2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25684 | HIGH | 7.8 | 0.5% | Jun 11, 2021 | It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO. |
| CVE-2021-25683 | HIGH | 7.8 | 0.4% | Jun 11, 2021 | It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from t... |
| CVE-2021-25682 | HIGH | 7.8 | 0.5% | Jun 11, 2021 | It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from ... |
| CVE-2021-26195 | HIGH | 8.8 | 1.1% | Jun 10, 2021 | An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file. |
| CVE-2021-31840 | HIGH | 7.3 | 0.3% | Jun 10, 2021 | A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.... |
| CVE-2021-23022 | HIGH | 7.8 | 0.2% | Jun 10, 2021 | On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's ... |
| CVE-2021-34555 | HIGH | 7.5 | 2.7% | Jun 10, 2021 | OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applicati... |
| CVE-2021-31928 | HIGH | 8.8 | 1.2% | Jun 10, 2021 | Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadm... |
| CVE-2021-31659 | HIGH | 8.8 | 0.6% | Jun 10, 2021 | TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). Al... |
| CVE-2021-31658 | HIGH | 8.1 | 1.1% | Jun 10, 2021 | TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface tha... |
| CVE-2021-31538 | HIGH | 7.5 | 1.5% | Jun 10, 2021 | LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal. |
| CVE-2021-23024 | HIGH | 7.2 | 5.3% | Jun 10, 2021 | On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated rem... |
| CVE-2021-23023 | HIGH | 7.8 | 0.3% | Jun 10, 2021 | On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll in... |
| CVE-2021-21665 | HIGH | 8.8 | 0.7% | Jun 10, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attack... |
| CVE-2021-3041 | HIGH | 7.8 | 0.2% | Jun 10, 2021 | A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that e... |
| CVE-2021-3040 | HIGH | 7.2 | 1.3% | Jun 10, 2021 | An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when proce... |
| CVE-2021-31998 | HIGH | 7.8 | 0.3% | Jun 10, 2021 | A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE B... |
| CVE-2021-31997 | HIGH | 7.8 | 0.3% | Jun 10, 2021 | A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local a... |
| CVE-2021-25322 | HIGH | 7.8 | 0.4% | Jun 10, 2021 | A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local ... |
| CVE-2021-21736 | HIGH | 7.2 | 0.9% | Jun 10, 2021 | A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user pe... |
| CVE-2021-20081 | HIGH | 7.2 | 52.4% | Jun 10, 2021 | Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticate... |
| CVE-2021-34539 | HIGH | 7.2 | 1.2% | Jun 10, 2021 | An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an... |
| CVE-2021-26690 | HIGH | 7.5 | 65.1% | Jun 10, 2021 | Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL po... |
| CVE-2021-33393 | HIGH | 8.8 | 58.7% | Jun 9, 2021 | lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It... |
| CVE-2021-0133 | HIGH | 8.1 | 0.9% | Jun 9, 2021 | Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticate... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now