2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-29049MEDIUM6.1Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix...
CVE-2021-0113MEDIUM6.5Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08...
CVE-2021-0097MEDIUM6.5Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may ...
CVE-2021-0095MEDIUM4.4Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a...
CVE-2021-32942MEDIUM5.5The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowVi...
CVE-2021-30133MEDIUM6.1A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows ...
CVE-2021-23854MEDIUM6.1An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in t...
CVE-2021-23852MEDIUM4.9An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that caus...
CVE-2021-23848MEDIUM6.1An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interfa...
CVE-2021-33666MEDIUM6.1When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain...
CVE-2021-33665MEDIUM5.4SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - ...
CVE-2021-33664MEDIUM5.4SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, ...
CVE-2021-33663MEDIUM5.3SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL...
CVE-2021-33662MEDIUM4.4Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the f...
CVE-2021-33661MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources...
CVE-2021-33660MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources...
CVE-2021-33659MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources...
CVE-2021-31832MEDIUM4.8Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention (DLP) Endpoint for W...
CVE-2021-27643MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources...
CVE-2021-27642MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources...
CVE-2021-27641MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources...
CVE-2021-27640MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources...
CVE-2021-27639MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources ...
CVE-2021-27638MEDIUM5.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources ...
CVE-2021-27637MEDIUM4.6Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an atta...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now