2021 CVE Vulnerabilities
23,468 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21350 | CRITICAL | 9.8 | 15.6% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21349 | HIGH | 8.6 | 47.8% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21348 | HIGH | 7.5 | 14.2% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21347 | CRITICAL | 9.8 | 14.7% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21346 | CRITICAL | 9.8 | 76.9% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21345 | CRITICAL | 9.9 | 73.0% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21344 | CRITICAL | 9.8 | 76.5% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21343 | HIGH | 7.5 | 47.6% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21342 | CRITICAL | 9.1 | 50.1% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne... |
| CVE-2021-21341 | HIGH | 7.5 | 77.9% | Mar 23, 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnera... |
| CVE-2021-25922 | MEDIUM | 6.1 | 0.8% | Mar 22, 2021 | In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being v... |
| CVE-2021-25921 | MEDIUM | 5.4 | 91.1% | Mar 22, 2021 | In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being ... |
| CVE-2021-25920 | MEDIUM | 6.5 | 1.1% | Mar 22, 2021 | In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads... |
| CVE-2021-25919 | MEDIUM | 4.8 | 69.9% | Mar 22, 2021 | In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being vali... |
| CVE-2021-25918 | MEDIUM | 4.8 | 0.6% | Mar 22, 2021 | In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being vali... |
| CVE-2021-25917 | MEDIUM | 4.8 | 0.6% | Mar 22, 2021 | In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being vali... |
| CVE-2021-22321 | MEDIUM | 5.3 | 0.7% | Mar 22, 2021 | There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special sc... |
| CVE-2021-22314 | HIGH | 7.8 | 0.2% | Mar 22, 2021 | There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could ... |
| CVE-2021-22320 | HIGH | 7.5 | 0.7% | Mar 22, 2021 | There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. At... |
| CVE-2021-22311 | HIGH | 7.2 | 0.7% | Mar 22, 2021 | There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening... |
| CVE-2021-22310 | MEDIUM | 4.4 | 0.2% | Mar 22, 2021 | There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific informati... |
| CVE-2021-26578 | HIGH | 7.5 | 1.0% | Mar 22, 2021 | A potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version(s): Prior to 2.5. The ... |
| CVE-2021-25265 | HIGH | 8.8 | 1.8% | Mar 22, 2021 | A malicious website could execute code remotely in Sophos Connect Client before version 2.1. |
| CVE-2021-22309 | HIGH | 7.5 | 0.8% | Mar 22, 2021 | There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Att... |
| CVE-2021-28972 | MEDIUM | 6.7 | 0.9% | Mar 22, 2021 | In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolera... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now