2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38174 | MEDIUM | 6.5 | 0.7% | Sep 14, 2021 | When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the ... |
| CVE-2021-38164 | MEDIUM | 5.4 | 0.5% | Sep 14, 2021 | SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, ... |
| CVE-2021-38150 | MEDIUM | 6.5 | 0.5% | Sep 14, 2021 | When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engi... |
| CVE-2021-37532 | MEDIUM | 4.3 | 0.8% | Sep 14, 2021 | SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to director... |
| CVE-2021-33688 | MEDIUM | 4.3 | 0.6% | Sep 14, 2021 | SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end ... |
| CVE-2021-33686 | MEDIUM | 5.3 | 0.8% | Sep 14, 2021 | Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypt... |
| CVE-2021-33685 | MEDIUM | 6.5 | 1.0% | Sep 14, 2021 | SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or dire... |
| CVE-2021-33679 | MEDIUM | 5.4 | 0.5% | Sep 14, 2021 | The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject... |
| CVE-2021-33675 | MEDIUM | 6.1 | 0.8% | Sep 14, 2021 | Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This al... |
| CVE-2021-33674 | MEDIUM | 6.1 | 0.7% | Sep 14, 2021 | Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This al... |
| CVE-2021-33673 | MEDIUM | 6.1 | 0.8% | Sep 14, 2021 | Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persi... |
| CVE-2021-32202 | MEDIUM | 6.1 | 0.6% | Sep 14, 2021 | In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the b... |
| CVE-2021-21489 | MEDIUM | 4.8 | 0.6% | Sep 14, 2021 | SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user r... |
| CVE-2021-40357 | MEDIUM | 4.9 | 1.1% | Sep 14, 2021 | A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Work... |
| CVE-2021-37193 | MEDIUM | 4.3 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attack... |
| CVE-2021-37192 | MEDIUM | 4.3 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has... |
| CVE-2021-37191 | MEDIUM | 4.3 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attack... |
| CVE-2021-37190 | MEDIUM | 4.3 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has... |
| CVE-2021-37186 | MEDIUM | 5.4 | 0.3% | Sep 14, 2021 | A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC... |
| CVE-2021-37183 | MEDIUM | 6.5 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software all... |
| CVE-2021-37177 | MEDIUM | 6.5 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by th... |
| CVE-2021-37175 | MEDIUM | 5.3 | 0.7% | Sep 14, 2021 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions... |
| CVE-2021-33716 | MEDIUM | 6.5 | 0.2% | Sep 14, 2021 | A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-... |
| CVE-2021-39125 | MEDIUM | 5.3 | 1.4% | Sep 14, 2021 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of... |
| CVE-2021-39124 | MEDIUM | 4.3 | 0.5% | Sep 14, 2021 | The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now