Menu

Star on GitHub · 3.2k

2021

20,154 vulnerabilities published in 2021.

Results

115 of 20,154· Page 1/3
8.1
CVE-2021-44207KEV

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

7.5
CVE-2021-22054KEV

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

7.8
CVE-2021-1048KEV

In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead

7.1
CVE-2021-43890KEV

We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is

7.8
CVE-2021-43226KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.5
CVE-2021-43798KEV

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except

8.1
CVE-2021-23758KEV

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserial

8.8
CVE-2021-38003KEV

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

8.8
CVE-2021-42321KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-42292KEV

Microsoft Excel Security Feature Bypass Vulnerability

7.5
CVE-2021-42287KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5
CVE-2021-42278KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

7.8
CVE-2021-30807KEV

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

7.5
CVE-2021-20124KEV

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the W

7.5
CVE-2021-20123KEV

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the D

7.8
CVE-2021-41357KEV

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-40450KEV

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-40449KEV

Win32k Elevation of Privilege Vulnerability

8.8
CVE-2021-37975KEV

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corrup

8.8
CVE-2021-30632KEV

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

7.3
CVE-2021-25487KEV

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows

7.5
CVE-2021-40655KEV

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name

7.8
CVE-2021-38406KEV

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specif

8.8
CVE-2021-40444KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Mi

7.0
CVE-2021-38649KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-38648KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-38646KEV

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

7.8
CVE-2021-38645KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-36955KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8
CVE-2021-30713KEV

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli

8.8
CVE-2021-30666KEV

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing malic

8.8
CVE-2021-30665KEV

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1

8.8
CVE-2021-30663KEV

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, t

8.8
CVE-2021-30661KEV

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iO

8.8
CVE-2021-30762KEV

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mali

8.8
CVE-2021-30761KEV

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing ma

8.8
CVE-2021-28550KEV

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and e

8.2
CVE-2021-32648KEV

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an a

7.5
CVE-2021-31010KEV

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catal

7.8
CVE-2021-30983KEV

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An

7.8
CVE-2021-30952KEV

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1,

7.8
CVE-2021-30900KEV

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 1

7.8
CVE-2021-30883KEV

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0

7.8
CVE-2021-30869KEV

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadO

7.8
CVE-2021-30860KEV

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali

8.8
CVE-2021-30858KEV

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, m

8.5
CVE-2021-39144KEV

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allo

7.8
CVE-2021-36948KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

7.5
CVE-2021-36942KEV

Windows LSA Spoofing Vulnerability

7.8
CVE-2021-34486KEV

Windows Event Tracing Elevation of Privilege Vulnerability

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.