2021 CVE Vulnerabilities

23,494 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-32550MEDIUM5.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function ...
CVE-2021-32549MEDIUM5.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function ...
CVE-2021-32548MEDIUM5.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function ...
CVE-2021-32547MEDIUM5.5It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function ...
CVE-2021-3525——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2021-34679HIGH7.5Thycotic Password Reset Server before 5.3.0 allows credential disclosure.
CVE-2021-21382CRITICAL9.6Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopbac...
CVE-2021-3256MEDIUM6.5KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php fil...
CVE-2021-27200CRITICAL9.8In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. Th...
CVE-2021-32932HIGH7.5The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information ...
CVE-2021-32930CRITICAL9.8The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change ...
CVE-2021-27410CRITICAL9.8The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution o...
CVE-2021-27408HIGH7.5The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary co...
CVE-2021-21833CRITICAL9.8An improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack functionality of Accusoft Ima...
CVE-2021-21824CRITICAL9.8An out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft ImageGear 19.9. A specia...
CVE-2021-21808HIGH8.8A memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9. A spec...
CVE-2021-21795CRITICAL9.8A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear 1...
CVE-2021-0498HIGH7.8In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escala...
CVE-2021-0497HIGH7.8In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc...
CVE-2021-0496HIGH7.8In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local esc...
CVE-2021-0495HIGH7.8In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local...
CVE-2021-0494HIGH7.8In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to loca...
CVE-2021-0493HIGH7.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to l...
CVE-2021-0492HIGH7.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to l...
CVE-2021-0491HIGH7.8In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could l...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now