2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46064 | HIGH | 7.8 | 1.4% | Mar 23, 2022 | IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). T... |
| CVE-2021-44139 | HIGH | 7.5 | 6.5% | Mar 23, 2022 | Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF). |
| CVE-2021-43738 | HIGH | 8.8 | 0.5% | Mar 23, 2022 | An issue was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can that can add the administrat... |
| CVE-2021-44759 | HIGH | 8.1 | 1.5% | Mar 23, 2022 | Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a m... |
| CVE-2021-44040 | HIGH | 7.5 | 1.9% | Mar 23, 2022 | Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send inva... |
| CVE-2021-45757 | HIGH | 7.5 | 1.8% | Mar 23, 2022 | ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (Do... |
| CVE-2021-45810 | HIGH | 7.5 | 0.8% | Mar 22, 2022 | GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService thro... |
| CVE-2021-40662 | HIGH | 8.8 | 1.1% | Mar 21, 2022 | A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim host... |
| CVE-2021-24905 | HIGH | 8 | 0.7% | Mar 21, 2022 | The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_... |
| CVE-2021-36100 | HIGH | 8.8 | 1.3% | Mar 21, 2022 | Specially crafted string in OTRS system configuration can allow the execution of any system command. |
| CVE-2021-42194 | HIGH | 7.2 | 1.1% | Mar 20, 2022 | The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the... |
| CVE-2021-44345 | HIGH | 7.5 | 1.1% | Mar 20, 2022 | Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Inject... |
| CVE-2021-4031 | HIGH | 7.5 | 0.5% | Mar 18, 2022 | Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associate... |
| CVE-2021-30771 | HIGH | 7.8 | 1.3% | Mar 18, 2022 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6... |
| CVE-2021-45968 | HIGH | 7.5 | 10.7% | Mar 18, 2022 | An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Pho... |
| CVE-2021-46107 | HIGH | 7.5 | 7.4% | Mar 17, 2022 | Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacke... |
| CVE-2021-44262 | HIGH | 7.5 | 2.2% | Mar 17, 2022 | A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote att... |
| CVE-2021-44260 | HIGH | 7.5 | 7.6% | Mar 17, 2022 | A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can al... |
| CVE-2021-45794 | HIGH | 7.5 | 1.0% | Mar 17, 2022 | Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained. |
| CVE-2021-45793 | HIGH | 7.5 | 4.6% | Mar 17, 2022 | Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained. |
| CVE-2021-23556 | HIGH | 8 | 1.1% | Mar 17, 2022 | The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_com... |
| CVE-2021-45791 | HIGH | 8.8 | 1.0% | Mar 17, 2022 | Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/mem... |
| CVE-2021-42219 | HIGH | 7.5 | 1.2% | Mar 17, 2022 | Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sen... |
| CVE-2021-45821 | HIGH | 8.8 | 2.5% | Mar 16, 2022 | A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file th... |
| CVE-2021-42730 | HIGH | 7.8 | 1.7% | Mar 16, 2022 | Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now