2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24598 | MEDIUM | 4.8 | 0.7% | Nov 17, 2021 | The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege u... |
| CVE-2021-43337 | MEDIUM | 6.5 | 1.2% | Nov 17, 2021 | SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_scrip... |
| CVE-2021-3939 | HIGH | 7.8 | 0.3% | Nov 17, 2021 | Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallb... |
| CVE-2021-43012 | HIGH | 7.8 | 2.0% | Nov 16, 2021 | Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker ... |
| CVE-2021-43011 | HIGH | 7.8 | 2.0% | Nov 16, 2021 | Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker ... |
| CVE-2021-42731 | HIGH | 7.8 | 5.5% | Nov 16, 2021 | Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially craf... |
| CVE-2021-42725 | HIGH | 7.8 | 1.9% | Nov 16, 2021 | Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a... |
| CVE-2021-42723 | HIGH | 7.8 | 2.4% | Nov 16, 2021 | Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI ... |
| CVE-2021-42721 | HIGH | 7.8 | 3.5% | Nov 16, 2021 | Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of Format ev... |
| CVE-2021-43013 | HIGH | 7.8 | 2.0% | Nov 16, 2021 | Adobe Media Encoder version 15.4.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated a... |
| CVE-2021-42726 | HIGH | 7.8 | 2.3% | Nov 16, 2021 | Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a... |
| CVE-2021-26337 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address ... |
| CVE-2021-26336 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result... |
| CVE-2021-26335 | HIGH | 7.8 | 0.3% | Nov 16, 2021 | Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to us... |
| CVE-2021-26331 | HIGH | 7.8 | 0.3% | Nov 16, 2021 | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox ent... |
| CVE-2021-26330 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. |
| CVE-2021-26327 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality. |
| CVE-2021-26325 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of ... |
| CVE-2021-26323 | HIGH | 7.8 | 0.2% | Nov 16, 2021 | Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. |
| CVE-2021-26321 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of s... |
| CVE-2021-26320 | MEDIUM | 5.5 | 0.2% | Nov 16, 2021 | Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local... |
| CVE-2021-26315 | HIGH | 7.8 | 0.2% | Nov 16, 2021 | When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,... |
| CVE-2021-43048 | CRITICAL | 9.8 | 1.2% | Nov 16, 2021 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability ... |
| CVE-2021-43047 | CRITICAL | 9 | 1.0% | Nov 16, 2021 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain easily exploitab... |
| CVE-2021-43046 | HIGH | 8.8 | 1.0% | Nov 16, 2021 | The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now