2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39240 | HIGH | 7.5 | 2.3% | Aug 17, 2021 | An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that t... |
| CVE-2021-29313 | MEDIUM | 6.1 | 0.6% | Aug 17, 2021 | Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_... |
| CVE-2021-25263 | HIGH | 7.8 | 0.3% | Aug 17, 2021 | Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker... |
| CVE-2021-22156 | CRITICAL | 9.8 | 1.8% | Aug 17, 2021 | An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® ... |
| CVE-2021-0646 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This cou... |
| CVE-2021-0645 | HIGH | 7.8 | 0.3% | Aug 17, 2021 | In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local... |
| CVE-2021-0642 | MEDIUM | 5.5 | 0.3% | Aug 17, 2021 | In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permis... |
| CVE-2021-0641 | MEDIUM | 5.5 | 0.1% | Aug 17, 2021 | In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers... |
| CVE-2021-0640 | HIGH | 7.8 | 0.2% | Aug 17, 2021 | In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could ... |
| CVE-2021-0639 | MEDIUM | 5.5 | 0.1% | Aug 17, 2021 | In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to t... |
| CVE-2021-0593 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receive... |
| CVE-2021-0591 | HIGH | 7.3 | 0.4% | Aug 17, 2021 | In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast... |
| CVE-2021-0584 | MEDIUM | 5.5 | 0.1% | Aug 17, 2021 | In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This co... |
| CVE-2021-0582 | MEDIUM | 6.5 | 0.3% | Aug 17, 2021 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat... |
| CVE-2021-0581 | MEDIUM | 6.5 | 0.3% | Aug 17, 2021 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat... |
| CVE-2021-0580 | MEDIUM | 6.5 | 0.3% | Aug 17, 2021 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat... |
| CVE-2021-0579 | MEDIUM | 6.5 | 0.3% | Aug 17, 2021 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat... |
| CVE-2021-0578 | MEDIUM | 6.5 | 0.3% | Aug 17, 2021 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat... |
| CVE-2021-0576 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2021-0574 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2021-0573 | HIGH | 7.8 | 0.1% | Aug 17, 2021 | In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala... |
| CVE-2021-0519 | HIGH | 7.8 | 0.2% | Aug 17, 2021 | In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This co... |
| CVE-2021-32830 | HIGH | 7 | 1.9% | Aug 17, 2021 | The @diez/generation npm package is a client for Diez. The locateFont method of @diez/generation has a command injection... |
| CVE-2021-29056 | MEDIUM | 4.8 | 0.5% | Aug 17, 2021 | Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php. |
| CVE-2021-3633 | HIGH | 7.8 | 0.3% | Aug 17, 2021 | A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now