2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33964 | HIGH | 8.8 | 2.9% | Jan 18, 2022 | China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives ... |
| CVE-2021-38965 | HIGH | 8.8 | 1.8% | Jan 17, 2022 | IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary com... |
| CVE-2021-4164 | HIGH | 8.8 | 0.5% | Jan 17, 2022 | calibre-web is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-25036 | HIGH | 8.8 | 3.0% | Jan 17, 2022 | The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered dur... |
| CVE-2021-44537 | HIGH | 7.8 | 2.7% | Jan 15, 2022 | ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading t... |
| CVE-2021-33828 | HIGH | 8.8 | 1.2% | Jan 15, 2022 | The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (th... |
| CVE-2021-33827 | HIGH | 7.2 | 2.1% | Jan 15, 2022 | The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings. |
| CVE-2021-42555 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validat... |
| CVE-2021-35969 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validatio... |
| CVE-2021-33499 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2). |
| CVE-2021-33498 | HIGH | 7.5 | 1.2% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2). |
| CVE-2021-32545 | HIGH | 7.5 | 1.3% | Jan 15, 2022 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation. |
| CVE-2021-44049 | HIGH | 7.8 | 0.4% | Jan 15, 2022 | CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated priv... |
| CVE-2021-46170 | HIGH | 7.5 | 1.2% | Jan 14, 2022 | An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string ... |
| CVE-2021-46020 | HIGH | 7.5 | 1.0% | Jan 14, 2022 | An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. |
| CVE-2021-45773 | HIGH | 7.5 | 1.1% | Jan 14, 2022 | A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e7... |
| CVE-2021-45769 | HIGH | 7.5 | 1.1% | Jan 14, 2022 | A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a... |
| CVE-2021-45406 | HIGH | 8.8 | 1.8% | Jan 14, 2022 | In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query... |
| CVE-2021-45068 | HIGH | 7.8 | 12.3% | Jan 14, 2022 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe... |
| CVE-2021-45064 | HIGH | 7.8 | 11.5% | Jan 14, 2022 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe... |
| CVE-2021-45062 | HIGH | 7.8 | 16.5% | Jan 14, 2022 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe... |
| CVE-2021-45061 | HIGH | 7.8 | 7.9% | Jan 14, 2022 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe... |
| CVE-2021-45060 | HIGH | 7.8 | 8.6% | Jan 14, 2022 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe... |
| CVE-2021-44828 | HIGH | 7.8 | 0.3% | Jan 14, 2022 | Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) al... |
| CVE-2021-44743 | HIGH | 7.8 | 2.5% | Jan 14, 2022 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerab... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now