2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38490 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-... |
| CVE-2021-37425 | CRITICAL | 9.1 | 66.3% | Aug 10, 2021 | Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workfl... |
| CVE-2021-37391 | MEDIUM | 5.4 | 2.1% | Aug 10, 2021 | A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator... |
| CVE-2021-37390 | MEDIUM | 6.1 | 0.8% | Aug 10, 2021 | A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social network search feature)... |
| CVE-2021-37389 | MEDIUM | 6.1 | 1.0% | Aug 10, 2021 | Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter. |
| CVE-2021-33708 | HIGH | 8.8 | 0.9% | Aug 10, 2021 | Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privile... |
| CVE-2021-29296 | HIGH | 7.5 | 1.1% | Aug 10, 2021 | Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial... |
| CVE-2021-29295 | HIGH | 7.5 | 1.1% | Aug 10, 2021 | Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a d... |
| CVE-2021-29294 | HIGH | 7.5 | 1.1% | Aug 10, 2021 | Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause... |
| CVE-2021-28846 | MEDIUM | 6.5 | 0.8% | Aug 10, 2021 | A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TE... |
| CVE-2021-28845 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B... |
| CVE-2021-38387 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients enter... |
| CVE-2021-38386 | HIGH | 7.5 | 1.3% | Aug 10, 2021 | In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the... |
| CVE-2021-28844 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B... |
| CVE-2021-28843 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B... |
| CVE-2021-28842 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03... |
| CVE-2021-28841 | HIGH | 7.5 | 1.0% | Aug 10, 2021 | Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and... |
| CVE-2021-21601 | HIGH | 7.8 | 0.2% | Aug 10, 2021 | Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File ... |
| CVE-2021-21600 | MEDIUM | 6.5 | 0.8% | Aug 10, 2021 | Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized A... |
| CVE-2021-21598 | LOW | 3.9 | 0.3% | Aug 10, 2021 | Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authentic... |
| CVE-2021-21597 | LOW | 3.9 | 0.3% | Aug 10, 2021 | Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious use... |
| CVE-2021-21567 | HIGH | 7.8 | 0.2% | Aug 10, 2021 | Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated use... |
| CVE-2021-38384 | CRITICAL | 9.8 | 1.5% | Aug 10, 2021 | Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a... |
| CVE-2021-38383 | CRITICAL | 9.8 | 1.2% | Aug 10, 2021 | OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c. |
| CVE-2021-38382 | MEDIUM | 6.5 | 1.2% | Aug 10, 2021 | Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now