2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0159 | HIGH | 7.8 | 0.3% | May 12, 2022 | Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user... |
| CVE-2021-0154 | HIGH | 7.8 | 0.3% | May 12, 2022 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e... |
| CVE-2021-0153 | HIGH | 7.8 | 0.3% | May 12, 2022 | Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable ... |
| CVE-2021-0126 | HIGH | 8 | 0.4% | May 12, 2022 | Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to... |
| CVE-2021-33317 | HIGH | 7.5 | 0.9% | May 11, 2022 | The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability... |
| CVE-2021-43066 | HIGH | 7.8 | 0.2% | May 11, 2022 | A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below,... |
| CVE-2021-44167 | HIGH | 7.5 | 0.5% | May 11, 2022 | An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 ... |
| CVE-2021-42651 | HIGH | 8.8 | 1.5% | May 11, 2022 | A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated ... |
| CVE-2021-37851 | HIGH | 7.8 | 0.2% | May 11, 2022 | Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair featu... |
| CVE-2021-34606 | HIGH | 7.3 | 0.4% | May 11, 2022 | A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, l... |
| CVE-2021-34605 | HIGH | 7.3 | 2.3% | May 11, 2022 | A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitra... |
| CVE-2021-3254 | HIGH | 7.5 | 1.7% | May 11, 2022 | Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap. |
| CVE-2021-39738 | HIGH | 7.8 | 0.1% | May 10, 2022 | In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This co... |
| CVE-2021-46771 | HIGH | 7.8 | 0.3% | May 10, 2022 | Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrar... |
| CVE-2021-43010 | HIGH | 7.5 | 1.0% | May 10, 2022 | In Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection. Attackers can bypass access to sensit... |
| CVE-2021-26408 | HIGH | 7.1 | 0.3% | May 10, 2022 | Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potent... |
| CVE-2021-26370 | HIGH | 7.1 | 0.2% | May 10, 2022 | Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious... |
| CVE-2021-26353 | HIGH | 7.8 | 0.3% | May 10, 2022 | Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partiall... |
| CVE-2021-26332 | HIGH | 7.1 | 0.2% | May 10, 2022 | Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availabili... |
| CVE-2021-26324 | HIGH | 7.8 | 0.3% | May 10, 2022 | A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. |
| CVE-2021-41545 | HIGH | 7.5 | 0.9% | May 10, 2022 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.... |
| CVE-2021-20479 | HIGH | 7.5 | 0.6% | May 9, 2022 | IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could a... |
| CVE-2021-27767 | HIGH | 7.8 | 0.2% | May 6, 2022 | The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that c... |
| CVE-2021-27766 | HIGH | 7.8 | 0.2% | May 6, 2022 | The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that co... |
| CVE-2021-27765 | HIGH | 7.8 | 0.3% | May 6, 2022 | The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability tha... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now