2021 CVE Vulnerabilities
23,445 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33420 | CRITICAL | 9.8 | 1.6% | Dec 15, 2022 | A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via... |
| CVE-2021-44695 | MEDIUM | 4.9 | 0.7% | Dec 13, 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta... |
| CVE-2021-44694 | MEDIUM | 5.5 | 0.6% | Dec 13, 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta... |
| CVE-2021-44693 | MEDIUM | 4.9 | 0.7% | Dec 13, 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta... |
| CVE-2021-40365 | HIGH | 7.5 | 0.9% | Dec 13, 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an atta... |
| CVE-2021-39660 | HIGH | 7 | 0.1% | Dec 13, 2022 | In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could... |
| CVE-2021-39617 | — | — | — | Dec 13, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2021-0934 | MEDIUM | 5.5 | 0.1% | Dec 13, 2022 | In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could le... |
| CVE-2021-32415 | HIGH | 7.8 | 0.2% | Dec 13, 2022 | EXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a local privilege escalati... |
| CVE-2021-41943 | MEDIUM | 6.1 | 0.5% | Dec 13, 2022 | Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Act... |
| CVE-2021-4244 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | A vulnerability classified as problematic has been found in yikes-inc-easy-mailchimp-extender Plugin up to 6.8.5. This a... |
| CVE-2021-4243 | — | — | — | Dec 12, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-32850. Reason: This candidate is a duplicate of ... |
| CVE-2021-46846 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5. |
| CVE-2021-3942 | CRITICAL | 9.8 | 1.4% | Dec 12, 2022 | Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer o... |
| CVE-2021-3919 | CRITICAL | 9.8 | 0.8% | Dec 12, 2022 | A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escal... |
| CVE-2021-3821 | CRITICAL | 9.8 | 0.9% | Dec 12, 2022 | A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability m... |
| CVE-2021-3661 | HIGH | 8.4 | 0.3% | Dec 12, 2022 | A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow ar... |
| CVE-2021-3437 | CRITICAL | 9.8 | 15.6% | Dec 12, 2022 | Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of ... |
| CVE-2021-38997 | MEDIUM | 5.4 | 0.4% | Dec 12, 2022 | IBM API Connect V10.0.0.0 through V10.0.5.0, V10.0.1.0 through V10.0.1.7, and V2018.4.1.0 through 2018.4.1.19 is vulnera... |
| CVE-2021-39434 | HIGH | 7.5 | 0.5% | Dec 6, 2022 | A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds... |
| CVE-2021-34181 | MEDIUM | 5.4 | 0.4% | Dec 5, 2022 | Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml. |
| CVE-2021-37533 | MEDIUM | 6.5 | 1.9% | Dec 3, 2022 | Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server ca... |
| CVE-2021-43874 | — | — | — | Dec 2, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-43873 | — | — | — | Dec 2, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2021-43872 | — | — | — | Dec 2, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now