2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1090 | HIGH | 7.1 | 0.3% | Jul 22, 2021 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler... |
| CVE-2021-1089 | HIGH | 7.8 | 0.3% | Jul 22, 2021 | NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may ... |
| CVE-2021-37220 | MEDIUM | 5.5 | 1.3% | Jul 21, 2021 | MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximu... |
| CVE-2021-32776 | HIGH | 8.8 | 0.4% | Jul 21, 2021 | Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, CSRF tokens can be reused by a malic... |
| CVE-2021-32775 | MEDIUM | 6.5 | 0.8% | Jul 21, 2021 | Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, a non admin user can get access to m... |
| CVE-2021-32761 | HIGH | 7.5 | 31.0% | Jul 21, 2021 | Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow ... |
| CVE-2021-32756 | HIGH | 8.8 | 1.5% | Jul 21, 2021 | ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw ... |
| CVE-2021-35482 | HIGH | 7.8 | 0.4% | Jul 21, 2021 | An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to ac... |
| CVE-2021-34816 | HIGH | 7.2 | 2.2% | Jul 21, 2021 | An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary cod... |
| CVE-2021-32745 | MEDIUM | 6.1 | 0.6% | Jul 21, 2021 | Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online pri... |
| CVE-2021-23410 | — | — | — | Jul 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-32744 | HIGH | 7.5 | 1.1% | Jul 21, 2021 | Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6.4.9-5, unauthentica... |
| CVE-2021-23408 | MEDIUM | 4.3 | 1.4% | Jul 21, 2021 | This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0. The URL parser... |
| CVE-2021-21407 | MEDIUM | 6.5 | 0.5% | Jul 21, 2021 | Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation ... |
| CVE-2021-37159 | MEDIUM | 6.4 | 0.4% | Jul 21, 2021 | hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking... |
| CVE-2021-37155 | CRITICAL | 9.8 | 1.5% | Jul 21, 2021 | wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request di... |
| CVE-2021-34619 | HIGH | 8.8 | 0.7% | Jul 21, 2021 | The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upl... |
| CVE-2021-34368 | — | — | — | Jul 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-34367 | — | — | — | Jul 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-34366 | — | — | — | Jul 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-34365 | — | — | — | Jul 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-2447 | CRITICAL | 9.9 | 1.1% | Jul 21, 2021 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported ve... |
| CVE-2021-2446 | CRITICAL | 9.6 | 1.6% | Jul 21, 2021 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported ve... |
| CVE-2021-2445 | MEDIUM | 5.7 | 0.8% | Jul 21, 2021 | Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). Th... |
| CVE-2021-2444 | MEDIUM | 4.9 | 1.8% | Jul 21, 2021 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now