2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20182 | HIGH | 8.8 | 1.1% | Feb 23, 2021 | A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges us... |
| CVE-2021-26680 | HIGH | 7.2 | 2.5% | Feb 23, 2021 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio... |
| CVE-2021-26679 | HIGH | 7.2 | 2.5% | Feb 23, 2021 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio... |
| CVE-2021-26677 | HIGH | 7.8 | 0.3% | Feb 23, 2021 | A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s):... |
| CVE-2021-26594 | HIGH | 8.8 | 1.2% | Feb 23, 2021 | In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any contr... |
| CVE-2021-26593 | HIGH | 7.5 | 1.4% | Feb 23, 2021 | In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they g... |
| CVE-2021-22882 | HIGH | 7.5 | 1.3% | Feb 23, 2021 | UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may ca... |
| CVE-2021-22112 | HIGH | 8.8 | 3.2% | Feb 23, 2021 | Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported ... |
| CVE-2021-20247 | HIGH | 7.4 | 1.9% | Feb 23, 2021 | A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not ... |
| CVE-2021-27579 | HIGH | 7.8 | 0.5% | Feb 23, 2021 | Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed ... |
| CVE-2021-26926 | HIGH | 7.1 | 1.2% | Feb 23, 2021 | A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to ... |
| CVE-2021-26684 | HIGH | 7.2 | 2.5% | Feb 23, 2021 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio... |
| CVE-2021-26683 | HIGH | 7.2 | 2.5% | Feb 23, 2021 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio... |
| CVE-2021-26681 | HIGH | 7.2 | 2.5% | Feb 23, 2021 | A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prio... |
| CVE-2021-22651 | HIGH | 7.8 | 2.6% | Feb 23, 2021 | When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10... |
| CVE-2021-20198 | HIGH | 8.1 | 1.8% | Feb 23, 2021 | A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installat... |
| CVE-2021-20230 | HIGH | 7.5 | 1.2% | Feb 23, 2021 | A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use ... |
| CVE-2021-20226 | HIGH | 7.8 | 0.4% | Feb 23, 2021 | A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could caus... |
| CVE-2021-25630 | HIGH | 7.8 | 0.3% | Feb 23, 2021 | "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing a... |
| CVE-2021-3252 | HIGH | 7.5 | 2.6% | Feb 23, 2021 | KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in... |
| CVE-2021-22649 | HIGH | 7.8 | 2.2% | Feb 23, 2021 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve... |
| CVE-2021-22647 | HIGH | 7.8 | 2.1% | Feb 23, 2021 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve... |
| CVE-2021-22645 | HIGH | 7.8 | 1.5% | Feb 23, 2021 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve... |
| CVE-2021-22643 | HIGH | 7.8 | 2.1% | Feb 23, 2021 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve... |
| CVE-2021-21157 | HIGH | 8.8 | 9.5% | Feb 22, 2021 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now