2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-24336HIGH7.2The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using ...
CVE-2021-33898HIGH8.1In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php ...
CVE-2021-33879HIGH8.1Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM p...
CVE-2021-31701HIGH7.5Mintty before 3.4.7 mishandles Bracketed Paste Mode.
CVE-2021-29500HIGH7.5bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BU...
CVE-2021-30520HIGH8.8Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install ...
CVE-2021-30519HIGH8.8Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a...
CVE-2021-30518HIGH8.8Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exp...
CVE-2021-30517HIGH8.8Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corru...
CVE-2021-30516HIGH8.8Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised th...
CVE-2021-30515HIGH8.8Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap...
CVE-2021-30514HIGH8.8Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the ren...
CVE-2021-30513HIGH8.8Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corru...
CVE-2021-30512HIGH8.8Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised th...
CVE-2021-30511HIGH8.1Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to ins...
CVE-2021-30510HIGH8.8Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap cor...
CVE-2021-30509HIGH8.8Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to ins...
CVE-2021-30508HIGH8.8Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to ...
CVE-2021-30507HIGH8.8Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who...
CVE-2021-30506HIGH8.8Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who con...
CVE-2021-1540HIGH7.2Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenti...
CVE-2021-1539HIGH8.8Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenti...
CVE-2021-1538HIGH7.2A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authent...
CVE-2021-1536HIGH7.8A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Record...
CVE-2021-1528HIGH7.8A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privil...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now