2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29702 | HIGH | 7.5 | 1.9% | Jun 16, 2021 | Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as ... |
| CVE-2021-20566 | HIGH | 7.5 | 0.7% | Jun 16, 2021 | IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt high... |
| CVE-2021-34803 | HIGH | 7.8 | 0.5% | Jun 16, 2021 | TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations. |
| CVE-2021-22914 | HIGH | 7.5 | 1.1% | Jun 16, 2021 | Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive infor... |
| CVE-2021-27485 | HIGH | 7.5 | 1.2% | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable form... |
| CVE-2021-27483 | HIGH | 7.8 | 0.2% | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could al... |
| CVE-2021-33813 | HIGH | 7.5 | 19.4% | Jun 16, 2021 | An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP reques... |
| CVE-2021-32612 | HIGH | 8.1 | 1.1% | Jun 16, 2021 | The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cl... |
| CVE-2021-30468 | HIGH | 7.5 | 7.0% | Jun 16, 2021 | A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web serv... |
| CVE-2021-27489 | HIGH | 8.8 | 1.3% | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious... |
| CVE-2021-20094 | HIGH | 7.5 | 4.7% | Jun 16, 2021 | A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker ... |
| CVE-2021-21441 | HIGH | 7.5 | 1.2% | Jun 16, 2021 | There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e... |
| CVE-2021-30553 | HIGH | 8.8 | 1.2% | Jun 15, 2021 | Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially explo... |
| CVE-2021-30552 | HIGH | 8.8 | 1.0% | Jun 15, 2021 | Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install... |
| CVE-2021-30551 | HIGH | 8.8 | 64.7% | Jun 15, 2021 | Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2021-30550 | HIGH | 8.8 | 0.9% | Jun 15, 2021 | Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to inst... |
| CVE-2021-30549 | HIGH | 8.8 | 0.9% | Jun 15, 2021 | Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to instal... |
| CVE-2021-30548 | HIGH | 8.8 | 1.2% | Jun 15, 2021 | Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap c... |
| CVE-2021-30547 | HIGH | 8.8 | 3.6% | Jun 15, 2021 | Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform ou... |
| CVE-2021-30546 | HIGH | 8.8 | 1.1% | Jun 15, 2021 | Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-30545 | HIGH | 8.8 | 1.1% | Jun 15, 2021 | Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the r... |
| CVE-2021-30544 | HIGH | 8.8 | 1.2% | Jun 15, 2021 | Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap ... |
| CVE-2021-28857 | HIGH | 7.5 | 1.3% | Jun 15, 2021 | TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie. |
| CVE-2021-34129 | HIGH | 8.1 | 1.7% | Jun 15, 2021 | LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in ... |
| CVE-2021-34128 | HIGH | 8.8 | 1.5% | Jun 15, 2021 | LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=p... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now