2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-23514 | HIGH | 7.5 | 1.6% | Jan 13, 2022 | This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the ser... |
| CVE-2021-30353 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Sn... |
| CVE-2021-30330 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdra... |
| CVE-2021-30319 | HIGH | 7.8 | 0.2% | Jan 13, 2022 | Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdr... |
| CVE-2021-30311 | HIGH | 7.8 | 0.2% | Jan 13, 2022 | Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, ... |
| CVE-2021-30308 | HIGH | 7.8 | 0.2% | Jan 13, 2022 | Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Sn... |
| CVE-2021-30307 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV qu... |
| CVE-2021-30301 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon ... |
| CVE-2021-30300 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value t... |
| CVE-2021-30287 | HIGH | 7.5 | 0.6% | Jan 13, 2022 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon ... |
| CVE-2021-30285 | HIGH | 8.8 | 0.1% | Jan 13, 2022 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon C... |
| CVE-2021-43860 | HIGH | 8.6 | 1.3% | Jan 12, 2022 | Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn... |
| CVE-2021-42559 | HIGH | 8.8 | 2.0% | Jan 12, 2022 | An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when startin... |
| CVE-2021-41597 | HIGH | 8.8 | 1.0% | Jan 12, 2022 | SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionalit... |
| CVE-2021-42562 | HIGH | 8.1 | 1.2% | Jan 12, 2022 | An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users h... |
| CVE-2021-42561 | HIGH | 8.8 | 19.6% | Jan 12, 2022 | An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a py... |
| CVE-2021-42560 | HIGH | 8.8 | 2.1% | Jan 12, 2022 | An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a ... |
| CVE-2021-36417 | HIGH | 7.8 | 1.1% | Jan 12, 2022 | A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, whic... |
| CVE-2021-45445 | HIGH | 7.5 | 1.0% | Jan 12, 2022 | Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop. |
| CVE-2021-44652 | HIGH | 7.8 | 2.6% | Jan 12, 2022 | Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the Ch... |
| CVE-2021-44651 | HIGH | 8.8 | 5.3% | Jan 12, 2022 | Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings... |
| CVE-2021-4080 | HIGH | 8.8 | 1.5% | Jan 12, 2022 | crater is vulnerable to Unrestricted Upload of File with Dangerous Type |
| CVE-2021-44650 | HIGH | 7.2 | 4.8% | Jan 12, 2022 | Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings throu... |
| CVE-2021-44648 | HIGH | 8.8 | 1.9% | Jan 12, 2022 | GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of... |
| CVE-2021-3852 | HIGH | 7.5 | 0.8% | Jan 12, 2022 | growi is vulnerable to Authorization Bypass Through User-Controlled Key |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now