2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-3017 | HIGH | 7.5 | 63.0% | Apr 14, 2021 | The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover creden... |
| CVE-2021-29654 | HIGH | 7.2 | 2.2% | Apr 14, 2021 | AjaxSearchPro before 4.20.8 allows Deserialization of Untrusted Data (in the import database feature of the administrati... |
| CVE-2021-28484 | HIGH | 7.5 | 1.5% | Apr 14, 2021 | An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK ... |
| CVE-2021-28826 | HIGH | 7.8 | 0.2% | Apr 14, 2021 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - ... |
| CVE-2021-28825 | HIGH | 7.8 | 0.2% | Apr 14, 2021 | The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Co... |
| CVE-2021-27259 | HIGH | 7.8 | 0.4% | Apr 14, 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-4... |
| CVE-2021-27253 | HIGH | 8.8 | 1.1% | Apr 14, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nigh... |
| CVE-2021-27252 | HIGH | 8.8 | 1.1% | Apr 14, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780... |
| CVE-2021-27251 | HIGH | 8.8 | 0.7% | Apr 14, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nigh... |
| CVE-2021-27249 | HIGH | 8.8 | 5.1% | Apr 14, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2... |
| CVE-2021-27248 | HIGH | 8.8 | 2.6% | Apr 14, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2... |
| CVE-2021-27246 | HIGH | 8 | 6.6% | Apr 14, 2021 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch... |
| CVE-2021-28098 | HIGH | 7.8 | 0.4% | Apr 14, 2021 | An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in t... |
| CVE-2021-27608 | HIGH | 7.5 | 0.2% | Apr 14, 2021 | An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process ... |
| CVE-2021-25314 | HIGH | 7.8 | 0.4% | Apr 14, 2021 | A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability... |
| CVE-2021-31152 | HIGH | 8.8 | 3.8% | Apr 14, 2021 | Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can ena... |
| CVE-2021-27990 | HIGH | 7.5 | 1.5% | Apr 14, 2021 | Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called ... |
| CVE-2021-26827 | HIGH | 7.5 | 1.7% | Apr 14, 2021 | Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Ser... |
| CVE-2021-22879 | HIGH | 8.8 | 4.7% | Apr 14, 2021 | Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowi... |
| CVE-2021-3462 | HIGH | 7.8 | 0.2% | Apr 13, 2021 | A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that... |
| CVE-2021-29440 | HIGH | 7.2 | 30.6% | Apr 13, 2021 | Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrat... |
| CVE-2021-29439 | HIGH | 7.2 | 2.6% | Apr 13, 2021 | The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users wi... |
| CVE-2021-29436 | HIGH | 8.1 | 0.5% | Apr 13, 2021 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version... |
| CVE-2021-29428 | HIGH | 7.8 | 0.5% | Apr 13, 2021 | In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions ... |
| CVE-2021-29427 | HIGH | 7.2 | 1.3% | Apr 13, 2021 | In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now