2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21203 | HIGH | 8.8 | 1.8% | Apr 26, 2021 | Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2021-21202 | HIGH | 8.6 | 1.0% | Apr 26, 2021 | Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install ... |
| CVE-2021-20532 | HIGH | 7.8 | 0.2% | Apr 26, 2021 | IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full ... |
| CVE-2021-23382 | HIGH | 7.5 | 2.5% | Apr 26, 2021 | The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() ... |
| CVE-2021-3472 | HIGH | 7.8 | 1.1% | Apr 26, 2021 | A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead... |
| CVE-2021-31802 | HIGH | 8.8 | 14.2% | Apr 26, 2021 | NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without au... |
| CVE-2021-20709 | HIGH | 7.2 | 0.7% | Apr 26, 2021 | Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG... |
| CVE-2021-20708 | HIGH | 7.2 | 1.2% | Apr 26, 2021 | NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm... |
| CVE-2021-20696 | HIGH | 8.8 | 2.4% | Apr 26, 2021 | DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by ... |
| CVE-2021-20695 | HIGH | 8.8 | 1.3% | Apr 26, 2021 | Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allow... |
| CVE-2021-20694 | HIGH | 8.8 | 1.7% | Apr 26, 2021 | Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated atta... |
| CVE-2021-20693 | HIGH | 7.5 | 1.1% | Apr 26, 2021 | Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and ear... |
| CVE-2021-31762 | HIGH | 8.8 | 8.8% | Apr 25, 2021 | Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea... |
| CVE-2021-31760 | HIGH | 8.8 | 8.5% | Apr 25, 2021 | Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's... |
| CVE-2021-31718 | HIGH | 8.8 | 1.0% | Apr 25, 2021 | The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA ... |
| CVE-2021-31795 | HIGH | 7 | 0.4% | Apr 24, 2021 | The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04-24 for the Linux kernel, as used on Alcatel 1S phones, allo... |
| CVE-2021-31598 | HIGH | 7.5 | 1.4% | Apr 24, 2021 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling whi... |
| CVE-2021-31791 | HIGH | 7.5 | 0.6% | Apr 23, 2021 | In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout o... |
| CVE-2021-31584 | HIGH | 8.8 | 0.9% | Apr 23, 2021 | Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks ... |
| CVE-2021-25899 | HIGH | 7.5 | 12.2% | Apr 23, 2021 | An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a craft... |
| CVE-2021-25898 | HIGH | 7.5 | 0.9% | Apr 23, 2021 | An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-c... |
| CVE-2021-31780 | HIGH | 7.5 | 1.0% | Apr 23, 2021 | In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure... |
| CVE-2021-20089 | HIGH | 8.8 | 1.6% | Apr 23, 2021 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in purl 2.3.2 allows a malicio... |
| CVE-2021-20086 | HIGH | 8.8 | 6.1% | Apr 23, 2021 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-bbq 1.2.1 allows a m... |
| CVE-2021-20085 | HIGH | 8.8 | 1.6% | Apr 23, 2021 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now