2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-31411 | HIGH | 7.8 | 0.2% | May 5, 2021 | Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 through 2.5.... |
| CVE-2021-29101 | HIGH | 7.5 | 2.3% | May 5, 2021 | ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow... |
| CVE-2021-29100 | HIGH | 7.8 | 1.1% | May 5, 2021 | A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creatio... |
| CVE-2021-20401 | HIGH | 7.8 | 0.2% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for ... |
| CVE-2021-31542 | HIGH | 7.5 | 5.3% | May 5, 2021 | In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowe... |
| CVE-2021-31518 | HIGH | 7.5 | 1.1% | May 5, 2021 | Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an... |
| CVE-2021-31517 | HIGH | 7.5 | 1.1% | May 5, 2021 | Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an... |
| CVE-2021-25319 | HIGH | 7.8 | 0.3% | May 5, 2021 | A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers ... |
| CVE-2021-29478 | HIGH | 8.8 | 3.7% | May 4, 2021 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A... |
| CVE-2021-29477 | HIGH | 8.8 | 4.2% | May 4, 2021 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A... |
| CVE-2021-21551 | HIGH | 7.8 | 57.5% | May 4, 2021 | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile... |
| CVE-2021-3154 | HIGH | 7.5 | 1.2% | May 4, 2021 | An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords v... |
| CVE-2021-22547 | HIGH | 7.8 | 0.2% | May 4, 2021 | In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. An attacker could pass in m... |
| CVE-2021-29240 | HIGH | 7.8 | 0.9% | May 4, 2021 | The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before insta... |
| CVE-2021-23343 | HIGH | 7.5 | 2.2% | May 4, 2021 | All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, spl... |
| CVE-2021-31164 | HIGH | 7.5 | 2.3% | May 4, 2021 | Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements. |
| CVE-2021-29242 | HIGH | 7.3 | 1.1% | May 3, 2021 | CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication p... |
| CVE-2021-29241 | HIGH | 7.5 | 1.4% | May 3, 2021 | CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS). |
| CVE-2021-29239 | HIGH | 7.8 | 0.2% | May 3, 2021 | CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries wit... |
| CVE-2021-29238 | HIGH | 8.8 | 0.5% | May 3, 2021 | CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF). |
| CVE-2021-25631 | HIGH | 8.8 | 4.2% | May 3, 2021 | In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist... |
| CVE-2021-31996 | HIGH | 7.5 | 1.0% | May 3, 2021 | An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::mer... |
| CVE-2021-31933 | HIGH | 7.2 | 13.9% | Apr 30, 2021 | A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a paramete... |
| CVE-2021-21540 | HIGH | 8.1 | 1.2% | Apr 30, 2021 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attack... |
| CVE-2021-21539 | HIGH | 7.1 | 0.6% | Apr 30, 2021 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now