Menu

Star on GitHub · 3.4k

2021

20,154 vulnerabilities published in 2021.

Results

8,464 of 20,154· Page 83/170
8.6
CVE-2021-0279

Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded cr

8.8
CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker

8.8
CVE-2021-0277

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol D

7.8
CVE-2020-11634

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configur

7.8
CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversa

7.5
CVE-2021-32770

Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks

8.8
CVE-2021-34830

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.8
CVE-2021-34829

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.8
CVE-2021-34828

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.8
CVE-2021-34827

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.0
CVE-2021-29742

IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 2

7.2
CVE-2021-20533

IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on th

7.5
CVE-2021-20497

IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker

7.5
CVE-2021-3043

A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remot

7.8
CVE-2021-3042

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms t

8.1
CVE-2021-21586

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated

8.8
CVE-2021-32743

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

7.5
CVE-2021-29725

IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a

7.5
CVE-2021-20439

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text

8.1
CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment

7.5
CVE-2020-12733

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET

8.8
CVE-2021-32739

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

7.8
CVE-2020-25736

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC

7.8
CVE-2020-15495

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service

7.5
CVE-2020-12731

The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whe

7.8
CVE-2021-34692

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC

7.5
CVE-2021-34691

iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a v

7.8
CVE-2020-15496

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.

7.8
CVE-2021-33505

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters argumen

8.8
CVE-2021-31999

A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as oth

8.8
CVE-2021-25318

A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify r

7.5
CVE-2020-36420

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a mal

7.8
CVE-2020-29157

An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system

7.5
CVE-2021-34173

An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malform

7.8
CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability

7.8
CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability

8.8
CVE-2021-34525

Windows DNS Server Remote Code Execution Vulnerability

7.8
CVE-2021-34522

Microsoft Defender Remote Code Execution Vulnerability

7.8
CVE-2021-34521

Raw Image Extension Remote Code Execution Vulnerability

8.1
CVE-2021-34520

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.8
CVE-2021-34518

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2021-34516

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-34513

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

7.8
CVE-2021-34512

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

7.8
CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability

7.8
CVE-2021-34510

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

8.8
CVE-2021-34508

Windows Kernel Remote Code Execution Vulnerability

7.8
CVE-2021-34504

Windows Address Book Remote Code Execution Vulnerability

7.8
CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →