2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-20083HIGH8.8Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object ...
CVE-2021-29469HIGH7.5Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to...
CVE-2021-22682HIGH7.8Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permis...
CVE-2021-22678HIGH7.8Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This c...
CVE-2021-22204HIGH7.8Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec...
CVE-2021-20088HIGH8.8Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows ...
CVE-2021-20087HIGH8.8Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-deparam 0.5.1 allows...
CVE-2021-20084HIGH8.8Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-sparkle 1.5.2-beta a...
CVE-2021-31540HIGH7.1Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files i...
CVE-2021-31410HIGH7.5Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote ...
CVE-2021-31408HIGH7.1Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6....
CVE-2021-31407HIGH7.5Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9),...
CVE-2021-31405HIGH7.5Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 (Vaadi...
CVE-2021-31607HIGH7.8In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for ...
CVE-2021-2316HIGH8.1Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions ...
CVE-2021-2314HIGH8.1Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Support...
CVE-2021-2310HIGH7.5Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that...
CVE-2021-2309HIGH7.5Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that...
CVE-2021-2295HIGH8.1Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio...
CVE-2021-2292HIGH8.1Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Documen...
CVE-2021-2290HIGH8.1Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported ver...
CVE-2021-2289HIGH8.1Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search). Supported...
CVE-2021-2288HIGH8.1Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported ver...
CVE-2021-2287HIGH7.1Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that...
CVE-2021-2286HIGH7.1Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now