2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-31922 | HIGH | 7.5 | 1.0% | May 14, 2021 | An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to s... |
| CVE-2021-29510 | HIGH | 7.5 | 1.0% | May 13, 2021 | Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'i... |
| CVE-2021-27413 | HIGH | 7.8 | 10.0% | May 13, 2021 | Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based b... |
| CVE-2021-22140 | HIGH | 7.5 | 1.3% | May 13, 2021 | Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue (XXE) in the A... |
| CVE-2021-32920 | HIGH | 7.5 | 2.3% | May 13, 2021 | Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests. |
| CVE-2021-32919 | HIGH | 7.5 | 1.4% | May 13, 2021 | An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enab... |
| CVE-2021-32918 | HIGH | 7.5 | 2.1% | May 13, 2021 | An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-s... |
| CVE-2021-20181 | HIGH | 7.5 | 0.3% | May 13, 2021 | A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a ... |
| CVE-2021-3528 | HIGH | 8.8 | 0.9% | May 13, 2021 | A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator ... |
| CVE-2021-20025 | HIGH | 7.8 | 0.4% | May 13, 2021 | SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password... |
| CVE-2021-25693 | HIGH | 7.5 | 1.0% | May 13, 2021 | An attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via a null pointer derefere... |
| CVE-2021-20997 | HIGH | 7.5 | 1.0% | May 13, 2021 | In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-bas... |
| CVE-2021-20995 | HIGH | 7.5 | 0.5% | May 13, 2021 | In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user creden... |
| CVE-2021-20988 | HIGH | 7.5 | 1.0% | May 13, 2021 | In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicat... |
| CVE-2021-25694 | HIGH | 7.8 | 0.3% | May 13, 2021 | Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll... |
| CVE-2021-26311 | HIGH | 7.2 | 1.7% | May 13, 2021 | In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestati... |
| CVE-2021-22153 | HIGH | 7.3 | 1.0% | May 13, 2021 | A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and e... |
| CVE-2021-31215 | HIGH | 8.8 | 2.9% | May 13, 2021 | SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser becaus... |
| CVE-2021-22155 | HIGH | 8.8 | 1.0% | May 13, 2021 | An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed wi... |
| CVE-2021-23134 | HIGH | 7.8 | 0.3% | May 12, 2021 | Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their pr... |
| CVE-2021-32611 | HIGH | 7.5 | 1.1% | May 12, 2021 | A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3... |
| CVE-2021-32572 | HIGH | 7.5 | 1.7% | May 12, 2021 | Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as d... |
| CVE-2021-31519 | HIGH | 7.3 | 0.3% | May 12, 2021 | An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks versi... |
| CVE-2021-28649 | HIGH | 7.3 | 0.3% | May 12, 2021 | An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1... |
| CVE-2021-20202 | HIGH | 7.3 | 0.3% | May 12, 2021 | A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary direct... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now