2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-1587HIGH8.6A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as ...
CVE-2021-1586HIGH8.6A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in App...
CVE-2021-1584MEDIUM6.7A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow ...
CVE-2021-1583MEDIUM4.4A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Ap...
CVE-2021-1582MEDIUM5.4A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could all...
CVE-2021-1581CRITICAL9.1Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or...
CVE-2021-1580HIGH7.2Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or...
CVE-2021-1579HIGH8.8A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat...
CVE-2021-1578HIGH8.8A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat...
CVE-2021-1577CRITICAL9.1A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat...
CVE-2021-3713HIGH7.4An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0...
CVE-2021-3605MEDIUM5.5There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a ...
CVE-2021-39159CRITICAL9.8BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments...
CVE-2021-33015HIGH7.8Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This c...
CVE-2021-32995HIGH7.8Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This c...
CVE-2021-32975HIGH7.8Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This c...
CVE-2021-31989MEDIUM5.3A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions ex...
CVE-2021-22256MEDIUM5.4Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry...
CVE-2021-22250MEDIUM5.4Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation ...
CVE-2021-22247MEDIUM4.3Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD...
CVE-2021-22245LOW2.7Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in...
CVE-2021-22244MEDIUM6.5Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a repo...
CVE-2021-22243MEDIUM4.3Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL m...
CVE-2021-22242MEDIUM5.4Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a ...
CVE-2021-22237MEDIUM4.9Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if imperso...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now