2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28127 | HIGH | 7.5 | 0.9% | Jul 1, 2021 | An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur. |
| CVE-2021-35337 | MEDIUM | 4.3 | 0.8% | Jul 1, 2021 | Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any att... |
| CVE-2021-27661 | HIGH | 8.8 | 0.8% | Jul 1, 2021 | Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Contr... |
| CVE-2021-27660 | HIGH | 8.8 | 2.1% | Jul 1, 2021 | An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs. |
| CVE-2021-35336 | CRITICAL | 9.8 | 11.6% | Jul 1, 2021 | Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web A... |
| CVE-2021-27477 | HIGH | 7.5 | 1.1% | Jul 1, 2021 | When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus... |
| CVE-2021-31813 | MEDIUM | 5.4 | 78.3% | Jul 1, 2021 | Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (... |
| CVE-2021-22344 | MEDIUM | 5.3 | 0.7% | Jul 1, 2021 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma... |
| CVE-2021-22343 | CRITICAL | 9.1 | 0.7% | Jul 1, 2021 | There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may af... |
| CVE-2021-22347 | MEDIUM | 5.3 | 0.7% | Jul 1, 2021 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma... |
| CVE-2021-20778 | HIGH | 7.5 | 2.1% | Jul 1, 2021 | Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access rest... |
| CVE-2021-20752 | MEDIUM | 6.1 | 0.8% | Jul 1, 2021 | Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary scr... |
| CVE-2021-36089 | HIGH | 7.8 | 1.2% | Jul 1, 2021 | Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from g... |
| CVE-2021-36088 | CRITICAL | 9.8 | 2.4% | Jul 1, 2021 | Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_pa... |
| CVE-2021-36087 | LOW | 3.3 | 0.5% | Jul 1, 2021 | The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check... |
| CVE-2021-36086 | LOW | 3.3 | 0.6% | Jul 1, 2021 | The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set ... |
| CVE-2021-36085 | LOW | 3.3 | 0.5% | Jul 1, 2021 | The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperm... |
| CVE-2021-36084 | LOW | 3.3 | 0.5% | Jul 1, 2021 | The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissio... |
| CVE-2021-36083 | MEDIUM | 5.5 | 0.9% | Jul 1, 2021 | KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. |
| CVE-2021-36082 | HIGH | 8.8 | 1.8% | Jul 1, 2021 | ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. |
| CVE-2021-36081 | HIGH | 7.8 | 0.9% | Jul 1, 2021 | Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call. |
| CVE-2021-36080 | HIGH | 8.8 | 1.3% | Jul 1, 2021 | GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_e... |
| CVE-2021-28804 | CRITICAL | 9.8 | 1.8% | Jul 1, 2021 | A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability all... |
| CVE-2021-28803 | MEDIUM | 5.4 | 0.5% | Jul 1, 2021 | This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004. |
| CVE-2021-28802 | CRITICAL | 9.8 | 1.8% | Jul 1, 2021 | A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability all... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now