2021 CVE Vulnerabilities
23,473 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39620 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead... |
| CVE-2021-39618 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user ... |
| CVE-2021-28507 | HIGH | 7.1 | 0.7% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for Open... |
| CVE-2021-28501 | HIGH | 7.8 | 0.8% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and Ter... |
| CVE-2021-28500 | HIGH | 7.8 | 0.9% | Jan 14, 2022 | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and Ter... |
| CVE-2021-23567 | HIGH | 7.5 | 1.7% | Jan 14, 2022 | The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in... |
| CVE-2021-23157 | HIGH | 7.8 | 8.2% | Jan 14, 2022 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attac... |
| CVE-2021-23138 | HIGH | 7.8 | 9.3% | Jan 14, 2022 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an atta... |
| CVE-2021-20613 | HIGH | 7.5 | 3.6% | Jan 14, 2022 | Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware... |
| CVE-2021-20612 | HIGH | 7.5 | 3.6% | Jan 14, 2022 | Lack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.14 and prior, ... |
| CVE-2021-1036 | HIGH | 7.8 | 0.3% | Jan 14, 2022 | In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This cou... |
| CVE-2021-1035 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary bro... |
| CVE-2021-0959 | HIGH | 7.8 | 0.1% | Jan 14, 2022 | In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could ... |
| CVE-2021-45761 | HIGH | 7.5 | 1.4% | Jan 14, 2022 | ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function. |
| CVE-2021-32650 | HIGH | 8.8 | 2.1% | Jan 14, 2022 | October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versi... |
| CVE-2021-32649 | HIGH | 8.8 | 1.3% | Jan 14, 2022 | October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework. Prior to versi... |
| CVE-2021-46255 | HIGH | 8.1 | 1.1% | Jan 14, 2022 | eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. |
| CVE-2021-34998 | HIGH | 7.8 | 0.4% | Jan 13, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivi... |
| CVE-2021-34997 | HIGH | 8.8 | 4.2% | Jan 13, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.... |
| CVE-2021-34996 | HIGH | 8.8 | 82.3% | Jan 13, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.... |
| CVE-2021-34995 | HIGH | 8.8 | 68.9% | Jan 13, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.... |
| CVE-2021-34994 | HIGH | 8.8 | 5.8% | Jan 13, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.... |
| CVE-2021-34980 | HIGH | 8.8 | 1.4% | Jan 13, 2022 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R626... |
| CVE-2021-34979 | HIGH | 8.8 | 1.4% | Jan 13, 2022 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R626... |
| CVE-2021-34978 | HIGH | 8.8 | 1.5% | Jan 13, 2022 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R626... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now