2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-1600HIGH8.3Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to acce...
CVE-2021-1599MEDIUM5.4A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authen...
CVE-2021-1518HIGH8.8A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, re...
CVE-2021-34431MEDIUM6.5In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CO...
CVE-2021-29149MEDIUM6.2A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Ser...
CVE-2021-29148MEDIUM6.1A local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Serie...
CVE-2021-29143HIGH7.2A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch...
CVE-2021-22001HIGH7.5In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response whe...
CVE-2021-30110HIGH7.5dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute a...
CVE-2021-35522CRITICAL9.8A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma de...
CVE-2021-35521MEDIUM5.9A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows rem...
CVE-2021-35520MEDIUM6.2A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows ph...
CVE-2021-30486HIGH8.8SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetMa...
CVE-2021-30049MEDIUM6.1SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.
CVE-2021-22523HIGH7.6XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier ...
CVE-2021-22522HIGH7.1Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Up...
CVE-2021-20596HIGH7.5NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14...
CVE-2021-28131HIGH7.5Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these se...
CVE-2021-36934HIGH7.8An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple syst...
CVE-2021-1096MEDIUM5.5NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) ha...
CVE-2021-1095MEDIUM5.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler...
CVE-2021-1094MEDIUM6.1NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler...
CVE-2021-1093MEDIUM5.5NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert...
CVE-2021-1092HIGH7.1NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susce...
CVE-2021-1091HIGH7.1NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link th...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now