2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3561 | HIGH | 7.1 | 1.2% | May 26, 2021 | An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker ... |
| CVE-2021-32614 | HIGH | 7.1 | 0.9% | May 26, 2021 | A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC... |
| CVE-2021-30498 | HIGH | 7.8 | 1.4% | May 26, 2021 | A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption a... |
| CVE-2021-30472 | HIGH | 7.8 | 0.8% | May 26, 2021 | A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEnc... |
| CVE-2021-25217 | HIGH | 7.4 | 6.1% | May 26, 2021 | In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x ... |
| CVE-2021-3549 | HIGH | 7.1 | 1.0% | May 26, 2021 | An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a... |
| CVE-2021-3548 | HIGH | 7.1 | 0.9% | May 26, 2021 | A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() insid... |
| CVE-2021-22736 | HIGH | 7.5 | 1.1% | May 26, 2021 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser F... |
| CVE-2021-22735 | HIGH | 7.2 | 1.0% | May 26, 2021 | Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and... |
| CVE-2021-22734 | HIGH | 7.2 | 1.0% | May 26, 2021 | Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 an... |
| CVE-2021-22733 | HIGH | 7.8 | 0.2% | May 26, 2021 | Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could... |
| CVE-2021-22732 | HIGH | 7.8 | 0.3% | May 26, 2021 | Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could... |
| CVE-2021-22705 | HIGH | 7.8 | 0.2% | May 26, 2021 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of ... |
| CVE-2021-22699 | HIGH | 7.5 | 1.0% | May 26, 2021 | Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that co... |
| CVE-2021-20492 | HIGH | 8.2 | 2.1% | May 26, 2021 | IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection... |
| CVE-2021-33506 | HIGH | 7.5 | 1.2% | May 26, 2021 | jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This c... |
| CVE-2021-33194 | HIGH | 7.5 | 7.5% | May 26, 2021 | golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop)... |
| CVE-2021-33038 | HIGH | 7.5 | 1.8% | May 26, 2021 | An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a privat... |
| CVE-2021-32457 | HIGH | 7.8 | 0.4% | May 26, 2021 | Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vuln... |
| CVE-2021-22543 | HIGH | 7.8 | 0.7% | May 26, 2021 | An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and ... |
| CVE-2021-20209 | HIGH | 7.5 | 1.9% | May 25, 2021 | A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are c... |
| CVE-2021-3320 | HIGH | 7.5 | 0.8% | May 25, 2021 | Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For ... |
| CVE-2021-23937 | HIGH | 7.5 | 4.3% | May 25, 2021 | A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trig... |
| CVE-2021-21659 | HIGH | 8.1 | 66.8% | May 25, 2021 | Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attack... |
| CVE-2021-21657 | HIGH | 8.8 | 1.6% | May 25, 2021 | Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now