2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0230 | HIGH | 7.5 | 1.0% | Apr 22, 2021 | On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggr... |
| CVE-2021-0227 | HIGH | 7.5 | 1.3% | Apr 22, 2021 | An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-... |
| CVE-2021-0226 | HIGH | 7.5 | 0.9% | Apr 22, 2021 | On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP sessio... |
| CVE-2021-3496 | HIGH | 7.8 | 1.1% | Apr 22, 2021 | A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file. |
| CVE-2021-20590 | HIGH | 7.5 | 1.3% | Apr 22, 2021 | Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 seri... |
| CVE-2021-30356 | HIGH | 8.1 | 1.0% | Apr 22, 2021 | A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low ... |
| CVE-2021-27278 | HIGH | 8.2 | 0.5% | Apr 22, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-4... |
| CVE-2021-27277 | HIGH | 7.8 | 1.1% | Apr 22, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual I... |
| CVE-2021-23133 | HIGH | 7 | 0.5% | Apr 22, 2021 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalatio... |
| CVE-2021-29653 | HIGH | 7.5 | 0.6% | Apr 22, 2021 | HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired cer... |
| CVE-2021-27400 | HIGH | 7.5 | 0.6% | Apr 22, 2021 | HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not... |
| CVE-2021-31555 | HIGH | 7.5 | 0.8% | Apr 22, 2021 | An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate the oarc_version (aka o... |
| CVE-2021-29466 | HIGH | 7.5 | 1.6% | Apr 22, 2021 | Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is ... |
| CVE-2021-1076 | HIGH | 7.8 | 0.3% | Apr 21, 2021 | NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddm... |
| CVE-2021-1075 | HIGH | 7.3 | 0.2% | Apr 21, 2021 | NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm... |
| CVE-2021-1074 | HIGH | 7.3 | 0.5% | Apr 21, 2021 | NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged syste... |
| CVE-2021-21427 | HIGH | 7.2 | 1.1% | Apr 21, 2021 | Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts version... |
| CVE-2021-31523 | HIGH | 7.8 | 0.3% | Apr 21, 2021 | The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/... |
| CVE-2021-30139 | HIGH | 7.5 | 1.6% | Apr 21, 2021 | In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash. |
| CVE-2021-21646 | HIGH | 8.8 | 1.7% | Apr 21, 2021 | Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plug... |
| CVE-2021-21642 | HIGH | 8.1 | 37.8% | Apr 21, 2021 | Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (... |
| CVE-2021-20501 | HIGH | 8.2 | 1.3% | Apr 21, 2021 | IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to th... |
| CVE-2021-20454 | HIGH | 8.2 | 2.9% | Apr 21, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack wh... |
| CVE-2021-28965 | HIGH | 7.5 | 5.1% | Apr 21, 2021 | The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML ... |
| CVE-2021-29461 | HIGH | 8.8 | 2.5% | Apr 20, 2021 | Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now