2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0424 | MEDIUM | 5.5 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local de... |
| CVE-2021-0423 | MEDIUM | 5.5 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to lo... |
| CVE-2021-0422 | MEDIUM | 5.5 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local de... |
| CVE-2021-0421 | MEDIUM | 5.5 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead t... |
| CVE-2021-23054 | MEDIUM | 6.1 | 0.6% | Sep 27, 2021 | On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.... |
| CVE-2021-20317 | MEDIUM | 4.4 | 0.4% | Sep 27, 2021 | A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add ... |
| CVE-2021-34570 | HIGH | 7.5 | 0.9% | Sep 27, 2021 | Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through spe... |
| CVE-2021-41580 | MEDIUM | 5.3 | 1.3% | Sep 27, 2021 | The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token... |
| CVE-2021-41385 | MEDIUM | 6.5 | 0.7% | Sep 27, 2021 | The third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an authenticated user to obtain... |
| CVE-2021-41329 | MEDIUM | 6.5 | 1.0% | Sep 27, 2021 | Datalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see query results not cons... |
| CVE-2021-40981 | HIGH | 7.3 | 0.4% | Sep 27, 2021 | ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the pu... |
| CVE-2021-40349 | MEDIUM | 5.3 | 1.1% | Sep 27, 2021 | e7d Speed Test (aka speedtest) 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET ... |
| CVE-2021-38299 | CRITICAL | 9.8 | 1.7% | Sep 27, 2021 | Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to... |
| CVE-2021-31606 | HIGH | 7.5 | 2.4% | Sep 27, 2021 | furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients. |
| CVE-2021-31605 | HIGH | 7.5 | 3.3% | Sep 27, 2021 | furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This ca... |
| CVE-2021-31604 | MEDIUM | 6.5 | 0.7% | Sep 27, 2021 | furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client. |
| CVE-2021-34351 | CRITICAL | 9.8 | 1.5% | Sep 27, 2021 | A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability ... |
| CVE-2021-34349 | HIGH | 7.2 | 1.5% | Sep 27, 2021 | A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability ... |
| CVE-2021-34348 | CRITICAL | 9.8 | 1.5% | Sep 27, 2021 | A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability ... |
| CVE-2021-41617 | HIGH | 7 | 2.5% | Sep 26, 2021 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalatio... |
| CVE-2021-3830 | MEDIUM | 5.4 | 0.5% | Sep 26, 2021 | btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-21742 | MEDIUM | 5.5 | 0.6% | Sep 25, 2021 | There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter s... |
| CVE-2021-40655 | HIGH | 7.5 | 87.0% | Sep 24, 2021 | An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name... |
| CVE-2021-40654 | MEDIUM | 6.5 | 1.8% | Sep 24, 2021 | An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by fo... |
| CVE-2021-41504 | HIGH | 8 | 0.5% | Sep 24, 2021 | An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authen... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now