2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-22792 | HIGH | 7.5 | 0.9% | Sep 2, 2021 | A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / s... |
| CVE-2021-22791 | MEDIUM | 6.5 | 0.8% | Sep 2, 2021 | A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simula... |
| CVE-2021-22790 | MEDIUM | 6.5 | 0.8% | Sep 2, 2021 | A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulat... |
| CVE-2021-22789 | MEDIUM | 6.5 | 0.8% | Sep 2, 2021 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Deni... |
| CVE-2021-22775 | HIGH | 7.8 | 0.3% | Sep 2, 2021 | A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause loca... |
| CVE-2021-22704 | CRITICAL | 9.1 | 1.2% | Sep 2, 2021 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Confi... |
| CVE-2021-22525 | MEDIUM | 5.5 | 0.2% | Sep 2, 2021 | This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 |
| CVE-2021-39187 | HIGH | 7.5 | 1.8% | Sep 2, 2021 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version... |
| CVE-2021-21086 | HIGH | 7.8 | 4.6% | Sep 2, 2021 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e... |
| CVE-2021-33938 | HIGH | 7.5 | 1.3% | Sep 2, 2021 | Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers... |
| CVE-2021-33930 | HIGH | 7.5 | 1.4% | Sep 2, 2021 | Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows at... |
| CVE-2021-33929 | HIGH | 7.5 | 1.3% | Sep 2, 2021 | Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers... |
| CVE-2021-33928 | HIGH | 7.5 | 1.4% | Sep 2, 2021 | Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to ca... |
| CVE-2021-3758 | MEDIUM | 6.5 | 0.8% | Sep 2, 2021 | bookstack is vulnerable to Server-Side Request Forgery (SSRF) |
| CVE-2021-3757 | CRITICAL | 9.8 | 1.6% | Sep 2, 2021 | immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
| CVE-2021-34765 | MEDIUM | 4.3 | 0.8% | Sep 2, 2021 | A vulnerability in the web UI for Cisco Nexus Insights could allow an authenticated, remote attacker to view and downloa... |
| CVE-2021-34759 | MEDIUM | 4.8 | 0.6% | Sep 2, 2021 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an au... |
| CVE-2021-34746 | CRITICAL | 9.8 | 17.7% | Sep 2, 2021 | A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infras... |
| CVE-2021-34733 | MEDIUM | 5.5 | 0.2% | Sep 2, 2021 | A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allo... |
| CVE-2021-34732 | MEDIUM | 6.1 | 0.8% | Sep 2, 2021 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthent... |
| CVE-2021-31798 | MEDIUM | 4.4 | 0.4% | Sep 2, 2021 | The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and und... |
| CVE-2021-31796 | HIGH | 7.5 | 1.7% | Sep 2, 2021 | An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Di... |
| CVE-2021-31797 | MEDIUM | 5.1 | 0.3% | Sep 2, 2021 | The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race... |
| CVE-2021-39119 | MEDIUM | 5.3 | 0.8% | Sep 1, 2021 | Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving u... |
| CVE-2021-39115 | HIGH | 7.2 | 4.5% | Sep 1, 2021 | Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now