2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24804 | HIGH | 8.8 | 0.6% | Nov 17, 2021 | The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attacke... |
| CVE-2021-24772 | HIGH | 8.8 | 1.5% | Nov 17, 2021 | The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records ... |
| CVE-2021-24758 | HIGH | 8.8 | 1.3% | Nov 17, 2021 | The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GE... |
| CVE-2021-3939 | HIGH | 7.8 | 0.3% | Nov 17, 2021 | Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallb... |
| CVE-2021-43012 | HIGH | 7.8 | 2.0% | Nov 16, 2021 | Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker ... |
| CVE-2021-43011 | HIGH | 7.8 | 2.0% | Nov 16, 2021 | Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker ... |
| CVE-2021-42731 | HIGH | 7.8 | 5.5% | Nov 16, 2021 | Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially craf... |
| CVE-2021-42725 | HIGH | 7.8 | 1.9% | Nov 16, 2021 | Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a... |
| CVE-2021-42723 | HIGH | 7.8 | 2.4% | Nov 16, 2021 | Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI ... |
| CVE-2021-42721 | HIGH | 7.8 | 3.5% | Nov 16, 2021 | Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of Format ev... |
| CVE-2021-43013 | HIGH | 7.8 | 2.0% | Nov 16, 2021 | Adobe Media Encoder version 15.4.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated a... |
| CVE-2021-42726 | HIGH | 7.8 | 2.3% | Nov 16, 2021 | Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a... |
| CVE-2021-26335 | HIGH | 7.8 | 0.3% | Nov 16, 2021 | Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to us... |
| CVE-2021-26331 | HIGH | 7.8 | 0.3% | Nov 16, 2021 | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox ent... |
| CVE-2021-26323 | HIGH | 7.8 | 0.2% | Nov 16, 2021 | Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. |
| CVE-2021-26315 | HIGH | 7.8 | 0.2% | Nov 16, 2021 | When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,... |
| CVE-2021-43046 | HIGH | 8.8 | 1.0% | Nov 16, 2021 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploi... |
| CVE-2021-26338 | HIGH | 7.5 | 0.9% | Nov 16, 2021 | Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control table... |
| CVE-2021-26326 | HIGH | 7.8 | 0.3% | Nov 16, 2021 | Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. |
| CVE-2021-26322 | HIGH | 7.5 | 1.0% | Nov 16, 2021 | Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. |
| CVE-2021-42114 | HIGH | 8.3 | 2.9% | Nov 16, 2021 | Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitiga... |
| CVE-2021-25965 | HIGH | 8.8 | 0.5% | Nov 16, 2021 | In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated... |
| CVE-2021-25940 | HIGH | 8 | 0.8% | Nov 16, 2021 | In ArangoDB, versions v3.7.6 through v3.8.3 are vulnerable to Insufficient Session Expiration. When a user’s password is... |
| CVE-2021-25976 | HIGH | 8.1 | 0.4% | Nov 16, 2021 | In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing variou... |
| CVE-2021-42386 | HIGH | 7.2 | 2.6% | Nov 15, 2021 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafte... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now