2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-22236HIGH8.8Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client appl...
CVE-2021-21869HIGH7.8An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODE...
CVE-2021-21850HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21849HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21848HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21842HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21841HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21840HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21836HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21835HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21834HIGH8.8An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Adv...
CVE-2021-21778HIGH7.5A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET...
CVE-2021-1523HIGH8.6A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow ...
CVE-2021-39160HIGH8.8nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, vi...
CVE-2021-39136MEDIUM5.4baserCMS is an open source content management system with a focus on Japanese language support. In affected versions the...
CVE-2021-33605MEDIUM4.3Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to...
CVE-2021-33886HIGH8.8An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticate...
CVE-2021-33885CRITICAL9.8An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remot...
CVE-2021-33884CRITICAL9.1An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remote...
CVE-2021-33883HIGH7.5A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remot...
CVE-2021-33882HIGH8.6A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote a...
CVE-2021-39112MEDIUM4.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL v...
CVE-2021-40089LOW2.3An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to i...
CVE-2021-40088MEDIUM5.4An issue was discovered in PrimeKey EJBCA before 7.6.0. CMP RA Mode can be configured to use a known client certificate ...
CVE-2021-40087LOW2.7An issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias configurations of variou...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now