2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45972 | HIGH | 7.1 | 1.0% | Jan 1, 2022 | The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file de... |
| CVE-2021-45960 | HIGH | 8.8 | 4.2% | Jan 1, 2022 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can le... |
| CVE-2021-44852 | HIGH | 7.8 | 0.8% | Jan 1, 2022 | An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the dr... |
| CVE-2021-43333 | MEDIUM | 6.5 | 0.7% | Jan 1, 2022 | The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or... |
| CVE-2021-41819 | HIGH | 7.5 | 2.9% | Jan 1, 2022 | CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem thro... |
| CVE-2021-44717 | MEDIUM | 4.8 | 1.9% | Jan 1, 2022 | Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network c... |
| CVE-2021-44716 | HIGH | 7.5 | 4.0% | Jan 1, 2022 | net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicaliza... |
| CVE-2021-41817 | HIGH | 7.5 | 3.2% | Jan 1, 2022 | Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.... |
| CVE-2021-45943 | MEDIUM | 5.5 | 1.5% | Jan 1, 2022 | GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCI... |
| CVE-2021-45942 | MEDIUM | 5.5 | 1.8% | Jan 1, 2022 | OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThrea... |
| CVE-2021-45941 | MEDIUM | 6.5 | 1.1% | Jan 1, 2022 | libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_me... |
| CVE-2021-45940 | MEDIUM | 6.5 | 1.1% | Jan 1, 2022 | libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_me... |
| CVE-2021-45939 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and Mq... |
| CVE-2021-45938 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and Mq... |
| CVE-2021-45937 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and Mq... |
| CVE-2021-45936 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and ... |
| CVE-2021-45935 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task... |
| CVE-2021-45934 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket an... |
| CVE-2021-45933 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePack... |
| CVE-2021-45932 | MEDIUM | 5.5 | 0.9% | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePack... |
| CVE-2021-45931 | MEDIUM | 6.5 | 1.8% | Jan 1, 2022 | HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_inverti... |
| CVE-2021-45930 | MEDIUM | 5.5 | 1.3% | Jan 1, 2022 | Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPain... |
| CVE-2021-45928 | MEDIUM | 5.5 | 0.4% | Jan 1, 2022 | libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFra... |
| CVE-2021-45927 | HIGH | 7.8 | 0.4% | Jan 1, 2022 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called fr... |
| CVE-2021-45926 | HIGH | 7.8 | 0.4% | Jan 1, 2022 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called fr... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now