2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27791 | MEDIUM | 5.4 | 0.6% | Aug 12, 2021 | The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade... |
| CVE-2021-27790 | HIGH | 7.8 | 0.5% | Aug 12, 2021 | The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses u... |
| CVE-2021-20314 | CRITICAL | 9.8 | 2.8% | Aug 12, 2021 | Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service ... |
| CVE-2021-38088 | HIGH | 7.8 | 0.2% | Aug 12, 2021 | Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking. |
| CVE-2021-38087 | MEDIUM | 6.1 | 0.6% | Aug 12, 2021 | Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009. |
| CVE-2021-38086 | HIGH | 7.8 | 0.3% | Aug 12, 2021 | Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed loc... |
| CVE-2021-37841 | HIGH | 7.8 | 0.7% | Aug 12, 2021 | Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the ser... |
| CVE-2021-37222 | CRITICAL | 9.8 | 2.5% | Aug 12, 2021 | Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a denia... |
| CVE-2021-38593 | HIGH | 7.5 | 3.0% | Aug 12, 2021 | Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRaste... |
| CVE-2021-38592 | HIGH | 7.5 | 1.3% | Aug 12, 2021 | Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule). |
| CVE-2021-38591 | LOW | 3.3 | 0.1% | Aug 12, 2021 | An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can ch... |
| CVE-2021-37699 | MEDIUM | 6.1 | 1.2% | Aug 12, 2021 | Next.js is an open source website development framework to be used with the React library. In affected versions speciall... |
| CVE-2021-38590 | MEDIUM | 5.5 | 0.3% | Aug 11, 2021 | In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584). |
| CVE-2021-38589 | HIGH | 8.1 | 0.9% | Aug 11, 2021 | In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588). |
| CVE-2021-38588 | HIGH | 8.1 | 0.4% | Aug 11, 2021 | In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587). |
| CVE-2021-38587 | HIGH | 7.5 | 0.6% | Aug 11, 2021 | In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586). |
| CVE-2021-38586 | MEDIUM | 4.4 | 0.2% | Aug 11, 2021 | In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589). |
| CVE-2021-38585 | HIGH | 7.2 | 1.0% | Aug 11, 2021 | The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585). |
| CVE-2021-38584 | HIGH | 7.2 | 0.9% | Aug 11, 2021 | The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585). |
| CVE-2021-37697 | MEDIUM | 6.5 | 0.7% | Aug 11, 2021 | tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t... |
| CVE-2021-37696 | MEDIUM | 6.5 | 0.7% | Aug 11, 2021 | tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code t... |
| CVE-2021-37627 | HIGH | 7.2 | 1.0% | Aug 11, 2021 | Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is ... |
| CVE-2021-37626 | HIGH | 7.2 | 1.3% | Aug 11, 2021 | Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it i... |
| CVE-2021-36770 | HIGH | 7.8 | 1.4% | Aug 11, 2021 | Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::Confi... |
| CVE-2021-38574 | CRITICAL | 9.8 | 1.0% | Aug 11, 2021 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the en... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now