2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-44915 | HIGH | 7.2 | 0.8% | Jul 5, 2022 | Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category. |
| CVE-2021-43116 | HIGH | 8.8 | 5.5% | Jul 5, 2022 | An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on l... |
| CVE-2021-41995 | HIGH | 7.5 | 0.7% | Jun 30, 2022 | A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to ... |
| CVE-2021-38941 | HIGH | 8.1 | 0.8% | Jun 30, 2022 | IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable t... |
| CVE-2021-37770 | HIGH | 7.2 | 1.1% | Jun 30, 2022 | Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upl... |
| CVE-2021-3434 | HIGH | 7.8 | 0.2% | Jun 28, 2022 | Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For... |
| CVE-2021-3432 | HIGH | 7.5 | 0.8% | Jun 28, 2022 | Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more... |
| CVE-2021-3431 | HIGH | 7.5 | 0.8% | Jun 28, 2022 | Assertion reachable with repeated LL_FEATURE_REQ. Zephyr versions >= v2.5.0 contain Reachable Assertion (CWE-617). For m... |
| CVE-2021-3430 | HIGH | 7.5 | 0.8% | Jun 28, 2022 | Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617... |
| CVE-2021-40553 | HIGH | 8.8 | 2.2% | Jun 28, 2022 | piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor. |
| CVE-2021-41690 | HIGH | 7.5 | 1.6% | Jun 28, 2022 | DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recor... |
| CVE-2021-41689 | HIGH | 7.5 | 1.7% | Jun 28, 2022 | DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would que... |
| CVE-2021-41688 | HIGH | 7.5 | 1.6% | Jun 28, 2022 | DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still use... |
| CVE-2021-41687 | HIGH | 7.5 | 1.6% | Jun 28, 2022 | DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does no... |
| CVE-2021-41460 | HIGH | 7.5 | 6.8% | Jun 28, 2022 | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. |
| CVE-2021-40941 | HIGH | 7.5 | 1.1% | Jun 27, 2022 | In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array<AP4_TrunAtom::Entry>::EnsureCapaci... |
| CVE-2021-33654 | HIGH | 7.5 | 0.8% | Jun 27, 2022 | When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will caus... |
| CVE-2021-33653 | HIGH | 7.5 | 0.8% | Jun 27, 2022 | When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter b... |
| CVE-2021-33652 | HIGH | 7.5 | 0.8% | Jun 27, 2022 | When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it wil... |
| CVE-2021-33651 | HIGH | 7.5 | 0.8% | Jun 27, 2022 | When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it wil... |
| CVE-2021-33650 | HIGH | 7.5 | 0.9% | Jun 27, 2022 | When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three,... |
| CVE-2021-33649 | HIGH | 7.5 | 0.9% | Jun 27, 2022 | When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater tha... |
| CVE-2021-33648 | HIGH | 7.5 | 0.9% | Jun 27, 2022 | When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operator... |
| CVE-2021-33647 | HIGH | 7.5 | 0.9% | Jun 27, 2022 | When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will ... |
| CVE-2021-40901 | HIGH | 7.5 | 1.0% | Jun 27, 2022 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating c... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now