2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22965 | HIGH | 7.5 | 2.1% | Nov 19, 2021 | A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial ... |
| CVE-2021-22951 | HIGH | 7.5 | 1.1% | Nov 19, 2021 | Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) p... |
| CVE-2021-21900 | HIGH | 8.8 | 2.5% | Nov 19, 2021 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f... |
| CVE-2021-21899 | HIGH | 8.8 | 2.7% | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2... |
| CVE-2021-41569 | HIGH | 7.5 | 7.8% | Nov 19, 2021 | SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the app... |
| CVE-2021-44037 | HIGH | 7.5 | 0.8% | Nov 19, 2021 | Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning. |
| CVE-2021-44036 | HIGH | 8.8 | 0.4% | Nov 19, 2021 | Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import. |
| CVE-2021-3962 | HIGH | 7.8 | 5.8% | Nov 19, 2021 | A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert proce... |
| CVE-2021-39929 | HIGH | 7.5 | 3.6% | Nov 19, 2021 | Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of s... |
| CVE-2021-39926 | HIGH | 7.5 | 7.5% | Nov 19, 2021 | Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injec... |
| CVE-2021-39925 | HIGH | 7.5 | 7.9% | Nov 19, 2021 | Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service ... |
| CVE-2021-39924 | HIGH | 7.5 | 4.9% | Nov 19, 2021 | Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via p... |
| CVE-2021-39923 | HIGH | 7.5 | 1.5% | Nov 19, 2021 | Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet inj... |
| CVE-2021-39922 | HIGH | 7.5 | 5.2% | Nov 19, 2021 | Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via pac... |
| CVE-2021-39921 | HIGH | 7.5 | 3.2% | Nov 19, 2021 | NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service ... |
| CVE-2021-29329 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function ... |
| CVE-2021-29328 | HIGH | 7.1 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sour... |
| CVE-2021-29327 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable... |
| CVE-2021-29326 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/x... |
| CVE-2021-29325 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function ... |
| CVE-2021-29324 | HIGH | 7.8 | 0.7% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c... |
| CVE-2021-29323 | MEDIUM | 5.5 | 0.6% | Nov 19, 2021 | OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp... |
| CVE-2021-22030 | MEDIUM | 6.5 | 1.0% | Nov 19, 2021 | In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensit... |
| CVE-2021-22028 | CRITICAL | 9.1 | 2.4% | Nov 19, 2021 | In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerab... |
| CVE-2021-43409 | MEDIUM | 6.1 | 0.9% | Nov 19, 2021 | The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cro... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now