2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34268 | MEDIUM | 4.6 | 0.4% | Jul 22, 2021 | An issue in the USBH_ParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial... |
| CVE-2021-34267 | MEDIUM | 4.6 | 0.4% | Jul 22, 2021 | An in the USBH_MSC_InterfaceInit() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial ... |
| CVE-2021-34262 | MEDIUM | 6.8 | 0.5% | Jul 22, 2021 | A buffer overflow vulnerability in the USBH_ParseEPDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and... |
| CVE-2021-34261 | MEDIUM | 4.6 | 0.4% | Jul 22, 2021 | An issue in USBH_ParseCfgDesc() of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service d... |
| CVE-2021-34260 | MEDIUM | 6.8 | 0.5% | Jul 22, 2021 | A buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics STM32Cube Middleware v1.... |
| CVE-2021-34259 | MEDIUM | 6.8 | 0.5% | Jul 22, 2021 | A buffer overflow vulnerability in the USBH_ParseCfgDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 an... |
| CVE-2021-25213 | CRITICAL | 9.8 | 1.5% | Jul 22, 2021 | SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrar... |
| CVE-2021-25211 | CRITICAL | 9.8 | 1.9% | Jul 22, 2021 | Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, ... |
| CVE-2021-25209 | CRITICAL | 9.8 | 1.3% | Jul 22, 2021 | SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbit... |
| CVE-2021-25205 | CRITICAL | 9.8 | 1.5% | Jul 22, 2021 | SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL ... |
| CVE-2021-3540 | HIGH | 7.2 | 3.3% | Jul 22, 2021 | By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions... |
| CVE-2021-3198 | HIGH | 7.2 | 3.3% | Jul 22, 2021 | By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivan... |
| CVE-2021-3619 | MEDIUM | 4.8 | 0.6% | Jul 22, 2021 | Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue, ... |
| CVE-2021-31581 | MEDIUM | 4.4 | 1.2% | Jul 22, 2021 | The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be escaped by abusing the 'Edit MySQL Co... |
| CVE-2021-31580 | CRITICAL | 9.8 | 3.0% | Jul 22, 2021 | The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be bypassed by switching the OpenSSH cha... |
| CVE-2021-31579 | CRITICAL | 9.8 | 1.3% | Jul 22, 2021 | Akkadian Provisioning Manager Engine (PME) ships with a hard-coded credential, akkadianuser:haakkadianpassword. This iss... |
| CVE-2021-27332 | MEDIUM | 6.1 | 0.9% | Jul 22, 2021 | Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attacke... |
| CVE-2021-26224 | MEDIUM | 6.1 | 0.8% | Jul 22, 2021 | Cross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject ar... |
| CVE-2021-26223 | CRITICAL | 9.8 | 1.5% | Jul 22, 2021 | SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute... |
| CVE-2021-25212 | CRITICAL | 9.8 | 1.5% | Jul 22, 2021 | SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrar... |
| CVE-2021-25210 | CRITICAL | 9.8 | 1.5% | Jul 22, 2021 | Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitra... |
| CVE-2021-36222 | HIGH | 7.5 | 10.3% | Jul 22, 2021 | ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.... |
| CVE-2021-35942 | CRITICAL | 9.1 | 2.6% | Jul 22, 2021 | The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in... |
| CVE-2021-35464 | CRITICAL | 9.8 | 100.0% | Jul 22, 2021 | ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa... |
| CVE-2021-35063 | HIGH | 7.5 | 2.0% | Jul 22, 2021 | Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now