2021 CVE Vulnerabilities

23,473 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-24890HIGH8.8The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action...
CVE-2021-41803HIGH7.1HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to inte...
CVE-2021-46836HIGH7.5Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of th...
CVE-2021-40024HIGH7.5Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of th...
CVE-2021-40023HIGH7.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality...
CVE-2021-38924HIGH7.5IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a det...
CVE-2021-0943HIGH7.8In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to loc...
CVE-2021-0871HIGH7.8In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer...
CVE-2021-0697HIGH7In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could l...
CVE-2021-44426HIGH8.8An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's loc...
CVE-2021-37819HIGH7.5PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.
CVE-2021-43565HIGH7.5The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an ...
CVE-2021-28398HIGH7.2A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to ...
CVE-2021-35134HIGH8.4Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memo...
CVE-2021-35132HIGH7.8Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Co...
CVE-2021-35122HIGH7.8Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto,...
CVE-2021-25657HIGH7.8A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially a...
CVE-2021-45027HIGH7.5An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet functio...
CVE-2021-41785HIGH7.8Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-...
CVE-2021-41784HIGH7.8Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-...
CVE-2021-41783HIGH7.8Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-...
CVE-2021-41782HIGH7.8Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-...
CVE-2021-41781HIGH7.8Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-...
CVE-2021-41780HIGH7.8Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-...
CVE-2021-3864HIGH7A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. T...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now