2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-34572 | MEDIUM | 6.5 | 0.2% | Sep 16, 2021 | Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead tim... |
| CVE-2021-34571 | MEDIUM | 6.5 | 0.2% | Sep 16, 2021 | Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the e... |
| CVE-2021-40067 | MEDIUM | 6.8 | 0.6% | Sep 16, 2021 | The access controls on the Mobility read-write API improperly validate user access permissions; this API is disabled by ... |
| CVE-2021-40066 | MEDIUM | 5.3 | 0.6% | Sep 16, 2021 | The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both netwo... |
| CVE-2021-39128 | HIGH | 7.2 | 1.8% | Sep 16, 2021 | Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers... |
| CVE-2021-40881 | CRITICAL | 9.8 | 1.6% | Sep 15, 2021 | An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code. |
| CVE-2021-40639 | HIGH | 7.5 | 1.4% | Sep 15, 2021 | Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.proper... |
| CVE-2021-33045 | CRITICAL | 9.8 | 99.6% | Sep 15, 2021 | The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by... |
| CVE-2021-33044 | CRITICAL | 9.8 | 99.9% | Sep 15, 2021 | The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by... |
| CVE-2021-40862 | HIGH | 8.8 | 0.9% | Sep 15, 2021 | HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to a... |
| CVE-2021-37913 | CRITICAL | 9.8 | 2.8% | Sep 15, 2021 | The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interfa... |
| CVE-2021-37912 | CRITICAL | 9.8 | 2.8% | Sep 15, 2021 | The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network inte... |
| CVE-2021-37909 | CRITICAL | 9.8 | 1.9% | Sep 15, 2021 | WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite t... |
| CVE-2021-33705 | HIGH | 8.1 | 2.0% | Sep 15, 2021 | The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server... |
| CVE-2021-33704 | HIGH | 8.8 | 0.6% | Sep 15, 2021 | The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that... |
| CVE-2021-33701 | CRITICAL | 9.1 | 2.0% | Sep 15, 2021 | DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 201... |
| CVE-2021-33700 | HIGH | 7.8 | 0.2% | Sep 15, 2021 | SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstance... |
| CVE-2021-33698 | HIGH | 8.8 | 1.1% | Sep 15, 2021 | SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script f... |
| CVE-2021-33697 | MEDIUM | 6.1 | 0.6% | Sep 15, 2021 | Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an... |
| CVE-2021-33696 | MEDIUM | 5.4 | 0.5% | Sep 15, 2021 | SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode u... |
| CVE-2021-33695 | CRITICAL | 9.1 | 0.5% | Sep 15, 2021 | Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation... |
| CVE-2021-33694 | MEDIUM | 4.8 | 0.4% | Sep 15, 2021 | SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Admin... |
| CVE-2021-33693 | MEDIUM | 6.8 | 0.5% | Sep 15, 2021 | SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malic... |
| CVE-2021-33692 | HIGH | 7.5 | 1.1% | Sep 15, 2021 | SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject ... |
| CVE-2021-33691 | MEDIUM | 6.1 | 0.6% | Sep 15, 2021 | NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now