2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21396 | MEDIUM | 6.5 | 1.1% | Mar 26, 2021 | wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16... |
| CVE-2021-21373 | MEDIUM | 5.9 | 1.2% | Mar 26, 2021 | Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, ... |
| CVE-2021-21411 | MEDIUM | 5.5 | 1.0% | Mar 26, 2021 | OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `-... |
| CVE-2021-22194 | MEDIUM | 4.4 | 0.2% | Mar 26, 2021 | In all versions of GitLab, marshalled session keys were being stored in Redis. |
| CVE-2021-22184 | MEDIUM | 5.5 | 0.3% | Mar 26, 2021 | An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to se... |
| CVE-2021-22180 | MEDIUM | 4.3 | 0.9% | Mar 26, 2021 | An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unautho... |
| CVE-2021-22172 | MEDIUM | 4.3 | 1.0% | Mar 26, 2021 | Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccess... |
| CVE-2021-21333 | MEDIUM | 6.1 | 1.4% | Mar 26, 2021 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for ope... |
| CVE-2021-25372 | MEDIUM | 6.7 | 0.9% | Mar 26, 2021 | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. |
| CVE-2021-25371 | MEDIUM | 6.7 | 0.8% | Mar 26, 2021 | A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. |
| CVE-2021-25370 | MEDIUM | 4.4 | 0.9% | Mar 26, 2021 | An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory cor... |
| CVE-2021-25369 | MEDIUM | 5.5 | 1.1% | Mar 26, 2021 | An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel inform... |
| CVE-2021-22886 | MEDIUM | 6.1 | 1.7% | Mar 26, 2021 | Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdo... |
| CVE-2021-20289 | MEDIUM | 5.3 | 1.4% | Mar 26, 2021 | A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are retu... |
| CVE-2021-20285 | MEDIUM | 6.6 | 0.8% | Mar 26, 2021 | A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SE... |
| CVE-2021-20284 | MEDIUM | 5.5 | 1.3% | Mar 26, 2021 | A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_s... |
| CVE-2021-20197 | MEDIUM | 6.3 | 0.3% | Mar 26, 2021 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar,... |
| CVE-2021-1629 | MEDIUM | 6.1 | 1.3% | Mar 26, 2021 | Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users. |
| CVE-2021-3109 | MEDIUM | 4.8 | 0.8% | Mar 26, 2021 | The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context ... |
| CVE-2021-3275 | MEDIUM | 6.1 | 1.8% | Mar 26, 2021 | Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless A... |
| CVE-2021-23890 | MEDIUM | 6.5 | 0.9% | Mar 26, 2021 | Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ... |
| CVE-2021-23889 | MEDIUM | 4.8 | 0.5% | Mar 26, 2021 | Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrator... |
| CVE-2021-23888 | MEDIUM | 6.3 | 0.6% | Mar 26, 2021 | Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could ca... |
| CVE-2021-20683 | MEDIUM | 5.4 | 0.7% | Mar 26, 2021 | Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 all... |
| CVE-2021-20681 | MEDIUM | 5.4 | 0.7% | Mar 26, 2021 | Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remo... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now