2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21243 | CRITICAL | 9.8 | 54.5% | Jan 15, 2021 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods ... |
| CVE-2021-21237 | HIGH | 7.8 | 0.4% | Jan 15, 2021 | Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious re... |
| CVE-2021-0223 | HIGH | 7.8 | 0.4% | Jan 15, 2021 | A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticate... |
| CVE-2021-0222 | HIGH | 7.4 | 0.6% | Jan 15, 2021 | A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by send... |
| CVE-2021-0221 | MEDIUM | 6.5 | 0.5% | Jan 15, 2021 | In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loo... |
| CVE-2021-0220 | MEDIUM | 6.8 | 1.2% | Jan 15, 2021 | The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be e... |
| CVE-2021-0219 | MEDIUM | 6.7 | 0.7% | Jan 15, 2021 | A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a ... |
| CVE-2021-0218 | HIGH | 7.8 | 0.8% | Jan 15, 2021 | A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally auth... |
| CVE-2021-0217 | HIGH | 7.4 | 0.7% | Jan 15, 2021 | A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running... |
| CVE-2021-0215 | MEDIUM | 6.5 | 0.8% | Jan 15, 2021 | On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every tim... |
| CVE-2021-0212 | MEDIUM | 5 | 0.3% | Jan 15, 2021 | An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker ab... |
| CVE-2021-0211 | CRITICAL | 10 | 1.3% | Jan 15, 2021 | An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protoc... |
| CVE-2021-0210 | MEDIUM | 6.8 | 1.1% | Jan 15, 2021 | An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevat... |
| CVE-2021-0209 | MEDIUM | 6.5 | 0.4% | Jan 15, 2021 | In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to ... |
| CVE-2021-0208 | HIGH | 8.8 | 0.7% | Jan 15, 2021 | An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS all... |
| CVE-2021-0207 | HIGH | 7.5 | 1.3% | Jan 15, 2021 | An improper interpretation conflict of certain data between certain software components within the Juniper Networks Juno... |
| CVE-2021-0206 | HIGH | 7.5 | 1.3% | Jan 15, 2021 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causi... |
| CVE-2021-0205 | MEDIUM | 5.8 | 1.2% | Jan 15, 2021 | When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall... |
| CVE-2021-0204 | HIGH | 7.8 | 0.3% | Jan 15, 2021 | A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos ... |
| CVE-2021-0203 | HIGH | 8.6 | 1.0% | Jan 15, 2021 | On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile app... |
| CVE-2021-0202 | HIGH | 7.5 | 1.0% | Jan 15, 2021 | On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrat... |
| CVE-2021-22171 | MEDIUM | 6.5 | 1.3% | Jan 15, 2021 | Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a vict... |
| CVE-2021-22168 | MEDIUM | 6.5 | 1.0% | Jan 15, 2021 | A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting ... |
| CVE-2021-22167 | HIGH | 7.5 | 1.6% | Jan 15, 2021 | An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project ... |
| CVE-2021-22166 | HIGH | 7.5 | 1.4% | Jan 15, 2021 | An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed metho... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now