2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21160 | HIGH | 8.8 | 1.9% | Mar 9, 2021 | Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit... |
| CVE-2021-21159 | HIGH | 8.8 | 1.7% | Mar 9, 2021 | Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit... |
| CVE-2021-20268 | HIGH | 7.8 | 0.3% | Mar 9, 2021 | An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user ... |
| CVE-2021-27592 | HIGH | 7.8 | 1.4% | Mar 9, 2021 | When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise View... |
| CVE-2021-27591 | HIGH | 7.8 | 1.2% | Mar 9, 2021 | When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Vis... |
| CVE-2021-27590 | HIGH | 7.8 | 1.2% | Mar 9, 2021 | When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visua... |
| CVE-2021-27589 | HIGH | 7.8 | 1.2% | Mar 9, 2021 | When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Vis... |
| CVE-2021-27588 | HIGH | 7.8 | 1.2% | Mar 9, 2021 | When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer versi... |
| CVE-2021-27587 | HIGH | 7.8 | 1.4% | Mar 9, 2021 | When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual E... |
| CVE-2021-27586 | HIGH | 7.8 | 1.2% | Mar 9, 2021 | When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Visu... |
| CVE-2021-27585 | HIGH | 7.8 | 1.4% | Mar 9, 2021 | When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D V... |
| CVE-2021-21487 | HIGH | 8.8 | 0.8% | Mar 9, 2021 | SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in ... |
| CVE-2021-21486 | HIGH | 8.8 | 0.8% | Mar 9, 2021 | SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does n... |
| CVE-2021-21481 | HIGH | 8.8 | 0.6% | Mar 9, 2021 | The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform... |
| CVE-2021-21480 | HIGH | 8.8 | 50.9% | Mar 9, 2021 | SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment). ... |
| CVE-2021-20276 | HIGH | 7.5 | 2.0% | Mar 9, 2021 | A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may le... |
| CVE-2021-20275 | HIGH | 7.5 | 2.0% | Mar 9, 2021 | A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to... |
| CVE-2021-20274 | HIGH | 7.5 | 1.9% | Mar 9, 2021 | A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbeh... |
| CVE-2021-20273 | HIGH | 7.5 | 2.0% | Mar 9, 2021 | A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off. |
| CVE-2021-20272 | HIGH | 7.5 | 2.1% | Mar 9, 2021 | A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to... |
| CVE-2021-21506 | HIGH | 8.8 | 1.0% | Mar 8, 2021 | PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenti... |
| CVE-2021-21503 | HIGH | 7.8 | 0.3% | Mar 8, 2021 | PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user co... |
| CVE-2021-21327 | HIGH | 7.5 | 2.3% | Mar 8, 2021 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track... |
| CVE-2021-26788 | HIGH | 7.5 | 1.2% | Mar 8, 2021 | Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a de... |
| CVE-2021-27365 | HIGH | 7.8 | 2.1% | Mar 7, 2021 | An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now