2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3380 | MEDIUM | 6.5 | 1.3% | Nov 10, 2021 | Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive informati... |
| CVE-2021-42062 | MEDIUM | 4.3 | 0.6% | Nov 10, 2021 | SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employe... |
| CVE-2021-41427 | MEDIUM | 6.1 | 1.0% | Nov 10, 2021 | Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi. |
| CVE-2021-40518 | MEDIUM | 6.5 | 0.4% | Nov 10, 2021 | Airangel HSMX Gateway devices through 5.2.04 allow CSRF. |
| CVE-2021-40504 | MEDIUM | 4.9 | 0.6% | Nov 10, 2021 | A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 71... |
| CVE-2021-43561 | MEDIUM | 5.4 | 0.5% | Nov 10, 2021 | An XSS issue was discovered in the google_for_jobs (aka Google for Jobs) extension before 1.5.1 and 2.x before 2.1.1 for... |
| CVE-2021-38887 | MEDIUM | 6.5 | 0.8% | Nov 10, 2021 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from applicatio... |
| CVE-2021-34582 | MEDIUM | 4.8 | 0.3% | Nov 10, 2021 | In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTM... |
| CVE-2021-25975 | MEDIUM | 5.4 | 0.6% | Nov 10, 2021 | In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue ... |
| CVE-2021-25974 | MEDIUM | 5.4 | 0.6% | Nov 10, 2021 | In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and e... |
| CVE-2021-22870 | MEDIUM | 6.5 | 1.1% | Nov 10, 2021 | A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an att... |
| CVE-2021-42319 | MEDIUM | 4.7 | 0.5% | Nov 10, 2021 | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2021-42305 | MEDIUM | 6.5 | 8.1% | Nov 10, 2021 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2021-42304 | MEDIUM | 6.6 | 0.6% | Nov 10, 2021 | Azure RTOS Elevation of Privilege Vulnerability |
| CVE-2021-42303 | MEDIUM | 6.6 | 0.7% | Nov 10, 2021 | Azure RTOS Elevation of Privilege Vulnerability |
| CVE-2021-42302 | MEDIUM | 6.6 | 0.6% | Nov 10, 2021 | Azure RTOS Elevation of Privilege Vulnerability |
| CVE-2021-42300 | MEDIUM | 6 | 0.5% | Nov 10, 2021 | Azure Sphere Tampering Vulnerability |
| CVE-2021-42288 | MEDIUM | 5.7 | 0.6% | Nov 10, 2021 | Windows Hello Security Feature Bypass Vulnerability |
| CVE-2021-42284 | MEDIUM | 6.8 | 3.4% | Nov 10, 2021 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2021-42280 | MEDIUM | 5.5 | 0.9% | Nov 10, 2021 | Windows Feedback Hub Elevation of Privilege Vulnerability |
| CVE-2021-42279 | MEDIUM | 4.2 | 1.9% | Nov 10, 2021 | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2021-42277 | MEDIUM | 5.5 | 0.8% | Nov 10, 2021 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2021-42274 | MEDIUM | 6.8 | 0.6% | Nov 10, 2021 | Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability |
| CVE-2021-41379 | MEDIUM | 5.5 | 20.1% | Nov 10, 2021 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2021-41375 | MEDIUM | 4.4 | 0.8% | Nov 10, 2021 | Azure Sphere Information Disclosure Vulnerability |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now