2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-41971 | HIGH | 8.8 | 1.7% | Oct 18, 2021 | Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allow... |
| CVE-2021-42098 | HIGH | 8.8 | 1.6% | Oct 18, 2021 | An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to byp... |
| CVE-2021-41991 | HIGH | 7.5 | 4.8% | Oct 18, 2021 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests wi... |
| CVE-2021-41990 | HIGH | 7.5 | 6.4% | Oct 18, 2021 | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS sig... |
| CVE-2021-24754 | HIGH | 7.2 | 1.3% | Oct 18, 2021 | The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it... |
| CVE-2021-24684 | HIGH | 8.8 | 4.3% | Oct 18, 2021 | The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary... |
| CVE-2021-38442 | HIGH | 7.8 | 0.9% | Oct 18, 2021 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project... |
| CVE-2021-38438 | HIGH | 7.8 | 1.0% | Oct 18, 2021 | A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid us... |
| CVE-2021-38436 | HIGH | 7.8 | 0.9% | Oct 18, 2021 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project... |
| CVE-2021-38434 | HIGH | 7.8 | 0.9% | Oct 18, 2021 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project... |
| CVE-2021-38430 | HIGH | 7.8 | 1.0% | Oct 18, 2021 | FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files... |
| CVE-2021-38426 | HIGH | 7.8 | 0.9% | Oct 18, 2021 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project... |
| CVE-2021-21797 | HIGH | 7.8 | 15.0% | Oct 18, 2021 | An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted d... |
| CVE-2021-21796 | HIGH | 7.8 | 15.8% | Oct 18, 2021 | An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafte... |
| CVE-2021-41611 | HIGH | 7.5 | 2.9% | Oct 18, 2021 | An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, S... |
| CVE-2021-38562 | HIGH | 7.5 | 1.7% | Oct 18, 2021 | Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive informati... |
| CVE-2021-29745 | HIGH | 8.8 | 1.0% | Oct 15, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access ... |
| CVE-2021-29679 | HIGH | 8.8 | 1.9% | Oct 15, 2021 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neu... |
| CVE-2021-28021 | HIGH | 7.8 | 1.3% | Oct 15, 2021 | Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. |
| CVE-2021-40998 | HIGH | 7.2 | 2.8% | Oct 15, 2021 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPas... |
| CVE-2021-40993 | HIGH | 8.1 | 1.1% | Oct 15, 2021 | A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag... |
| CVE-2021-40991 | HIGH | 7.2 | 1.2% | Oct 15, 2021 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ... |
| CVE-2021-40731 | HIGH | 7.8 | 8.0% | Oct 15, 2021 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and ... |
| CVE-2021-40728 | HIGH | 7.8 | 53.5% | Oct 15, 2021 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and ... |
| CVE-2021-40724 | HIGH | 7.8 | 3.3% | Oct 15, 2021 | Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthentica... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now