2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-26739 | CRITICAL | 9.8 | 1.6% | Nov 1, 2021 | SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attri... |
| CVE-2021-3705 | CRITICAL | 9.8 | 1.8% | Nov 1, 2021 | Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthori... |
| CVE-2021-29212 | CRITICAL | 9.8 | 13.5% | Nov 1, 2021 | A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versio... |
| CVE-2021-41646 | CRITICAL | 9.8 | 7.0% | Oct 29, 2021 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously... |
| CVE-2021-41644 | CRITICAL | 9.8 | 2.4% | Oct 29, 2021 | Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously craf... |
| CVE-2021-41643 | CRITICAL | 9.8 | 4.5% | Oct 29, 2021 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload fie... |
| CVE-2021-41676 | CRITICAL | 9.8 | 1.4% | Oct 29, 2021 | An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the login function in actions... |
| CVE-2021-41674 | CRITICAL | 9.8 | 1.7% | Oct 29, 2021 | An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email parameter in /admin/logi... |
| CVE-2021-3756 | CRITICAL | 9.8 | 1.0% | Oct 29, 2021 | libmysofa is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-41194 | CRITICAL | 9.8 | 1.3% | Oct 28, 2021 | FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to Jupy... |
| CVE-2021-36548 | CRITICAL | 9.8 | 3.2% | Oct 28, 2021 | A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=bl... |
| CVE-2021-36547 | CRITICAL | 9.8 | 3.2% | Oct 28, 2021 | A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attacker... |
| CVE-2021-3823 | CRITICAL | 9.8 | 1.0% | Oct 28, 2021 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone... |
| CVE-2021-37002 | CRITICAL | 9.8 | 0.7% | Oct 28, 2021 | There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ... |
| CVE-2021-36990 | CRITICAL | 9.8 | 0.7% | Oct 28, 2021 | There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability... |
| CVE-2021-36989 | CRITICAL | 9.8 | 0.7% | Oct 28, 2021 | There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate pe... |
| CVE-2021-36986 | CRITICAL | 9.8 | 0.7% | Oct 28, 2021 | There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability... |
| CVE-2021-22474 | CRITICAL | 9.8 | 0.7% | Oct 28, 2021 | There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause pro... |
| CVE-2021-22436 | CRITICAL | 9.1 | 0.7% | Oct 28, 2021 | There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serv... |
| CVE-2021-22403 | CRITICAL | 9.8 | 0.9% | Oct 28, 2021 | There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerab... |
| CVE-2021-41589 | CRITICAL | 9.8 | 2.3% | Oct 27, 2021 | In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and... |
| CVE-2021-37371 | CRITICAL | 9.8 | 2.1% | Oct 26, 2021 | Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login... |
| CVE-2021-26607 | CRITICAL | 9.8 | 1.8% | Oct 26, 2021 | An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary com... |
| CVE-2021-41873 | CRITICAL | 10 | 0.9% | Oct 26, 2021 | Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unau... |
| CVE-2021-42343 | CRITICAL | 9.8 | 2.9% | Oct 26, 2021 | An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters starte... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now