2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-32016HIGH8.8An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to ...
CVE-2021-27942MEDIUM6.8Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB driv...
CVE-2021-22425HIGH7.8A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Ro...
CVE-2021-22424MEDIUM5.5A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability t...
CVE-2021-22423HIGH7.8A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to ...
CVE-2021-22422HIGH7.8A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulner...
CVE-2021-22421HIGH7.8A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnera...
CVE-2021-22420HIGH7.8A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers ma...
CVE-2021-22419MEDIUM5.5A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exp...
CVE-2021-22418HIGH7.8A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulner...
CVE-2021-22417MEDIUM5.5A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability ...
CVE-2021-22416HIGH7.8A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability ...
CVE-2021-32814HIGH8.1Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory t...
CVE-2021-32017HIGH7.7An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the ...
CVE-2021-37558CRITICAL9.8A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unau...
CVE-2021-37557HIGH8.8A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authen...
CVE-2021-37556HIGH8.8A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authen...
CVE-2021-36763HIGH7.5In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.
CVE-2021-33486HIGH7.5All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Impr...
CVE-2021-33485CRITICAL9.8CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
CVE-2021-31504HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto...
CVE-2021-31503HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskto...
CVE-2021-21581MEDIUM6.1Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could poten...
CVE-2021-21580MEDIUM4.3Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing /...
CVE-2021-21579MEDIUM6.1Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker m...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now