2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32439 | HIGH | 7.8 | 1.3% | Aug 11, 2021 | Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or... |
| CVE-2021-32438 | MEDIUM | 5.5 | 0.8% | Aug 11, 2021 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereferen... |
| CVE-2021-32437 | MEDIUM | 5.5 | 0.8% | Aug 11, 2021 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) v... |
| CVE-2021-38085 | HIGH | 7.8 | 1.0% | Aug 11, 2021 | The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer pro... |
| CVE-2021-37694 | HIGH | 7.8 | 0.9% | Aug 11, 2021 | @asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.... |
| CVE-2021-23421 | CRITICAL | 9.8 | 1.1% | Aug 11, 2021 | All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function. |
| CVE-2021-3050 | HIGH | 8.8 | 1.8% | Aug 11, 2021 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administra... |
| CVE-2021-3048 | MEDIUM | 5.9 | 0.8% | Aug 11, 2021 | Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop... |
| CVE-2021-3047 | LOW | 3.1 | 0.5% | Aug 11, 2021 | A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks P... |
| CVE-2021-3046 | MEDIUM | 6.5 | 1.1% | Aug 11, 2021 | An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated ... |
| CVE-2021-3045 | MEDIUM | 4.9 | 0.8% | Aug 11, 2021 | An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated a... |
| CVE-2021-38549 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to a... |
| CVE-2021-38548 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a te... |
| CVE-2021-38547 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the d... |
| CVE-2021-38546 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, v... |
| CVE-2021-38545 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power t... |
| CVE-2021-38544 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on th... |
| CVE-2021-38543 | MEDIUM | 5.9 | 1.3% | Aug 11, 2021 | TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power ... |
| CVE-2021-20427 | HIGH | 7.5 | 1.3% | Aug 11, 2021 | IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force ... |
| CVE-2021-20420 | MEDIUM | 4.3 | 0.7% | Aug 11, 2021 | IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in fu... |
| CVE-2021-20418 | CRITICAL | 9.8 | 1.0% | Aug 11, 2021 | IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier fo... |
| CVE-2021-34640 | MEDIUM | 6.1 | 2.2% | Aug 11, 2021 | The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP... |
| CVE-2021-32947 | HIGH | 7.8 | 1.8% | Aug 11, 2021 | FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow a... |
| CVE-2021-32939 | HIGH | 7.8 | 1.6% | Aug 11, 2021 | FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project ... |
| CVE-2021-32931 | HIGH | 7.8 | 2.0% | Aug 11, 2021 | An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the applicatio... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now