2021 CVE Vulnerabilities

23,473 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-32846HIGH7.8HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107, function `pci_vts...
CVE-2021-32845HIGH7.8HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of Hyper...
CVE-2021-3172HIGH8.1An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Servic...
CVE-2021-34164HIGH8.8Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set p...
CVE-2021-33983HIGH7.8Buffer Overflow vulnerability in Dvidelabs flatcc v.0.6.0 allows local attacker to execute arbitrary code via the fltacc...
CVE-2021-33950HIGH7.5An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function...
CVE-2021-33926HIGH8.8An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5....
CVE-2021-32441HIGH7.5SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive informat...
CVE-2021-32142HIGH7.8Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRaw_buffer_...
CVE-2021-0187HIGH8.2Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena...
CVE-2021-38239HIGH7.5SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders para...
CVE-2021-34117HIGH7.5SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, al...
CVE-2021-46023HIGH7.5An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability caus...
CVE-2021-37492HIGH7.5An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive in...
CVE-2021-37491HIGH7.5An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to vi...
CVE-2021-31576HIGH7.5In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote informat...
CVE-2021-36225HIGH8.8Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API com...
CVE-2021-37501HIGH7.5Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of servic...
CVE-2021-37316HIGH7.5SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remot...
CVE-2021-37311HIGH7.5Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the a...
CVE-2021-37306HIGH7.5An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and vi...
CVE-2021-37305HIGH7.5An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and vi...
CVE-2021-37304HIGH7.5An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege an...
CVE-2021-36570HIGH8.8Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to...
CVE-2021-36569HIGH8.8Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now