2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22189 | HIGH | 7.2 | 0.7% | Mar 4, 2021 | Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the ... |
| CVE-2021-27935 | HIGH | 7.5 | 4.1% | Mar 3, 2021 | An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their... |
| CVE-2021-22884 | HIGH | 7.5 | 32.4% | Mar 3, 2021 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “... |
| CVE-2021-22883 | HIGH | 7.5 | 77.4% | Mar 3, 2021 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connecti... |
| CVE-2021-27927 | HIGH | 8.8 | 1.5% | Mar 3, 2021 | In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0... |
| CVE-2021-22683 | HIGH | 7.8 | 1.0% | Mar 3, 2021 | Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowi... |
| CVE-2021-22670 | HIGH | 7.8 | 1.0% | Mar 3, 2021 | An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processi... |
| CVE-2021-22666 | HIGH | 7.8 | 1.1% | Mar 3, 2021 | Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being p... |
| CVE-2021-22662 | HIGH | 7.8 | 1.1% | Mar 3, 2021 | A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application proce... |
| CVE-2021-22638 | HIGH | 7.8 | 1.0% | Mar 3, 2021 | Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowin... |
| CVE-2021-21979 | HIGH | 7.3 | 0.6% | Mar 3, 2021 | In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r1... |
| CVE-2021-20442 | HIGH | 7.5 | 1.0% | Mar 3, 2021 | IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for i... |
| CVE-2021-20233 | HIGH | 8.2 | 0.6% | Mar 3, 2021 | A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calc... |
| CVE-2021-20076 | HIGH | 8.8 | 2.0% | Mar 3, 2021 | Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an ... |
| CVE-2021-26813 | HIGH | 7.5 | 2.4% | Mar 3, 2021 | markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacke... |
| CVE-2021-25315 | HIGH | 7.8 | 2.3% | Mar 3, 2021 | CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows... |
| CVE-2021-27923 | HIGH | 7.5 | 3.1% | Mar 3, 2021 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a co... |
| CVE-2021-27922 | HIGH | 7.5 | 4.9% | Mar 3, 2021 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a co... |
| CVE-2021-27921 | HIGH | 7.5 | 3.2% | Mar 3, 2021 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a co... |
| CVE-2021-22863 | HIGH | 8.1 | 1.0% | Mar 3, 2021 | An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authent... |
| CVE-2021-27065 | HIGH | 7.8 | 99.9% | Mar 3, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-26858 | HIGH | 7.8 | 93.7% | Mar 3, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-26857 | HIGH | 7.8 | 94.0% | Mar 3, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-27885 | HIGH | 8.8 | 3.2% | Mar 2, 2021 | usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism. |
| CVE-2021-25330 | HIGH | 7.5 | 0.4% | Mar 2, 2021 | Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions i... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now