2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36774 | MEDIUM | 6.5 | 1.9% | Jan 6, 2022 | Apache Kylin allows users to read data from other database systems using JDBC. The MySQL JDBC driver supports certain pr... |
| CVE-2021-31522 | CRITICAL | 9.8 | 2.9% | Jan 6, 2022 | Kylin can receive user input and load any class through Class.forName(...). This issue affects Apache Kylin 2 version 2.... |
| CVE-2021-27738 | HIGH | 7.5 | 2.6% | Jan 6, 2022 | All request mappings in `StreamingCoordinatorController.java` handling `/kylin/api/streaming_coordinator/*` REST API end... |
| CVE-2021-44564 | HIGH | 8.1 | 0.9% | Jan 6, 2022 | A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC de... |
| CVE-2021-44351 | HIGH | 7.5 | 1.8% | Jan 6, 2022 | An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter. |
| CVE-2021-36739 | MEDIUM | 6.1 | 2.3% | Jan 6, 2022 | The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to ... |
| CVE-2021-36738 | MEDIUM | 6.1 | 2.3% | Jan 6, 2022 | The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scrip... |
| CVE-2021-36737 | MEDIUM | 6.1 | 2.3% | Jan 6, 2022 | The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should m... |
| CVE-2021-46145 | MEDIUM | 5.3 | 3.6% | Jan 6, 2022 | The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expirin... |
| CVE-2021-46144 | MEDIUM | 6.1 | 1.0% | Jan 6, 2022 | Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets... |
| CVE-2021-46143 | HIGH | 7.8 | 3.8% | Jan 6, 2022 | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. |
| CVE-2021-46142 | MEDIUM | 5.5 | 1.1% | Jan 6, 2022 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. |
| CVE-2021-46141 | MEDIUM | 5.5 | 1.1% | Jan 6, 2022 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeO... |
| CVE-2021-43947 | HIGH | 7.2 | 4.1% | Jan 6, 2022 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execu... |
| CVE-2021-45971 | HIGH | 8.2 | 0.3% | Jan 6, 2022 | An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 be... |
| CVE-2021-41842 | CRITICAL | 9.8 | 1.5% | Jan 6, 2022 | An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3... |
| CVE-2021-46038 | MEDIUM | 5.5 | 0.6% | Jan 5, 2022 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context... |
| CVE-2021-45970 | HIGH | 8.2 | 0.3% | Jan 5, 2022 | An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 befor... |
| CVE-2021-45969 | HIGH | 8.2 | 0.3% | Jan 5, 2022 | An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 befo... |
| CVE-2021-45833 | MEDIUM | 5.5 | 0.7% | Jan 5, 2022 | A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in... |
| CVE-2021-45832 | MEDIUM | 5.5 | 0.7% | Jan 5, 2022 | A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Se... |
| CVE-2021-45831 | MEDIUM | 5.5 | 0.6% | Jan 5, 2022 | A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Serv... |
| CVE-2021-45830 | MEDIUM | 5.5 | 0.7% | Jan 5, 2022 | A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which ... |
| CVE-2021-43816 | CRITICAL | 9.1 | 1.7% | Jan 5, 2022 | containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or S... |
| CVE-2021-43779 | CRITICAL | 9.9 | 9.1% | Jan 5, 2022 | GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now