2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1905 | HIGH | 7.8 | 1.1% | May 7, 2021 | Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon A... |
| CVE-2021-1895 | HIGH | 7.8 | 0.2% | May 7, 2021 | Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon In... |
| CVE-2021-1891 | HIGH | 7.8 | 0.1% | May 7, 2021 | A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Aut... |
| CVE-2021-32074 | HIGH | 7.5 | 1.9% | May 7, 2021 | HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log ... |
| CVE-2021-32104 | HIGH | 8.8 | 1.2% | May 7, 2021 | A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1. |
| CVE-2021-32102 | HIGH | 8.8 | 1.2% | May 7, 2021 | A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1. |
| CVE-2021-32101 | HIGH | 8.2 | 1.2% | May 7, 2021 | The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config... |
| CVE-2021-32096 | HIGH | 8.8 | 0.6% | May 7, 2021 | The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in i... |
| CVE-2021-32095 | HIGH | 8.1 | 0.9% | May 7, 2021 | U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files. |
| CVE-2021-32094 | HIGH | 8.8 | 1.2% | May 7, 2021 | U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files. |
| CVE-2021-32077 | HIGH | 7.5 | 1.2% | May 6, 2021 | Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover So... |
| CVE-2021-29493 | HIGH | 8.8 | 0.9% | May 6, 2021 | Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-co... |
| CVE-2021-28665 | HIGH | 7.5 | 1.0% | May 6, 2021 | Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can... |
| CVE-2021-31828 | HIGH | 7.1 | 0.9% | May 6, 2021 | An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate li... |
| CVE-2021-31918 | HIGH | 7.5 | 1.0% | May 6, 2021 | A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to al... |
| CVE-2021-31793 | HIGH | 7.5 | 1.3% | May 6, 2021 | An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to s... |
| CVE-2021-28151 | HIGH | 8.8 | 27.9% | May 6, 2021 | Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) f... |
| CVE-2021-28128 | HIGH | 8.1 | 1.3% | May 6, 2021 | In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password... |
| CVE-2021-22209 | HIGH | 7.5 | 0.9% | May 6, 2021 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validati... |
| CVE-2021-3501 | HIGH | 7.1 | 0.4% | May 6, 2021 | A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to ... |
| CVE-2021-31616 | HIGH | 8.8 | 2.5% | May 6, 2021 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow... |
| CVE-2021-31409 | HIGH | 7.5 | 1.7% | May 6, 2021 | Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.1... |
| CVE-2021-26543 | HIGH | 8.8 | 2.5% | May 6, 2021 | The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse libr... |
| CVE-2021-24254 | HIGH | 7.2 | 1.8% | May 6, 2021 | The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing h... |
| CVE-2021-24253 | HIGH | 8.8 | 1.9% | May 6, 2021 | The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now