2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-44720 | HIGH | 7.2 | 2.3% | Aug 12, 2022 | In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source... |
| CVE-2021-40040 | HIGH | 7.5 | 0.5% | Aug 10, 2022 | Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulner... |
| CVE-2021-40034 | HIGH | 7.5 | 0.5% | Aug 10, 2022 | The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of thi... |
| CVE-2021-40030 | HIGH | 7.5 | 0.4% | Aug 10, 2022 | The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidential... |
| CVE-2021-39696 | HIGH | 7.8 | 0.2% | Aug 10, 2022 | In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation ... |
| CVE-2021-33646 | HIGH | 7.5 | 1.4% | Aug 10, 2022 | The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory ... |
| CVE-2021-33645 | HIGH | 7.5 | 1.4% | Aug 10, 2022 | The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory ... |
| CVE-2021-33644 | HIGH | 8.1 | 1.1% | Aug 10, 2022 | An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mallo... |
| CVE-2021-46304 | HIGH | 7.5 | 0.6% | Aug 10, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WI... |
| CVE-2021-37150 | HIGH | 7.5 | 1.7% | Aug 10, 2022 | Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure ... |
| CVE-2021-32771 | HIGH | 8.1 | 1.0% | Aug 4, 2022 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. In affected versions it is possible to ca... |
| CVE-2021-39088 | HIGH | 7.8 | 0.2% | Jul 28, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unkno... |
| CVE-2021-22642 | HIGH | 7.5 | 0.7% | Jul 28, 2022 | An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system. |
| CVE-2021-42537 | HIGH | 7.5 | 0.4% | Jul 27, 2022 | VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents... |
| CVE-2021-38417 | HIGH | 7.5 | 0.6% | Jul 27, 2022 | VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an un... |
| CVE-2021-38410 | HIGH | 7.8 | 0.2% | Jul 27, 2022 | AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijac... |
| CVE-2021-40180 | HIGH | 7.5 | 1.1% | Jul 26, 2022 | In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's addr... |
| CVE-2021-33057 | HIGH | 7.5 | 1.0% | Jul 26, 2022 | The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCE... |
| CVE-2021-33453 | HIGH | 7.8 | 0.3% | Jul 26, 2022 | An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538. |
| CVE-2021-40336 | HIGH | 8.8 | 0.4% | Jul 25, 2022 | A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This ... |
| CVE-2021-40335 | HIGH | 8.8 | 0.2% | Jul 25, 2022 | A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, ... |
| CVE-2021-46829 | HIGH | 7.8 | 0.7% | Jul 24, 2022 | GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames i... |
| CVE-2021-29755 | HIGH | 7.5 | 0.4% | Jul 20, 2022 | IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM... |
| CVE-2021-46828 | HIGH | 7.5 | 2.9% | Jul 20, 2022 | In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because... |
| CVE-2021-41031 | HIGH | 7.8 | 0.5% | Jul 18, 2022 | A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior an... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now