2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-44954 | HIGH | 7.8 | 0.3% | Jul 18, 2022 | In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing a... |
| CVE-2021-42923 | HIGH | 7.3 | 0.2% | Jul 18, 2022 | ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC\-Sh... |
| CVE-2021-40150 | HIGH | 7.5 | 3.4% | Jul 17, 2022 | The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapp... |
| CVE-2021-24655 | HIGH | 7.5 | 0.8% | Jul 17, 2022 | The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related t... |
| CVE-2021-34538 | HIGH | 7.5 | 1.4% | Jul 16, 2022 | Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved ... |
| CVE-2021-34987 | HIGH | 8.2 | 0.3% | Jul 15, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (... |
| CVE-2021-34986 | HIGH | 7.8 | 0.2% | Jul 15, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (... |
| CVE-2021-36461 | HIGH | 8.8 | 0.8% | Jul 15, 2022 | An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upl... |
| CVE-2021-26384 | HIGH | 7.8 | 0.2% | Jul 14, 2022 | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info da... |
| CVE-2021-45492 | HIGH | 7.8 | 0.3% | Jul 14, 2022 | In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be th... |
| CVE-2021-46741 | HIGH | 7.5 | 0.6% | Jul 12, 2022 | The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of... |
| CVE-2021-41396 | HIGH | 7.5 | 1.2% | Jul 12, 2022 | Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a shor... |
| CVE-2021-40012 | HIGH | 7.5 | 0.7% | Jul 12, 2022 | Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitatio... |
| CVE-2021-39999 | HIGH | 7.5 | 0.6% | Jul 12, 2022 | There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploi... |
| CVE-2021-38289 | HIGH | 8.8 | 1.2% | Jul 12, 2022 | An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allow... |
| CVE-2021-36668 | HIGH | 7.8 | 0.6% | Jul 12, 2022 | URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parame... |
| CVE-2021-36667 | HIGH | 7.8 | 1.5% | Jul 12, 2022 | Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via craf... |
| CVE-2021-36666 | HIGH | 7.8 | 0.4% | Jul 12, 2022 | An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDeco... |
| CVE-2021-36665 | HIGH | 7.8 | 0.5% | Jul 12, 2022 | An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgr... |
| CVE-2021-44221 | HIGH | 7.5 | 1.2% | Jul 12, 2022 | A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not p... |
| CVE-2021-41037 | HIGH | 8 | 0.7% | Jul 8, 2022 | In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoin... |
| CVE-2021-31645 | HIGH | 7.5 | 1.7% | Jul 7, 2022 | An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the conn... |
| CVE-2021-4234 | HIGH | 7.5 | 0.8% | Jul 6, 2022 | OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset pac... |
| CVE-2021-3697 | HIGH | 7 | 0.4% | Jul 6, 2022 | A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written... |
| CVE-2021-23163 | HIGH | 8.8 | 0.3% | Jul 6, 2022 | JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now