Menu

Star on GitHub · 3.2k

2021

20,154 vulnerabilities published in 2021.

Results

8,464 of 20,154· Page 25/170
7.5
CVE-2021-42773

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly

7.2
CVE-2021-34422

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a

7.9
CVE-2021-34417

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.202

7.4
CVE-2021-3907

OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://

7.5
CVE-2002-20001

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that

7.5
CVE-2021-26558

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link reso

8.8
CVE-2021-25980

In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 an

8.8
CVE-2021-43397

LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.

7.5
CVE-2021-40873

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40.

7.5
CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a den

7.5
CVE-2021-40871

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial

7.5
CVE-2020-23879

pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.

7.5
CVE-2020-23876

pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.

7.5
CVE-2020-23872

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of

7.8
CVE-2021-32023

An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574

7.8
CVE-2021-32021

A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and e

8.8
CVE-2021-22048

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authenti

7.5
CVE-2021-3063

An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gatew

8.1
CVE-2021-3062

An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProte

8.1
CVE-2021-3060

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software al

8.1
CVE-2021-3059

An OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface exists when performing dynam

8.8
CVE-2021-3058

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administra

8.8
CVE-2021-3056

A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated att

7.5
CVE-2021-43564

An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extens

8.8
CVE-2021-43563

An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The Access Cont

8.8
CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.

7.8
CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an

8.8
CVE-2021-40502

SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authen

8.1
CVE-2021-40501

SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authe

8.8
CVE-2021-43562

An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension f

7.2
CVE-2021-39474

Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability

7.5
CVE-2021-34598

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impair

7.8
CVE-2021-31853

DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local us

7.8
CVE-2021-43209

3D Viewer Remote Code Execution Vulnerability

7.8
CVE-2021-43208

3D Viewer Remote Code Execution Vulnerability

7.8
CVE-2021-42322

Visual Studio Code Elevation of Privilege Vulnerability

8.8
CVE-2021-42321KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

8.8
CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

7.8
CVE-2021-42298

Microsoft Defender Remote Code Execution Vulnerability

7.8
CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability

7.8
CVE-2021-42292KEV

Microsoft Excel Security Feature Bypass Vulnerability

7.5
CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5
CVE-2021-42287KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

7.8
CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

7.8
CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

8.8
CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

7.5
CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5
CVE-2021-42278KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

7.8
CVE-2021-42276

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

8.8
CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.