2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32679 | HIGH | 8.8 | 1.4% | Jul 12, 2021 | Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, fi... |
| CVE-2021-26090 | HIGH | 7.5 | 1.3% | Jul 12, 2021 | A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 a... |
| CVE-2021-26089 | HIGH | 7.8 | 0.4% | Jul 12, 2021 | An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitra... |
| CVE-2021-3547 | HIGH | 7.4 | 1.0% | Jul 12, 2021 | OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authenticatio... |
| CVE-2021-27293 | HIGH | 7.5 | 1.5% | Jul 12, 2021 | RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (R... |
| CVE-2021-22921 | HIGH | 7.8 | 7.4% | Jul 12, 2021 | Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions... |
| CVE-2021-20024 | HIGH | 8.1 | 0.6% | Jul 9, 2021 | Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a s... |
| CVE-2021-36367 | HIGH | 8.1 | 1.1% | Jul 9, 2021 | PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication resp... |
| CVE-2021-26106 | HIGH | 7.8 | 0.3% | Jul 9, 2021 | An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.... |
| CVE-2021-26100 | HIGH | 7.5 | 0.3% | Jul 9, 2021 | A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthentic... |
| CVE-2021-22129 | HIGH | 8.8 | 1.1% | Jul 9, 2021 | Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail befo... |
| CVE-2021-33792 | HIGH | 7.8 | 2.1% | Jul 9, 2021 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trail... |
| CVE-2021-29730 | HIGH | 8.8 | 1.0% | Jul 9, 2021 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ... |
| CVE-2021-33012 | HIGH | 8.6 | 1.9% | Jul 9, 2021 | Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted c... |
| CVE-2021-27039 | HIGH | 7.8 | 1.6% | Jul 9, 2021 | A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIF... |
| CVE-2021-27038 | HIGH | 7.8 | 1.8% | Jul 9, 2021 | A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a malici... |
| CVE-2021-27037 | HIGH | 7.8 | 1.6% | Jul 9, 2021 | A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt... |
| CVE-2021-27036 | HIGH | 7.8 | 1.7% | Jul 9, 2021 | A maliciously crafted PCX, PICT, RCL, TIF, BMP, PSD or TIFF file can be used to write beyond the allocated buffer while ... |
| CVE-2021-27035 | HIGH | 7.8 | 1.7% | Jul 9, 2021 | A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be f... |
| CVE-2021-27034 | HIGH | 7.8 | 2.2% | Jul 9, 2021 | A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017... |
| CVE-2021-27033 | HIGH | 8.1 | 3.0% | Jul 9, 2021 | A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability... |
| CVE-2021-30201 | HIGH | 7.5 | 25.3% | Jul 9, 2021 | The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system. When this XML is processed (external) entities are... |
| CVE-2021-30120 | HIGH | 7.5 | 5.7% | Jul 9, 2021 | Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement. The need to use 2FA for authentication in enforc... |
| CVE-2021-30117 | HIGH | 8.8 | 72.1% | Jul 9, 2021 | The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the p... |
| CVE-2021-23405 | HIGH | 8.8 | 1.7% | Jul 9, 2021 | This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId par... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now