2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3493 | HIGH | 7.8 | 44.0% | Apr 17, 2021 | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o... |
| CVE-2021-3492 | HIGH | 7.8 | 1.5% | Apr 17, 2021 | Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring ... |
| CVE-2021-27394 | HIGH | 8.8 | 0.8% | Apr 16, 2021 | A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications... |
| CVE-2021-22539 | HIGH | 7.8 | 0.3% | Apr 16, 2021 | An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel a... |
| CVE-2021-26073 | HIGH | 7.7 | 0.9% | Apr 16, 2021 | Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Expr... |
| CVE-2021-21405 | HIGH | 7.5 | 1.0% | Apr 15, 2021 | Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library m... |
| CVE-2021-29430 | HIGH | 7.5 | 1.8% | Apr 15, 2021 | Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. ... |
| CVE-2021-30245 | HIGH | 8.8 | 4.9% | Apr 15, 2021 | The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The ... |
| CVE-2021-31402 | HIGH | 7.5 | 1.2% | Apr 15, 2021 | The dio package 4.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a different vulner... |
| CVE-2021-29448 | HIGH | 8.8 | 0.7% | Apr 15, 2021 | Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the P... |
| CVE-2021-20288 | HIGH | 7.2 | 2.1% | Apr 15, 2021 | An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY... |
| CVE-2021-28549 | HIGH | 7.8 | 6.5% | Apr 15, 2021 | Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability whe... |
| CVE-2021-28548 | HIGH | 7.8 | 6.4% | Apr 15, 2021 | Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability whe... |
| CVE-2021-28242 | HIGH | 8.8 | 5.0% | Apr 15, 2021 | SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive dat... |
| CVE-2021-21100 | HIGH | 7.8 | 1.7% | Apr 15, 2021 | Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during in... |
| CVE-2021-21095 | HIGH | 7.8 | 3.9% | Apr 15, 2021 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability... |
| CVE-2021-21094 | HIGH | 7.8 | 3.9% | Apr 15, 2021 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability... |
| CVE-2021-21093 | HIGH | 7.8 | 3.9% | Apr 15, 2021 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability wh... |
| CVE-2021-21092 | HIGH | 7.8 | 3.9% | Apr 15, 2021 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability wh... |
| CVE-2021-23887 | HIGH | 7.8 | 0.2% | Apr 15, 2021 | Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a ... |
| CVE-2021-27183 | HIGH | 7.2 | 2.7% | Apr 14, 2021 | An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary F... |
| CVE-2021-27182 | HIGH | 8.8 | 1.6% | Apr 14, 2021 | An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient... |
| CVE-2021-27181 | HIGH | 8.8 | 0.7% | Apr 14, 2021 | An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the ... |
| CVE-2021-29449 | HIGH | 7.8 | 1.9% | Apr 14, 2021 | Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation ... |
| CVE-2021-28157 | HIGH | 7.2 | 0.8% | Apr 14, 2021 | An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an adminis... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now