2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-32565 | HIGH | 7.5 | 2.1% | Jun 29, 2021 | Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This i... |
| CVE-2021-28691 | HIGH | 7.8 | 0.4% | Jun 29, 2021 | Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to ... |
| CVE-2021-27577 | HIGH | 7.5 | 3.5% | Jun 29, 2021 | Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This i... |
| CVE-2021-23400 | HIGH | 8.8 | 1.4% | Jun 29, 2021 | The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain n... |
| CVE-2021-22545 | HIGH | 7.8 | 0.2% | Jun 29, 2021 | An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. ... |
| CVE-2021-34548 | HIGH | 7.5 | 2.7% | Jun 29, 2021 | An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to ... |
| CVE-2021-33503 | HIGH | 7.5 | 3.3% | Jun 29, 2021 | An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority... |
| CVE-2021-1134 | HIGH | 7.4 | 0.8% | Jun 29, 2021 | A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could a... |
| CVE-2021-35299 | HIGH | 7.5 | 1.1% | Jun 28, 2021 | Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connecti... |
| CVE-2021-35523 | HIGH | 7.8 | 0.7% | Jun 28, 2021 | Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege es... |
| CVE-2021-20574 | HIGH | 8.8 | 1.7% | Jun 28, 2021 | IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP inject... |
| CVE-2021-28588 | HIGH | 8.8 | 6.2% | Jun 28, 2021 | Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafte... |
| CVE-2021-28586 | HIGH | 7.8 | 2.3% | Jun 28, 2021 | After Effects version 18.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbit... |
| CVE-2021-28584 | HIGH | 7.2 | 1.8% | Jun 28, 2021 | Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Path Traversal... |
| CVE-2021-28570 | HIGH | 8.6 | 1.8% | Jun 28, 2021 | Adobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An unau... |
| CVE-2021-28562 | HIGH | 8.8 | 5.1% | Jun 28, 2021 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e... |
| CVE-2021-21102 | HIGH | 8.8 | 3.9% | Jun 28, 2021 | Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially craf... |
| CVE-2021-21101 | HIGH | 8.8 | 3.5% | Jun 28, 2021 | Adobe Illustrator version 25.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a speciall... |
| CVE-2021-21099 | HIGH | 8.8 | 5.8% | Jun 28, 2021 | Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted fil... |
| CVE-2021-21098 | HIGH | 8.8 | 5.8% | Jun 28, 2021 | Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted fil... |
| CVE-2021-21090 | HIGH | 8.8 | 5.4% | Jun 28, 2021 | Adobe InCopy version 16.0 (and earlier) is affected by an path traversal vulnerability when parsing a crafted file. An u... |
| CVE-2021-21083 | HIGH | 7.5 | 2.0% | Jun 28, 2021 | AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are a... |
| CVE-2021-20745 | HIGH | 7.8 | 1.0% | Jun 28, 2021 | Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by load... |
| CVE-2021-20740 | HIGH | 8.8 | 3.1% | Jun 28, 2021 | Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Ga... |
| CVE-2021-25654 | HIGH | 7.8 | 0.8% | Jun 25, 2021 | An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a loca... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now