2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34696 | MEDIUM | 5.8 | 1.0% | Sep 23, 2021 | A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Ro... |
| CVE-2021-1625 | MEDIUM | 5.8 | 0.9% | Sep 23, 2021 | A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remot... |
| CVE-2021-1624 | HIGH | 8.6 | 1.3% | Sep 23, 2021 | A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an u... |
| CVE-2021-1623 | HIGH | 7.7 | 1.1% | Sep 23, 2021 | A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadba... |
| CVE-2021-1622 | HIGH | 8.6 | 0.9% | Sep 23, 2021 | A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Ro... |
| CVE-2021-1621 | HIGH | 7.4 | 0.3% | Sep 23, 2021 | A vulnerability in the Layer 2 punt code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to c... |
| CVE-2021-1620 | HIGH | 7.7 | 1.0% | Sep 23, 2021 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Softwa... |
| CVE-2021-1619 | CRITICAL | 9.1 | 1.7% | Sep 23, 2021 | A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow... |
| CVE-2021-1616 | MEDIUM | 4.7 | 1.2% | Sep 23, 2021 | A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Ci... |
| CVE-2021-1615 | HIGH | 8.6 | 1.3% | Sep 23, 2021 | A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst... |
| CVE-2021-1612 | HIGH | 7.1 | 0.2% | Sep 23, 2021 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitr... |
| CVE-2021-1611 | HIGH | 8.6 | 1.3% | Sep 23, 2021 | A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisco IOS XE Wireless Controller Software for the Cisc... |
| CVE-2021-1589 | MEDIUM | 6.5 | 0.9% | Sep 23, 2021 | A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote a... |
| CVE-2021-1565 | HIGH | 8.6 | 1.2% | Sep 23, 2021 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco... |
| CVE-2021-1546 | MEDIUM | 5.5 | 0.2% | Sep 23, 2021 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive inf... |
| CVE-2021-1419 | HIGH | 7.8 | 0.2% | Sep 23, 2021 | A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authe... |
| CVE-2021-21992 | MEDIUM | 6.5 | 0.9% | Sep 22, 2021 | The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with... |
| CVE-2021-21991 | HIGH | 7.8 | 0.3% | Sep 22, 2021 | The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malic... |
| CVE-2021-34648 | MEDIUM | 4.3 | 0.6% | Sep 22, 2021 | The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in... |
| CVE-2021-34647 | MEDIUM | 6.5 | 1.1% | Sep 22, 2021 | The Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulk_export_submissions funct... |
| CVE-2021-40684 | CRITICAL | 9.1 | 1.1% | Sep 22, 2021 | Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jo... |
| CVE-2021-37860 | MEDIUM | 6.1 | 0.6% | Sep 22, 2021 | Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to ... |
| CVE-2021-41011 | HIGH | 7.5 | 1.1% | Sep 22, 2021 | LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities un... |
| CVE-2021-40875 | HIGH | 7.5 | 48.4% | Sep 22, 2021 | Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat ac... |
| CVE-2021-37927 | CRITICAL | 9.8 | 2.2% | Sep 22, 2021 | Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now