2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4157 | HIGH | 8 | 1.6% | Mar 25, 2022 | An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users... |
| CVE-2021-44477 | HIGH | 7.5 | 1.1% | Mar 25, 2022 | GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD paramete... |
| CVE-2021-44462 | HIGH | 7.1 | 0.7% | Mar 25, 2022 | This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionR... |
| CVE-2021-3814 | HIGH | 7.5 | 1.1% | Mar 25, 2022 | It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session aut... |
| CVE-2021-3567 | HIGH | 7.5 | 1.1% | Mar 25, 2022 | A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-... |
| CVE-2021-3422 | HIGH | 7.5 | 0.6% | Mar 25, 2022 | The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk En... |
| CVE-2021-35254 | HIGH | 8.8 | 1.0% | Mar 25, 2022 | SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds ha... |
| CVE-2021-26620 | HIGH | 7.5 | 1.3% | Mar 25, 2022 | An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attack... |
| CVE-2021-43091 | HIGH | 7.5 | 1.4% | Mar 25, 2022 | An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form. |
| CVE-2021-43666 | HIGH | 7.5 | 2.1% | Mar 24, 2022 | A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an... |
| CVE-2021-44226 | HIGH | 7.3 | 0.9% | Mar 23, 2022 | Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Servi... |
| CVE-2021-28278 | HIGH | 7.8 | 0.9% | Mar 23, 2022 | A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c... |
| CVE-2021-28277 | HIGH | 7.8 | 0.9% | Mar 23, 2022 | A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUn... |
| CVE-2021-28276 | HIGH | 7.5 | 1.1% | Mar 23, 2022 | A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir ... |
| CVE-2021-4197 | HIGH | 7.8 | 0.5% | Mar 23, 2022 | An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found i... |
| CVE-2021-4156 | HIGH | 7.1 | 1.8% | Mar 23, 2022 | An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a speci... |
| CVE-2021-3748 | HIGH | 7.5 | 0.5% | Mar 23, 2022 | A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address ... |
| CVE-2021-3618 | HIGH | 7.4 | 2.0% | Mar 23, 2022 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocol... |
| CVE-2021-3589 | HIGH | 8 | 1.0% | Mar 23, 2022 | An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run... |
| CVE-2021-27475 | HIGH | 8.6 | 2.8% | Mar 23, 2022 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserializ... |
| CVE-2021-27474 | HIGH | 7.5 | 1.5% | Mar 23, 2022 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS ... |
| CVE-2021-27473 | HIGH | 8.2 | 0.8% | Mar 23, 2022 | Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccw... |
| CVE-2021-27471 | HIGH | 8.6 | 2.7% | Mar 23, 2022 | The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may all... |
| CVE-2021-27422 | HIGH | 7.5 | 0.6% | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sens... |
| CVE-2021-38772 | HIGH | 7.5 | 1.2% | Mar 23, 2022 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now