2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35243 | HIGH | 7.5 | 0.9% | Dec 23, 2021 | The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to exe... |
| CVE-2021-30767 | MEDIUM | 5.5 | 0.3% | Dec 23, 2021 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey ... |
| CVE-2021-27007 | CRITICAL | 9.8 | 1.1% | Dec 23, 2021 | NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when succes... |
| CVE-2021-27006 | MEDIUM | 4.4 | 0.3% | Dec 23, 2021 | StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may... |
| CVE-2021-23198 | CRITICAL | 9.8 | 1.2% | Dec 23, 2021 | mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker ... |
| CVE-2021-22657 | CRITICAL | 9.8 | 1.2% | Dec 23, 2021 | mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attac... |
| CVE-2021-20318 | HIGH | 7.2 | 1.7% | Dec 23, 2021 | The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use th... |
| CVE-2021-45469 | HIGH | 7.8 | 0.5% | Dec 23, 2021 | In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when ... |
| CVE-2021-40161 | HIGH | 7.8 | 1.4% | Dec 23, 2021 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earli... |
| CVE-2021-40160 | HIGH | 7.8 | 1.5% | Dec 23, 2021 | PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF ... |
| CVE-2021-4118 | HIGH | 7.8 | 1.0% | Dec 23, 2021 | pytorch-lightning is vulnerable to Deserialization of Untrusted Data |
| CVE-2021-43854 | HIGH | 7.5 | 2.7% | Dec 23, 2021 | NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research a... |
| CVE-2021-43849 | MEDIUM | 5.5 | 0.3% | Dec 23, 2021 | cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both... |
| CVE-2021-3892 | — | — | — | Dec 23, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-18198. Reason: This candidate is a reservation d... |
| CVE-2021-23175 | HIGH | 8.2 | 0.4% | Dec 23, 2021 | NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply indi... |
| CVE-2021-44526 | CRITICAL | 9.8 | 3.2% | Dec 23, 2021 | Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations. |
| CVE-2021-44600 | HIGH | 7.5 | 1.3% | Dec 23, 2021 | The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injectio... |
| CVE-2021-44599 | HIGH | 7.5 | 1.2% | Dec 23, 2021 | The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. ... |
| CVE-2021-44273 | HIGH | 7.4 | 1.0% | Dec 23, 2021 | e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mod... |
| CVE-2021-44548 | CRITICAL | 9.8 | 5.1% | Dec 23, 2021 | An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows U... |
| CVE-2021-4144 | HIGH | 8.8 | 1.9% | Dec 23, 2021 | TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection. |
| CVE-2021-45463 | HIGH | 7.8 | 1.4% | Dec 23, 2021 | load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or ... |
| CVE-2021-45462 | HIGH | 7.5 | 4.4% | Dec 23, 2021 | In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF. |
| CVE-2021-20050 | HIGH | 7.5 | 0.9% | Dec 23, 2021 | An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessi... |
| CVE-2021-20049 | HIGH | 7.5 | 1.3% | Dec 23, 2021 | A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 usern... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now