2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-36024 | HIGH | 7.2 | 2.9% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Imprope... |
| CVE-2021-36022 | HIGH | 7.2 | 3.4% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Inj... |
| CVE-2021-36020 | CRITICAL | 9.8 | 2.7% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Inj... |
| CVE-2021-36012 | MEDIUM | 6.5 | 1.8% | Sep 1, 2021 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business... |
| CVE-2021-36002 | HIGH | 7.3 | 0.5% | Sep 1, 2021 | Adobe Captivate version 11.5.5 (and earlier) is affected by an Creation of Temporary File In Directory With Incorrect Pe... |
| CVE-2021-35218 | HIGH | 8.8 | 76.4% | Sep 1, 2021 | Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized a... |
| CVE-2021-35216 | HIGH | 8.8 | 81.4% | Sep 1, 2021 | Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Pla... |
| CVE-2021-35215 | HIGH | 8.8 | 69.2% | Sep 1, 2021 | Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentic... |
| CVE-2021-23428 | CRITICAL | 9.8 | 1.7% | Sep 1, 2021 | This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file p... |
| CVE-2021-23427 | CRITICAL | 9.8 | 1.4% | Sep 1, 2021 | This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to ... |
| CVE-2021-23426 | HIGH | 7.5 | 0.9% | Sep 1, 2021 | This affects all versions of package Proto. It is possible to inject pollute the object property of an application using... |
| CVE-2021-39170 | MEDIUM | 5.4 | 1.2% | Sep 1, 2021 | Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could ad... |
| CVE-2021-39166 | MEDIUM | 5.4 | 0.8% | Sep 1, 2021 | Pimcore is an open source data & experience management platform. Prior to version 10.1.2, text-values were not properly ... |
| CVE-2021-35508 | HIGH | 8.8 | 1.5% | Sep 1, 2021 | NMSAccess32.exe in TeraRecon AQNetClient 4.4.13 allows attackers to execute a malicious binary with SYSTEM privileges vi... |
| CVE-2021-40352 | MEDIUM | 6.5 | 9.7% | Sep 1, 2021 | OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can re... |
| CVE-2021-39379 | CRITICAL | 9.8 | 3.6% | Sep 1, 2021 | A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A ma... |
| CVE-2021-39378 | CRITICAL | 9.8 | 22.7% | Sep 1, 2021 | A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A ma... |
| CVE-2021-39377 | CRITICAL | 9.8 | 3.6% | Sep 1, 2021 | A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A ma... |
| CVE-2021-39373 | HIGH | 7.8 | 0.3% | Sep 1, 2021 | Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk manageme... |
| CVE-2021-37151 | MEDIUM | 5.3 | 0.9% | Sep 1, 2021 | CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is v... |
| CVE-2021-38703 | HIGH | 8.8 | 4.3% | Sep 1, 2021 | Wireless devices running certain Arcadyan-derived firmware (such as KPN Experia WiFi 1.00.15) do not properly sanitise u... |
| CVE-2021-35238 | MEDIUM | 4.8 | 1.1% | Sep 1, 2021 | User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website. |
| CVE-2021-39109 | HIGH | 7.5 | 1.7% | Sep 1, 2021 | The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary ... |
| CVE-2021-37415 | CRITICAL | 9.8 | 99.9% | Sep 1, 2021 | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs w... |
| CVE-2021-33582 | HIGH | 7.5 | 3.1% | Sep 1, 2021 | Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input tha... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now