2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25306 | HIGH | 7.5 | 1.5% | Mar 2, 2021 | A buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices allows remote attackers... |
| CVE-2021-27878 | HIGH | 8.8 | 24.0% | Mar 1, 2021 | An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc... |
| CVE-2021-27876 | HIGH | 8.1 | 13.4% | Mar 1, 2021 | An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc... |
| CVE-2021-26704 | HIGH | 8.8 | 3.1% | Mar 1, 2021 | EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/too... |
| CVE-2021-21517 | HIGH | 7.2 | 1.4% | Mar 1, 2021 | SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML pa... |
| CVE-2021-25829 | HIGH | 7.5 | 7.4% | Mar 1, 2021 | An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.... |
| CVE-2021-25329 | HIGH | 7 | 9.5% | Mar 1, 2021 | The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5... |
| CVE-2021-25122 | HIGH | 7.5 | 18.1% | Mar 1, 2021 | When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0... |
| CVE-2021-27803 | HIGH | 7.5 | 1.2% | Feb 26, 2021 | A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision ... |
| CVE-2021-27799 | HIGH | 7.5 | 2.4% | Feb 26, 2021 | ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachab... |
| CVE-2021-26567 | HIGH | 7.8 | 1.1% | Feb 26, 2021 | Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute ar... |
| CVE-2021-26564 | HIGH | 8.7 | 0.6% | Feb 26, 2021 | Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before... |
| CVE-2021-26562 | HIGH | 8.1 | 1.7% | Feb 26, 2021 | Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allow... |
| CVE-2021-26561 | HIGH | 8.1 | 1.9% | Feb 26, 2021 | Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426... |
| CVE-2021-26560 | HIGH | 7.4 | 0.7% | Feb 26, 2021 | Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM... |
| CVE-2021-21309 | HIGH | 8.8 | 4.9% | Feb 26, 2021 | Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug... |
| CVE-2021-21302 | HIGH | 7.2 | 1.4% | Feb 26, 2021 | PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Inject... |
| CVE-2021-23979 | HIGH | 8.8 | 0.9% | Feb 26, 2021 | Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corru... |
| CVE-2021-23978 | HIGH | 8.8 | 1.5% | Feb 26, 2021 | Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evi... |
| CVE-2021-23965 | HIGH | 8.8 | 1.0% | Feb 26, 2021 | Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corru... |
| CVE-2021-23964 | HIGH | 8.8 | 1.3% | Feb 26, 2021 | Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evi... |
| CVE-2021-22661 | HIGH | 7.5 | 1.0% | Feb 26, 2021 | Changing the password on the module webpage does not require the user to type in the current password first. Thus, the p... |
| CVE-2021-23962 | HIGH | 8.8 | 0.9% | Feb 26, 2021 | Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable cras... |
| CVE-2021-23961 | HIGH | 7.4 | 1.3% | Feb 26, 2021 | Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an in... |
| CVE-2021-23960 | HIGH | 8.8 | 1.2% | Feb 26, 2021 | Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exp... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now