2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38202 | HIGH | 7.5 | 3.2% | Aug 8, 2021 | fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-boun... |
| CVE-2021-38201 | HIGH | 7.5 | 3.4% | Aug 8, 2021 | net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_ba... |
| CVE-2021-38200 | MEDIUM | 5.5 | 0.3% | Aug 8, 2021 | arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perf_event_paranoid=-1 and no specif... |
| CVE-2021-38199 | MEDIUM | 6.5 | 1.2% | Aug 8, 2021 | fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of... |
| CVE-2021-38198 | MEDIUM | 5.5 | 0.4% | Aug 8, 2021 | arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shado... |
| CVE-2021-38197 | CRITICAL | 9.8 | 2.1% | Aug 8, 2021 | unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR arc... |
| CVE-2021-23419 | CRITICAL | 9.8 | 1.1% | Aug 8, 2021 | This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying propertie... |
| CVE-2021-38196 | CRITICAL | 9.8 | 2.6% | Aug 8, 2021 | An issue was discovered in the better-macro crate through 2021-07-22 for Rust. It intentionally demonstrates that remote... |
| CVE-2021-38195 | CRITICAL | 9.8 | 0.9% | Aug 8, 2021 | An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it a... |
| CVE-2021-38194 | CRITICAL | 9.8 | 1.3% | Aug 8, 2021 | An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the Fiel... |
| CVE-2021-38193 | MEDIUM | 6.1 | 0.7% | Aug 8, 2021 | An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HT... |
| CVE-2021-38192 | HIGH | 7.5 | 1.1% | Aug 8, 2021 | An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Tim... |
| CVE-2021-38191 | MEDIUM | 5.9 | 0.8% | Aug 8, 2021 | An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the... |
| CVE-2021-38190 | CRITICAL | 9.8 | 1.4% | Aug 8, 2021 | An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it d... |
| CVE-2021-38189 | CRITICAL | 9.8 | 1.5% | Aug 8, 2021 | An issue was discovered in the lettre crate before 0.9.6 for Rust. In an e-mail message body, an attacker can place a . ... |
| CVE-2021-38188 | CRITICAL | 9.8 | 1.3% | Aug 8, 2021 | An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.leng... |
| CVE-2021-38187 | CRITICAL | 9.8 | 1.4% | Aug 8, 2021 | An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a ... |
| CVE-2021-38186 | MEDIUM | 6.1 | 0.7% | Aug 8, 2021 | An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HT... |
| CVE-2021-36221 | MEDIUM | 5.9 | 3.1% | Aug 8, 2021 | Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic ... |
| CVE-2021-38185 | HIGH | 7.8 | 4.2% | Aug 8, 2021 | GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_f... |
| CVE-2021-38173 | CRITICAL | 9.8 | 3.2% | Aug 7, 2021 | Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh... |
| CVE-2021-38169 | HIGH | 8.8 | 1.5% | Aug 7, 2021 | Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py. |
| CVE-2021-38168 | HIGH | 8.8 | 0.9% | Aug 7, 2021 | Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers. |
| CVE-2021-38167 | CRITICAL | 9.8 | 1.3% | Aug 7, 2021 | Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to by... |
| CVE-2021-38166 | HIGH | 7.8 | 0.3% | Aug 7, 2021 | In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when ma... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now