2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-46114 | HIGH | 8.8 | 1.7% | Jan 26, 2022 | jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides ... |
| CVE-2021-46561 | HIGH | 7.2 | 0.8% | Jan 26, 2022 | controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb53830... |
| CVE-2021-29845 | HIGH | 8.8 | 0.8% | Jan 26, 2022 | IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper inp... |
| CVE-2021-46383 | HIGH | 7.5 | 1.6% | Jan 26, 2022 | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information ... |
| CVE-2021-46118 | HIGH | 7.2 | 2.8% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The a... |
| CVE-2021-46116 | HIGH | 7.2 | 2.5% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin pan... |
| CVE-2021-46115 | HIGH | 7.2 | 1.3% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a f... |
| CVE-2021-46117 | HIGH | 7.2 | 3.3% | Jan 26, 2022 | jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel... |
| CVE-2021-45975 | HIGH | 7.8 | 0.6% | Jan 26, 2022 | In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs coul... |
| CVE-2021-22600 | HIGH | 7 | 5.9% | Jan 26, 2022 | A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscal... |
| CVE-2021-44123 | HIGH | 8.8 | 2.4% | Jan 26, 2022 | SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft... |
| CVE-2021-44122 | HIGH | 8.8 | 0.5% | Jan 26, 2022 | SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/publi... |
| CVE-2021-41766 | HIGH | 8.1 | 2.0% | Jan 26, 2022 | Apache Karaf allows monitoring of applications and the Java runtime by using the Java Management Extensions (JMX). JMX i... |
| CVE-2021-46559 | HIGH | 7.5 | 0.4% | Jan 26, 2022 | The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection me... |
| CVE-2021-36348 | HIGH | 8.1 | 1.1% | Jan 25, 2022 | iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with... |
| CVE-2021-36347 | HIGH | 7.2 | 2.4% | Jan 25, 2022 | iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulner... |
| CVE-2021-36296 | HIGH | 7.2 | 2.8% | Jan 25, 2022 | Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A r... |
| CVE-2021-36295 | HIGH | 7.2 | 2.8% | Jan 25, 2022 | Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A r... |
| CVE-2021-36289 | HIGH | 7.8 | 0.2% | Jan 25, 2022 | Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local... |
| CVE-2021-4133 | HIGH | 8.8 | 1.3% | Jan 25, 2022 | A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user a... |
| CVE-2021-41598 | HIGH | 8.8 | 1.2% | Jan 25, 2022 | A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed more permissions to be gran... |
| CVE-2021-40167 | HIGH | 7.8 | 7.7% | Jan 25, 2022 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption ... |
| CVE-2021-40159 | HIGH | 7.8 | 2.3% | Jan 25, 2022 | An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with oth... |
| CVE-2021-40158 | HIGH | 7.8 | 2.9% | Jan 25, 2022 | A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond ... |
| CVE-2021-39031 | HIGH | 8.8 | 2.3% | Jan 25, 2022 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to cond... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now