2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-25672HIGH8.8A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Passwo...
CVE-2021-25667HIGH8.8A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions ...
CVE-2021-27893HIGH7SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. Connec...
CVE-2021-27892HIGH7.8SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affe...
CVE-2021-27891HIGH8.8SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected.
CVE-2021-26923HIGH7.5An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the ...
CVE-2021-20179HIGH8.1A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corres...
CVE-2021-27576HIGH7.5If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This is...
CVE-2021-28379HIGH8.8web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allow...
CVE-2021-28375HIGH7.8An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not p...
CVE-2021-28374HIGH7.5The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon ...
CVE-2021-28373HIGH7.5The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code w...
CVE-2021-28361HIGH7.5An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI tar...
CVE-2021-20017HIGH8.8A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS ...
CVE-2021-28092HIGH7.5The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression De...
CVE-2021-27290HIGH7.5ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. ...
CVE-2021-21518HIGH7.8Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business P...
CVE-2021-21085HIGH7.8Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An at...
CVE-2021-21082HIGH7.8Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by a Memory Corruption vulnerability w...
CVE-2021-21077HIGH7.8Adobe Animate version 21.0.3 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated...
CVE-2021-21076HIGH7.1Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attack...
CVE-2021-21075HIGH7.1Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attack...
CVE-2021-21074HIGH7.1Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attack...
CVE-2021-21073HIGH7.1Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attack...
CVE-2021-21072HIGH7.1Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attack...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now