2021 CVE Vulnerabilities

23,451 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-28435MEDIUM5.5Windows Event Tracing Information Disclosure Vulnerability
CVE-2021-28328MEDIUM6.5Windows DNS Information Disclosure Vulnerability
CVE-2021-28326MEDIUM5.5Windows AppX Deployment Server Denial of Service Vulnerability
CVE-2021-28325MEDIUM6.5Windows SMB Information Disclosure Vulnerability
CVE-2021-28323MEDIUM6.5Windows DNS Information Disclosure Vulnerability
CVE-2021-28318MEDIUM5.5Windows GDI+ Information Disclosure Vulnerability
CVE-2021-28317MEDIUM5.5Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVE-2021-28316MEDIUM4.2Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
CVE-2021-28311MEDIUM6.5Windows Application Compatibility Cache Denial of Service Vulnerability
CVE-2021-28309MEDIUM5.5Windows Kernel Information Disclosure Vulnerability
CVE-2021-27094MEDIUM4.4Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
CVE-2021-27093MEDIUM5.5Windows Kernel Information Disclosure Vulnerability
CVE-2021-27092MEDIUM6.8Azure AD Web Sign-in Security Feature Bypass Vulnerability
CVE-2021-27079MEDIUM5.7Windows Media Photo Codec Information Disclosure Vulnerability
CVE-2021-27067MEDIUM6.5Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2021-26417MEDIUM5.5Windows Overlay Filter Information Disclosure Vulnerability
CVE-2021-26413MEDIUM6.2Windows Installer Spoofing Vulnerability
CVE-2021-27609MEDIUM6.5SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allo...
CVE-2021-27605MEDIUM4.3SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authe...
CVE-2021-27603MEDIUM6.5An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work...
CVE-2021-27601MEDIUM5.4SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicio...
CVE-2021-27600MEDIUM5.4SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed ma...
CVE-2021-27598MEDIUM5.3SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read som...
CVE-2021-21492MEDIUM4.3SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suffi...
CVE-2021-21485MEDIUM6.5An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Applicatio...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now