2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3267 | HIGH | 7.2 | 1.3% | Apr 4, 2023 | File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile f... |
| CVE-2021-41526 | HIGH | 7.8 | 0.3% | Mar 29, 2023 | A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerabil... |
| CVE-2021-43317 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in... |
| CVE-2021-43316 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in ... |
| CVE-2021-43315 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in... |
| CVE-2021-43314 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in... |
| CVE-2021-43313 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The ... |
| CVE-2021-43312 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The ... |
| CVE-2021-43311 | HIGH | 7.5 | 0.8% | Mar 24, 2023 | A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in ... |
| CVE-2021-3674 | HIGH | 7.8 | 0.4% | Mar 24, 2023 | A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the ... |
| CVE-2021-46877 | HIGH | 7.5 | 1.1% | Mar 18, 2023 | jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of serv... |
| CVE-2021-21548 | HIGH | 7.4 | 0.3% | Mar 17, 2023 | Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions be... |
| CVE-2021-31637 | HIGH | 7.8 | 0.3% | Mar 16, 2023 | An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute a... |
| CVE-2021-34125 | HIGH | 7.5 | 1.0% | Mar 9, 2023 | An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive i... |
| CVE-2021-33639 | HIGH | 7.5 | 0.5% | Mar 8, 2023 | REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified. |
| CVE-2021-4331 | HIGH | 8.8 | 0.9% | Mar 7, 2023 | The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and includin... |
| CVE-2021-4330 | HIGH | 8.8 | 1.5% | Mar 7, 2023 | The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads ... |
| CVE-2021-36396 | HIGH | 7.5 | 1.4% | Mar 6, 2023 | In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictio... |
| CVE-2021-36395 | HIGH | 7.5 | 0.7% | Mar 6, 2023 | In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion de... |
| CVE-2021-4326 | HIGH | 7.8 | 0.3% | Mar 1, 2023 | A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands... |
| CVE-2021-3855 | HIGH | 8.8 | 1.9% | Mar 1, 2023 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Manag... |
| CVE-2021-35290 | HIGH | 7.2 | 0.9% | Feb 24, 2023 | File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /... |
| CVE-2021-34249 | HIGH | 7.5 | 1.2% | Feb 24, 2023 | SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive informatio... |
| CVE-2021-34167 | HIGH | 8.8 | 0.4% | Feb 24, 2023 | Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via... |
| CVE-2021-32848 | HIGH | 7.5 | 1.0% | Feb 20, 2023 | Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now