2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-28495CRITICAL9.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio...
CVE-2021-28494HIGH8.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio...
CVE-2021-28493HIGH7.8In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditio...
CVE-2021-26608CRITICAL9.8An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware Activ...
CVE-2021-40223MEDIUM5.4Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configur...
CVE-2021-40222HIGH7.2Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code exec...
CVE-2021-39459HIGH7.2Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS u...
CVE-2021-39458MEDIUM6.5Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS u...
CVE-2021-38408CRITICAL9.8A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper va...
CVE-2021-36871MEDIUM5.4Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plu...
CVE-2021-36870MEDIUM5.4Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (version...
CVE-2021-26603HIGH7.8A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. ...
CVE-2021-20118MEDIUM6.7Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth...
CVE-2021-20117MEDIUM6.7Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an auth...
CVE-2021-37579CRITICAL9.8The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the con...
CVE-2021-36161CRITICAL9.8Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE for ...
CVE-2021-30295HIGH7.8Possible heap overflow due to improper validation of local variable while storing current task information locally in Sn...
CVE-2021-30294MEDIUM5.5Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon ...
CVE-2021-30290HIGH7Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Sna...
CVE-2021-1974HIGH7.5Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon A...
CVE-2021-1971HIGH7.5Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con...
CVE-2021-1963MEDIUM6.7Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, S...
CVE-2021-1962MEDIUM6.7Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for inp...
CVE-2021-1961MEDIUM6.7Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdrag...
CVE-2021-1960MEDIUM6.5Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now