2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-29395 | HIGH | 7.5 | 1.8% | Feb 4, 2022 | Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 al... |
| CVE-2021-46398 | HIGH | 8.8 | 6.7% | Feb 4, 2022 | A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor use... |
| CVE-2021-44977 | HIGH | 7.5 | 1.6% | Feb 4, 2022 | In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files. |
| CVE-2021-43145 | HIGH | 8.1 | 0.9% | Feb 4, 2022 | With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user acco... |
| CVE-2021-46320 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent exa... |
| CVE-2021-44903 | HIGH | 7.8 | 0.3% | Feb 4, 2022 | Micro-Star International (MSI) Center Pro <= 2.0.16.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabi... |
| CVE-2021-44901 | HIGH | 7.8 | 0.5% | Feb 4, 2022 | Micro-Star International (MSI) Dragon Center <= 2.0.116.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulne... |
| CVE-2021-44900 | HIGH | 7.8 | 0.3% | Feb 4, 2022 | Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulne... |
| CVE-2021-44899 | HIGH | 7.8 | 0.4% | Feb 4, 2022 | Micro-Star International (MSI) Center <= 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the ... |
| CVE-2021-45997 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapp... |
| CVE-2021-45996 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapp... |
| CVE-2021-45995 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRo... |
| CVE-2021-45994 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule... |
| CVE-2021-45993 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindMo... |
| CVE-2021-45992 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanLis... |
| CVE-2021-45991 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers... |
| CVE-2021-45989 | HIGH | 7.5 | 1.1% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRe... |
| CVE-2021-45988 | HIGH | 7.5 | 1.0% | Feb 4, 2022 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForwa... |
| CVE-2021-45741 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulne... |
| CVE-2021-45739 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulner... |
| CVE-2021-45737 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulner... |
| CVE-2021-45736 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This... |
| CVE-2021-45735 | HIGH | 7.5 | 3.7% | Feb 4, 2022 | TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interfa... |
| CVE-2021-45734 | HIGH | 7.5 | 1.4% | Feb 4, 2022 | TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. Thi... |
| CVE-2021-44246 | HIGH | 7.5 | 1.2% | Feb 4, 2022 | Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were disco... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now