2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42341 | HIGH | 7.5 | 2.0% | Oct 14, 2021 | checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the... |
| CVE-2021-40854 | HIGH | 7.8 | 0.2% | Oct 14, 2021 | AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Cha... |
| CVE-2021-40843 | HIGH | 7.3 | 0.4% | Oct 13, 2021 | Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An atta... |
| CVE-2021-20131 | HIGH | 8.8 | 16.0% | Oct 13, 2021 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to imprope... |
| CVE-2021-20130 | HIGH | 8.8 | 31.6% | Oct 13, 2021 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to imprope... |
| CVE-2021-3057 | HIGH | 8.1 | 1.4% | Oct 13, 2021 | A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the... |
| CVE-2021-20129 | HIGH | 7.5 | 1.6% | Oct 13, 2021 | An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to... |
| CVE-2021-20127 | HIGH | 8.1 | 1.1% | Oct 13, 2021 | An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek... |
| CVE-2021-20126 | HIGH | 8.8 | 0.6% | Oct 13, 2021 | Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a we... |
| CVE-2021-20124 | HIGH | 7.5 | 69.2% | Oct 13, 2021 | A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the W... |
| CVE-2021-20123 | HIGH | 7.5 | 74.3% | Oct 13, 2021 | A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the D... |
| CVE-2021-39304 | HIGH | 7.5 | 1.0% | Oct 13, 2021 | Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. |
| CVE-2021-34814 | HIGH | 7.5 | 1.0% | Oct 13, 2021 | Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass. |
| CVE-2021-41137 | HIGH | 8.8 | 1.2% | Oct 13, 2021 | Minio is a Kubernetes native application for cloud storage. All users on release `RELEASE.2021-10-10T16-53-30Z` are affe... |
| CVE-2021-20833 | HIGH | 7.4 | 0.5% | Oct 13, 2021 | The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows ... |
| CVE-2021-20831 | HIGH | 8.8 | 0.7% | Oct 13, 2021 | Cross-site request forgery (CSRF) vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack th... |
| CVE-2021-20795 | HIGH | 8.8 | 0.5% | Oct 13, 2021 | Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows ... |
| CVE-2021-41357 | HIGH | 7.8 | 2.0% | Oct 13, 2021 | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-41352 | HIGH | 7.5 | 2.8% | Oct 13, 2021 | SCOM Information Disclosure Vulnerability |
| CVE-2021-41348 | HIGH | 8 | 0.6% | Oct 13, 2021 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2021-41347 | HIGH | 7.8 | 0.7% | Oct 13, 2021 | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2021-41345 | HIGH | 7.8 | 0.8% | Oct 13, 2021 | Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2021-41344 | HIGH | 8.1 | 6.1% | Oct 13, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2021-41340 | HIGH | 7.8 | 1.9% | Oct 13, 2021 | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2021-41335 | HIGH | 7.8 | 1.3% | Oct 13, 2021 | Windows Kernel Elevation of Privilege Vulnerability |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now