2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1939 | MEDIUM | 5.5 | 0.1% | Sep 17, 2021 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdrag... |
| CVE-2021-3805 | HIGH | 7.5 | 2.0% | Sep 17, 2021 | object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
| CVE-2021-20828 | MEDIUM | 6.1 | 0.7% | Sep 17, 2021 | Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a r... |
| CVE-2021-20825 | MEDIUM | 6.1 | 0.7% | Sep 17, 2021 | Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and e... |
| CVE-2021-20791 | CRITICAL | 9.3 | 0.8% | Sep 17, 2021 | Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restr... |
| CVE-2021-20790 | CRITICAL | 9.6 | 1.2% | Sep 17, 2021 | Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execu... |
| CVE-2021-41314 | HIGH | 8.8 | 13.6% | Sep 16, 2021 | Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several fau... |
| CVE-2021-40670 | CRITICAL | 9.8 | 1.2% | Sep 16, 2021 | SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/c... |
| CVE-2021-40669 | CRITICAL | 9.8 | 1.2% | Sep 16, 2021 | SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/i... |
| CVE-2021-29842 | MEDIUM | 5.3 | 1.3% | Sep 16, 2021 | IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to e... |
| CVE-2021-29825 | HIGH | 7.5 | 1.5% | Sep 16, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_... |
| CVE-2021-29763 | MEDIUM | 5.1 | 0.2% | Sep 16, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could al... |
| CVE-2021-29752 | MEDIUM | 4.4 | 1.0% | Sep 16, 2021 | IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privilege... |
| CVE-2021-41079 | HIGH | 7.5 | 7.2% | Sep 16, 2021 | Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets... |
| CVE-2021-40438 | CRITICAL | 9 | 100.0% | Sep 16, 2021 | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. Th... |
| CVE-2021-39275 | CRITICAL | 9.8 | 36.3% | Sep 16, 2021 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted d... |
| CVE-2021-39239 | HIGH | 7.5 | 4.0% | Sep 16, 2021 | A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External... |
| CVE-2021-39214 | CRITICAL | 9.8 | 1.1% | Sep 16, 2021 | mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or ser... |
| CVE-2021-39208 | MEDIUM | 4.3 | 1.2% | Sep 16, 2021 | SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 ar... |
| CVE-2021-36160 | HIGH | 7.5 | 62.9% | Sep 16, 2021 | A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This ... |
| CVE-2021-34798 | HIGH | 7.5 | 64.5% | Sep 16, 2021 | Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and ... |
| CVE-2021-27341 | CRITICAL | 9.8 | 2.0% | Sep 16, 2021 | OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via t... |
| CVE-2021-27340 | MEDIUM | 6.1 | 1.1% | Sep 16, 2021 | OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" pa... |
| CVE-2021-34576 | MEDIUM | 4.3 | 0.4% | Sep 16, 2021 | In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give... |
| CVE-2021-34573 | MEDIUM | 5.5 | 0.2% | Sep 16, 2021 | In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now