2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-44923MEDIUM5.5A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes ...
CVE-2021-44922MEDIUM5.5A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segme...
CVE-2021-44921MEDIUM5.5A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which ...
CVE-2021-44920MEDIUM5.5An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which caus...
CVE-2021-44919MEDIUM5.5A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a se...
CVE-2021-44918MEDIUM5.5A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segme...
CVE-2021-44917MEDIUM5.5A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithm...
CVE-2021-45297MEDIUM5.5An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.
CVE-2021-44860HIGH7.8An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.1...
CVE-2021-44859HIGH7.8An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.1...
CVE-2021-44423HIGH7.8An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer be...
CVE-2021-44422HIGH7.8An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before...
CVE-2021-38966MEDIUM5.4IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi...
CVE-2021-38900MEDIUM6.5IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a pr...
CVE-2021-38893MEDIUM5.4IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable t...
CVE-2021-45293MEDIUM5.5A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinar...
CVE-2021-45292MEDIUM5.5The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address d...
CVE-2021-45291MEDIUM5.5The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address der...
CVE-2021-45290HIGH7.5A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.
CVE-2021-45289MEDIUM5.5A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of ...
CVE-2021-44207HIGH8.1Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.
CVE-2021-27453CRITICAL9.8Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application,...
CVE-2021-27451CRITICAL9.8Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an...
CVE-2021-27449HIGH8.8Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute comman...
CVE-2021-27447CRITICAL9.8Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute ar...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now