2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36876 | HIGH | 8.8 | 0.4% | Sep 27, 2021 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks ... |
| CVE-2021-36874 | HIGH | 8.8 | 1.1% | Sep 27, 2021 | Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5). |
| CVE-2021-28613 | HIGH | 7.4 | 0.5% | Sep 27, 2021 | Adobe Creative Cloud Desktop Application version 5.4 (and earlier) is affected by a file handling vulnerability that cou... |
| CVE-2021-36218 | HIGH | 7.5 | 1.5% | Sep 27, 2021 | An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting ... |
| CVE-2021-34415 | HIGH | 7.5 | 0.9% | Sep 27, 2021 | The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not... |
| CVE-2021-34414 | HIGH | 7.2 | 1.5% | Sep 27, 2021 | The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.202... |
| CVE-2021-34413 | HIGH | 7.5 | 0.6% | Sep 27, 2021 | All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-us... |
| CVE-2021-34412 | HIGH | 7.8 | 0.3% | Sep 27, 2021 | During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possibl... |
| CVE-2021-34411 | HIGH | 7.8 | 0.2% | Sep 27, 2021 | During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to lau... |
| CVE-2021-34410 | HIGH | 7.8 | 0.2% | Sep 27, 2021 | A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook... |
| CVE-2021-34409 | HIGH | 7.8 | 0.2% | Sep 27, 2021 | It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) i... |
| CVE-2021-34408 | HIGH | 7.8 | 0.4% | Sep 27, 2021 | The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable direct... |
| CVE-2021-40108 | HIGH | 8.8 | 0.5% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on ... |
| CVE-2021-3828 | HIGH | 7.5 | 1.6% | Sep 27, 2021 | nltk is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3822 | HIGH | 7.5 | 1.4% | Sep 27, 2021 | jsoneditor is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3820 | HIGH | 7.5 | 1.2% | Sep 27, 2021 | inflect is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3819 | HIGH | 8.8 | 0.5% | Sep 27, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-23243 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be... |
| CVE-2021-40104 | HIGH | 7.5 | 1.3% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass. |
| CVE-2021-40103 | HIGH | 7.5 | 1.4% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF. |
| CVE-2021-40097 | HIGH | 8.8 | 2.4% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution vi... |
| CVE-2021-0612 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege ... |
| CVE-2021-0611 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege ... |
| CVE-2021-0610 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local ... |
| CVE-2021-34570 | HIGH | 7.5 | 0.9% | Sep 27, 2021 | Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through spe... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now