2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-26416 | HIGH | 7.7 | 3.9% | Apr 13, 2021 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2021-26415 | HIGH | 7.8 | 3.6% | Apr 13, 2021 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2021-23372 | HIGH | 7.5 | 0.9% | Apr 13, 2021 | All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CS... |
| CVE-2021-21399 | HIGH | 7.5 | 1.4% | Apr 13, 2021 | Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated... |
| CVE-2021-23276 | HIGH | 8.8 | 0.8% | Apr 13, 2021 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can s... |
| CVE-2021-22720 | HIGH | 7.2 | 30.5% | Apr 13, 2021 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T... |
| CVE-2021-22719 | HIGH | 8.8 | 40.6% | Apr 13, 2021 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T... |
| CVE-2021-22718 | HIGH | 7.8 | 27.2% | Apr 13, 2021 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T... |
| CVE-2021-22717 | HIGH | 8.8 | 38.9% | Apr 13, 2021 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T... |
| CVE-2021-22716 | HIGH | 7.8 | 0.8% | Apr 13, 2021 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execu... |
| CVE-2021-21784 | HIGH | 7.8 | 0.8% | Apr 13, 2021 | An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specia... |
| CVE-2021-21482 | HIGH | 8.3 | 0.4% | Apr 13, 2021 | SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the M... |
| CVE-2021-0446 | HIGH | 7.3 | 0.1% | Apr 13, 2021 | In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could le... |
| CVE-2021-0445 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to loca... |
| CVE-2021-0442 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a us... |
| CVE-2021-0439 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write d... |
| CVE-2021-0438 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjackin... |
| CVE-2021-0437 | HIGH | 7.8 | 0.2% | Apr 13, 2021 | In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in ... |
| CVE-2021-0435 | HIGH | 7.5 | 1.7% | Apr 13, 2021 | In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could ... |
| CVE-2021-0433 | HIGH | 8 | 0.6% | Apr 13, 2021 | In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth devic... |
| CVE-2021-0432 | HIGH | 7 | 0.1% | Apr 13, 2021 | In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free d... |
| CVE-2021-0431 | HIGH | 7.5 | 1.7% | Apr 13, 2021 | In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead ... |
| CVE-2021-0429 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escala... |
| CVE-2021-0427 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow.... |
| CVE-2021-0426 | HIGH | 7.8 | 0.1% | Apr 13, 2021 | In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer ove... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now