Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search. |
| CVE-2021-21999 | HIGH | 7.8 | 1.4% | Jun 23, 2021 | VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App... |
| CVE-2021-29087 | HIGH | 7.5 | 1.4% | Jun 23, 2021 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syno... |
| CVE-2021-29086 | HIGH | 7.5 | 1.2% | Jun 23, 2021 | Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Man... |
| CVE-2021-29085 | HIGH | 7.5 | 1.3% | Jun 23, 2021 | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file... |
| CVE-2021-29084 | HIGH | 7.5 | 1.3% | Jun 23, 2021 | Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Secu... |
| CVE-2021-34372 | HIGH | 7.8 | 0.3% | Jun 22, 2021 | Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now