2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39173 | HIGH | 8.8 | 2.4% | Aug 27, 2021 | Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges ... |
| CVE-2021-39172 | HIGH | 8.8 | 29.2% | Aug 27, 2021 | Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges... |
| CVE-2021-39171 | HIGH | 7.5 | 1.3% | Aug 27, 2021 | Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. Prior to version 3... |
| CVE-2021-32759 | HIGH | 7.2 | 1.3% | Aug 27, 2021 | OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in ve... |
| CVE-2021-3264 | HIGH | 7.2 | 0.9% | Aug 27, 2021 | SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php. |
| CVE-2021-28700 | MEDIUM | 4.9 | 1.9% | Aug 27, 2021 | xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged... |
| CVE-2021-28699 | MEDIUM | 5.5 | 0.4% | Aug 27, 2021 | inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant ... |
| CVE-2021-28698 | MEDIUM | 5.5 | 0.3% | Aug 27, 2021 | long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the g... |
| CVE-2021-28697 | HIGH | 7.8 | 0.3% | Aug 27, 2021 | grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pa... |
| CVE-2021-28696 | MEDIUM | 6.8 | 0.4% | Aug 27, 2021 | IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/... |
| CVE-2021-28695 | MEDIUM | 6.8 | 0.4% | Aug 27, 2021 | IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/... |
| CVE-2021-28694 | MEDIUM | 6.8 | 0.4% | Aug 27, 2021 | IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/... |
| CVE-2021-28233 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in o... |
| CVE-2021-32758 | HIGH | 7.2 | 2.0% | Aug 27, 2021 | OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layou... |
| CVE-2021-23434 | HIGH | 8.6 | 1.9% | Aug 27, 2021 | This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-1525... |
| CVE-2021-36531 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer with... |
| CVE-2021-36530 | HIGH | 8.8 | 1.1% | Aug 27, 2021 | ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffe... |
| CVE-2021-29744 | MEDIUM | 5.4 | 0.5% | Aug 27, 2021 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to em... |
| CVE-2021-40153 | HIGH | 8.1 | 2.5% | Aug 27, 2021 | squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by ... |
| CVE-2021-39169 | MEDIUM | 5.4 | 0.7% | Aug 27, 2021 | Misskey is a decentralized microblogging platform. In versions of Misskey prior to 12.51.0, malicious actors can use the... |
| CVE-2021-35342 | HIGH | 7.5 | 1.1% | Aug 27, 2021 | The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender E... |
| CVE-2021-40142 | HIGH | 7.5 | 2.6% | Aug 27, 2021 | In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS)... |
| CVE-2021-39168 | CRITICAL | 9.8 | 1.6% | Aug 27, 2021 | OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allo... |
| CVE-2021-39167 | CRITICAL | 9.8 | 1.6% | Aug 27, 2021 | OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allo... |
| CVE-2021-39165 | MEDIUM | 6.5 | 9.8% | Aug 26, 2021 | Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in th... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now