2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30619 | MEDIUM | 6.5 | 3.3% | Sep 3, 2021 | Chromium: CVE-2021-30619 UI Spoofing in Autofill |
| CVE-2021-30618 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
| CVE-2021-30617 | MEDIUM | 6.5 | 3.5% | Sep 3, 2021 | Chromium: CVE-2021-30617 Policy bypass in Blink |
| CVE-2021-30616 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30616 Use after free in Media |
| CVE-2021-30615 | MEDIUM | 6.5 | 5.3% | Sep 3, 2021 | Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
| CVE-2021-30614 | HIGH | 8.8 | 4.2% | Sep 3, 2021 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
| CVE-2021-30613 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30613 Use after free in Base internals |
| CVE-2021-30612 | HIGH | 8.8 | 2.6% | Sep 3, 2021 | Chromium: CVE-2021-30612 Use after free in WebRTC |
| CVE-2021-30611 | HIGH | 8.8 | 2.6% | Sep 3, 2021 | Chromium: CVE-2021-30611 Use after free in WebRTC |
| CVE-2021-30610 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30610 Use after free in Extensions API |
| CVE-2021-30609 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30609 Use after free in Sign-In |
| CVE-2021-30608 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30608 Use after free in Web Share |
| CVE-2021-30607 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30607 Use after free in Permissions |
| CVE-2021-30606 | HIGH | 8.8 | 3.9% | Sep 3, 2021 | Chromium: CVE-2021-30606 Use after free in Blink |
| CVE-2021-39193 | MEDIUM | 5.3 | 1.2% | Sep 3, 2021 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a... |
| CVE-2021-40492 | MEDIUM | 6.1 | 2.3% | Sep 3, 2021 | A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary... |
| CVE-2021-23437 | HIGH | 7.5 | 2.9% | Sep 3, 2021 | The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb ... |
| CVE-2021-39192 | HIGH | 7.2 | 1.0% | Sep 3, 2021 | Ghost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.... |
| CVE-2021-39191 | MEDIUM | 6.1 | 1.6% | Sep 3, 2021 | mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Co... |
| CVE-2021-40494 | CRITICAL | 9.8 | 1.6% | Sep 3, 2021 | A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to ... |
| CVE-2021-40491 | MEDIUM | 6.5 | 0.9% | Sep 3, 2021 | The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they... |
| CVE-2021-40490 | HIGH | 7 | 0.3% | Sep 3, 2021 | A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux ker... |
| CVE-2021-38642 | MEDIUM | 6.1 | 1.1% | Sep 2, 2021 | Microsoft Edge for iOS Spoofing Vulnerability |
| CVE-2021-38641 | MEDIUM | 6.1 | 1.1% | Sep 2, 2021 | Microsoft Edge for Android Spoofing Vulnerability |
| CVE-2021-36930 | MEDIUM | 5.3 | 0.9% | Sep 2, 2021 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now