2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34110 | HIGH | 7.8 | 1.2% | Jul 8, 2021 | WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executa... |
| CVE-2021-21806 | HIGH | 8.8 | 2.8% | Jul 8, 2021 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web... |
| CVE-2021-21794 | HIGH | 7.8 | 0.7% | Jul 8, 2021 | An out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality of Accusoft ImageGear 19... |
| CVE-2021-21793 | HIGH | 8.8 | 1.1% | Jul 8, 2021 | An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing functionality of Accusoft ImageGear... |
| CVE-2021-21779 | HIGH | 8.8 | 2.9% | Jul 8, 2021 | A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A ... |
| CVE-2021-32462 | HIGH | 8.8 | 5.2% | Jul 8, 2021 | Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remo... |
| CVE-2021-32461 | HIGH | 7.8 | 0.4% | Jul 8, 2021 | Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Es... |
| CVE-2021-31817 | HIGH | 7.5 | 0.9% | Jul 8, 2021 | When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database... |
| CVE-2021-31816 | HIGH | 7.5 | 0.9% | Jul 8, 2021 | When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database... |
| CVE-2021-21821 | CRITICAL | 9.8 | 2.0% | Jul 8, 2021 | A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9.... |
| CVE-2021-28809 | CRITICAL | 9.8 | 15.8% | Jul 8, 2021 | An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, thi... |
| CVE-2021-34430 | HIGH | 7.5 | 1.0% | Jul 8, 2021 | Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attacker... |
| CVE-2021-21807 | CRITICAL | 9.8 | 1.5% | Jul 7, 2021 | An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A ... |
| CVE-2021-21775 | HIGH | 8 | 1.3% | Jul 7, 2021 | A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGT... |
| CVE-2021-32715 | MEDIUM | 5.3 | 0.9% | Jul 7, 2021 | hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests wi... |
| CVE-2021-32714 | CRITICAL | 9.1 | 1.1% | Jul 7, 2021 | hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that cou... |
| CVE-2021-36217 | — | — | — | Jul 7, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of C... |
| CVE-2021-29759 | LOW | 2.3 | 0.3% | Jul 7, 2021 | IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive ... |
| CVE-2021-21789 | HIGH | 8.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Priv... |
| CVE-2021-21788 | HIGH | 8.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Priv... |
| CVE-2021-21787 | HIGH | 8.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Priv... |
| CVE-2021-21786 | HIGH | 7.8 | 0.3% | Jul 7, 2021 | A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.... |
| CVE-2021-20474 | HIGH | 7.5 | 0.5% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requir... |
| CVE-2021-20417 | MEDIUM | 4.3 | 0.6% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed... |
| CVE-2021-20416 | MEDIUM | 5.3 | 0.7% | Jul 7, 2021 | IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, ca... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now