2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29442 | HIGH | 7.5 | 64.7% | Apr 27, 2021 | Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before ver... |
| CVE-2021-30638 | HIGH | 7.5 | 6.6% | Apr 27, 2021 | Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files ins... |
| CVE-2021-29667 | HIGH | 7.8 | 1.2% | Apr 27, 2021 | IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote ... |
| CVE-2021-3464 | HIGH | 7.8 | 0.3% | Apr 27, 2021 | A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privil... |
| CVE-2021-28269 | HIGH | 8.8 | 1.9% | Apr 27, 2021 | Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users gr... |
| CVE-2021-28271 | HIGH | 8.8 | 1.9% | Apr 27, 2021 | Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an a... |
| CVE-2021-22664 | HIGH | 7.8 | 1.6% | Apr 27, 2021 | CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arb... |
| CVE-2021-22660 | HIGH | 7.8 | 2.0% | Apr 27, 2021 | CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbi... |
| CVE-2021-31826 | HIGH | 7.5 | 2.0% | Apr 27, 2021 | Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery ... |
| CVE-2021-31671 | HIGH | 7.5 | 0.7% | Apr 27, 2021 | pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema... |
| CVE-2021-30165 | HIGH | 8.1 | 1.1% | Apr 27, 2021 | The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can d... |
| CVE-2021-31784 | HIGH | 7.8 | 0.9% | Apr 26, 2021 | An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 20... |
| CVE-2021-31783 | HIGH | 7.5 | 0.6% | Apr 26, 2021 | show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the fi... |
| CVE-2021-22669 | HIGH | 8.8 | 1.2% | Apr 26, 2021 | Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA V... |
| CVE-2021-29694 | HIGH | 7.5 | 0.7% | Apr 26, 2021 | IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an a... |
| CVE-2021-29672 | HIGH | 7.8 | 0.3% | Apr 26, 2021 | IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper ... |
| CVE-2021-21225 | HIGH | 8.8 | 6.6% | Apr 26, 2021 | Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploi... |
| CVE-2021-21224 | HIGH | 8.8 | 57.7% | Apr 26, 2021 | Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a... |
| CVE-2021-21220 | HIGH | 8.8 | 70.4% | Apr 26, 2021 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po... |
| CVE-2021-21214 | HIGH | 8.8 | 1.3% | Apr 26, 2021 | Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit he... |
| CVE-2021-21213 | HIGH | 8.8 | 1.5% | Apr 26, 2021 | Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap c... |
| CVE-2021-21207 | HIGH | 8.6 | 0.9% | Apr 26, 2021 | Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a... |
| CVE-2021-21206 | HIGH | 8.8 | 9.4% | Apr 26, 2021 | Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap co... |
| CVE-2021-21205 | HIGH | 8.1 | 1.5% | Apr 26, 2021 | Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to... |
| CVE-2021-21204 | HIGH | 8.8 | 1.6% | Apr 26, 2021 | Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now