2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32701 | HIGH | 7.5 | 1.3% | Jun 22, 2021 | ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based o... |
| CVE-2021-32700 | HIGH | 7.4 | 0.6% | Jun 22, 2021 | Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.... |
| CVE-2021-22377 | HIGH | 7.2 | 0.9% | Jun 22, 2021 | There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500... |
| CVE-2021-22363 | HIGH | 7.5 | 0.7% | Jun 22, 2021 | There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specifi... |
| CVE-2021-22361 | HIGH | 7.8 | 0.2% | Jun 22, 2021 | There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200,... |
| CVE-2021-34244 | HIGH | 8.8 | 0.6% | Jun 22, 2021 | A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create n... |
| CVE-2021-0608 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. Th... |
| CVE-2021-0607 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missi... |
| CVE-2021-0553 | HIGH | 7.3 | 0.1% | Jun 22, 2021 | In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI.... |
| CVE-2021-0550 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without use... |
| CVE-2021-0548 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could ... |
| CVE-2021-0547 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL h... |
| CVE-2021-0539 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user co... |
| CVE-2021-0538 | HIGH | 7.3 | 0.1% | Jun 22, 2021 | In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjac... |
| CVE-2021-0537 | HIGH | 7.3 | 0.1% | Jun 22, 2021 | In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tap... |
| CVE-2021-0536 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This ... |
| CVE-2021-0571 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and App... |
| CVE-2021-0570 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe Pe... |
| CVE-2021-0568 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing perm... |
| CVE-2021-0567 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This coul... |
| CVE-2021-0565 | HIGH | 7 | 0.1% | Jun 22, 2021 | In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to loc... |
| CVE-2021-0557 | HIGH | 8.8 | 0.7% | Jun 22, 2021 | In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remot... |
| CVE-2021-0555 | HIGH | 7.5 | 0.8% | Jun 22, 2021 | In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead t... |
| CVE-2021-0534 | HIGH | 7.8 | 0.1% | Jun 22, 2021 | In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insec... |
| CVE-2021-35196 | HIGH | 7.8 | 1.9% | Jun 21, 2021 | Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a proj... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now