2021 CVE Vulnerabilities
23,445 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0889 | CRITICAL | 9.8 | 1.6% | Dec 15, 2021 | In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to ... |
| CVE-2021-42216 | CRITICAL | 9.8 | 1.4% | Dec 15, 2021 | A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php. |
| CVE-2021-44655 | CRITICAL | 9.8 | 6.0% | Dec 15, 2021 | Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. A... |
| CVE-2021-44653 | CRITICAL | 9.8 | 6.0% | Dec 15, 2021 | Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel auth... |
| CVE-2021-43907 | CRITICAL | 9.8 | 3.8% | Dec 15, 2021 | Visual Studio Code WSL Extension Remote Code Execution Vulnerability |
| CVE-2021-43905 | CRITICAL | 9.6 | 2.8% | Dec 15, 2021 | Microsoft Office app Remote Code Execution Vulnerability |
| CVE-2021-43899 | CRITICAL | 9.8 | 2.4% | Dec 15, 2021 | Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability |
| CVE-2021-43882 | CRITICAL | 9.8 | 2.4% | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
| CVE-2021-43225 | CRITICAL | 9.8 | 2.8% | Dec 15, 2021 | Bot Framework SDK Remote Code Execution Vulnerability |
| CVE-2021-43217 | CRITICAL | 9.8 | 6.4% | Dec 15, 2021 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
| CVE-2021-43215 | CRITICAL | 9.8 | 2.7% | Dec 15, 2021 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution |
| CVE-2021-43214 | CRITICAL | 9.8 | 1.7% | Dec 15, 2021 | Web Media Extensions Remote Code Execution Vulnerability |
| CVE-2021-42313 | CRITICAL | 10 | 3.8% | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
| CVE-2021-42311 | CRITICAL | 10 | 4.0% | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
| CVE-2021-42310 | CRITICAL | 9.8 | 2.0% | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
| CVE-2021-43113 | CRITICAL | 9.8 | 5.2% | Dec 15, 2021 | iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mi... |
| CVE-2021-42945 | CRITICAL | 9.8 | 1.0% | Dec 15, 2021 | A SQL Injection vulnerability exists in ZZCMS 2021 via the askbigclassid parameter in /admin/ask.php. |
| CVE-2021-41560 | CRITICAL | 9.8 | 11.1% | Dec 15, 2021 | OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUti... |
| CVE-2021-41844 | CRITICAL | 9.8 | 1.1% | Dec 15, 2021 | Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data. |
| CVE-2021-45046 | CRITICAL | 9 | 100.0% | Dec 14, 2021 | It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configu... |
| CVE-2021-40883 | CRITICAL | 9.8 | 3.0% | Dec 14, 2021 | A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins. |
| CVE-2021-44042 | CRITICAL | 9.8 | 1.1% | Dec 14, 2021 | An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the... |
| CVE-2021-44041 | CRITICAL | 9.8 | 1.7% | Dec 14, 2021 | UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget a... |
| CVE-2021-44231 | CRITICAL | 9.8 | 1.3% | Dec 14, 2021 | Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An att... |
| CVE-2021-42064 | CRITICAL | 9.8 | 1.1% | Dec 14, 2021 | If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterize... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now