2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22381 | HIGH | 7.5 | 0.7% | Aug 2, 2021 | There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus... |
| CVE-2021-22379 | HIGH | 7.5 | 0.7% | Aug 2, 2021 | There is an Integer Underflow (Wrap or Wraparound) Vulnerability in Huawei Smartphone.Successful exploitation of this vu... |
| CVE-2021-20541 | MEDIUM | 5.3 | 0.9% | Aug 2, 2021 | IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive info... |
| CVE-2021-20540 | MEDIUM | 5.3 | 0.9% | Aug 2, 2021 | IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive info... |
| CVE-2021-20539 | MEDIUM | 5.3 | 0.9% | Aug 2, 2021 | IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive info... |
| CVE-2021-29757 | HIGH | 8.8 | 0.4% | Aug 2, 2021 | IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to ex... |
| CVE-2021-22552 | MEDIUM | 5.5 | 0.2% | Aug 2, 2021 | An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall numb... |
| CVE-2021-29741 | HIGH | 7.8 | 0.3% | Aug 2, 2021 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root priv... |
| CVE-2021-37840 | HIGH | 8.8 | 1.7% | Aug 2, 2021 | aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a... |
| CVE-2021-37167 | CRITICAL | 9.8 | 1.7% | Aug 2, 2021 | An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by releas... |
| CVE-2021-37166 | HIGH | 7.5 | 1.8% | Aug 2, 2021 | A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus P... |
| CVE-2021-37164 | CRITICAL | 9.8 | 3.4% | Aug 2, 2021 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released ver... |
| CVE-2021-37163 | CRITICAL | 9.8 | 1.4% | Aug 2, 2021 | An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released ver... |
| CVE-2021-37162 | CRITICAL | 9.8 | 3.3% | Aug 2, 2021 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released ver... |
| CVE-2021-37161 | CRITICAL | 9.8 | 3.3% | Aug 2, 2021 | A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, o... |
| CVE-2021-37160 | CRITICAL | 9.8 | 8.2% | Aug 2, 2021 | A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released... |
| CVE-2021-20332 | MEDIUM | 4.4 | 0.3% | Aug 2, 2021 | Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in... |
| CVE-2021-37216 | MEDIUM | 6.1 | 3.2% | Aug 2, 2021 | QSAN Storage Manager header page parameters does not filter special characters. Remote attackers can inject JavaScript w... |
| CVE-2021-37165 | CRITICAL | 9.8 | 3.3% | Aug 2, 2021 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released ver... |
| CVE-2021-34575 | HIGH | 7.5 | 1.0% | Aug 2, 2021 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by ... |
| CVE-2021-34574 | MEDIUM | 4.3 | 0.7% | Aug 2, 2021 | In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 a... |
| CVE-2021-33527 | CRITICAL | 9.8 | 4.5% | Aug 2, 2021 | In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the se... |
| CVE-2021-33526 | HIGH | 7.8 | 0.3% | Aug 2, 2021 | In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service runnin... |
| CVE-2021-24504 | MEDIUM | 6.1 | 0.8% | Aug 2, 2021 | The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Fi... |
| CVE-2021-24503 | MEDIUM | 5.4 | 0.6% | Aug 2, 2021 | The Popular Brand Icons – Simple Icons WordPress plugin before 2.7.8 does not sanitise or validate some of its shortcode... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now