2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-24109MEDIUM6.8Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVE-2021-24106MEDIUM5.5Windows DirectX Information Disclosure Vulnerability
CVE-2021-24101MEDIUM6.5Microsoft Dataverse Information Disclosure Vulnerability
CVE-2021-24100MEDIUM5Microsoft Edge for Android Information Disclosure Vulnerability
CVE-2021-24099MEDIUM6.5Skype for Business and Lync Denial of Service Vulnerability
CVE-2021-24098MEDIUM5.5Windows Console Driver Denial of Service Vulnerability
CVE-2021-24085MEDIUM6.5Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-24084MEDIUM5.5Windows Mobile Device Management Information Disclosure Vulnerability
CVE-2021-24082MEDIUM4.3Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
CVE-2021-24080MEDIUM6.5Windows Trust Verification API Denial of Service Vulnerability
CVE-2021-24079MEDIUM5.5Windows Backup Engine Information Disclosure Vulnerability
CVE-2021-24076MEDIUM5.5Microsoft Windows VMSwitch Information Disclosure Vulnerability
CVE-2021-24075MEDIUM6.8Microsoft Windows VMSwitch Denial of Service Vulnerability
CVE-2021-24073MEDIUM6.5Skype for Business and Lync Spoofing Vulnerability
CVE-2021-24071MEDIUM5.3Microsoft SharePoint Information Disclosure Vulnerability
CVE-2021-1731MEDIUM5.5PFX Encryption Security Feature Bypass Vulnerability
CVE-2021-1730MEDIUM5.4<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malic...
CVE-2021-1724MEDIUM6.1Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-1721MEDIUM6.5.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-20328MEDIUM6.8Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct hos...
CVE-2021-20327MEDIUM6.8A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server...
CVE-2021-27330MEDIUM6.1Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read ...
CVE-2021-3124MEDIUM5.4Stored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remot...
CVE-2021-21064MEDIUM4.9Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector...
CVE-2021-27671MEDIUM6.1An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for da...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now