2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29140 | HIGH | 8.2 | 1.6% | Apr 29, 2021 | A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6... |
| CVE-2021-29147 | HIGH | 8.8 | 3.2% | Apr 29, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to ... |
| CVE-2021-25167 | HIGH | 8.8 | 1.5% | Apr 29, 2021 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1... |
| CVE-2021-25166 | HIGH | 8.8 | 1.5% | Apr 29, 2021 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1... |
| CVE-2021-25163 | HIGH | 8.1 | 1.2% | Apr 29, 2021 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1... |
| CVE-2021-31776 | HIGH | 7.8 | 0.3% | Apr 29, 2021 | Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the... |
| CVE-2021-25215 | HIGH | 7.5 | 11.3% | Apr 29, 2021 | In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIN... |
| CVE-2021-21414 | HIGH | 7.2 | 2.1% | Apr 29, 2021 | Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external con... |
| CVE-2021-29483 | HIGH | 7.5 | 1.2% | Apr 28, 2021 | ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration vari... |
| CVE-2021-25165 | HIGH | 8.1 | 1.2% | Apr 28, 2021 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1... |
| CVE-2021-25152 | HIGH | 7.2 | 1.2% | Apr 28, 2021 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to ... |
| CVE-2021-29482 | HIGH | 7.5 | 1.4% | Apr 28, 2021 | xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvari... |
| CVE-2021-25154 | HIGH | 7.5 | 1.0% | Apr 28, 2021 | A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8... |
| CVE-2021-25153 | HIGH | 8.1 | 1.1% | Apr 28, 2021 | A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. A... |
| CVE-2021-25151 | HIGH | 8.8 | 12.6% | Apr 28, 2021 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to ... |
| CVE-2021-25147 | HIGH | 8.1 | 1.3% | Apr 28, 2021 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) ... |
| CVE-2021-22332 | HIGH | 7.5 | 0.7% | Apr 28, 2021 | There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 an... |
| CVE-2021-22331 | HIGH | 7.5 | 0.7% | Apr 28, 2021 | There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs suffic... |
| CVE-2021-22393 | HIGH | 7.5 | 0.7% | Apr 28, 2021 | There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and ... |
| CVE-2021-30169 | HIGH | 7.5 | 1.7% | Apr 28, 2021 | The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s ... |
| CVE-2021-30166 | HIGH | 7.2 | 3.8% | Apr 28, 2021 | The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers ... |
| CVE-2021-27648 | HIGH | 8.8 | 2.8% | Apr 28, 2021 | Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essent... |
| CVE-2021-31863 | HIGH | 7.5 | 1.7% | Apr 28, 2021 | Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x b... |
| CVE-2021-3512 | HIGH | 8.8 | 0.9% | Apr 28, 2021 | Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH ... |
| CVE-2021-29472 | HIGH | 8.8 | 4.8% | Apr 27, 2021 | Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source d... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now