2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28455 | HIGH | 8.8 | 2.1% | May 11, 2021 | Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability |
| CVE-2021-27068 | HIGH | 8.8 | 53.6% | May 11, 2021 | Visual Studio Remote Code Execution Vulnerability |
| CVE-2021-26422 | HIGH | 7.2 | 2.2% | May 11, 2021 | Skype for Business and Lync Remote Code Execution Vulnerability |
| CVE-2021-26419 | HIGH | 7.5 | 22.6% | May 11, 2021 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2021-29509 | HIGH | 7.5 | 1.6% | May 11, 2021 | Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original... |
| CVE-2021-27616 | HIGH | 7.8 | 0.3% | May 11, 2021 | Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to instal... |
| CVE-2021-27614 | HIGH | 7.1 | 0.3% | May 11, 2021 | SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP ... |
| CVE-2021-27613 | HIGH | 7.8 | 0.3% | May 11, 2021 | Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, al... |
| CVE-2021-21656 | HIGH | 7.1 | 1.5% | May 11, 2021 | Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XX... |
| CVE-2021-21655 | HIGH | 7.1 | 0.5% | May 11, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to... |
| CVE-2021-21652 | HIGH | 7.1 | 0.6% | May 11, 2021 | A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier al... |
| CVE-2021-31913 | HIGH | 7.5 | 0.7% | May 11, 2021 | In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchang... |
| CVE-2021-31912 | HIGH | 8.8 | 1.2% | May 11, 2021 | In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset. |
| CVE-2021-31910 | HIGH | 7.5 | 1.3% | May 11, 2021 | In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible. |
| CVE-2021-31898 | HIGH | 7.5 | 0.6% | May 11, 2021 | In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS. |
| CVE-2021-30482 | HIGH | 7.5 | 0.9% | May 11, 2021 | In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly |
| CVE-2021-31905 | HIGH | 7.5 | 1.9% | May 11, 2021 | In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible. |
| CVE-2021-31902 | HIGH | 7.5 | 1.2% | May 11, 2021 | In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly. |
| CVE-2021-31901 | HIGH | 7.5 | 0.9% | May 11, 2021 | In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group. |
| CVE-2021-31899 | HIGH | 8.8 | 1.3% | May 11, 2021 | In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-on... |
| CVE-2021-30504 | HIGH | 7.5 | 2.3% | May 11, 2021 | In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation. |
| CVE-2021-30006 | HIGH | 7.5 | 1.1% | May 11, 2021 | In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure. |
| CVE-2021-30005 | HIGH | 7.8 | 0.8% | May 11, 2021 | In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the ... |
| CVE-2021-29263 | HIGH | 7.8 | 0.5% | May 11, 2021 | In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the p... |
| CVE-2021-26310 | HIGH | 7.5 | 1.5% | May 11, 2021 | In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now