2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27364 | HIGH | 7.1 | 1.0% | Mar 7, 2021 | An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by... |
| CVE-2021-26294 | HIGH | 7.5 | 17.3% | Mar 7, 2021 | An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal... |
| CVE-2021-26814 | HIGH | 8.8 | 8.7% | Mar 6, 2021 | Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileg... |
| CVE-2021-28042 | HIGH | 7.8 | 3.3% | Mar 5, 2021 | Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload fea... |
| CVE-2021-28041 | HIGH | 7.1 | 3.4% | Mar 5, 2021 | ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstra... |
| CVE-2021-27256 | HIGH | 8.8 | 0.9% | Mar 5, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780... |
| CVE-2021-27255 | HIGH | 8.8 | 1.3% | Mar 5, 2021 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware... |
| CVE-2021-27254 | HIGH | 8.8 | 0.5% | Mar 5, 2021 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800... |
| CVE-2021-28040 | HIGH | 7.5 | 1.2% | Mar 5, 2021 | An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number o... |
| CVE-2021-27098 | HIGH | 8.1 | 0.6% | Mar 5, 2021 | In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the Fet... |
| CVE-2021-26964 | HIGH | 7.1 | 1.0% | Mar 5, 2021 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s):... |
| CVE-2021-26963 | HIGH | 7.2 | 2.9% | Mar 5, 2021 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver... |
| CVE-2021-26962 | HIGH | 7.2 | 3.1% | Mar 5, 2021 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform ver... |
| CVE-2021-26961 | HIGH | 8.8 | 0.6% | Mar 5, 2021 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Plat... |
| CVE-2021-26960 | HIGH | 8.8 | 0.6% | Mar 5, 2021 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Plat... |
| CVE-2021-28026 | HIGH | 7.8 | 1.2% | Mar 5, 2021 | jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicou... |
| CVE-2021-28036 | HIGH | 7.5 | 1.3% | Mar 5, 2021 | An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions... |
| CVE-2021-28030 | HIGH | 7.5 | 1.1% | Mar 5, 2021 | An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized m... |
| CVE-2021-28029 | HIGH | 7.5 | 1.1% | Mar 5, 2021 | An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read th... |
| CVE-2021-27963 | HIGH | 8.2 | 2.4% | Mar 5, 2021 | SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous u... |
| CVE-2021-3404 | HIGH | 7.8 | 1.9% | Mar 4, 2021 | In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potential... |
| CVE-2021-3403 | HIGH | 7.8 | 1.8% | Mar 4, 2021 | In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and... |
| CVE-2021-25337 | HIGH | 7.1 | 2.8% | Mar 4, 2021 | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted ... |
| CVE-2021-23132 | HIGH | 7.5 | 6.5% | Mar 4, 2021 | An issue was discovered in Joomla! 3.0.0 through 3.9.24. com_media allowed paths that are not intended for image uploads |
| CVE-2021-23131 | HIGH | 7.5 | 1.5% | Mar 4, 2021 | An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now