2021 CVE Vulnerabilities

23,473 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-46179MEDIUM6.5Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file pas...
CVE-2021-46174HIGH7.5Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
CVE-2021-43171MEDIUM6.5Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q al...
CVE-2021-40266MEDIUM6.5FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.
CVE-2021-40265HIGH8.8A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.
CVE-2021-40264MEDIUM6.5NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp...
CVE-2021-40263HIGH8.8A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.
CVE-2021-40262MEDIUM6.5A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.
CVE-2021-40211HIGH7.5An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.
CVE-2021-35309HIGH7.5An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges vi...
CVE-2021-34193HIGH7.5Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.
CVE-2021-33390CRITICAL9.8dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-202...
CVE-2021-33388CRITICAL9.8dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
CVE-2021-32422HIGH7.5dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
CVE-2021-32421HIGH7.5dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
CVE-2021-32420HIGH7.5dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
CVE-2021-32292CRITICAL9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overfl...
CVE-2021-30047HIGH7.5VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
CVE-2021-29390HIGH7.1libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVE-2021-46895CRITICAL9.1Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of th...
CVE-2021-3236MEDIUM5.5vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ...
CVE-2021-29378HIGH8.8SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via ...
CVE-2021-29057MEDIUM6.5An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a d...
CVE-2021-28835HIGH7.8Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bi...
CVE-2021-28429MEDIUM5.5Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local ...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now