2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21316 | HIGH | 7.8 | 1.0% | Feb 16, 2021 | less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10.,... |
| CVE-2021-23840 | HIGH | 7.5 | 50.7% | Feb 16, 2021 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases... |
| CVE-2021-21315 | HIGH | 7.8 | 90.2% | Feb 16, 2021 | The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions t... |
| CVE-2021-20987 | HIGH | 8.6 | 1.1% | Feb 16, 2021 | A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21tha... |
| CVE-2021-20986 | HIGH | 7.5 | 1.0% | Feb 16, 2021 | A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may l... |
| CVE-2021-27232 | HIGH | 8.8 | 1.7% | Feb 16, 2021 | The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stac... |
| CVE-2021-27229 | HIGH | 8.8 | 3.2% | Feb 16, 2021 | Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on t... |
| CVE-2021-21511 | HIGH | 8.1 | 1.0% | Feb 15, 2021 | Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote l... |
| CVE-2021-27211 | HIGH | 7.5 | 3.2% | Feb 15, 2021 | steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. |
| CVE-2021-27201 | HIGH | 8.8 | 2.6% | Feb 15, 2021 | Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell m... |
| CVE-2021-27219 | HIGH | 7.5 | 3.0% | Feb 15, 2021 | An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer ov... |
| CVE-2021-27218 | HIGH | 7.5 | 4.1% | Feb 15, 2021 | An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with... |
| CVE-2021-23338 | HIGH | 7.2 | 3.6% | Feb 15, 2021 | This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load funct... |
| CVE-2021-25298 | HIGH | 8.8 | 75.2% | Feb 15, 2021 | Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi... |
| CVE-2021-25297 | HIGH | 8.8 | 58.7% | Feb 15, 2021 | Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi... |
| CVE-2021-25296 | HIGH | 8.8 | 71.5% | Feb 15, 2021 | Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi... |
| CVE-2021-23337 | HIGH | 7.2 | 21.3% | Feb 15, 2021 | Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. |
| CVE-2021-21702 | HIGH | 7.5 | 3.1% | Feb 15, 2021 | In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a ... |
| CVE-2021-27212 | HIGH | 7.5 | 63.3% | Feb 14, 2021 | In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpd... |
| CVE-2021-27209 | HIGH | 7.1 | 0.2% | Feb 13, 2021 | In the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a base64 format over clear... |
| CVE-2021-26752 | HIGH | 8.8 | 1.5% | Feb 12, 2021 | NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoin... |
| CVE-2021-26751 | HIGH | 8.8 | 1.2% | Feb 12, 2021 | NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Mo... |
| CVE-2021-22978 | HIGH | 8.3 | 0.8% | Feb 12, 2021 | On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12... |
| CVE-2021-22977 | HIGH | 7.5 | 1.0% | Feb 12, 2021 | On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious serv... |
| CVE-2021-22985 | HIGH | 7.5 | 1.0% | Feb 12, 2021 | On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consum... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now