2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-25247 | HIGH | 7.8 | 0.7% | Jan 27, 2021 | A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker... |
| CVE-2021-25312 | HIGH | 8.8 | 1.0% | Jan 27, 2021 | HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS au... |
| CVE-2021-3317 | HIGH | 8.8 | 41.4% | Jan 26, 2021 | KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of ... |
| CVE-2021-3165 | HIGH | 8.8 | 2.2% | Jan 26, 2021 | SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI. |
| CVE-2021-1070 | HIGH | 7.1 | 0.3% | Jan 26, 2021 | NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a v... |
| CVE-2021-3309 | HIGH | 8.1 | 1.7% | Jan 26, 2021 | packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by t... |
| CVE-2021-3156 | HIGH | 7.8 | 99.3% | Jan 26, 2021 | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege... |
| CVE-2021-22159 | HIGH | 7.8 | 0.3% | Jan 26, 2021 | Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Managemen... |
| CVE-2021-3297 | HIGH | 7.8 | 20.5% | Jan 26, 2021 | On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access. |
| CVE-2021-3291 | HIGH | 7.2 | 16.8% | Jan 26, 2021 | Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the mod... |
| CVE-2021-3223 | HIGH | 7.5 | 16.5% | Jan 26, 2021 | Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files. |
| CVE-2021-3195 | HIGH | 7.5 | 1.2% | Jan 26, 2021 | bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin di... |
| CVE-2021-3164 | HIGH | 8.8 | 4.2% | Jan 26, 2021 | ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permis... |
| CVE-2021-3115 | HIGH | 7.5 | 6.4% | Jan 26, 2021 | Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when ... |
| CVE-2021-26267 | HIGH | 7.5 | 0.9% | Jan 26, 2021 | cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). |
| CVE-2021-26266 | HIGH | 7.5 | 0.9% | Jan 26, 2021 | cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). |
| CVE-2021-26026 | HIGH | 7.8 | 0.7% | Jan 26, 2021 | PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDS... |
| CVE-2021-26025 | HIGH | 7.8 | 0.7% | Jan 26, 2021 | PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDS... |
| CVE-2021-25908 | HIGH | 7.5 | 1.3% | Jan 26, 2021 | An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free. |
| CVE-2021-25906 | HIGH | 7.5 | 1.3% | Jan 26, 2021 | An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a dou... |
| CVE-2021-25904 | HIGH | 7.5 | 1.3% | Jan 26, 2021 | An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of ... |
| CVE-2021-25903 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced. |
| CVE-2021-25902 | HIGH | 7.5 | 1.4% | Jan 26, 2021 | An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a dou... |
| CVE-2021-25864 | HIGH | 7.5 | 9.3% | Jan 26, 2021 | node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in fil... |
| CVE-2021-25863 | HIGH | 8.8 | 1.2% | Jan 26, 2021 | Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now