2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-26720 | HIGH | 7.8 | 0.4% | Feb 17, 2021 | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-d... |
| CVE-2021-3396 | HIGH | 8.8 | 2.4% | Feb 17, 2021 | OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through... |
| CVE-2021-27367 | HIGH | 7.5 | 1.7% | Feb 17, 2021 | Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow D... |
| CVE-2021-26911 | HIGH | 7.4 | 1.1% | Feb 17, 2021 | core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode. |
| CVE-2021-1378 | HIGH | 7.5 | 1.5% | Feb 17, 2021 | A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker ... |
| CVE-2021-1366 | HIGH | 7.8 | 1.3% | Feb 17, 2021 | A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows c... |
| CVE-2021-27224 | HIGH | 7.5 | 38.0% | Feb 17, 2021 | The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012e... |
| CVE-2021-25780 | HIGH | 7.2 | 2.5% | Feb 17, 2021 | An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could... |
| CVE-2021-22174 | HIGH | 7.5 | 2.7% | Feb 17, 2021 | Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture ... |
| CVE-2021-22173 | HIGH | 7.5 | 2.4% | Feb 17, 2021 | Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted ca... |
| CVE-2021-22854 | HIGH | 7.5 | 1.5% | Feb 17, 2021 | The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtai... |
| CVE-2021-0109 | HIGH | 7.8 | 0.2% | Feb 17, 2021 | Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authent... |
| CVE-2021-22553 | HIGH | 7.5 | 0.4% | Feb 17, 2021 | Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not ... |
| CVE-2021-22858 | HIGH | 8.8 | 1.2% | Feb 17, 2021 | Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrar... |
| CVE-2021-22857 | HIGH | 7.5 | 1.8% | Feb 17, 2021 | The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to dow... |
| CVE-2021-22856 | HIGH | 7.5 | 1.4% | Feb 17, 2021 | The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into... |
| CVE-2021-23885 | HIGH | 8.8 | 1.1% | Feb 17, 2021 | Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain eleva... |
| CVE-2021-20655 | HIGH | 7.2 | 4.0% | Feb 17, 2021 | FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary ... |
| CVE-2021-26934 | HIGH | 7.8 | 0.3% | Feb 17, 2021 | An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka be-alloc) ... |
| CVE-2021-26930 | HIGH | 7.8 | 0.3% | Feb 17, 2021 | An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend,... |
| CVE-2021-27102 | HIGH | 7.8 | 3.7% | Feb 16, 2021 | Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version i... |
| CVE-2021-20075 | HIGH | 7.8 | 0.2% | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd. |
| CVE-2021-20074 | HIGH | 8.8 | 1.2% | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and ... |
| CVE-2021-20073 | HIGH | 8.8 | 0.5% | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries. |
| CVE-2021-20072 | HIGH | 7.2 | 1.4% | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now