2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20188 | HIGH | 7 | 0.3% | Feb 11, 2021 | A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not c... |
| CVE-2021-20405 | HIGH | 7.5 | 0.8% | Feb 11, 2021 | IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to impro... |
| CVE-2021-20403 | HIGH | 8.8 | 0.4% | Feb 11, 2021 | IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an a... |
| CVE-2021-23335 | HIGH | 7.5 | 1.4% | Feb 11, 2021 | All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or... |
| CVE-2021-27186 | HIGH | 7.5 | 2.0% | Feb 10, 2021 | Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_... |
| CVE-2021-25251 | HIGH | 7.2 | 2.5% | Feb 10, 2021 | The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability wh... |
| CVE-2021-27179 | HIGH | 7.5 | 13.9% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sendin... |
| CVE-2021-27178 | HIGH | 7.5 | 18.2% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram. |
| CVE-2021-27176 | HIGH | 7.5 | 18.7% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 per... |
| CVE-2021-27175 | HIGH | 7.5 | 18.2% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 per... |
| CVE-2021-27174 | HIGH | 7.5 | 18.7% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 pe... |
| CVE-2021-27173 | HIGH | 7.5 | 12.7% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) ... |
| CVE-2021-27142 | HIGH | 7.5 | 15.7% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hard... |
| CVE-2021-27140 | HIGH | 7.5 | 18.9% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication... |
| CVE-2021-27139 | HIGH | 7.5 | 16.2% | Feb 10, 2021 | An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the devi... |
| CVE-2021-26939 | HIGH | 7.5 | 1.7% | Feb 10, 2021 | An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOT... |
| CVE-2021-26936 | HIGH | 7.8 | 0.5% | Feb 10, 2021 | The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allow... |
| CVE-2021-20353 | HIGH | 8.2 | 5.2% | Feb 10, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2021-0341 | HIGH | 7.5 | 0.9% | Feb 10, 2021 | In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due t... |
| CVE-2021-0340 | HIGH | 8.8 | 2.1% | Feb 10, 2021 | In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input ... |
| CVE-2021-0339 | HIGH | 7.8 | 0.7% | Feb 10, 2021 | In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app ... |
| CVE-2021-0337 | HIGH | 7.8 | 0.2% | Feb 10, 2021 | In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead... |
| CVE-2021-0336 | HIGH | 7.8 | 0.3% | Feb 10, 2021 | In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. ... |
| CVE-2021-0334 | HIGH | 7.8 | 0.3% | Feb 10, 2021 | In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default ... |
| CVE-2021-0333 | HIGH | 7.3 | 0.3% | Feb 10, 2021 | In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now