2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41641 | HIGH | 8.4 | 0.4% | Jun 12, 2022 | Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the D... |
| CVE-2021-41738 | HIGH | 8.8 | 1.7% | Jun 11, 2022 | ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticate... |
| CVE-2021-44582 | HIGH | 8.8 | 1.4% | Jun 10, 2022 | A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remot... |
| CVE-2021-44117 | HIGH | 8.8 | 1.3% | Jun 10, 2022 | A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/si... |
| CVE-2021-40961 | HIGH | 8.8 | 1.6% | Jun 9, 2022 | CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variab... |
| CVE-2021-40668 | HIGH | 8.1 | 1.1% | Jun 9, 2022 | The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability t... |
| CVE-2021-36710 | HIGH | 8.8 | 0.3% | Jun 8, 2022 | ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT addr... |
| CVE-2021-37589 | HIGH | 7.5 | 29.7% | Jun 7, 2022 | Virtua Cobranca before 12R allows SQL Injection on the login page. |
| CVE-2021-39947 | HIGH | 7.5 | 0.8% | Jun 6, 2022 | In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2... |
| CVE-2021-41932 | HIGH | 8.8 | 1.0% | Jun 6, 2022 | A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to... |
| CVE-2021-42893 | HIGH | 7.5 | 1.4% | Jun 3, 2022 | In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization th... |
| CVE-2021-42891 | HIGH | 7.5 | 1.4% | Jun 3, 2022 | In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization. |
| CVE-2021-42889 | HIGH | 7.5 | 1.4% | Jun 3, 2022 | In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without author... |
| CVE-2021-42886 | HIGH | 7.5 | 2.0% | Jun 3, 2022 | TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib conf... |
| CVE-2021-42877 | HIGH | 7.5 | 2.3% | Jun 2, 2022 | TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_... |
| CVE-2021-45982 | HIGH | 8.8 | 0.9% | Jun 2, 2022 | NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user. |
| CVE-2021-44080 | HIGH | 7.2 | 23.7% | Jun 2, 2022 | A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged... |
| CVE-2021-43308 | HIGH | 7.5 | 1.0% | Jun 2, 2022 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package,... |
| CVE-2021-43307 | HIGH | 7.5 | 1.5% | Jun 2, 2022 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an at... |
| CVE-2021-43306 | HIGH | 7.5 | 1.3% | Jun 2, 2022 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when ... |
| CVE-2021-42204 | HIGH | 7.8 | 1.2% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() locate... |
| CVE-2021-42203 | HIGH | 7.8 | 1.1% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_Defin... |
| CVE-2021-42201 | HIGH | 7.8 | 1.1% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located... |
| CVE-2021-42199 | HIGH | 7.8 | 1.0% | Jun 2, 2022 | An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_Defi... |
| CVE-2021-42197 | HIGH | 7.8 | 1.1% | Jun 2, 2022 | An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allo... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now