2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22927 | HIGH | 8.1 | 0.8% | Aug 5, 2021 | A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provide... |
| CVE-2021-22926 | HIGH | 7.5 | 9.8% | Aug 5, 2021 | libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CU... |
| CVE-2021-22919 | HIGH | 7.5 | 0.9% | Aug 5, 2021 | A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known a... |
| CVE-2021-22517 | HIGH | 8.8 | 1.0% | Aug 5, 2021 | A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulne... |
| CVE-2021-21893 | HIGH | 8.8 | 1.9% | Aug 5, 2021 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.0.0.49893. A s... |
| CVE-2021-21870 | HIGH | 8.8 | 1.9% | Aug 5, 2021 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A s... |
| CVE-2021-21831 | HIGH | 8.8 | 4.5% | Aug 5, 2021 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A s... |
| CVE-2021-20592 | HIGH | 7.5 | 1.5% | Aug 5, 2021 | Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39... |
| CVE-2021-1630 | HIGH | 7.5 | 1.1% | Aug 5, 2021 | XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub,... |
| CVE-2021-3682 | HIGH | 8.5 | 2.9% | Aug 5, 2021 | A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping ... |
| CVE-2021-37614 | HIGH | 8.8 | 1.5% | Aug 5, 2021 | In certain Progress MOVEit Transfer versions before 2021.0.3 (aka 13.0.3), SQL injection in the MOVEit Transfer web appl... |
| CVE-2021-34631 | HIGH | 8.8 | 0.6% | Aug 5, 2021 | The NewsPlugin WordPress plugin is vulnerable to Cross-Site Request Forgery via the handle_save_style function found in ... |
| CVE-2021-32581 | HIGH | 8.1 | 0.7% | Aug 5, 2021 | Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent ... |
| CVE-2021-32580 | HIGH | 7.8 | 0.3% | Aug 5, 2021 | Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking. |
| CVE-2021-32579 | HIGH | 7.8 | 0.2% | Aug 5, 2021 | Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update 5 for macOS allowed an... |
| CVE-2021-32578 | HIGH | 7.8 | 0.2% | Aug 5, 2021 | Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handl... |
| CVE-2021-32577 | HIGH | 7.8 | 0.2% | Aug 5, 2021 | Acronis True Image prior to 2021 Update 5 for Windows allowed local privilege escalation due to insecure folder permissi... |
| CVE-2021-32576 | HIGH | 7.8 | 0.2% | Aug 5, 2021 | Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handl... |
| CVE-2021-29977 | HIGH | 8.8 | 1.0% | Aug 5, 2021 | Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corru... |
| CVE-2021-29976 | HIGH | 8.8 | 1.2% | Aug 5, 2021 | Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bug... |
| CVE-2021-29973 | HIGH | 8.8 | 0.8% | Aug 5, 2021 | Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected t... |
| CVE-2021-29972 | HIGH | 8.8 | 1.0% | Aug 5, 2021 | A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library r... |
| CVE-2021-29970 | HIGH | 8.8 | 1.4% | Aug 5, 2021 | A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This... |
| CVE-2021-23849 | HIGH | 8.8 | 0.5% | Aug 5, 2021 | A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected s... |
| CVE-2021-21863 | HIGH | 7.8 | 1.2% | Aug 5, 2021 | A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH COD... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now