2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-22450MEDIUM5.5A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to c...
CVE-2021-22436CRITICAL9.1There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serv...
CVE-2021-22407MEDIUM5.3There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service c...
CVE-2021-22406HIGH7.5There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cau...
CVE-2021-22405HIGH7.5There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service a...
CVE-2021-22404MEDIUM5.3There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affe...
CVE-2021-22403CRITICAL9.8There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerab...
CVE-2021-22402HIGH7.5There is a DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS attacks.
CVE-2021-22401HIGH7.5There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect servic...
CVE-2021-22278MEDIUM6.7A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be ...
CVE-2021-37915HIGH8.8An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From the limited configuratio...
CVE-2021-37748HIGH8.8Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.2...
CVE-2021-43057HIGH7.8An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux h...
CVE-2021-43056MEDIUM5.5An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the hos...
CVE-2021-3906MEDIUM6.5bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
CVE-2021-3904MEDIUM5.4grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41191HIGH7.5Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allow...
CVE-2021-3903HIGH7.8vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3901HIGH8.8firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-25219MEDIUM5.3In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Sup...
CVE-2021-1117MEDIUM5.5Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker th...
CVE-2021-1116MEDIUM5.5NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL poi...
CVE-2021-1115MEDIUM6.5NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for priva...
CVE-2021-40125MEDIUM6.5A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA)...
CVE-2021-40118HIGH7.5A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now