2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35298 | MEDIUM | 6.1 | 1.1% | Jun 28, 2021 | Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML v... |
| CVE-2021-32723 | MEDIUM | 6.5 | 1.4% | Jun 28, 2021 | Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Serv... |
| CVE-2021-32722 | MEDIUM | 6.5 | 1.3% | Jun 28, 2021 | GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an u... |
| CVE-2021-32720 | MEDIUM | 5.3 | 0.9% | Jun 28, 2021 | Sylius is an Open Source eCommerce platform on top of Symfony. In versions of Sylius prior to 1.9.5 and 1.10.0-RC.1, par... |
| CVE-2021-35525 | MEDIUM | 5.3 | 1.6% | Jun 28, 2021 | PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as mult... |
| CVE-2021-35523 | HIGH | 7.8 | 0.7% | Jun 28, 2021 | Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege es... |
| CVE-2021-34254 | MEDIUM | 6.1 | 0.7% | Jun 28, 2021 | Umbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization on booting.aspx. |
| CVE-2021-34187 | CRITICAL | 9.8 | 15.6% | Jun 28, 2021 | main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 p... |
| CVE-2021-32719 | MEDIUM | 4.8 | 1.4% | Jun 28, 2021 | RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was di... |
| CVE-2021-29775 | MEDIUM | 5.4 | 0.9% | Jun 28, 2021 | IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerabl... |
| CVE-2021-29751 | MEDIUM | 4.3 | 0.9% | Jun 28, 2021 | IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authen... |
| CVE-2021-29693 | MEDIUM | 4.4 | 0.6% | Jun 28, 2021 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial ... |
| CVE-2021-20574 | HIGH | 8.8 | 1.7% | Jun 28, 2021 | IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP inject... |
| CVE-2021-20573 | MEDIUM | 6.5 | 1.5% | Jun 28, 2021 | IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow, caused by improper bo... |
| CVE-2021-20572 | MEDIUM | 6.5 | 1.5% | Jun 28, 2021 | IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper b... |
| CVE-2021-20494 | MEDIUM | 6.5 | 1.1% | Jun 28, 2021 | IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bo... |
| CVE-2021-20413 | MEDIUM | 4.3 | 0.8% | Jun 28, 2021 | IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed... |
| CVE-2021-3556 | — | — | — | Jun 28, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2021-35456 | CRITICAL | 9.8 | 2.1% | Jun 28, 2021 | Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload |
| CVE-2021-32718 | MEDIUM | 5.4 | 1.4% | Jun 28, 2021 | RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via ma... |
| CVE-2021-28623 | MEDIUM | 5.5 | 0.5% | Jun 28, 2021 | Adobe Premiere Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An u... |
| CVE-2021-28597 | MEDIUM | 5.5 | 0.5% | Jun 28, 2021 | Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An ... |
| CVE-2021-28588 | HIGH | 8.8 | 6.2% | Jun 28, 2021 | Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafte... |
| CVE-2021-28579 | MEDIUM | 4.3 | 1.1% | Jun 28, 2021 | Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the ... |
| CVE-2021-28587 | LOW | 3.3 | 1.7% | Jun 28, 2021 | After Effects versions 18.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclos... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now