2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-43559 | HIGH | 8.8 | 0.6% | Nov 22, 2021 | A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. T... |
| CVE-2021-43015 | HIGH | 7.8 | 1.6% | Nov 22, 2021 | Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a m... |
| CVE-2021-42738 | HIGH | 7.8 | 1.9% | Nov 22, 2021 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a ... |
| CVE-2021-42737 | HIGH | 7.8 | 1.7% | Nov 22, 2021 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a ... |
| CVE-2021-42727 | HIGH | 7.8 | 40.9% | Nov 22, 2021 | Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted fi... |
| CVE-2021-40775 | HIGH | 7.8 | 1.7% | Nov 22, 2021 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a ... |
| CVE-2021-40772 | HIGH | 7.8 | 1.7% | Nov 22, 2021 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a ... |
| CVE-2021-40771 | HIGH | 7.8 | 1.7% | Nov 22, 2021 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a ... |
| CVE-2021-40770 | HIGH | 7.8 | 1.7% | Nov 22, 2021 | Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a ... |
| CVE-2021-3935 | HIGH | 8.1 | 1.0% | Nov 22, 2021 | When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries... |
| CVE-2021-43582 | HIGH | 7.8 | 1.3% | Nov 22, 2021 | A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022... |
| CVE-2021-43581 | HIGH | 8.8 | 1.2% | Nov 22, 2021 | An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11. Th... |
| CVE-2021-43557 | HIGH | 7.5 | 14.6% | Nov 22, 2021 | The uri-block plugin in Apache APISIX before 2.10.2 uses $request_uri without verification. The $request_uri is the full... |
| CVE-2021-38146 | HIGH | 7.5 | 11.7% | Nov 22, 2021 | The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary ... |
| CVE-2021-28710 | HIGH | 8.8 | 0.3% | Nov 21, 2021 | certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structure... |
| CVE-2021-23217 | HIGH | 7.5 | 0.3% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with eleva... |
| CVE-2021-23201 | HIGH | 7.5 | 0.3% | Nov 20, 2021 | NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevat... |
| CVE-2021-36321 | HIGH | 7.5 | 1.2% | Nov 20, 2021 | Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote... |
| CVE-2021-36307 | HIGH | 8.8 | 0.9% | Nov 20, 2021 | Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability... |
| CVE-2021-34358 | HIGH | 8.8 | 0.4% | Nov 20, 2021 | We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and la... |
| CVE-2021-21898 | HIGH | 8.8 | 2.5% | Nov 19, 2021 | A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-... |
| CVE-2021-44038 | HIGH | 7.8 | 0.8% | Nov 19, 2021 | An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (w... |
| CVE-2021-43555 | HIGH | 7.8 | 38.0% | Nov 19, 2021 | mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may ... |
| CVE-2021-42254 | HIGH | 7.8 | 0.3% | Nov 19, 2021 | BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions... |
| CVE-2021-22970 | HIGH | 7.5 | 1.4% | Nov 19, 2021 | Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now