2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0308 | MEDIUM | 6.8 | 0.4% | Jan 11, 2021 | In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could le... |
| CVE-2021-0304 | MEDIUM | 5.5 | 0.2% | Jan 11, 2021 | In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. Thi... |
| CVE-2021-0301 | MEDIUM | 6.7 | 0.2% | Jan 11, 2021 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2021-0342 | MEDIUM | 6.7 | 0.2% | Jan 11, 2021 | In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalati... |
| CVE-2021-23253 | MEDIUM | 5.3 | 0.8% | Jan 11, 2021 | Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to cr... |
| CVE-2021-3111 | MEDIUM | 4.8 | 3.0% | Jan 8, 2021 | The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.p... |
| CVE-2021-1066 | MEDIUM | 5.5 | 0.3% | Jan 8, 2021 | NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to... |
| CVE-2021-1061 | MEDIUM | 6.3 | 0.2% | Jan 8, 2021 | NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to ... |
| CVE-2021-1055 | MEDIUM | 5.3 | 0.3% | Jan 8, 2021 | NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) ha... |
| CVE-2021-1054 | MEDIUM | 5.5 | 0.3% | Jan 8, 2021 | NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) ha... |
| CVE-2021-1053 | MEDIUM | 5.5 | 0.4% | Jan 8, 2021 | NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddm... |
| CVE-2021-23242 | MEDIUM | 5.3 | 1.8% | Jan 7, 2021 | MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../... |
| CVE-2021-23241 | MEDIUM | 5.3 | 13.4% | Jan 7, 2021 | MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (... |
| CVE-2021-3011 | MEDIUM | 4.2 | 0.2% | Jan 7, 2021 | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure ... |
| CVE-2021-21236 | MEDIUM | 5.5 | 1.5% | Jan 6, 2021 | CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, ther... |
| CVE-2021-21235 | MEDIUM | 6.5 | 1.5% | Jan 6, 2021 | kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop i... |
| CVE-2021-3026 | MEDIUM | 6.1 | 0.6% | Jan 5, 2021 | Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment. |
| CVE-2021-3022 | MEDIUM | 5.5 | 0.1% | Jan 5, 2021 | An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK prot... |
| CVE-2021-22495 | MEDIUM | 5.5 | 0.3% | Jan 5, 2021 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) (Exynos chipsets) software. ... |
| CVE-2021-22494 | MEDIUM | 5.5 | 0.3% | Jan 5, 2021 | An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q(10.0) software. When a screen... |
| CVE-2021-3014 | MEDIUM | 6.1 | 0.9% | Jan 4, 2021 | In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter. |
| CVE-2021-21494 | MEDIUM | 4.8 | 0.5% | Jan 4, 2021 | MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read ... |
| CVE-2021-3005 | MEDIUM | 4.3 | 0.9% | Jan 3, 2021 | MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified t... |
| CVE-2021-3002 | MEDIUM | 6.1 | 4.3% | Jan 1, 2021 | Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now