2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41789 | MEDIUM | 6.5 | 0.6% | Jan 4, 2022 | In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of ... |
| CVE-2021-40148 | HIGH | 7.5 | 0.7% | Jan 4, 2022 | In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote inf... |
| CVE-2021-45980 | HIGH | 7.8 | 1.5% | Jan 4, 2022 | Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the ... |
| CVE-2021-45979 | HIGH | 7.8 | 1.5% | Jan 4, 2022 | Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL ... |
| CVE-2021-45978 | HIGH | 7.8 | 1.5% | Jan 4, 2022 | Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoU... |
| CVE-2021-45913 | HIGH | 7.2 | 1.0% | Jan 4, 2022 | A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS command... |
| CVE-2021-3842 | HIGH | 7.5 | 1.5% | Jan 4, 2022 | nltk is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-43711 | CRITICAL | 9.8 | 36.3% | Jan 4, 2022 | The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when re... |
| CVE-2021-44168 | HIGH | 7.8 | 0.9% | Jan 4, 2022 | A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.... |
| CVE-2021-31833 | HIGH | 7.8 | 0.3% | Jan 4, 2022 | Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 a... |
| CVE-2021-40525 | CRITICAL | 9.1 | 3.7% | Jan 4, 2022 | Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path travers... |
| CVE-2021-40111 | MEDIUM | 6.5 | 2.1% | Jan 4, 2022 | In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP comma... |
| CVE-2021-40110 | HIGH | 7.5 | 2.9% | Jan 4, 2022 | In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Deni... |
| CVE-2021-38542 | MEDIUM | 5.9 | 2.3% | Jan 4, 2022 | Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This... |
| CVE-2021-34797 | HIGH | 7.5 | 2.9% | Jan 4, 2022 | Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw when ... |
| CVE-2021-20872 | MEDIUM | 6.8 | 0.3% | Jan 4, 2022 | Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650... |
| CVE-2021-20871 | MEDIUM | 6.5 | 0.5% | Jan 4, 2022 | Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G... |
| CVE-2021-20870 | MEDIUM | 4.6 | 0.3% | Jan 4, 2022 | Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earli... |
| CVE-2021-20869 | MEDIUM | 6.5 | 0.5% | Jan 4, 2022 | Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G... |
| CVE-2021-20868 | MEDIUM | 4.5 | 0.4% | Jan 4, 2022 | Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C55... |
| CVE-2021-43942 | MEDIUM | 6.1 | 55.4% | Jan 4, 2022 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript... |
| CVE-2021-45829 | MEDIUM | 5.5 | 0.7% | Jan 3, 2022 | HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service. |
| CVE-2021-39990 | CRITICAL | 9.8 | 0.8% | Jan 3, 2022 | The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may... |
| CVE-2021-39989 | HIGH | 7.5 | 0.7% | Jan 3, 2022 | The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploi... |
| CVE-2021-39988 | HIGH | 7.5 | 0.7% | Jan 3, 2022 | The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may c... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now