2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39741 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation... |
| CVE-2021-23851 | HIGH | 7.2 | 1.5% | Mar 30, 2022 | A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer... |
| CVE-2021-23850 | HIGH | 7.2 | 1.5% | Mar 30, 2022 | A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffe... |
| CVE-2021-1033 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe... |
| CVE-2021-1000 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an uns... |
| CVE-2021-44082 | HIGH | 8.3 | 2.8% | Mar 29, 2022 | textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthentica... |
| CVE-2021-43109 | HIGH | 7.5 | 1.2% | Mar 29, 2022 | An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in pr... |
| CVE-2021-44081 | HIGH | 7.5 | 1.0% | Mar 29, 2022 | A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 character... |
| CVE-2021-44581 | HIGH | 7.5 | 1.0% | Mar 29, 2022 | An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter. |
| CVE-2021-43103 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote m... |
| CVE-2021-43102 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote ma... |
| CVE-2021-43101 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a... |
| CVE-2021-43100 | HIGH | 7.2 | 1.5% | Mar 28, 2022 | A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote m... |
| CVE-2021-43098 | HIGH | 7.2 | 1.2% | Mar 28, 2022 | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. |
| CVE-2021-43097 | HIGH | 7.2 | 2.2% | Mar 28, 2022 | A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a ma... |
| CVE-2021-25068 | HIGH | 7.2 | 1.3% | Mar 28, 2022 | The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter wh... |
| CVE-2021-25064 | HIGH | 7.2 | 1.3% | Mar 28, 2022 | The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a... |
| CVE-2021-24962 | HIGH | 8.8 | 2.8% | Mar 28, 2022 | The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to ... |
| CVE-2021-44124 | HIGH | 7.5 | 1.9% | Mar 28, 2022 | Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input d... |
| CVE-2021-26601 | HIGH | 8.1 | 3.2% | Mar 28, 2022 | ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal. |
| CVE-2021-40905 | HIGH | 8.8 | 3.2% | Mar 25, 2022 | The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uplo... |
| CVE-2021-40904 | HIGH | 8.8 | 3.8% | Mar 25, 2022 | The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dok... |
| CVE-2021-44683 | HIGH | 8.2 | 1.0% | Mar 25, 2022 | The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open functi... |
| CVE-2021-44905 | HIGH | 8.2 | 1.3% | Mar 25, 2022 | Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attac... |
| CVE-2021-4202 | HIGH | 7 | 0.4% | Mar 25, 2022 | A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kern... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now