2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40387 | HIGH | 8.8 | 2.4% | Sep 1, 2021 | An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is authenticat... |
| CVE-2021-40385 | HIGH | 8.8 | 1.1% | Sep 1, 2021 | An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege... |
| CVE-2021-39186 | MEDIUM | 6.1 | 1.0% | Sep 1, 2021 | GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31... |
| CVE-2021-39185 | CRITICAL | 9.1 | 0.6% | Sep 1, 2021 | Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0... |
| CVE-2021-39181 | HIGH | 8.8 | 1.9% | Sep 1, 2021 | OpenOlat is a web-based learning management system (LMS). Prior to version 15.3.18, 15.5.3, and 16.0.0, using a prepared... |
| CVE-2021-30355 | HIGH | 8.6 | 6.9% | Sep 1, 2021 | Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user ... |
| CVE-2021-23438 | CRITICAL | 9.8 | 1.7% | Sep 1, 2021 | This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In p... |
| CVE-2021-40382 | HIGH | 7.5 | 22.7% | Sep 1, 2021 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi allo... |
| CVE-2021-40381 | HIGH | 7.5 | 22.7% | Sep 1, 2021 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allows... |
| CVE-2021-40380 | HIGH | 7.5 | 22.7% | Sep 1, 2021 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and set... |
| CVE-2021-40379 | HIGH | 7.5 | 21.6% | Sep 1, 2021 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 doe... |
| CVE-2021-40378 | HIGH | 8.1 | 15.0% | Sep 1, 2021 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killp... |
| CVE-2021-34435 | HIGH | 8.8 | 0.6% | Sep 1, 2021 | In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside th... |
| CVE-2021-30354 | HIGH | 8.6 | 7.0% | Sep 1, 2021 | Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buf... |
| CVE-2021-23436 | CRITICAL | 9.8 | 1.8% | Sep 1, 2021 | This affects the package immer before 9.0.6. A type confusion vulnerability can lead to a bypass of CVE-2020-28477 when ... |
| CVE-2021-29853 | MEDIUM | 4.3 | 0.8% | Sep 1, 2021 | IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return... |
| CVE-2021-29852 | MEDIUM | 5.4 | 0.5% | Sep 1, 2021 | IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
| CVE-2021-29851 | MEDIUM | 4.3 | 1.1% | Sep 1, 2021 | IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned ... |
| CVE-2021-40350 | CRITICAL | 9.8 | 1.6% | Sep 1, 2021 | webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafte... |
| CVE-2021-39847 | HIGH | 7.8 | 5.4% | Sep 1, 2021 | XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resu... |
| CVE-2021-39817 | HIGH | 7.8 | 2.7% | Sep 1, 2021 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a m... |
| CVE-2021-39816 | HIGH | 7.8 | 2.7% | Sep 1, 2021 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a m... |
| CVE-2021-39320 | MEDIUM | 6.1 | 2.3% | Sep 1, 2021 | The underConstruction plugin <= 1.18 for WordPress echoes out the raw value of `$GLOBALS['PHP_SELF']` in the ucOptions.p... |
| CVE-2021-36079 | HIGH | 7.8 | 3.2% | Sep 1, 2021 | Adobe Bridge version 11.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI f... |
| CVE-2021-36078 | HIGH | 7.8 | 2.7% | Sep 1, 2021 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a m... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now