2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-31321 | HIGH | 7.1 | 1.1% | May 18, 2021 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the... |
| CVE-2021-31320 | HIGH | 7.1 | 1.2% | May 18, 2021 | Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the... |
| CVE-2021-32238 | HIGH | 7.8 | 2.1% | May 18, 2021 | Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow. Stack-based buffer overflow occurs when Rocket... |
| CVE-2021-30145 | HIGH | 7.8 | 2.4% | May 18, 2021 | A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via ... |
| CVE-2021-22117 | HIGH | 7.8 | 0.6% | May 18, 2021 | RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing ... |
| CVE-2021-3518 | HIGH | 8.8 | 21.9% | May 18, 2021 | There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by... |
| CVE-2021-31827 | HIGH | 8.8 | 1.2% | May 18, 2021 | In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer we... |
| CVE-2021-3423 | HIGH | 7.8 | 0.2% | May 18, 2021 | Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Secu... |
| CVE-2021-32622 | HIGH | 7.8 | 0.4% | May 17, 2021 | Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, wh... |
| CVE-2021-29024 | HIGH | 7.5 | 1.4% | May 17, 2021 | In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing a... |
| CVE-2021-32454 | HIGH | 8.8 | 0.4% | May 17, 2021 | SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password. An attacker with access to the device could mod... |
| CVE-2021-29747 | HIGH | 7.5 | 1.9% | May 17, 2021 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive information due to a vul... |
| CVE-2021-24295 | HIGH | 7.5 | 4.7% | May 17, 2021 | It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiS... |
| CVE-2021-24289 | HIGH | 8.8 | 1.1% | May 17, 2021 | There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authentic... |
| CVE-2021-32403 | HIGH | 8.8 | 2.5% | May 17, 2021 | Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mecha... |
| CVE-2021-32402 | HIGH | 8.8 | 0.5% | May 17, 2021 | Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and... |
| CVE-2021-31728 | HIGH | 7.8 | 3.4% | May 17, 2021 | Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to... |
| CVE-2021-31727 | HIGH | 7.8 | 0.4% | May 17, 2021 | Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x800020... |
| CVE-2021-3483 | HIGH | 7.8 | 0.4% | May 17, 2021 | A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-l... |
| CVE-2021-29053 | HIGH | 8.8 | 1.2% | May 17, 2021 | Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authen... |
| CVE-2021-29047 | HIGH | 7.5 | 1.1% | May 16, 2021 | The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidat... |
| CVE-2021-32073 | HIGH | 8.8 | 1.2% | May 15, 2021 | DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web m... |
| CVE-2021-33034 | HIGH | 7.8 | 0.8% | May 14, 2021 | In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5... |
| CVE-2021-33033 | HIGH | 7.8 | 0.6% | May 14, 2021 | The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and C... |
| CVE-2021-27737 | HIGH | 7.5 | 3.8% | May 14, 2021 | Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now