2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3146 | HIGH | 7.8 | 0.4% | Apr 8, 2021 | The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges. |
| CVE-2021-3328 | HIGH | 7.5 | 1.8% | Apr 8, 2021 | An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bo... |
| CVE-2021-27522 | HIGH | 8.8 | 1.1% | Apr 8, 2021 | Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() ... |
| CVE-2021-30463 | HIGH | 7.8 | 0.5% | Apr 8, 2021 | VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissio... |
| CVE-2021-30462 | HIGH | 7.2 | 1.8% | Apr 8, 2021 | VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not re... |
| CVE-2021-28685 | HIGH | 7.8 | 0.3% | Apr 8, 2021 | AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with ph... |
| CVE-2021-1405 | HIGH | 7.5 | 3.2% | Apr 8, 2021 | A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions c... |
| CVE-2021-1404 | HIGH | 7.5 | 2.2% | Apr 8, 2021 | A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow a... |
| CVE-2021-1252 | HIGH | 7.5 | 2.6% | Apr 8, 2021 | A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 c... |
| CVE-2021-1485 | HIGH | 7.8 | 0.3% | Apr 8, 2021 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary com... |
| CVE-2021-1480 | HIGH | 7.8 | 1.8% | Apr 8, 2021 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb... |
| CVE-2021-1474 | HIGH | 8.6 | 0.7% | Apr 8, 2021 | Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could all... |
| CVE-2021-1386 | HIGH | 7.8 | 0.3% | Apr 8, 2021 | A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpo... |
| CVE-2021-1362 | HIGH | 8.8 | 2.7% | Apr 8, 2021 | A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager S... |
| CVE-2021-1309 | HIGH | 8.8 | 0.5% | Apr 8, 2021 | Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Se... |
| CVE-2021-1308 | HIGH | 7.4 | 0.4% | Apr 8, 2021 | Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Se... |
| CVE-2021-1251 | HIGH | 7.4 | 0.4% | Apr 8, 2021 | Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Se... |
| CVE-2021-1137 | HIGH | 7.8 | 0.5% | Apr 8, 2021 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb... |
| CVE-2021-29641 | HIGH | 8.8 | 4.9% | Apr 7, 2021 | Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions incl... |
| CVE-2021-26758 | HIGH | 8.8 | 2.7% | Apr 7, 2021 | Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root term... |
| CVE-2021-30123 | HIGH | 8.8 | 3.4% | Apr 7, 2021 | FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code ... |
| CVE-2021-29627 | HIGH | 7.8 | 0.7% | Apr 7, 2021 | In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, liste... |
| CVE-2021-28927 | HIGH | 7.8 | 1.5% | Apr 7, 2021 | The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platfor... |
| CVE-2021-30185 | HIGH | 7.5 | 1.0% | Apr 7, 2021 | CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. |
| CVE-2021-30184 | HIGH | 7.8 | 1.8% | Apr 7, 2021 | GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is relate... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now