2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29935 | HIGH | 7.3 | 1.0% | Apr 1, 2021 | An issue was discovered in the rocket crate before 0.4.7 for Rust. uri::Formatter can have a use-after-free if a user-pr... |
| CVE-2021-29934 | HIGH | 7.3 | 0.9% | Apr 1, 2021 | An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of un... |
| CVE-2021-29933 | HIGH | 7.5 | 1.1% | Apr 1, 2021 | An issue was discovered in the insert_many crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next()... |
| CVE-2021-29932 | HIGH | 7.5 | 1.0% | Apr 1, 2021 | An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial o... |
| CVE-2021-29931 | HIGH | 7.5 | 1.0% | Apr 1, 2021 | An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a pani... |
| CVE-2021-29930 | HIGH | 7.5 | 1.1% | Apr 1, 2021 | An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A drop of uninitialized memory can sometimes ... |
| CVE-2021-29929 | HIGH | 7.5 | 1.1% | Apr 1, 2021 | An issue was discovered in the endian_trait crate through 2021-01-04 for Rust. A double drop can occur when a user-provi... |
| CVE-2021-28994 | HIGH | 7.5 | 2.0% | Mar 31, 2021 | kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and ... |
| CVE-2021-22538 | HIGH | 8.8 | 0.7% | Mar 31, 2021 | A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0... |
| CVE-2021-26943 | HIGH | 8.2 | 0.9% | Mar 31, 2021 | The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary... |
| CVE-2021-29662 | HIGH | 7.5 | 2.2% | Mar 31, 2021 | The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginni... |
| CVE-2021-23004 | HIGH | 7.5 | 1.0% | Mar 31, 2021 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x ... |
| CVE-2021-23003 | HIGH | 7.5 | 1.0% | Mar 31, 2021 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x ... |
| CVE-2021-23000 | HIGH | 7.5 | 0.9% | Mar 31, 2021 | On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP syst... |
| CVE-2021-22999 | HIGH | 7.5 | 1.0% | Mar 31, 2021 | On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 client... |
| CVE-2021-22997 | HIGH | 7.5 | 1.1% | Mar 31, 2021 | On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authenticat... |
| CVE-2021-22996 | HIGH | 7.5 | 1.0% | Mar 31, 2021 | On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection Device (DCD) cluster membe... |
| CVE-2021-22993 | HIGH | 8.8 | 0.9% | Mar 31, 2021 | On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.... |
| CVE-2021-21975 | HIGH | 7.5 | 77.9% | Mar 31, 2021 | Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor... |
| CVE-2021-29658 | HIGH | 8.8 | 1.2% | Mar 31, 2021 | The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries ... |
| CVE-2021-22995 | HIGH | 7.5 | 0.9% | Mar 31, 2021 | On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA) when using a Quorum device for automatic fai... |
| CVE-2021-22990 | HIGH | 7.2 | 8.8% | Mar 31, 2021 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x ... |
| CVE-2021-23348 | HIGH | 8.8 | 1.8% | Mar 31, 2021 | This affects the package portprocesses before 1.0.5. If (attacker-controlled) user input is given to the killProcess fun... |
| CVE-2021-22988 | HIGH | 8.8 | 10.4% | Mar 31, 2021 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x ... |
| CVE-2021-28245 | HIGH | 7.5 | 1.1% | Mar 31, 2021 | PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensiti... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now