2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-38162 | CRITICAL | 9.4 | 2.6% | Sep 14, 2021 | SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.... |
| CVE-2021-38150 | MEDIUM | 6.5 | 0.5% | Sep 14, 2021 | When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engi... |
| CVE-2021-37535 | CRITICAL | 9.8 | 1.2% | Sep 14, 2021 | SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not pe... |
| CVE-2021-37532 | MEDIUM | 4.3 | 0.8% | Sep 14, 2021 | SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to director... |
| CVE-2021-37531 | HIGH | 8.8 | 3.1% | Sep 14, 2021 | SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerabili... |
| CVE-2021-36582 | CRITICAL | 9.8 | 1.5% | Sep 14, 2021 | In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to recei... |
| CVE-2021-36581 | CRITICAL | 9.8 | 1.5% | Sep 14, 2021 | Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The... |
| CVE-2021-33688 | MEDIUM | 4.3 | 0.6% | Sep 14, 2021 | SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end ... |
| CVE-2021-33686 | MEDIUM | 5.3 | 0.8% | Sep 14, 2021 | Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypt... |
| CVE-2021-33685 | MEDIUM | 6.5 | 1.0% | Sep 14, 2021 | SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or dire... |
| CVE-2021-33679 | MEDIUM | 5.4 | 0.5% | Sep 14, 2021 | The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject... |
| CVE-2021-33675 | MEDIUM | 6.1 | 0.8% | Sep 14, 2021 | Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This al... |
| CVE-2021-33674 | MEDIUM | 6.1 | 0.7% | Sep 14, 2021 | Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This al... |
| CVE-2021-33673 | MEDIUM | 6.1 | 0.8% | Sep 14, 2021 | Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persi... |
| CVE-2021-33672 | CRITICAL | 9.6 | 1.1% | Sep 14, 2021 | Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send mal... |
| CVE-2021-32202 | MEDIUM | 6.1 | 0.6% | Sep 14, 2021 | In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the b... |
| CVE-2021-21489 | MEDIUM | 4.8 | 0.6% | Sep 14, 2021 | SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user r... |
| CVE-2021-40357 | MEDIUM | 4.9 | 1.1% | Sep 14, 2021 | A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Work... |
| CVE-2021-40356 | HIGH | 7.5 | 1.0% | Sep 14, 2021 | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13... |
| CVE-2021-40355 | HIGH | 8.8 | 0.8% | Sep 14, 2021 | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13... |
| CVE-2021-40354 | HIGH | 7.1 | 0.6% | Sep 14, 2021 | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13... |
| CVE-2021-37206 | HIGH | 7.5 | 1.4% | Sep 14, 2021 | A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rela... |
| CVE-2021-37203 | HIGH | 7.1 | 0.6% | Sep 14, 2021 | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP... |
| CVE-2021-37202 | HIGH | 7.8 | 0.8% | Sep 14, 2021 | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP... |
| CVE-2021-37201 | HIGH | 8.8 | 0.4% | Sep 14, 2021 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vul... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now