2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-2035HIGH8.8Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Supported versions that are affected are 12.1....
CVE-2021-2034HIGH8.2Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supporte...
CVE-2021-2027HIGH8.2Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supporte...
CVE-2021-2026HIGH8.2Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supporte...
CVE-2021-2025HIGH8.2Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana...
CVE-2021-2018HIGH8.3Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affecte...
CVE-2021-2015HIGH8.2Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that a...
CVE-2021-2013HIGH7.6Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Support...
CVE-2021-1997HIGH8.1Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compon...
CVE-2021-23326HIGH8.8This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/sr...
CVE-2021-20190HIGH8.1A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets...
CVE-2021-22498HIGH8.1XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality...
CVE-2021-3183HIGH7.5Files.com Fat Client 3.3.6 allows authentication bypass because the client continues to have access after a logout and a...
CVE-2021-3182HIGH8D-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer suppor...
CVE-2021-22852HIGH8.8HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (o...
CVE-2021-25178HIGH7.8An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability...
CVE-2021-25177HIGH7.8An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when renderin...
CVE-2021-25176HIGH7.8An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rend...
CVE-2021-25175HIGH7.8An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when renderi...
CVE-2021-25174HIGH7.8An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists wh...
CVE-2021-25173HIGH7.8An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vul...
CVE-2021-3166HIGH7.5An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firm...
CVE-2021-3113HIGH7.5Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/...
CVE-2021-3162HIGH7.8Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.
CVE-2021-21251HIGH8.8OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. Th...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now