2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36372 | CRITICAL | 9.8 | 2.4% | Nov 19, 2021 | In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can... |
| CVE-2021-42338 | CRITICAL | 9.8 | 5.6% | Nov 19, 2021 | 4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to byp... |
| CVE-2021-44033 | MEDIUM | 6.8 | 0.5% | Nov 19, 2021 | In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed. |
| CVE-2021-44026 | CRITICAL | 9.8 | 42.9% | Nov 19, 2021 | Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params. |
| CVE-2021-44025 | MEDIUM | 6.1 | 1.0% | Nov 19, 2021 | Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when disp... |
| CVE-2021-41278 | MEDIUM | 5.7 | 0.3% | Nov 19, 2021 | Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/trans... |
| CVE-2021-40131 | MEDIUM | 5.4 | 0.7% | Nov 19, 2021 | A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an ... |
| CVE-2021-40130 | MEDIUM | 4.9 | 1.1% | Nov 19, 2021 | A vulnerability in the web application of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, ... |
| CVE-2021-40129 | MEDIUM | 4.9 | 1.0% | Nov 19, 2021 | A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authent... |
| CVE-2021-37322 | HIGH | 7.8 | 0.9% | Nov 18, 2021 | GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c. |
| CVE-2021-43017 | MEDIUM | 4.2 | 1.1% | Nov 18, 2021 | Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Cre... |
| CVE-2021-39928 | HIGH | 7.5 | 5.5% | Nov 18, 2021 | NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of ser... |
| CVE-2021-39920 | HIGH | 7.5 | 3.2% | Nov 18, 2021 | NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection... |
| CVE-2021-23197 | HIGH | 7.8 | 0.3% | Nov 18, 2021 | Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary... |
| CVE-2021-23193 | MEDIUM | 6.5 | 0.7% | Nov 18, 2021 | Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unp... |
| CVE-2021-23167 | MEDIUM | 6.8 | 0.4% | Nov 18, 2021 | Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive infor... |
| CVE-2021-23162 | HIGH | 8.1 | 0.4% | Nov 18, 2021 | Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the ... |
| CVE-2021-23155 | MEDIUM | 6.8 | 0.5% | Nov 18, 2021 | Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the l... |
| CVE-2021-23146 | HIGH | 7.5 | 0.9% | Nov 18, 2021 | An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV... |
| CVE-2021-42525 | LOW | 3.3 | 1.7% | Nov 18, 2021 | Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to discl... |
| CVE-2021-42524 | HIGH | 7.8 | 2.7% | Nov 18, 2021 | Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb... |
| CVE-2021-42272 | HIGH | 7.8 | 2.7% | Nov 18, 2021 | Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb... |
| CVE-2021-42271 | HIGH | 7.8 | 2.7% | Nov 18, 2021 | Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb... |
| CVE-2021-42270 | HIGH | 7.8 | 2.7% | Nov 18, 2021 | Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arb... |
| CVE-2021-42269 | HIGH | 7.8 | 4.1% | Nov 18, 2021 | Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malform... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now