2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37987 | HIGH | 8.8 | 0.8% | Nov 2, 2021 | Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit h... |
| CVE-2021-37986 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Too... |
| CVE-2021-37985 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow ... |
| CVE-2021-37984 | HIGH | 8.8 | 1.0% | Nov 2, 2021 | Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit h... |
| CVE-2021-37983 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-37982 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-37981 | CRITICAL | 9.6 | 1.0% | Nov 2, 2021 | Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the re... |
| CVE-2021-37980 | HIGH | 7.4 | 1.4% | Nov 2, 2021 | Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially ... |
| CVE-2021-37979 | HIGH | 8.8 | 1.7% | Nov 2, 2021 | heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to ... |
| CVE-2021-37978 | HIGH | 8.8 | 1.0% | Nov 2, 2021 | Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit he... |
| CVE-2021-37977 | HIGH | 8.8 | 0.9% | Nov 2, 2021 | Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exp... |
| CVE-2021-37960 | — | — | — | Nov 2, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-30631 | — | — | — | Nov 2, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-42754 | MEDIUM | 5 | 0.4% | Nov 2, 2021 | An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 ... |
| CVE-2021-41023 | MEDIUM | 5.5 | 0.2% | Nov 2, 2021 | A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated... |
| CVE-2021-41022 | HIGH | 7.8 | 0.2% | Nov 2, 2021 | A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute p... |
| CVE-2021-36187 | HIGH | 7.5 | 1.4% | Nov 2, 2021 | A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows... |
| CVE-2021-36186 | CRITICAL | 9.8 | 1.6% | Nov 2, 2021 | A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attac... |
| CVE-2021-36185 | HIGH | 8.8 | 1.9% | Nov 2, 2021 | A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM versio... |
| CVE-2021-36184 | MEDIUM | 6.5 | 1.0% | Nov 2, 2021 | A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.... |
| CVE-2021-36183 | HIGH | 7.8 | 0.3% | Nov 2, 2021 | An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and belo... |
| CVE-2021-36176 | MEDIUM | 6.1 | 0.6% | Nov 2, 2021 | Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a ... |
| CVE-2021-36174 | HIGH | 7.5 | 0.8% | Nov 2, 2021 | A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6... |
| CVE-2021-41238 | HIGH | 7.5 | 0.9% | Nov 2, 2021 | Hangfire is an open source system to perform background job processing in a .NET or .NET Core applications. No Windows S... |
| CVE-2021-41232 | CRITICAL | 9.8 | 1.5% | Nov 2, 2021 | Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now