2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23988 | HIGH | 8.8 | 1.1% | Mar 31, 2021 | Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corru... |
| CVE-2021-23987 | HIGH | 8.8 | 1.4% | Mar 31, 2021 | Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of... |
| CVE-2021-23981 | HIGH | 8.1 | 1.1% | Mar 31, 2021 | A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack i... |
| CVE-2021-21782 | HIGH | 8.8 | 1.3% | Mar 31, 2021 | An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear... |
| CVE-2021-21776 | HIGH | 8.8 | 1.3% | Mar 31, 2021 | An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear... |
| CVE-2021-21773 | HIGH | 7.8 | 0.7% | Mar 31, 2021 | An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8... |
| CVE-2021-21412 | HIGH | 8.8 | 1.3% | Mar 30, 2021 | Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true`... |
| CVE-2021-20502 | HIGH | 7.1 | 1.4% | Mar 30, 2021 | IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A... |
| CVE-2021-20482 | HIGH | 7.1 | 1.4% | Mar 30, 2021 | IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack whe... |
| CVE-2021-27271 | HIGH | 7.8 | 3.3% | Mar 30, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.... |
| CVE-2021-27270 | HIGH | 7.8 | 2.7% | Mar 30, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.... |
| CVE-2021-27269 | HIGH | 7.8 | 2.5% | Mar 30, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.... |
| CVE-2021-27268 | HIGH | 7.8 | 2.5% | Mar 30, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.... |
| CVE-2021-27267 | HIGH | 7.8 | 2.5% | Mar 30, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.... |
| CVE-2021-27261 | HIGH | 7.8 | 2.7% | Mar 30, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.... |
| CVE-2021-23363 | HIGH | 8.8 | 1.8% | Mar 30, 2021 | This affects the package kill-by-port before 0.0.2. If (attacker-controlled) user input is given to the killByPort funct... |
| CVE-2021-21638 | HIGH | 8.8 | 0.8% | Mar 30, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows at... |
| CVE-2021-21633 | HIGH | 8.8 | 0.8% | Mar 30, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows atta... |
| CVE-2021-21629 | HIGH | 8.8 | 0.7% | Mar 30, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attacke... |
| CVE-2021-26919 | HIGH | 8.8 | 34.9% | Mar 30, 2021 | Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted us... |
| CVE-2021-29376 | HIGH | 7.5 | 2.3% | Mar 30, 2021 | ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconn... |
| CVE-2021-25162 | HIGH | 8.1 | 27.0% | Mar 30, 2021 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products ... |
| CVE-2021-25150 | HIGH | 8.8 | 2.8% | Mar 30, 2021 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products ... |
| CVE-2021-25146 | HIGH | 7.2 | 2.7% | Mar 30, 2021 | A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products ... |
| CVE-2021-25148 | HIGH | 8.1 | 0.9% | Mar 30, 2021 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now