2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43999 | HIGH | 8.8 | 1.8% | Jan 11, 2022 | Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML supp... |
| CVE-2021-43973 | HIGH | 8.8 | 1.7% | Jan 11, 2022 | An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated ... |
| CVE-2021-43971 | HIGH | 8.8 | 1.7% | Jan 11, 2022 | A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attack... |
| CVE-2021-43055 | HIGH | 8.8 | 0.7% | Jan 11, 2022 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and T... |
| CVE-2021-43054 | HIGH | 8.8 | 0.7% | Jan 11, 2022 | The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and T... |
| CVE-2021-43053 | HIGH | 7.5 | 0.8% | Jan 11, 2022 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TI... |
| CVE-2021-43052 | HIGH | 7.5 | 0.9% | Jan 11, 2022 | The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TI... |
| CVE-2021-34704 | HIGH | 7.5 | 1.3% | Jan 11, 2022 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th... |
| CVE-2021-1573 | HIGH | 7.5 | 1.3% | Jan 11, 2022 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Th... |
| CVE-2021-38991 | HIGH | 7.8 | 0.3% | Jan 11, 2022 | IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore com... |
| CVE-2021-45460 | HIGH | 8.1 | 0.8% | Jan 11, 2022 | A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted reg... |
| CVE-2021-45034 | HIGH | 7.5 | 2.3% | Jan 11, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER ... |
| CVE-2021-45033 | HIGH | 8.8 | 0.9% | Jan 11, 2022 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER ... |
| CVE-2021-41769 | HIGH | 7.5 | 1.0% | Jan 11, 2022 | A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6... |
| CVE-2021-37198 | HIGH | 8.8 | 0.4% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-37197 | HIGH | 8.8 | 0.8% | Jan 11, 2022 | A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All vers... |
| CVE-2021-36414 | HIGH | 7.8 | 1.1% | Jan 10, 2022 | A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a... |
| CVE-2021-36412 | HIGH | 7.8 | 0.9% | Jan 10, 2022 | A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video functio... |
| CVE-2021-36409 | HIGH | 7.8 | 0.9% | Jan 10, 2022 | There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file,... |
| CVE-2021-29454 | HIGH | 8.8 | 1.9% | Jan 10, 2022 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio... |
| CVE-2021-21408 | HIGH | 8.8 | 2.2% | Jan 10, 2022 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio... |
| CVE-2021-25054 | HIGH | 8.8 | 1.3% | Jan 10, 2022 | The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL state... |
| CVE-2021-25053 | HIGH | 8.8 | 0.7% | Jan 10, 2022 | The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file wit... |
| CVE-2021-25052 | HIGH | 8.8 | 3.5% | Jan 10, 2022 | The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary ... |
| CVE-2021-25051 | HIGH | 8.8 | 0.8% | Jan 10, 2022 | The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now