2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-45056 | HIGH | 7.8 | 2.3% | Jan 13, 2022 | Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitra... |
| CVE-2021-45055 | HIGH | 7.8 | 2.4% | Jan 13, 2022 | Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, ... |
| CVE-2021-45054 | MEDIUM | 5.5 | 2.0% | Jan 13, 2022 | Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 fi... |
| CVE-2021-45053 | HIGH | 7.8 | 2.2% | Jan 13, 2022 | Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitra... |
| CVE-2021-44178 | MEDIUM | 6.1 | 1.4% | Jan 13, 2022 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (... |
| CVE-2021-44177 | MEDIUM | 6.1 | 1.6% | Jan 13, 2022 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS... |
| CVE-2021-44176 | MEDIUM | 6.1 | 1.6% | Jan 13, 2022 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS... |
| CVE-2021-43765 | MEDIUM | 6.1 | 1.6% | Jan 13, 2022 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS... |
| CVE-2021-43764 | MEDIUM | 5.4 | 1.5% | Jan 13, 2022 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS... |
| CVE-2021-43762 | MEDIUM | 6.5 | 1.6% | Jan 13, 2022 | AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability ... |
| CVE-2021-43761 | MEDIUM | 5.4 | 1.1% | Jan 13, 2022 | AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are a... |
| CVE-2021-40722 | CRITICAL | 9.8 | 3.3% | Jan 13, 2022 | AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) i... |
| CVE-2021-33046 | CRITICAL | 9.8 | 1.3% | Jan 13, 2022 | Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerab... |
| CVE-2021-23227 | HIGH | 8.8 | 0.4% | Jan 13, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions. |
| CVE-2021-45807 | CRITICAL | 9.8 | 2.6% | Jan 13, 2022 | jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall. |
| CVE-2021-45422 | MEDIUM | 6.1 | 3.3% | Jan 13, 2022 | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_proce... |
| CVE-2021-40576 | MEDIUM | 5.5 | 0.9% | Jan 13, 2022 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in h... |
| CVE-2021-40575 | MEDIUM | 5.5 | 0.9% | Jan 13, 2022 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in refram... |
| CVE-2021-40574 | HIGH | 7.8 | 1.3% | Jan 13, 2022 | The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line funct... |
| CVE-2021-40573 | MEDIUM | 5.5 | 0.7% | Jan 13, 2022 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows atta... |
| CVE-2021-40572 | MEDIUM | 5.5 | 0.9% | Jan 13, 2022 | The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows att... |
| CVE-2021-40813 | MEDIUM | 5.4 | 0.7% | Jan 13, 2022 | A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote... |
| CVE-2021-40571 | HIGH | 7.8 | 1.2% | Jan 13, 2022 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which... |
| CVE-2021-40570 | HIGH | 7.8 | 1.2% | Jan 13, 2022 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which a... |
| CVE-2021-40569 | MEDIUM | 5.5 | 0.9% | Jan 13, 2022 | The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now