2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-4199 | HIGH | 7.8 | 0.8% | Mar 7, 2022 | Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used... |
| CVE-2021-25087 | HIGH | 7.5 | 1.5% | Mar 7, 2022 | The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpo... |
| CVE-2021-24952 | HIGH | 8.8 | 1.3% | Mar 7, 2022 | The Conversios.io WordPress plugin before 4.6.2 does not sanitise, validate and escape the sync_progressive_data paramet... |
| CVE-2021-24778 | HIGH | 7.2 | 1.3% | Mar 7, 2022 | The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or ... |
| CVE-2021-24777 | HIGH | 7.2 | 1.3% | Mar 7, 2022 | The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the s... |
| CVE-2021-24216 | HIGH | 7.2 | 1.7% | Mar 7, 2022 | The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows admin... |
| CVE-2021-44827 | HIGH | 8.8 | 54.0% | Mar 4, 2022 | There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devi... |
| CVE-2021-40846 | HIGH | 7.5 | 0.7% | Mar 4, 2022 | An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and reque... |
| CVE-2021-32008 | HIGH | 8.7 | 1.0% | Mar 4, 2022 | This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname ... |
| CVE-2021-27756 | HIGH | 7.5 | 0.5% | Mar 4, 2022 | "TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled... |
| CVE-2021-3737 | HIGH | 7.5 | 11.6% | Mar 4, 2022 | A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote att... |
| CVE-2021-3656 | HIGH | 8.8 | 0.7% | Mar 4, 2022 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMC... |
| CVE-2021-27757 | HIGH | 7.5 | 0.6% | Mar 4, 2022 | " Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might... |
| CVE-2021-3575 | HIGH | 7.8 | 1.5% | Mar 4, 2022 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k... |
| CVE-2021-20319 | HIGH | 7.8 | 0.5% | Mar 4, 2022 | An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation im... |
| CVE-2021-46381 | HIGH | 7.5 | 58.0% | Mar 4, 2022 | Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd]... |
| CVE-2021-3743 | HIGH | 7.1 | 0.7% | Mar 4, 2022 | An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing san... |
| CVE-2021-23214 | HIGH | 8.1 | 1.9% | Mar 4, 2022 | When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a... |
| CVE-2021-46378 | HIGH | 7.5 | 31.9% | Mar 4, 2022 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote ... |
| CVE-2021-3640 | HIGH | 7 | 0.4% | Mar 3, 2022 | A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls i... |
| CVE-2021-26948 | HIGH | 7.8 | 0.8% | Mar 3, 2022 | Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a den... |
| CVE-2021-26259 | HIGH | 7.8 | 1.1% | Mar 3, 2022 | A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary c... |
| CVE-2021-3609 | HIGH | 7 | 0.4% | Mar 3, 2022 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the... |
| CVE-2021-45819 | HIGH | 7.8 | 0.2% | Mar 3, 2022 | Wordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows attackers to escalate privilege... |
| CVE-2021-40636 | HIGH | 7.5 | 1.3% | Mar 3, 2022 | OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract information from the databas... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now