2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0799 | HIGH | 7.8 | 0.1% | Dec 15, 2021 | In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local ... |
| CVE-2021-0769 | HIGH | 7.3 | 0.1% | Dec 15, 2021 | In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to uncle... |
| CVE-2021-0704 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible wa... |
| CVE-2021-0675 | HIGH | 7.8 | 0.5% | Dec 15, 2021 | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca... |
| CVE-2021-0653 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier d... |
| CVE-2021-0650 | MEDIUM | 6.5 | 0.9% | Dec 15, 2021 | In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This... |
| CVE-2021-0649 | HIGH | 7.8 | 0.1% | Dec 15, 2021 | In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to loc... |
| CVE-2021-0434 | HIGH | 7.3 | 0.2% | Dec 15, 2021 | In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth devi... |
| CVE-2021-42216 | CRITICAL | 9.8 | 1.4% | Dec 15, 2021 | A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php. |
| CVE-2021-44655 | CRITICAL | 9.8 | 6.0% | Dec 15, 2021 | Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. A... |
| CVE-2021-44653 | CRITICAL | 9.8 | 6.0% | Dec 15, 2021 | Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel auth... |
| CVE-2021-43675 | MEDIUM | 6.1 | 0.9% | Dec 15, 2021 | Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit wi... |
| CVE-2021-4117 | MEDIUM | 4.3 | 0.7% | Dec 15, 2021 | yetiforcecrm is vulnerable to Business Logic Errors |
| CVE-2021-44657 | HIGH | 8.8 | 2.5% | Dec 15, 2021 | In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of un... |
| CVE-2021-43908 | MEDIUM | 4.3 | 2.8% | Dec 15, 2021 | Visual Studio Code Spoofing Vulnerability |
| CVE-2021-43907 | CRITICAL | 9.8 | 3.8% | Dec 15, 2021 | Visual Studio Code WSL Extension Remote Code Execution Vulnerability |
| CVE-2021-43905 | CRITICAL | 9.6 | 2.8% | Dec 15, 2021 | Microsoft Office app Remote Code Execution Vulnerability |
| CVE-2021-43899 | CRITICAL | 9.8 | 2.4% | Dec 15, 2021 | Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability |
| CVE-2021-43896 | MEDIUM | 5.5 | 2.3% | Dec 15, 2021 | Microsoft PowerShell Spoofing Vulnerability |
| CVE-2021-43893 | HIGH | 7.5 | 6.6% | Dec 15, 2021 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2021-43892 | HIGH | 7.4 | 2.9% | Dec 15, 2021 | Microsoft BizTalk ESB Toolkit Spoofing Vulnerability |
| CVE-2021-43891 | HIGH | 7.8 | 13.8% | Dec 15, 2021 | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2021-43890 | HIGH | 7.1 | 10.3% | Dec 15, 2021 | We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is ... |
| CVE-2021-43889 | HIGH | 7.2 | 2.2% | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
| CVE-2021-43888 | HIGH | 7.5 | 3.0% | Dec 15, 2021 | Microsoft Defender for IoT Information Disclosure Vulnerability |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now