2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-1553HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1552HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1551HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1550HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1549HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1548HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1547HIGH7.2Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series ...
CVE-2021-1531HIGH8.8A vulnerability in the web UI of Cisco Modeling Labs could allow an authenticated, remote attacker to execute arbitrary ...
CVE-2021-1487HIGH8.8A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EP...
CVE-2021-33511HIGH7.5Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors i...
CVE-2021-33500HIGH7.5PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY ...
CVE-2021-21552HIGH8.8Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. ...
CVE-2021-21549HIGH8.8Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged ...
CVE-2021-32634HIGH7.2Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserial...
CVE-2021-27811HIGH7.2A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execu...
CVE-2021-31475HIGH8.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job S...
CVE-2021-31473HIGH7.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37...
CVE-2021-31440HIGH7This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An a...
CVE-2021-31439HIGH8.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology Dis...
CVE-2021-32633HIGH8.8Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules...
CVE-2021-32032HIGH7.5In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the e...
CVE-2021-28798HIGH7.5A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, th...
CVE-2021-33477HIGH8.8rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improp...
CVE-2021-28906HIGH7.5In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In som...
CVE-2021-28905HIGH7.5In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now