2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-33687MEDIUM4.9SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information i...
CVE-2021-33684MEDIUM5.3SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22...
CVE-2021-33683MEDIUM4.3SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC...
CVE-2021-33682MEDIUM5.4SAP Lumira Server version 2.4 does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XS...
CVE-2021-33681MEDIUM6.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources...
CVE-2021-33680MEDIUM6.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources...
CVE-2021-33678MEDIUM6.5A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740...
CVE-2021-33667MEDIUM4.3Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker t...
CVE-2021-22318MEDIUM5.5A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerab...
CVE-2021-36374MEDIUM5.5When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large am...
CVE-2021-36373MEDIUM5.5When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that fi...
CVE-2021-20784MEDIUM6.1HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote a...
CVE-2021-20747MEDIUM4.3Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 ...
CVE-2021-32755MEDIUM4.3Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries f...
CVE-2021-36214MEDIUM6.1LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.
CVE-2021-20424MEDIUM4.3IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technic...
CVE-2021-20369MEDIUM5.9IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to de...
CVE-2021-20368MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-20366MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-20365MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-20364MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-20363MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-20362MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-20361MEDIUM5.4IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit...
CVE-2021-36123MEDIUM6.5An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is suscept...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now