2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39268 | MEDIUM | 6.1 | 1.4% | Aug 18, 2021 | Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introd... |
| CVE-2021-39267 | MEDIUM | 6.1 | 2.0% | Aug 18, 2021 | Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introd... |
| CVE-2021-39250 | MEDIUM | 5.4 | 0.8% | Aug 17, 2021 | Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution... |
| CVE-2021-39249 | MEDIUM | 6.1 | 0.8% | Aug 17, 2021 | Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of up... |
| CVE-2021-39131 | HIGH | 7.5 | 1.9% | Aug 17, 2021 | ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buf... |
| CVE-2021-0284 | HIGH | 7.5 | 1.0% | Aug 17, 2021 | A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific seq... |
| CVE-2021-28372 | HIGH | 8.3 | 2.5% | Aug 17, 2021 | ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a ... |
| CVE-2021-39248 | MEDIUM | 6.1 | 0.6% | Aug 17, 2021 | Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a di... |
| CVE-2021-39247 | MEDIUM | 6.5 | 0.9% | Aug 17, 2021 | Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to is_last_single_ascii in code1.c, and rs... |
| CVE-2021-38702 | MEDIUM | 6.1 | 6.9% | Aug 17, 2021 | Cyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/ft.php?u=[XSS] attacks. |
| CVE-2021-29990 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed ev... |
| CVE-2021-29989 | HIGH | 8.8 | 1.3% | Aug 17, 2021 | Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed ev... |
| CVE-2021-29988 | HIGH | 8.8 | 1.4% | Aug 17, 2021 | Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory... |
| CVE-2021-29987 | MEDIUM | 6.5 | 0.9% | Aug 17, 2021 | After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be disp... |
| CVE-2021-29986 | HIGH | 8.1 | 1.3% | Aug 17, 2021 | A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note:... |
| CVE-2021-29985 | HIGH | 8.8 | 1.5% | Aug 17, 2021 | A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash... |
| CVE-2021-29984 | HIGH | 8.8 | 1.4% | Aug 17, 2021 | Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered du... |
| CVE-2021-29983 | MEDIUM | 6.5 | 0.7% | Aug 17, 2021 | Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause ... |
| CVE-2021-29982 | MEDIUM | 6.5 | 1.1% | Aug 17, 2021 | Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the poten... |
| CVE-2021-29981 | HIGH | 8.8 | 1.0% | Aug 17, 2021 | An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures... |
| CVE-2021-29980 | HIGH | 8.8 | 1.4% | Aug 17, 2021 | Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potenti... |
| CVE-2021-21832 | CRITICAL | 9.8 | 1.2% | Aug 17, 2021 | A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. ... |
| CVE-2021-21810 | CRITICAL | 9.8 | 1.1% | Aug 17, 2021 | A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7. A specia... |
| CVE-2021-39242 | HIGH | 7.5 | 2.3% | Aug 17, 2021 | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situatio... |
| CVE-2021-39241 | MEDIUM | 5.3 | 1.8% | Aug 17, 2021 | An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTT... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now