2021 CVE Vulnerabilities

23,445 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-40266MEDIUM6.5FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.
CVE-2021-40265HIGH8.8A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.
CVE-2021-40264MEDIUM6.5NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp...
CVE-2021-40263HIGH8.8A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.
CVE-2021-40262MEDIUM6.5A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.
CVE-2021-40211HIGH7.5An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.
CVE-2021-35309HIGH7.5An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges vi...
CVE-2021-34193HIGH7.5Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.
CVE-2021-33390CRITICAL9.8dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-202...
CVE-2021-33388CRITICAL9.8dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
CVE-2021-32422HIGH7.5dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
CVE-2021-32421HIGH7.5dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
CVE-2021-32420HIGH7.5dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
CVE-2021-32292CRITICAL9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overfl...
CVE-2021-30047HIGH7.5VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
CVE-2021-29390HIGH7.1libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVE-2021-46895CRITICAL9.1Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of th...
CVE-2021-3236MEDIUM5.5vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ...
CVE-2021-29378HIGH8.8SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via ...
CVE-2021-29057MEDIUM6.5An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a d...
CVE-2021-28835HIGH7.8Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bi...
CVE-2021-28429MEDIUM5.5Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local ...
CVE-2021-28427HIGH7.8Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIF...
CVE-2021-28411CRITICAL9.8An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi v...
CVE-2021-28025MEDIUM5.5Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attac...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now