2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32835 | CRITICAL | 9.9 | 4.4% | Sep 9, 2021 | Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti... |
| CVE-2021-32834 | CRITICAL | 9.9 | 0.9% | Sep 9, 2021 | Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti... |
| CVE-2021-32833 | HIGH | 8.6 | 1.2% | Sep 9, 2021 | Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary ... |
| CVE-2021-40818 | CRITICAL | 9.8 | 1.4% | Sep 8, 2021 | scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webaut... |
| CVE-2021-40814 | CRITICAL | 9.8 | 1.0% | Sep 8, 2021 | The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection. |
| CVE-2021-40812 | MEDIUM | 6.5 | 1.5% | Sep 8, 2021 | The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and ... |
| CVE-2021-36440 | CRITICAL | 9.8 | 4.7% | Sep 8, 2021 | Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' paramete... |
| CVE-2021-30605 | HIGH | 7.8 | 0.1% | Sep 8, 2021 | Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access ri... |
| CVE-2021-40797 | MEDIUM | 6.5 | 1.7% | Sep 8, 2021 | An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before... |
| CVE-2021-40537 | LOW | 2.7 | 0.7% | Sep 8, 2021 | Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap ... |
| CVE-2021-38388 | HIGH | 8.8 | 0.9% | Sep 8, 2021 | Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the a... |
| CVE-2021-36216 | HIGH | 7.8 | 0.4% | Sep 8, 2021 | LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection. |
| CVE-2021-36215 | MEDIUM | 5.3 | 0.8% | Sep 8, 2021 | LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling. |
| CVE-2021-32805 | MEDIUM | 6.1 | 0.7% | Sep 8, 2021 | Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-App... |
| CVE-2021-31274 | MEDIUM | 5.4 | 0.8% | Sep 8, 2021 | In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization ... |
| CVE-2021-40346 | HIGH | 7.5 | 56.1% | Sep 8, 2021 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request... |
| CVE-2021-3055 | MEDIUM | 6.5 | 1.0% | Sep 8, 2021 | An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interf... |
| CVE-2021-3054 | MEDIUM | 6.6 | 0.9% | Sep 8, 2021 | A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface enab... |
| CVE-2021-3053 | HIGH | 7.5 | 1.0% | Sep 8, 2021 | An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enab... |
| CVE-2021-3052 | MEDIUM | 5.4 | 0.6% | Sep 8, 2021 | A reflected cross-site scripting (XSS) vulnerability in the Palo Alto Network PAN-OS web interface enables an authentica... |
| CVE-2021-3051 | HIGH | 8.1 | 0.6% | Sep 8, 2021 | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enable... |
| CVE-2021-3049 | MEDIUM | 4.3 | 0.5% | Sep 8, 2021 | An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-b... |
| CVE-2021-33982 | HIGH | 7.5 | 1.1% | Sep 8, 2021 | An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which... |
| CVE-2021-33981 | MEDIUM | 4.3 | 0.8% | Sep 8, 2021 | An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app v... |
| CVE-2021-28732 | — | — | — | Sep 8, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-28372. Reason: This candidate is a duplicate of ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now