2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-33692 | HIGH | 7.5 | 1.1% | Sep 15, 2021 | SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject ... |
| CVE-2021-40965 | HIGH | 8.8 | 0.6% | Sep 15, 2021 | A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that a... |
| CVE-2021-39215 | HIGH | 7.5 | 1.2% | Sep 15, 2021 | Jitsi Meet is an open source video conferencing application. In versions prior to 2.0.5963, a Prosody module allows the ... |
| CVE-2021-29750 | HIGH | 7.5 | 0.7% | Sep 15, 2021 | IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h... |
| CVE-2021-40156 | HIGH | 7.8 | 1.0% | Sep 15, 2021 | A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated bou... |
| CVE-2021-40155 | HIGH | 7.8 | 1.0% | Sep 15, 2021 | A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boun... |
| CVE-2021-3795 | HIGH | 7.5 | 1.4% | Sep 15, 2021 | semver-regex is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-39213 | HIGH | 8.8 | 1.0% | Sep 15, 2021 | GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with A... |
| CVE-2021-27046 | HIGH | 7.8 | 0.3% | Sep 15, 2021 | A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution... |
| CVE-2021-27045 | HIGH | 7.8 | 0.9% | Sep 15, 2021 | A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boun... |
| CVE-2021-39209 | HIGH | 8.8 | 0.5% | Sep 15, 2021 | GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, a user who is logged in to GLPI can... |
| CVE-2021-40157 | HIGH | 7.8 | 0.7% | Sep 15, 2021 | A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability... |
| CVE-2021-27044 | HIGH | 7.8 | 1.2% | Sep 15, 2021 | A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through ... |
| CVE-2021-21798 | HIGH | 7.8 | 15.6% | Sep 15, 2021 | An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. ... |
| CVE-2021-40845 | HIGH | 8.8 | 4.6% | Sep 15, 2021 | The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in... |
| CVE-2021-3796 | HIGH | 7.3 | 1.6% | Sep 15, 2021 | vim is vulnerable to Use After Free |
| CVE-2021-3794 | HIGH | 7.5 | 1.2% | Sep 15, 2021 | vuelidate is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-30137 | HIGH | 8.2 | 0.8% | Sep 15, 2021 | Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON o... |
| CVE-2021-27662 | HIGH | 8.1 | 0.8% | Sep 15, 2021 | The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay T... |
| CVE-2021-40447 | HIGH | 7.8 | 0.6% | Sep 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2021-40444 | HIGH | 8.8 | 97.2% | Sep 15, 2021 | Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Mi... |
| CVE-2021-38671 | HIGH | 7.8 | 0.5% | Sep 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2021-38667 | HIGH | 7.8 | 0.5% | Sep 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2021-38661 | HIGH | 7.8 | 2.1% | Sep 15, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2021-38660 | HIGH | 7.8 | 2.1% | Sep 15, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now