2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0957 | HIGH | 7.8 | 0.1% | Mar 16, 2022 | In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset ... |
| CVE-2021-45851 | HIGH | 7.5 | 1.4% | Mar 16, 2022 | A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive infor... |
| CVE-2021-43957 | HIGH | 7.5 | 1.2% | Mar 16, 2022 | Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct ... |
| CVE-2021-45848 | HIGH | 7.5 | 1.6% | Mar 15, 2022 | Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to cras... |
| CVE-2021-45010 | HIGH | 8.8 | 70.1% | Mar 15, 2022 | A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7... |
| CVE-2021-43305 | HIGH | 8.8 | 1.6% | Mar 14, 2022 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that... |
| CVE-2021-43304 | HIGH | 8.8 | 1.6% | Mar 14, 2022 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that... |
| CVE-2021-42388 | HIGH | 8.1 | 1.5% | Mar 14, 2022 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decomp... |
| CVE-2021-42387 | HIGH | 8.1 | 1.5% | Mar 14, 2022 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decomp... |
| CVE-2021-42171 | HIGH | 7.2 | 2.5% | Mar 14, 2022 | Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-s... |
| CVE-2021-24959 | HIGH | 8.8 | 2.2% | Mar 14, 2022 | The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJA... |
| CVE-2021-45886 | HIGH | 8.8 | 0.5% | Mar 13, 2022 | An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web appli... |
| CVE-2021-42577 | HIGH | 7.5 | 0.9% | Mar 11, 2022 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client ... |
| CVE-2021-41850 | HIGH | 7.8 | 0.4% | Mar 11, 2022 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroa... |
| CVE-2021-41848 | HIGH | 7.8 | 0.4% | Mar 11, 2022 | An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-... |
| CVE-2021-33658 | HIGH | 7.8 | 0.2% | Mar 11, 2022 | atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate... |
| CVE-2021-32476 | HIGH | 7.5 | 1.0% | Mar 11, 2022 | A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodl... |
| CVE-2021-32474 | HIGH | 7.2 | 0.9% | Mar 11, 2022 | An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer hos... |
| CVE-2021-23246 | HIGH | 7.5 | 0.9% | Mar 11, 2022 | In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user i... |
| CVE-2021-39022 | HIGH | 8.8 | 0.5% | Mar 10, 2022 | IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV... |
| CVE-2021-44673 | HIGH | 8.8 | 9.0% | Mar 10, 2022 | A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malic... |
| CVE-2021-46408 | HIGH | 7.5 | 1.2% | Mar 10, 2022 | Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability... |
| CVE-2021-44750 | HIGH | 7.3 | 0.7% | Mar 10, 2022 | An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special co... |
| CVE-2021-44032 | HIGH | 7.5 | 1.8% | Mar 10, 2022 | TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connectio... |
| CVE-2021-43970 | HIGH | 8.8 | 1.8% | Mar 10, 2022 | An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp f... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now