Menu

Star on GitHub · 3.3k

2021

20,154 vulnerabilities published in 2021.

Results

8,464 of 20,154· Page 25/170
7.5
CVE-2021-42773

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly

7.2
CVE-2021-34422

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a

7.9
CVE-2021-34417

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.202

7.4
CVE-2021-3907

OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://

7.5
CVE-2002-20001

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that

7.5
CVE-2021-26558

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link reso

8.8
CVE-2021-25980

In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 an

8.8
CVE-2021-43397

LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.

7.5
CVE-2021-40873

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40.

7.5
CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a den

7.5
CVE-2021-40871

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial

7.5
CVE-2020-23879

pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.

7.5
CVE-2020-23876

pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.

7.5
CVE-2020-23872

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of

7.8
CVE-2021-32023

An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574

7.8
CVE-2021-32021

A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and e

8.8
CVE-2021-22048

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authenti

7.5
CVE-2021-3063

An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gatew

8.1
CVE-2021-3062

An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProte

8.1
CVE-2021-3060

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software al

8.1
CVE-2021-3059

An OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface exists when performing dynam

8.8
CVE-2021-3058

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administra

8.8
CVE-2021-3056

A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated att

7.5
CVE-2021-43564

An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extens

8.8
CVE-2021-43563

An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The Access Cont

8.8
CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.

7.8
CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an

8.8
CVE-2021-40502

SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authen

8.1
CVE-2021-40501

SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authe

8.8
CVE-2021-43562

An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension f

7.2
CVE-2021-39474

Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability

7.5
CVE-2021-34598

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impair

7.8
CVE-2021-31853

DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local us

7.8
CVE-2021-43209

3D Viewer Remote Code Execution Vulnerability

7.8
CVE-2021-43208

3D Viewer Remote Code Execution Vulnerability

7.8
CVE-2021-42322

Visual Studio Code Elevation of Privilege Vulnerability

8.8
CVE-2021-42321KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

8.8
CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

7.8
CVE-2021-42298

Microsoft Defender Remote Code Execution Vulnerability

7.8
CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability

7.8
CVE-2021-42292KEV

Microsoft Excel Security Feature Bypass Vulnerability

7.5
CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5
CVE-2021-42287KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

7.8
CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

7.8
CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

8.8
CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

7.5
CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5
CVE-2021-42278KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

7.8
CVE-2021-42276

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

8.8
CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

LiveWatch live →