2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27823 | HIGH | 7.5 | 1.1% | May 25, 2021 | An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on NetWave System 1.0 which a... |
| CVE-2021-30195 | HIGH | 7.5 | 7.2% | May 25, 2021 | CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. |
| CVE-2021-30191 | HIGH | 7.5 | 1.0% | May 25, 2021 | CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. |
| CVE-2021-30186 | HIGH | 7.5 | 7.4% | May 25, 2021 | CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow. |
| CVE-2021-20096 | HIGH | 8.1 | 0.6% | May 25, 2021 | Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by t... |
| CVE-2021-33563 | HIGH | 7.5 | 0.8% | May 24, 2021 | Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had... |
| CVE-2021-33525 | HIGH | 8.8 | 7.7% | May 24, 2021 | EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in... |
| CVE-2021-30081 | HIGH | 8.8 | 1.0% | May 24, 2021 | An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement ... |
| CVE-2021-29256 | HIGH | 8.8 | 3.0% | May 24, 2021 | . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information d... |
| CVE-2021-33502 | HIGH | 7.5 | 1.7% | May 24, 2021 | The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expressi... |
| CVE-2021-32629 | HIGH | 8.8 | 0.5% | May 24, 2021 | Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermedi... |
| CVE-2021-33516 | HIGH | 8.1 | 1.1% | May 24, 2021 | An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web se... |
| CVE-2021-20557 | HIGH | 7.2 | 2.7% | May 24, 2021 | IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by se... |
| CVE-2021-20419 | HIGH | 7.5 | 0.7% | May 24, 2021 | IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hi... |
| CVE-2021-20389 | HIGH | 7.8 | 0.2% | May 24, 2021 | IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID... |
| CVE-2021-20385 | HIGH | 7.2 | 2.1% | May 24, 2021 | IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By s... |
| CVE-2021-24307 | HIGH | 8.8 | 52.6% | May 24, 2021 | The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated u... |
| CVE-2021-21000 | HIGH | 7.5 | 1.0% | May 24, 2021 | On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to th... |
| CVE-2021-20726 | HIGH | 7.8 | 0.3% | May 24, 2021 | Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privil... |
| CVE-2021-20722 | HIGH | 7.8 | 0.4% | May 24, 2021 | Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Dow... |
| CVE-2021-20713 | HIGH | 7.8 | 0.2% | May 24, 2021 | Privilege escalation vulnerability in QND Advance/Premium/Standard Ver.11.0.4i and earlier allows an attacker who can lo... |
| CVE-2021-1560 | HIGH | 7.2 | 2.7% | May 22, 2021 | Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a comman... |
| CVE-2021-1559 | HIGH | 7.2 | 2.7% | May 22, 2021 | Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a comman... |
| CVE-2021-1555 | HIGH | 7.2 | 1.7% | May 22, 2021 | Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ... |
| CVE-2021-1554 | HIGH | 7.2 | 1.6% | May 22, 2021 | Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now