2021 CVE Vulnerabilities
23,468 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1646 | MEDIUM | 6.6 | 0.8% | Jan 12, 2021 | Windows WLAN Service Elevation of Privilege Vulnerability |
| CVE-2021-1645 | MEDIUM | 5 | 7.3% | Jan 12, 2021 | Windows Docker Information Disclosure Vulnerability |
| CVE-2021-1644 | HIGH | 7.8 | 3.8% | Jan 12, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2021-1643 | HIGH | 7.8 | 3.9% | Jan 12, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2021-1642 | HIGH | 7.8 | 0.7% | Jan 12, 2021 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
| CVE-2021-1641 | MEDIUM | 4.6 | 1.8% | Jan 12, 2021 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2021-1638 | HIGH | 7.7 | 1.2% | Jan 12, 2021 | Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information re... |
| CVE-2021-1637 | MEDIUM | 5.5 | 1.2% | Jan 12, 2021 | Windows DNS Query Information Disclosure Vulnerability |
| CVE-2021-1636 | HIGH | 8.8 | 6.2% | Jan 12, 2021 | Microsoft SQL Elevation of Privilege Vulnerability |
| CVE-2021-3133 | MEDIUM | 6.5 | 0.9% | Jan 12, 2021 | The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages. |
| CVE-2021-3129 | CRITICAL | 9.8 | 99.9% | Jan 12, 2021 | Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra... |
| CVE-2021-21471 | MEDIUM | 6.5 | 0.7% | Jan 12, 2021 | In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints... |
| CVE-2021-21470 | MEDIUM | 4.4 | 0.2% | Jan 12, 2021 | SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an... |
| CVE-2021-21469 | HIGH | 7.5 | 1.2% | Jan 12, 2021 | When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, ... |
| CVE-2021-21468 | MEDIUM | 6.5 | 1.9% | Jan 12, 2021 | The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escala... |
| CVE-2021-21467 | MEDIUM | 4.3 | 0.8% | Jan 12, 2021 | SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, re... |
| CVE-2021-21466 | HIGH | 8.8 | 3.1% | Jan 12, 2021 | SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow ... |
| CVE-2021-21465 | CRITICAL | 9.9 | 3.7% | Jan 12, 2021 | The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the b... |
| CVE-2021-21464 | MEDIUM | 4.3 | 1.0% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources... |
| CVE-2021-21463 | HIGH | 8.8 | 1.2% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources... |
| CVE-2021-21462 | HIGH | 8.8 | 1.2% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources... |
| CVE-2021-21461 | HIGH | 8.8 | 1.2% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources... |
| CVE-2021-21460 | HIGH | 8.8 | 1.2% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources... |
| CVE-2021-21459 | HIGH | 8.8 | 1.2% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources... |
| CVE-2021-21458 | HIGH | 8.8 | 1.2% | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now