2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23360 | HIGH | 8.8 | 2.3% | Mar 21, 2021 | This affects the package killport before 1.0.2. If (attacker-controlled) user input is given, it is possible for an atta... |
| CVE-2021-28961 | HIGH | 8.8 | 1.5% | Mar 21, 2021 | applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenti... |
| CVE-2021-28954 | HIGH | 7.8 | 1.0% | Mar 21, 2021 | In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository. |
| CVE-2021-28953 | HIGH | 7.8 | 1.0% | Mar 21, 2021 | The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary b... |
| CVE-2021-28952 | HIGH | 7.8 | 0.4% | Mar 20, 2021 | An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a bu... |
| CVE-2021-28117 | HIGH | 7.5 | 1.6% | Mar 20, 2021 | libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially... |
| CVE-2021-21267 | HIGH | 7.5 | 2.1% | Mar 19, 2021 | Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before ve... |
| CVE-2021-26992 | HIGH | 7.5 | 1.4% | Mar 19, 2021 | Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a ... |
| CVE-2021-26991 | HIGH | 7.5 | 1.2% | Mar 19, 2021 | Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow ... |
| CVE-2021-21387 | HIGH | 7.5 | 0.4% | Mar 19, 2021 | Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.... |
| CVE-2021-28831 | HIGH | 7.5 | 2.8% | Mar 19, 2021 | decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultan... |
| CVE-2021-28089 | HIGH | 7.5 | 1.7% | Mar 19, 2021 | Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka T... |
| CVE-2021-28110 | HIGH | 7.5 | 1.0% | Mar 19, 2021 | /exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser. |
| CVE-2021-25293 | HIGH | 7.5 | 1.6% | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c. |
| CVE-2021-25291 | HIGH | 7.5 | 1.4% | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via ... |
| CVE-2021-25290 | HIGH | 7.5 | 2.4% | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. |
| CVE-2021-27928 | HIGH | 7.2 | 38.4% | Mar 19, 2021 | A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, a... |
| CVE-2021-27221 | HIGH | 8.1 | 4.5% | Mar 19, 2021 | MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /expo... |
| CVE-2021-21384 | HIGH | 7.8 | 0.6% | Mar 19, 2021 | shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to d... |
| CVE-2021-27358 | HIGH | 7.5 | 83.0% | Mar 18, 2021 | The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of... |
| CVE-2021-1287 | HIGH | 7.2 | 2.2% | Mar 18, 2021 | A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDS... |
| CVE-2021-27656 | HIGH | 7.5 | 1.2% | Mar 18, 2021 | A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-le... |
| CVE-2021-22665 | HIGH | 7.8 | 0.4% | Mar 18, 2021 | Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a loc... |
| CVE-2021-28792 | HIGH | 7.8 | 1.7% | Mar 18, 2021 | The unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to e... |
| CVE-2021-28791 | HIGH | 7.8 | 1.6% | Mar 18, 2021 | The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary co... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now