2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3642 | MEDIUM | 5.3 | 0.8% | Aug 5, 2021 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final ... |
| CVE-2021-3591 | — | — | — | Aug 5, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-3580 | HIGH | 7.5 | 2.7% | Aug 5, 2021 | A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could us... |
| CVE-2021-3566 | MEDIUM | 5.5 | 0.9% | Aug 5, 2021 | Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitima... |
| CVE-2021-37632 | HIGH | 8.1 | 1.7% | Aug 5, 2021 | SuperMartijn642's Config Lib is a library used by a number of mods for the game Minecraft. The versions of SuperMartijn6... |
| CVE-2021-37156 | HIGH | 7.5 | 1.0% | Aug 5, 2021 | Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's ... |
| CVE-2021-35327 | CRITICAL | 9.8 | 1.4% | Aug 5, 2021 | A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, th... |
| CVE-2021-35326 | HIGH | 7.5 | 2.5% | Aug 5, 2021 | A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to download the configura... |
| CVE-2021-35325 | HIGH | 7.5 | 13.3% | Aug 5, 2021 | A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers... |
| CVE-2021-35324 | CRITICAL | 9.8 | 10.4% | Aug 5, 2021 | A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to b... |
| CVE-2021-34639 | HIGH | 8.8 | 0.6% | Aug 5, 2021 | Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files w... |
| CVE-2021-34638 | MEDIUM | 6.5 | 1.3% | Aug 5, 2021 | Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to o... |
| CVE-2021-34634 | HIGH | 8.8 | 0.7% | Aug 5, 2021 | The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function foun... |
| CVE-2021-34633 | HIGH | 8.8 | 0.7% | Aug 5, 2021 | The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in... |
| CVE-2021-32003 | MEDIUM | 5.5 | 0.2% | Aug 5, 2021 | Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture ... |
| CVE-2021-32002 | LOW | 3.3 | 0.2% | Aug 5, 2021 | Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to... |
| CVE-2021-28216 | HIGH | 7.8 | 0.4% | Aug 5, 2021 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3S... |
| CVE-2021-26605 | CRITICAL | 9.8 | 1.0% | Aug 5, 2021 | An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. T... |
| CVE-2021-26586 | HIGH | 7.5 | 1.6% | Aug 5, 2021 | A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edg... |
| CVE-2021-22928 | HIGH | 7.8 | 0.2% | Aug 5, 2021 | A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Wind... |
| CVE-2021-22927 | HIGH | 8.1 | 0.8% | Aug 5, 2021 | A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provide... |
| CVE-2021-22926 | HIGH | 7.5 | 9.8% | Aug 5, 2021 | libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CU... |
| CVE-2021-22925 | MEDIUM | 5.3 | 4.9% | Aug 5, 2021 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used ... |
| CVE-2021-22924 | LOW | 3.7 | 6.3% | Aug 5, 2021 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches ... |
| CVE-2021-22923 | MEDIUM | 5.3 | 1.9% | Aug 5, 2021 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now