2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41437 | MEDIUM | 6.5 | 0.8% | Sep 26, 2022 | An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to cr... |
| CVE-2021-45035 | MEDIUM | 5.9 | 0.4% | Sep 23, 2022 | Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could al... |
| CVE-2021-3782 | MEDIUM | 6.6 | 0.3% | Sep 23, 2022 | An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. Th... |
| CVE-2021-27774 | MEDIUM | 5.4 | 0.3% | Sep 22, 2022 | User input included in error response, which could be used in a phishing attack. |
| CVE-2021-39190 | MEDIUM | 5.3 | 0.4% | Sep 22, 2022 | The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3... |
| CVE-2021-46835 | MEDIUM | 4.3 | 0.2% | Sep 20, 2022 | There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cau... |
| CVE-2021-46834 | MEDIUM | 5.5 | 0.2% | Sep 20, 2022 | A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resou... |
| CVE-2021-33081 | MEDIUM | 4.4 | 0.2% | Sep 20, 2022 | Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially en... |
| CVE-2021-33079 | MEDIUM | 4.4 | 0.2% | Sep 20, 2022 | Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially en... |
| CVE-2021-33076 | MEDIUM | 6.8 | 0.3% | Sep 20, 2022 | Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially e... |
| CVE-2021-42597 | MEDIUM | 5.4 | 0.4% | Sep 16, 2022 | A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , A... |
| CVE-2021-41731 | MEDIUM | 4.8 | 0.7% | Sep 16, 2022 | Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQ... |
| CVE-2021-44076 | MEDIUM | 4.8 | 0.6% | Sep 15, 2022 | An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allow... |
| CVE-2021-36568 | MEDIUM | 5.4 | 0.8% | Sep 13, 2022 | In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this cas... |
| CVE-2021-44425 | MEDIUM | 6.5 | 0.6% | Sep 12, 2022 | An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machin... |
| CVE-2021-40648 | MEDIUM | 5.5 | 0.3% | Sep 9, 2022 | In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, f... |
| CVE-2021-40647 | MEDIUM | 5.5 | 0.3% | Sep 9, 2022 | In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the ... |
| CVE-2021-36829 | MEDIUM | 4.8 | 0.5% | Sep 6, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenanc... |
| CVE-2021-43080 | MEDIUM | 5.4 | 0.4% | Sep 6, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version ... |
| CVE-2021-43076 | MEDIUM | 6.5 | 0.4% | Sep 6, 2022 | An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 an... |
| CVE-2021-44718 | MEDIUM | 5.9 | 0.6% | Sep 2, 2022 | wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sendi... |
| CVE-2021-35135 | MEDIUM | 5.5 | 0.1% | Sep 2, 2022 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdrago... |
| CVE-2021-35133 | MEDIUM | 6.7 | 0.1% | Sep 2, 2022 | Use after free in the synx driver issue while performing other functions during multiple invocation of synx release call... |
| CVE-2021-35113 | MEDIUM | 6.8 | 0.1% | Sep 2, 2022 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification... |
| CVE-2021-35109 | MEDIUM | 6.8 | 0.2% | Sep 2, 2022 | Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now