2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4229 | HIGH | 8.8 | 1.3% | May 24, 2022 | A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the cryp... |
| CVE-2021-42655 | HIGH | 8.8 | 1.1% | May 24, 2022 | SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. |
| CVE-2021-42586 | HIGH | 8.8 | 1.0% | May 23, 2022 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. |
| CVE-2021-42585 | HIGH | 8.8 | 1.0% | May 23, 2022 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted ... |
| CVE-2021-30028 | HIGH | 7.2 | 1.3% | May 20, 2022 | SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account) ... |
| CVE-2021-32934 | HIGH | 7.5 | 0.6% | May 19, 2022 | The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not... |
| CVE-2021-26631 | HIGH | 7.5 | 1.0% | May 19, 2022 | Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote... |
| CVE-2021-41938 | HIGH | 7.2 | 1.0% | May 19, 2022 | An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulne... |
| CVE-2021-42704 | HIGH | 7.8 | 1.3% | May 18, 2022 | Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code. |
| CVE-2021-42852 | HIGH | 8 | 0.8% | May 18, 2022 | A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authent... |
| CVE-2021-42850 | HIGH | 7.8 | 0.2% | May 18, 2022 | A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud S... |
| CVE-2021-3969 | HIGH | 7 | 1.8% | May 18, 2022 | A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System I... |
| CVE-2021-3922 | HIGH | 7 | 1.8% | May 18, 2022 | A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation,... |
| CVE-2021-38872 | HIGH | 7.5 | 1.4% | May 17, 2022 | IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a re... |
| CVE-2021-42643 | HIGH | 8.8 | 1.6% | May 17, 2022 | cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script f... |
| CVE-2021-33025 | HIGH | 7.8 | 0.3% | May 16, 2022 | xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges. |
| CVE-2021-23267 | HIGH | 8.8 | 0.8% | May 16, 2022 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat... |
| CVE-2021-25119 | HIGH | 7.2 | 1.4% | May 16, 2022 | The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating t... |
| CVE-2021-42870 | HIGH | 7.5 | 1.0% | May 16, 2022 | ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request. |
| CVE-2021-41965 | HIGH | 8.8 | 1.1% | May 15, 2022 | A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue ... |
| CVE-2021-33013 | HIGH | 7.5 | 0.8% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information. |
| CVE-2021-33009 | HIGH | 7.5 | 1.1% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file s... |
| CVE-2021-33005 | HIGH | 7.5 | 1.4% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary ... |
| CVE-2021-27505 | HIGH | 7.5 | 1.0% | May 13, 2022 | mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing informa... |
| CVE-2021-46789 | HIGH | 7.5 | 0.6% | May 13, 2022 | Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now