2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-20609 | HIGH | 7.5 | 3.1% | Dec 1, 2021 | Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Seri... |
| CVE-2021-32592 | HIGH | 7.8 | 0.2% | Dec 1, 2021 | An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0,... |
| CVE-2021-4017 | HIGH | 8.8 | 0.6% | Dec 1, 2021 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3984 | HIGH | 7.8 | 1.5% | Dec 1, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-4019 | HIGH | 7.8 | 1.8% | Dec 1, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2021-34599 | HIGH | 7.4 | 0.5% | Dec 1, 2021 | Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS ... |
| CVE-2021-20864 | HIGH | 8.8 | 0.5% | Dec 1, 2021 | Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v... |
| CVE-2021-20863 | HIGH | 8 | 0.9% | Dec 1, 2021 | OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.2... |
| CVE-2021-20861 | HIGH | 8.8 | 0.4% | Dec 1, 2021 | Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmwa... |
| CVE-2021-20860 | HIGH | 8.8 | 0.5% | Dec 1, 2021 | Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GS... |
| CVE-2021-20859 | HIGH | 8 | 0.5% | Dec 1, 2021 | ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmwar... |
| CVE-2021-20851 | HIGH | 8.8 | 0.8% | Dec 1, 2021 | Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a re... |
| CVE-2021-43360 | HIGH | 8.8 | 2.3% | Dec 1, 2021 | Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restrictio... |
| CVE-2021-43359 | HIGH | 8.8 | 2.4% | Dec 1, 2021 | Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page af... |
| CVE-2021-43358 | HIGH | 7.5 | 2.3% | Dec 1, 2021 | Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path trav... |
| CVE-2021-40809 | HIGH | 8.8 | 1.4% | Dec 1, 2021 | An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in res... |
| CVE-2021-41256 | HIGH | 7.1 | 1.1% | Nov 30, 2021 | nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud N... |
| CVE-2021-36328 | HIGH | 8.8 | 0.8% | Nov 30, 2021 | Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may ... |
| CVE-2021-40101 | HIGH | 7.2 | 2.6% | Nov 30, 2021 | An issue was discovered in Concrete CMS before 8.5.7. The Dashboard allows a user's password to be changed without a pro... |
| CVE-2021-43296 | HIGH | 7.5 | 2.6% | Nov 30, 2021 | Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor. |
| CVE-2021-43284 | HIGH | 7.8 | 0.4% | Nov 30, 2021 | An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets updated from its defau... |
| CVE-2021-43283 | HIGH | 8.8 | 5.4% | Nov 30, 2021 | An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the ... |
| CVE-2021-43771 | HIGH | 7.8 | 0.3% | Nov 30, 2021 | Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulne... |
| CVE-2021-42123 | HIGH | 8.8 | 1.0% | Nov 30, 2021 | Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1... |
| CVE-2021-3725 | HIGH | 8.8 | 1.1% | Nov 30, 2021 | Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now