2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0625 | MEDIUM | 6.7 | 0.1% | Oct 25, 2021 | In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege ... |
| CVE-2021-0618 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa... |
| CVE-2021-0617 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa... |
| CVE-2021-0616 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa... |
| CVE-2021-0615 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local informatio... |
| CVE-2021-0614 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info... |
| CVE-2021-0613 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info... |
| CVE-2021-0414 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informa... |
| CVE-2021-0413 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa... |
| CVE-2021-0412 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa... |
| CVE-2021-0411 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local informatio... |
| CVE-2021-0410 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info... |
| CVE-2021-0409 | MEDIUM | 5.5 | 0.1% | Oct 25, 2021 | In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local info... |
| CVE-2021-40865 | CRITICAL | 9.8 | 65.6% | Oct 25, 2021 | An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre... |
| CVE-2021-38294 | CRITICAL | 9.8 | 84.5% | Oct 25, 2021 | A Command Injection vulnerability exists in the getTopologyHistory service of the Apache Storm 2.x prior to 2.2.1 and Ap... |
| CVE-2021-35231 | MEDIUM | 6.7 | 0.3% | Oct 25, 2021 | As a result of an unquoted service path vulnerability present in the Kiwi Syslog Server Installation Wizard, a local att... |
| CVE-2021-25977 | MEDIUM | 5.4 | 0.6% | Oct 25, 2021 | In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creat... |
| CVE-2021-40527 | HIGH | 7.5 | 0.7% | Oct 25, 2021 | Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and in... |
| CVE-2021-40526 | MEDIUM | 5.3 | 0.9% | Oct 25, 2021 | Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker ... |
| CVE-2021-40371 | CRITICAL | 9.8 | 6.9% | Oct 25, 2021 | Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, ... |
| CVE-2021-21703 | HIGH | 7 | 1.3% | Oct 25, 2021 | In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI w... |
| CVE-2021-42258 | CRITICAL | 9.8 | 73.3% | Oct 22, 2021 | BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution... |
| CVE-2021-42840 | HIGH | 8.8 | 58.9% | Oct 22, 2021 | SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumsta... |
| CVE-2021-42556 | MEDIUM | 5.5 | 0.9% | Oct 22, 2021 | Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to lo... |
| CVE-2021-41171 | HIGH | 8.8 | 1.9% | Oct 22, 2021 | eLabFTW is an open source electronic lab notebook manager for research teams. In versions of eLabFTW before 4.1.0, it al... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now