2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23392 | HIGH | 7.5 | 1.9% | Jun 8, 2021 | The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir... |
| CVE-2021-28811 | HIGH | 7.2 | 1.5% | Jun 8, 2021 | If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has... |
| CVE-2021-28810 | HIGH | 7.5 | 1.0% | Jun 8, 2021 | If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without prope... |
| CVE-2021-3277 | HIGH | 7.2 | 54.6% | Jun 7, 2021 | Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rena... |
| CVE-2021-29504 | HIGH | 7.4 | 1.3% | Jun 7, 2021 | WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI ve... |
| CVE-2021-23391 | HIGH | 7.1 | 0.4% | Jun 7, 2021 | This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary f... |
| CVE-2021-20259 | HIGH | 7.8 | 0.3% | Jun 7, 2021 | A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authent... |
| CVE-2021-30543 | HIGH | 8.8 | 0.8% | Jun 7, 2021 | Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a... |
| CVE-2021-30542 | HIGH | 8.8 | 0.8% | Jun 7, 2021 | Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a... |
| CVE-2021-30536 | HIGH | 8.1 | 1.2% | Jun 7, 2021 | Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack c... |
| CVE-2021-30535 | HIGH | 8.8 | 1.1% | Jun 7, 2021 | Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corrupti... |
| CVE-2021-30530 | HIGH | 8.8 | 1.2% | Jun 7, 2021 | Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out ... |
| CVE-2021-30529 | HIGH | 8.8 | 1.0% | Jun 7, 2021 | Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a... |
| CVE-2021-30528 | HIGH | 8.8 | 1.3% | Jun 7, 2021 | Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had ... |
| CVE-2021-30527 | HIGH | 8.8 | 1.0% | Jun 7, 2021 | Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a mal... |
| CVE-2021-30526 | HIGH | 8.8 | 1.0% | Jun 7, 2021 | Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to insta... |
| CVE-2021-30525 | HIGH | 8.8 | 0.9% | Jun 7, 2021 | Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a... |
| CVE-2021-30524 | HIGH | 8.8 | 1.0% | Jun 7, 2021 | Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a ... |
| CVE-2021-30523 | HIGH | 8.8 | 1.1% | Jun 7, 2021 | Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap co... |
| CVE-2021-30522 | HIGH | 8.8 | 1.4% | Jun 7, 2021 | Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap ... |
| CVE-2021-30521 | HIGH | 8.8 | 1.3% | Jun 7, 2021 | Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform ... |
| CVE-2021-20517 | HIGH | 8.8 | 1.9% | Jun 7, 2021 | IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse ... |
| CVE-2021-22222 | HIGH | 7.5 | 1.8% | Jun 7, 2021 | Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafte... |
| CVE-2021-24340 | HIGH | 7.5 | 26.9% | Jun 7, 2021 | The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimit... |
| CVE-2021-24337 | HIGH | 8.8 | 1.6% | Jun 7, 2021 | The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is no... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now