2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-26355 | MEDIUM | 5.5 | 0.2% | Jan 11, 2023 | Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers t... |
| CVE-2021-26346 | MEDIUM | 5.5 | 0.2% | Jan 11, 2023 | Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an i... |
| CVE-2021-26343 | MEDIUM | 5.5 | 0.2% | Jan 11, 2023 | Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conten... |
| CVE-2021-26328 | MEDIUM | 4.4 | 0.2% | Jan 11, 2023 | Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for... |
| CVE-2021-26316 | HIGH | 7.8 | 0.3% | Jan 11, 2023 | Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with ... |
| CVE-2021-3966 | HIGH | 8.8 | 0.5% | Jan 11, 2023 | usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem. |
| CVE-2021-46871 | MEDIUM | 6.1 | 0.4% | Jan 10, 2023 | tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes. |
| CVE-2021-36603 | MEDIUM | 6.1 | 0.5% | Jan 9, 2023 | Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted str... |
| CVE-2021-4311 | CRITICAL | 9.8 | 0.7% | Jan 9, 2023 | A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown co... |
| CVE-2021-4310 | MEDIUM | 6.1 | 0.5% | Jan 9, 2023 | A vulnerability was found in 01-Scripts 01-Artikelsystem. It has been classified as problematic. Affected is an unknown ... |
| CVE-2021-4309 | MEDIUM | 6.1 | 0.5% | Jan 8, 2023 | A vulnerability, which was classified as problematic, has been found in 01-Scripts 01ACP. This issue affects some unknow... |
| CVE-2021-4308 | CRITICAL | 9.8 | 0.7% | Jan 8, 2023 | A vulnerability was found in WebPA up to 3.1.1. It has been rated as critical. This issue affects some unknown processin... |
| CVE-2021-4301 | CRITICAL | 9.8 | 0.7% | Jan 7, 2023 | A vulnerability was found in slackero phpwcms up to 1.9.26 and classified as critical. Affected by this issue is some un... |
| CVE-2021-4307 | CRITICAL | 9.8 | 1.3% | Jan 7, 2023 | A vulnerability was found in Yomguithereal Baobab up to 2.6.0. It has been declared as critical. Affected by this vulner... |
| CVE-2021-4306 | HIGH | 7.5 | 0.9% | Jan 7, 2023 | A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown fun... |
| CVE-2021-46868 | HIGH | 7.5 | 0.4% | Jan 6, 2023 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in ou... |
| CVE-2021-46867 | HIGH | 7.5 | 0.4% | Jan 6, 2023 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in ou... |
| CVE-2021-32828 | MEDIUM | 6.1 | 0.7% | Jan 5, 2023 | The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109... |
| CVE-2021-41010 | — | — | — | Jan 5, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2021-41009 | — | — | — | Jan 5, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2021-41008 | — | — | — | Jan 5, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2021-41007 | — | — | — | Jan 5, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2021-41006 | — | — | — | Jan 5, 2023 | Rejected reason: CVE was unused by HPE. |
| CVE-2021-40342 | CRITICAL | 9.8 | 0.3% | Jan 5, 2023 | In the DES implementation, the affected product versions use a default key for encryption. Successful exploitation allo... |
| CVE-2021-40341 | MEDIUM | 5.5 | 0.1% | Jan 5, 2023 | DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now