2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-41072HIGH8.1squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-20...
CVE-2021-41054HIGH7.5tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the co...
CVE-2021-41033HIGH8.1In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerabl...
CVE-2021-33365MEDIUM5.5Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fi...
CVE-2021-33363MEDIUM5.5Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVE-2021-33361MEDIUM5.5Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVE-2021-32139MEDIUM5.5The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference...
CVE-2021-32138MEDIUM5.5The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a ...
CVE-2021-40824MEDIUM5.9A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix ...
CVE-2021-40823MEDIUM5.9A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a ...
CVE-2021-38833CRITICAL9.8SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute...
CVE-2021-33366MEDIUM5.5Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafte...
CVE-2021-33364MEDIUM5.5Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fil...
CVE-2021-33362HIGH7.8Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denia...
CVE-2021-3666CRITICAL9.8body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution...
CVE-2021-39212LOW3.6ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, m...
CVE-2021-33554HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a...
CVE-2021-33553HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a...
CVE-2021-33552HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a...
CVE-2021-33551HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a...
CVE-2021-33550HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a...
CVE-2021-33549HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow ...
CVE-2021-33548HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may a...
CVE-2021-33547HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow ...
CVE-2021-33546HIGH7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow ...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now