2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38098 | HIGH | 7.8 | 2.3% | Oct 1, 2021 | Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated ... |
| CVE-2021-38103 | HIGH | 7.8 | 2.3% | Oct 1, 2021 | IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a cra... |
| CVE-2021-38099 | HIGH | 7.8 | 2.3% | Oct 1, 2021 | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing... |
| CVE-2021-38096 | HIGH | 7.8 | 3.0% | Oct 1, 2021 | Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. ... |
| CVE-2021-38097 | HIGH | 7.8 | 2.7% | Oct 1, 2021 | Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthentic... |
| CVE-2021-29108 | HIGH | 8.8 | 0.8% | Oct 1, 2021 | There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 a... |
| CVE-2021-41648 | HIGH | 7.5 | 10.0% | Oct 1, 2021 | An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId ... |
| CVE-2021-35297 | HIGH | 7.8 | 1.2% | Oct 1, 2021 | Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that trig... |
| CVE-2021-41459 | HIGH | 7.5 | 1.2% | Oct 1, 2021 | There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function s... |
| CVE-2021-41457 | HIGH | 7.5 | 1.2% | Oct 1, 2021 | There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a deni... |
| CVE-2021-41456 | HIGH | 7.5 | 1.2% | Oct 1, 2021 | There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function s... |
| CVE-2021-23893 | HIGH | 7.8 | 0.1% | Oct 1, 2021 | Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow... |
| CVE-2021-3747 | HIGH | 7.8 | 0.2% | Oct 1, 2021 | The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with inc... |
| CVE-2021-3626 | HIGH | 8.8 | 0.2% | Oct 1, 2021 | The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket t... |
| CVE-2021-33626 | HIGH | 7.8 | 0.3% | Oct 1, 2021 | A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently ... |
| CVE-2021-29894 | HIGH | 7.5 | 0.7% | Sep 30, 2021 | IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorit... |
| CVE-2021-41109 | HIGH | 7.5 | 1.2% | Sep 30, 2021 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version... |
| CVE-2021-41302 | HIGH | 7.3 | 0.4% | Sep 30, 2021 | ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely... |
| CVE-2021-41298 | HIGH | 8.8 | 0.8% | Sep 30, 2021 | ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct a... |
| CVE-2021-41297 | HIGH | 8.8 | 0.7% | Sep 30, 2021 | ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate priv... |
| CVE-2021-41295 | HIGH | 8.8 | 0.4% | Sep 30, 2021 | ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a for... |
| CVE-2021-41293 | HIGH | 7.5 | 20.1% | Sep 30, 2021 | ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific ... |
| CVE-2021-41291 | HIGH | 7.5 | 79.4% | Sep 30, 2021 | ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Mana... |
| CVE-2021-41829 | HIGH | 7.5 | 3.1% | Sep 30, 2021 | Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain ... |
| CVE-2021-41828 | HIGH | 7.5 | 4.6% | Sep 30, 2021 | Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now