2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-28546 | MEDIUM | 6.5 | 1.4% | Apr 1, 2021 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e... |
| CVE-2021-20296 | MEDIUM | 5.3 | 1.7% | Apr 1, 2021 | A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is process... |
| CVE-2021-20234 | MEDIUM | 6.5 | 1.1% | Apr 1, 2021 | An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/p... |
| CVE-2021-29251 | MEDIUM | 6.5 | 0.8% | Apr 1, 2021 | BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). ... |
| CVE-2021-29349 | MEDIUM | 6.5 | 1.5% | Mar 31, 2021 | Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the ... |
| CVE-2021-27349 | MEDIUM | 6.1 | 0.8% | Mar 31, 2021 | Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727. |
| CVE-2021-27220 | MEDIUM | 5.3 | 2.0% | Mar 31, 2021 | An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepa... |
| CVE-2021-29663 | MEDIUM | 4.8 | 0.8% | Mar 31, 2021 | CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker wit... |
| CVE-2021-23007 | MEDIUM | 5.3 | 1.6% | Mar 31, 2021 | On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclose... |
| CVE-2021-23006 | MEDIUM | 6.1 | 0.6% | Mar 31, 2021 | On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerabili... |
| CVE-2021-23002 | MEDIUM | 4.5 | 0.3% | Mar 31, 2021 | When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or a... |
| CVE-2021-23001 | MEDIUM | 4.3 | 0.6% | Mar 31, 2021 | On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before ... |
| CVE-2021-22998 | MEDIUM | 5.3 | 0.9% | Mar 31, 2021 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x ... |
| CVE-2021-22994 | MEDIUM | 6.1 | 0.6% | Mar 31, 2021 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x ... |
| CVE-2021-21983 | MEDIUM | 6.5 | 68.6% | Mar 31, 2021 | Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authent... |
| CVE-2021-21418 | MEDIUM | 5.4 | 0.8% | Mar 31, 2021 | ps_emailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript ... |
| CVE-2021-3479 | MEDIUM | 5.5 | 1.0% | Mar 31, 2021 | There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit ... |
| CVE-2021-3478 | MEDIUM | 5.5 | 1.0% | Mar 31, 2021 | There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit ... |
| CVE-2021-3477 | MEDIUM | 5.5 | 1.0% | Mar 31, 2021 | There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to... |
| CVE-2021-3470 | MEDIUM | 5.3 | 1.1% | Mar 31, 2021 | A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allo... |
| CVE-2021-23986 | MEDIUM | 6.5 | 0.4% | Mar 31, 2021 | A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a c... |
| CVE-2021-23985 | MEDIUM | 6.5 | 1.4% | Mar 31, 2021 | If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the D... |
| CVE-2021-23984 | MEDIUM | 6.5 | 1.1% | Mar 31, 2021 | A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address... |
| CVE-2021-23983 | MEDIUM | 6.5 | 0.7% | Mar 31, 2021 | By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applie... |
| CVE-2021-23982 | MEDIUM | 6.5 | 0.7% | Mar 31, 2021 | Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network'... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now