2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21156 | HIGH | 8.8 | 2.7% | Feb 22, 2021 | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-21153 | HIGH | 8.8 | 1.3% | Feb 22, 2021 | Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to poten... |
| CVE-2021-21152 | HIGH | 8.8 | 1.3% | Feb 22, 2021 | Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially ... |
| CVE-2021-21149 | HIGH | 8.8 | 1.5% | Feb 22, 2021 | Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to per... |
| CVE-2021-26724 | HIGH | 7.2 | 3.1% | Feb 22, 2021 | OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and... |
| CVE-2021-26068 | HIGH | 8.8 | 2.7% | Feb 22, 2021 | An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers t... |
| CVE-2021-3149 | HIGH | 7.2 | 4.4% | Feb 22, 2021 | On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authen... |
| CVE-2021-26119 | HIGH | 7.5 | 9.4% | Feb 22, 2021 | Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode. |
| CVE-2021-27516 | HIGH | 7.5 | 2.5% | Feb 22, 2021 | URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relati... |
| CVE-2021-27513 | HIGH | 8.8 | 28.4% | Feb 22, 2021 | The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files becau... |
| CVE-2021-27509 | HIGH | 7.5 | 1.0% | Feb 19, 2021 | In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access c... |
| CVE-2021-22703 | HIGH | 7.5 | 0.6% | Feb 19, 2021 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/... |
| CVE-2021-22702 | HIGH | 7.5 | 0.6% | Feb 19, 2021 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/... |
| CVE-2021-26296 | HIGH | 7.5 | 3.0% | Feb 19, 2021 | In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, ... |
| CVE-2021-27405 | HIGH | 7.5 | 1.8% | Feb 19, 2021 | A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for N... |
| CVE-2021-26712 | HIGH | 7.5 | 3.6% | Feb 18, 2021 | Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk ... |
| CVE-2021-26717 | HIGH | 7.5 | 2.2% | Feb 18, 2021 | An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certifie... |
| CVE-2021-27379 | HIGH | 7.8 | 0.4% | Feb 18, 2021 | An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DM... |
| CVE-2021-23341 | HIGH | 7.5 | 3.2% | Feb 18, 2021 | The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc,... |
| CVE-2021-23340 | HIGH | 7.1 | 1.3% | Feb 18, 2021 | This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAct... |
| CVE-2021-20443 | HIGH | 8.8 | 0.8% | Feb 18, 2021 | IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is ou... |
| CVE-2021-20354 | HIGH | 7.5 | 3.7% | Feb 18, 2021 | IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker co... |
| CVE-2021-27138 | HIGH | 7.8 | 1.1% | Feb 17, 2021 | The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT. |
| CVE-2021-27097 | HIGH | 7.8 | 1.0% | Feb 17, 2021 | The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. |
| CVE-2021-27374 | HIGH | 7.5 | 1.1% | Feb 17, 2021 | VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now