2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34410 | HIGH | 7.8 | 0.2% | Sep 27, 2021 | A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook... |
| CVE-2021-34409 | HIGH | 7.8 | 0.2% | Sep 27, 2021 | It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) i... |
| CVE-2021-34408 | HIGH | 7.8 | 0.4% | Sep 27, 2021 | The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable direct... |
| CVE-2021-33907 | CRITICAL | 9.8 | 3.0% | Sep 27, 2021 | The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate informa... |
| CVE-2021-22272 | CRITICAL | 9.4 | 0.6% | Sep 27, 2021 | The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number i... |
| CVE-2021-40109 | MEDIUM | 6.4 | 0.5% | Sep 27, 2021 | A SSRF issue was discovered in Concrete CMS through 8.5.5. Users can access forbidden files on their local network. A us... |
| CVE-2021-40108 | HIGH | 8.8 | 0.5% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on ... |
| CVE-2021-3828 | HIGH | 7.5 | 1.6% | Sep 27, 2021 | nltk is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3822 | HIGH | 7.5 | 1.4% | Sep 27, 2021 | jsoneditor is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3820 | HIGH | 7.5 | 1.2% | Sep 27, 2021 | inflect is vulnerable to Inefficient Regular Expression Complexity |
| CVE-2021-3819 | HIGH | 8.8 | 0.5% | Sep 27, 2021 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) |
| CVE-2021-3818 | MEDIUM | 5.3 | 2.4% | Sep 27, 2021 | grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking |
| CVE-2021-3799 | MEDIUM | 5.4 | 1.5% | Sep 27, 2021 | grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames |
| CVE-2021-23243 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be... |
| CVE-2021-40106 | MEDIUM | 6.1 | 0.6% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the webs... |
| CVE-2021-40105 | MEDIUM | 6.1 | 0.6% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. There is XSS via Markdown Comments. |
| CVE-2021-40104 | HIGH | 7.5 | 1.3% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass. |
| CVE-2021-40103 | HIGH | 7.5 | 1.4% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF. |
| CVE-2021-40098 | CRITICAL | 9.8 | 1.6% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regul... |
| CVE-2021-40097 | HIGH | 8.8 | 2.4% | Sep 27, 2021 | An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution vi... |
| CVE-2021-0660 | MEDIUM | 4.9 | 0.5% | Sep 27, 2021 | In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosur... |
| CVE-2021-0612 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege ... |
| CVE-2021-0611 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege ... |
| CVE-2021-0610 | HIGH | 7.8 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local ... |
| CVE-2021-0425 | MEDIUM | 5.5 | 0.1% | Sep 27, 2021 | In memory management driver, there is a possible side channel information disclosure. This could lead to local informati... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now