2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35587 | CRITICAL | 9.8 | 96.3% | Jan 19, 2022 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported ver... |
| CVE-2021-46013 | CRITICAL | 9.8 | 3.5% | Jan 18, 2022 | An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can ... |
| CVE-2021-41807 | CRITICAL | 9.8 | 1.1% | Jan 18, 2022 | Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of u... |
| CVE-2021-29215 | CRITICAL | 9.8 | 1.2% | Jan 18, 2022 | A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the T... |
| CVE-2021-38697 | CRITICAL | 9.8 | 2.7% | Jan 18, 2022 | SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files w... |
| CVE-2021-22566 | CRITICAL | 9.8 | 0.3% | Jan 18, 2022 | An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as exe... |
| CVE-2021-44757 | CRITICAL | 9.1 | 24.2% | Jan 18, 2022 | Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypas... |
| CVE-2021-4171 | CRITICAL | 9.8 | 1.4% | Jan 17, 2022 | calibre-web is vulnerable to Business Logic Errors |
| CVE-2021-33963 | CRITICAL | 9.8 | 3.1% | Jan 15, 2022 | China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by P... |
| CVE-2021-24044 | CRITICAL | 9.8 | 1.3% | Jan 15, 2022 | By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter func... |
| CVE-2021-44530 | CRITICAL | 9.8 | 1.1% | Jan 14, 2022 | An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2... |
| CVE-2021-39623 | CRITICAL | 9.8 | 2.0% | Jan 14, 2022 | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This co... |
| CVE-2021-28506 | CRITICAL | 9.1 | 1.4% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentic... |
| CVE-2021-1049 | CRITICAL | 9.8 | 0.7% | Jan 14, 2022 | Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 |
| CVE-2021-45468 | CRITICAL | 9.8 | 4.0% | Jan 14, 2022 | Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encodin... |
| CVE-2021-33962 | CRITICAL | 9.8 | 3.7% | Jan 14, 2022 | China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /ap... |
| CVE-2021-38692 | CRITICAL | 9.8 | 1.3% | Jan 14, 2022 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If ... |
| CVE-2021-38691 | CRITICAL | 9.8 | 1.3% | Jan 14, 2022 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If ... |
| CVE-2021-38690 | CRITICAL | 9.8 | 1.3% | Jan 14, 2022 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If ... |
| CVE-2021-38689 | CRITICAL | 9.8 | 1.3% | Jan 14, 2022 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If ... |
| CVE-2021-38682 | CRITICAL | 9.8 | 1.3% | Jan 14, 2022 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If ... |
| CVE-2021-34993 | CRITICAL | 9.8 | 5.4% | Jan 13, 2022 | This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.2... |
| CVE-2021-40722 | CRITICAL | 9.8 | 3.3% | Jan 13, 2022 | AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) i... |
| CVE-2021-33046 | CRITICAL | 9.8 | 1.3% | Jan 13, 2022 | Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerab... |
| CVE-2021-45807 | CRITICAL | 9.8 | 2.6% | Jan 13, 2022 | jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now