2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36034 | HIGH | 7.2 | 2.4% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope... |
| CVE-2021-36033 | HIGH | 7.2 | 3.1% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Inj... |
| CVE-2021-36032 | HIGH | 8.8 | 2.2% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope... |
| CVE-2021-36031 | HIGH | 7.2 | 3.1% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Tra... |
| CVE-2021-36030 | HIGH | 7.5 | 2.3% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope... |
| CVE-2021-36029 | HIGH | 7.2 | 2.5% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope... |
| CVE-2021-36028 | HIGH | 7.2 | 2.9% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Inj... |
| CVE-2021-36025 | HIGH | 7.2 | 2.8% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope... |
| CVE-2021-36024 | HIGH | 7.2 | 2.9% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Imprope... |
| CVE-2021-36022 | HIGH | 7.2 | 3.4% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Inj... |
| CVE-2021-36002 | HIGH | 7.3 | 0.5% | Sep 1, 2021 | Adobe Captivate version 11.5.5 (and earlier) is affected by an Creation of Temporary File In Directory With Incorrect Pe... |
| CVE-2021-35218 | HIGH | 8.8 | 76.4% | Sep 1, 2021 | Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized a... |
| CVE-2021-35216 | HIGH | 8.8 | 81.4% | Sep 1, 2021 | Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Pla... |
| CVE-2021-35215 | HIGH | 8.8 | 69.2% | Sep 1, 2021 | Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentic... |
| CVE-2021-23426 | HIGH | 7.5 | 0.9% | Sep 1, 2021 | This affects all versions of package Proto. It is possible to inject pollute the object property of an application using... |
| CVE-2021-35508 | HIGH | 8.8 | 1.5% | Sep 1, 2021 | NMSAccess32.exe in TeraRecon AQNetClient 4.4.13 allows attackers to execute a malicious binary with SYSTEM privileges vi... |
| CVE-2021-39373 | HIGH | 7.8 | 0.3% | Sep 1, 2021 | Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk manageme... |
| CVE-2021-38703 | HIGH | 8.8 | 4.3% | Sep 1, 2021 | Wireless devices running certain Arcadyan-derived firmware (such as KPN Experia WiFi 1.00.15) do not properly sanitise u... |
| CVE-2021-39109 | HIGH | 7.5 | 1.7% | Sep 1, 2021 | The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary ... |
| CVE-2021-33582 | HIGH | 7.5 | 3.1% | Sep 1, 2021 | Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input tha... |
| CVE-2021-36235 | HIGH | 7.8 | 0.7% | Sep 1, 2021 | An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges c... |
| CVE-2021-22003 | HIGH | 7.5 | 1.0% | Aug 31, 2021 | VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious ac... |
| CVE-2021-22029 | HIGH | 7.5 | 1.0% | Aug 31, 2021 | VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/syst... |
| CVE-2021-39180 | HIGH | 8.8 | 2.4% | Aug 31, 2021 | OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.... |
| CVE-2021-39176 | HIGH | 7.5 | 1.9% | Aug 31, 2021 | detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now