2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1615 | HIGH | 8.6 | 1.3% | Sep 23, 2021 | A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst... |
| CVE-2021-1612 | HIGH | 7.1 | 0.2% | Sep 23, 2021 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitr... |
| CVE-2021-1611 | HIGH | 8.6 | 1.3% | Sep 23, 2021 | A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisco IOS XE Wireless Controller Software for the Cisc... |
| CVE-2021-1565 | HIGH | 8.6 | 1.2% | Sep 23, 2021 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco... |
| CVE-2021-1419 | HIGH | 7.8 | 0.2% | Sep 23, 2021 | A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authe... |
| CVE-2021-21991 | HIGH | 7.8 | 0.3% | Sep 22, 2021 | The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malic... |
| CVE-2021-41011 | HIGH | 7.5 | 1.1% | Sep 22, 2021 | LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities un... |
| CVE-2021-40875 | HIGH | 7.5 | 48.4% | Sep 22, 2021 | Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat ac... |
| CVE-2021-31847 | HIGH | 7.8 | 0.4% | Sep 22, 2021 | Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a lo... |
| CVE-2021-31841 | HIGH | 7.3 | 0.2% | Sep 22, 2021 | A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sid... |
| CVE-2021-31836 | HIGH | 7.1 | 0.2% | Sep 22, 2021 | Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user ... |
| CVE-2021-3583 | HIGH | 7.1 | 0.9% | Sep 22, 2021 | A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through... |
| CVE-2021-38112 | HIGH | 8.8 | 6.5% | Sep 22, 2021 | In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler... |
| CVE-2021-41382 | HIGH | 7.5 | 8.9% | Sep 22, 2021 | Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface. |
| CVE-2021-40847 | HIGH | 8.1 | 10.9% | Sep 21, 2021 | The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve ... |
| CVE-2021-29831 | HIGH | 8.1 | 1.4% | Sep 21, 2021 | IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Inje... |
| CVE-2021-41531 | HIGH | 7.5 | 0.9% | Sep 21, 2021 | NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length... |
| CVE-2021-37741 | HIGH | 8.8 | 2.6% | Sep 21, 2021 | ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities. |
| CVE-2021-37419 | HIGH | 7.5 | 2.4% | Sep 21, 2021 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF. |
| CVE-2021-20037 | HIGH | 7.8 | 0.4% | Sep 21, 2021 | SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads t... |
| CVE-2021-41083 | HIGH | 8.8 | 0.4% | Sep 20, 2021 | Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully ... |
| CVE-2021-39229 | HIGH | 7.5 | 1.8% | Sep 20, 2021 | Apprise is an open source library which allows you to send a notification to almost all of the most popular notification... |
| CVE-2021-41082 | HIGH | 7.5 | 1.7% | Sep 20, 2021 | Discourse is a platform for community discussion. In affected versions any private message that includes a group had its... |
| CVE-2021-32838 | HIGH | 7.5 | 1.8% | Sep 20, 2021 | Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is... |
| CVE-2021-32839 | HIGH | 7.5 | 2.1% | Sep 20, 2021 | sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expre... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now