2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20692 | HIGH | 7.1 | 1.0% | Apr 7, 2021 | Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker ... |
| CVE-2021-20687 | HIGH | 8.8 | 0.6% | Apr 7, 2021 | Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of... |
| CVE-2021-1892 | HIGH | 7.8 | 0.2% | Apr 7, 2021 | Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Comput... |
| CVE-2021-30147 | HIGH | 8.8 | 3.5% | Apr 7, 2021 | DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php. |
| CVE-2021-27900 | HIGH | 8.1 | 2.5% | Apr 6, 2021 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several... |
| CVE-2021-27899 | HIGH | 7.4 | 0.6% | Apr 6, 2021 | The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validati... |
| CVE-2021-22158 | HIGH | 7.2 | 0.6% | Apr 6, 2021 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) i... |
| CVE-2021-21404 | HIGH | 7.5 | 2.0% | Apr 6, 2021 | Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server `strelaysrv... |
| CVE-2021-21423 | HIGH | 8.1 | 1.4% | Apr 6, 2021 | `projen` is a project generation tool that synthesizes project configuration files such as `package.json`, `tsconfig.jso... |
| CVE-2021-24027 | HIGH | 7.5 | 3.8% | Apr 6, 2021 | A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may ha... |
| CVE-2021-20334 | HIGH | 7.8 | 0.2% | Apr 6, 2021 | A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary ... |
| CVE-2021-29424 | HIGH | 7.5 | 2.0% | Apr 6, 2021 | The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of... |
| CVE-2021-30130 | HIGH | 7.5 | 1.1% | Apr 6, 2021 | phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification. |
| CVE-2021-28142 | HIGH | 8.8 | 5.8% | Apr 6, 2021 | CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete." |
| CVE-2021-28874 | HIGH | 7.8 | 1.0% | Apr 6, 2021 | SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode ... |
| CVE-2021-28075 | HIGH | 7.5 | 1.0% | Apr 6, 2021 | iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to ob... |
| CVE-2021-27343 | HIGH | 7.5 | 1.7% | Apr 6, 2021 | SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent).... |
| CVE-2021-28172 | HIGH | 7.5 | 1.8% | Apr 6, 2021 | There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers ... |
| CVE-2021-30163 | HIGH | 7.5 | 1.2% | Apr 6, 2021 | Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal ... |
| CVE-2021-30162 | HIGH | 7.1 | 0.1% | Apr 6, 2021 | An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS servic... |
| CVE-2021-28204 | HIGH | 7.2 | 2.0% | Apr 6, 2021 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter th... |
| CVE-2021-28203 | HIGH | 7.2 | 2.0% | Apr 6, 2021 | The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As o... |
| CVE-2021-30141 | HIGH | 7.5 | 1.5% | Apr 5, 2021 | Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as... |
| CVE-2021-20305 | HIGH | 8.1 | 1.7% | Apr 5, 2021 | A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, ED... |
| CVE-2021-24209 | HIGH | 7.2 | 23.8% | Apr 5, 2021 | The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now