2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21645 | MEDIUM | 4.3 | 0.9% | Apr 21, 2021 | Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, atta... |
| CVE-2021-21644 | MEDIUM | 5.4 | 1.1% | Apr 21, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attack... |
| CVE-2021-21643 | MEDIUM | 6.5 | 1.1% | Apr 21, 2021 | Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpo... |
| CVE-2021-29459 | MEDIUM | 6.1 | 1.1% | Apr 20, 2021 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible ... |
| CVE-2021-21526 | MEDIUM | 6.7 | 0.3% | Apr 20, 2021 | Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmi... |
| CVE-2021-30496 | MEDIUM | 5.7 | 1.2% | Apr 20, 2021 | The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the... |
| CVE-2021-29155 | MEDIUM | 5.5 | 1.1% | Apr 20, 2021 | An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds spe... |
| CVE-2021-28492 | MEDIUM | 4.9 | 0.8% | Apr 20, 2021 | Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recov... |
| CVE-2021-1079 | MEDIUM | 6.1 | 0.3% | Apr 20, 2021 | NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files ar... |
| CVE-2021-25680 | MEDIUM | 6.1 | 3.4% | Apr 20, 2021 | The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These ... |
| CVE-2021-25679 | MEDIUM | 5.4 | 2.9% | Apr 20, 2021 | The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. T... |
| CVE-2021-20023 | MEDIUM | 4.9 | 51.4% | Apr 20, 2021 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an ... |
| CVE-2021-3038 | MEDIUM | 5.5 | 0.2% | Apr 20, 2021 | A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Wind... |
| CVE-2021-3036 | MEDIUM | 4.4 | 0.2% | Apr 20, 2021 | An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN... |
| CVE-2021-20208 | MEDIUM | 6.1 | 0.6% | Apr 19, 2021 | A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a conta... |
| CVE-2021-3505 | MEDIUM | 5.5 | 0.4% | Apr 19, 2021 | A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit stre... |
| CVE-2021-30199 | MEDIUM | 5.5 | 0.9% | Apr 19, 2021 | In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called. The ... |
| CVE-2021-30022 | MEDIUM | 5.5 | 1.1% | Apr 19, 2021 | There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. ... |
| CVE-2021-30020 | MEDIUM | 5.5 | 0.9% | Apr 19, 2021 | In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which w... |
| CVE-2021-30019 | MEDIUM | 5.5 | 0.9% | Apr 19, 2021 | In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size t... |
| CVE-2021-30015 | MEDIUM | 5.5 | 0.9% | Apr 19, 2021 | There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1.... |
| CVE-2021-30014 | MEDIUM | 5.5 | 1.1% | Apr 19, 2021 | There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-pre... |
| CVE-2021-31262 | MEDIUM | 5.5 | 0.9% | Apr 19, 2021 | The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) ... |
| CVE-2021-31261 | MEDIUM | 5.5 | 1.1% | Apr 19, 2021 | The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command. |
| CVE-2021-31260 | MEDIUM | 5.5 | 0.9% | Apr 19, 2021 | The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a cra... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now