2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-38532HIGH7.2NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings.
CVE-2021-38531HIGH7.2Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.4...
CVE-2021-38530CRITICAL9.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5....
CVE-2021-38529CRITICAL9.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0....
CVE-2021-38528CRITICAL9.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0....
CVE-2021-38527CRITICAL9.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5....
CVE-2021-38526HIGH7.5Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0....
CVE-2021-38525HIGH7.2Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befor...
CVE-2021-38524MEDIUM4.9Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before...
CVE-2021-38523HIGH7.2NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user.
CVE-2021-38522HIGH7.2NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user.
CVE-2021-38521HIGH7.2Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, ...
CVE-2021-38520HIGH7.2Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52, ...
CVE-2021-38519HIGH7.2Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36, ...
CVE-2021-38518HIGH7.2Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120...
CVE-2021-38517HIGH7.2Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before...
CVE-2021-38516CRITICAL9.8Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48...
CVE-2021-38515HIGH7.5Certain NETGEAR devices are affected by denial of service. This affects R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98...
CVE-2021-38514LOW2.7Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72...
CVE-2021-38513CRITICAL9.8Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.1...
CVE-2021-32122HIGH8Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before...
CVE-2021-38512HIGH7.5An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occ...
CVE-2021-38511HIGH7.5An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction ...
CVE-2021-29400MEDIUM6.5A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote a...
CVE-2021-20032CRITICAL9.8SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vul...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now