2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24839 | HIGH | 7.5 | 1.2% | Feb 7, 2022 | The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CSRF checks in its wpsc_tickets AJAX acti... |
| CVE-2021-46389 | HIGH | 7.5 | 1.2% | Feb 7, 2022 | IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by ... |
| CVE-2021-46359 | HIGH | 7.5 | 1.2% | Feb 7, 2022 | FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successf... |
| CVE-2021-43928 | HIGH | 8.8 | 1.9% | Feb 7, 2022 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending... |
| CVE-2021-39280 | HIGH | 8.8 | 2.2% | Feb 6, 2022 | Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affect... |
| CVE-2021-4154 | HIGH | 8.8 | 1.2% | Feb 4, 2022 | A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 pars... |
| CVE-2021-44206 | HIGH | 7.3 | 0.2% | Feb 4, 2022 | Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products a... |
| CVE-2021-44205 | HIGH | 7.3 | 0.2% | Feb 4, 2022 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec... |
| CVE-2021-44204 | HIGH | 7.8 | 0.2% | Feb 4, 2022 | Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Ac... |
| CVE-2021-40420 | HIGH | 8.8 | 4.4% | Feb 4, 2022 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A s... |
| CVE-2021-40401 | HIGH | 8.6 | 1.2% | Feb 4, 2022 | A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and d... |
| CVE-2021-38960 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID:... |
| CVE-2021-32036 | HIGH | 7.1 | 1.0% | Feb 4, 2022 | An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at... |
| CVE-2021-29219 | HIGH | 7.8 | 0.2% | Feb 4, 2022 | A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Pr... |
| CVE-2021-22288 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of ... |
| CVE-2021-22286 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of ... |
| CVE-2021-22285 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the A... |
| CVE-2021-22284 | HIGH | 8.8 | 0.8% | Feb 4, 2022 | Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to exec... |
| CVE-2021-21970 | HIGH | 8.1 | 0.9% | Feb 4, 2022 | An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConn... |
| CVE-2021-21969 | HIGH | 8.1 | 0.9% | Feb 4, 2022 | An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConn... |
| CVE-2021-21968 | HIGH | 8.3 | 0.9% | Feb 4, 2022 | A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34... |
| CVE-2021-21964 | HIGH | 7.4 | 0.7% | Feb 4, 2022 | A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc. SeaConnect ... |
| CVE-2021-21962 | HIGH | 8.1 | 1.9% | Feb 4, 2022 | A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. S... |
| CVE-2021-21959 | HIGH | 8.1 | 0.8% | Feb 4, 2022 | A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfigur... |
| CVE-2021-29397 | HIGH | 7.5 | 0.8% | Feb 4, 2022 | Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Cl... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now