2021 CVE Vulnerabilities
23,468 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21303 | MEDIUM | 6.8 | 1.0% | Feb 5, 2021 | Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. ... |
| CVE-2021-1072 | HIGH | 7.1 | 0.3% | Feb 5, 2021 | NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbi... |
| CVE-2021-26722 | MEDIUM | 6.1 | 3.2% | Feb 5, 2021 | LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" messa... |
| CVE-2021-3382 | HIGH | 7.5 | 1.8% | Feb 5, 2021 | Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (... |
| CVE-2021-3258 | MEDIUM | 5.4 | 1.6% | Feb 5, 2021 | Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remo... |
| CVE-2021-3333 | MEDIUM | 6.1 | 0.8% | Feb 5, 2021 | Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a mal... |
| CVE-2021-3311 | CRITICAL | 9.8 | 2.9% | Feb 5, 2021 | An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a l... |
| CVE-2021-26711 | MEDIUM | 5.3 | 1.9% | Feb 5, 2021 | A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external r... |
| CVE-2021-26710 | MEDIUM | 6.1 | 6.5% | Feb 5, 2021 | A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to... |
| CVE-2021-26708 | HIGH | 7 | 1.6% | Feb 5, 2021 | A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK... |
| CVE-2021-20652 | HIGH | 8.8 | 0.8% | Feb 5, 2021 | Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack t... |
| CVE-2021-20623 | CRITICAL | 9.8 | 2.8% | Feb 5, 2021 | Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privileg... |
| CVE-2021-25249 | HIGH | 7.8 | 0.4% | Feb 4, 2021 | An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP... |
| CVE-2021-25248 | MEDIUM | 5.5 | 0.9% | Feb 4, 2021 | An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1... |
| CVE-2021-25246 | MEDIUM | 6.5 | 1.7% | Feb 4, 2021 | An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeSc... |
| CVE-2021-25245 | MEDIUM | 5.3 | 1.5% | Feb 4, 2021 | An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to... |
| CVE-2021-25244 | MEDIUM | 5.3 | 1.5% | Feb 4, 2021 | An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to... |
| CVE-2021-25243 | MEDIUM | 5.3 | 2.2% | Feb 4, 2021 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free B... |
| CVE-2021-25242 | MEDIUM | 5.3 | 2.2% | Feb 4, 2021 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free B... |
| CVE-2021-25241 | MEDIUM | 5.3 | 1.9% | Feb 4, 2021 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Busines... |
| CVE-2021-25240 | MEDIUM | 5.3 | 2.1% | Feb 4, 2021 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free B... |
| CVE-2021-25239 | MEDIUM | 5.3 | 2.1% | Feb 4, 2021 | An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business S... |
| CVE-2021-25238 | MEDIUM | 5.3 | 2.1% | Feb 4, 2021 | An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business... |
| CVE-2021-25237 | MEDIUM | 5.3 | 1.6% | Feb 4, 2021 | An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain... |
| CVE-2021-25236 | MEDIUM | 5.3 | 1.9% | Feb 4, 2021 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Fre... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now