2021 CVE Vulnerabilities

23,473 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-46788HIGH7.5Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability ma...
CVE-2021-46787HIGH7.5The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may caus...
CVE-2021-22275HIGH8.6Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to st...
CVE-2021-42969HIGH8.8Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a ...
CVE-2021-27777HIGH7.5XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input...
CVE-2021-27771HIGH7.6User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. W...
CVE-2021-27770HIGH8.8The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then reque...
CVE-2021-27500HIGH7.5A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ...
CVE-2021-27498HIGH7.5A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ...
CVE-2021-27482HIGH7.5A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ...
CVE-2021-27478HIGH7.5A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb ...
CVE-2021-26386HIGH7.8A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootlo...
CVE-2021-26317HIGH7.8Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a ...
CVE-2021-26369HIGH7.8A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, res...
CVE-2021-26366HIGH7.1An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulti...
CVE-2021-26362HIGH7.1A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapp...
CVE-2021-40399HIGH7.8An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.1035...
CVE-2021-33123HIGH7.8Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user t...
CVE-2021-33122HIGH7.8Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to po...
CVE-2021-26258HIGH7.8Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an autho...
CVE-2021-0194HIGH7.2Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user...
CVE-2021-0193HIGH7.2Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user...
CVE-2021-0190HIGH7.8Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable a...
CVE-2021-0189HIGH7.8Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pote...
CVE-2021-0188HIGH7.8Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileg...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now