2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28427 | HIGH | 7.8 | 0.3% | Aug 11, 2023 | Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIF... |
| CVE-2021-28411 | CRITICAL | 9.8 | 0.8% | Aug 11, 2023 | An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi v... |
| CVE-2021-28025 | MEDIUM | 5.5 | 0.3% | Aug 11, 2023 | Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attac... |
| CVE-2021-27524 | MEDIUM | 6.1 | 0.5% | Aug 11, 2023 | Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitr... |
| CVE-2021-27523 | CRITICAL | 9.8 | 0.8% | Aug 11, 2023 | An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sens... |
| CVE-2021-26505 | CRITICAL | 9.8 | 1.0% | Aug 11, 2023 | Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code... |
| CVE-2021-26504 | HIGH | 7.5 | 1.4% | Aug 11, 2023 | Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sens... |
| CVE-2021-25857 | HIGH | 7.2 | 0.8% | Aug 11, 2023 | An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code vi... |
| CVE-2021-25856 | MEDIUM | 4.9 | 0.5% | Aug 11, 2023 | An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in ... |
| CVE-2021-25786 | MEDIUM | 5.3 | 0.5% | Aug 11, 2023 | An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file ... |
| CVE-2021-41544 | HIGH | 7.8 | 0.2% | Aug 8, 2023 | A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability coul... |
| CVE-2021-24916 | HIGH | 7.5 | 1.5% | Aug 7, 2023 | The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses vi... |
| CVE-2021-31681 | HIGH | 7.8 | 0.4% | Jul 31, 2023 | Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml fi... |
| CVE-2021-31680 | HIGH | 7.8 | 0.4% | Jul 31, 2023 | Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml fi... |
| CVE-2021-31651 | MEDIUM | 4.8 | 0.3% | Jul 31, 2023 | Cross Site Scripting (XSS) vulnerability in neofarg-cms 0.2.3 allows remoate attacker to run arbitrary code via the copy... |
| CVE-2021-4324 | MEDIUM | 6.5 | 0.5% | Jul 29, 2023 | Insufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to rea... |
| CVE-2021-4323 | MEDIUM | 6.5 | 0.4% | Jul 29, 2023 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who ... |
| CVE-2021-4322 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a ... |
| CVE-2021-4321 | MEDIUM | 4.3 | 0.4% | Jul 29, 2023 | Policy bypass in Blink in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security polic... |
| CVE-2021-4320 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the render... |
| CVE-2021-4319 | HIGH | 8.8 | 0.6% | Jul 29, 2023 | Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write... |
| CVE-2021-4318 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit objec... |
| CVE-2021-4317 | HIGH | 8.8 | 0.5% | Jul 29, 2023 | Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write... |
| CVE-2021-4316 | MEDIUM | 4.3 | 0.4% | Jul 29, 2023 | Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browse... |
| CVE-2021-36580 | MEDIUM | 6.1 | 1.6% | Jul 27, 2023 | Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the refere... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now