Menu

Star on GitHub · 3.2k

2021

20,154 vulnerabilities published in 2021.

Results

20,154· Page 301/404
4.2
CVE-2021-28316

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

7.8
CVE-2021-28315

Windows Media Video Decoder Remote Code Execution Vulnerability

7.8
CVE-2021-28314

Windows Hyper-V Elevation of Privilege Vulnerability

7.8
CVE-2021-28313

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

3.3
CVE-2021-28312

Windows NTFS Denial of Service Vulnerability

6.5
CVE-2021-28311

Windows Application Compatibility Cache Denial of Service Vulnerability

7.8
CVE-2021-28310KEV

Win32k Elevation of Privilege Vulnerability

5.5
CVE-2021-28309

Windows Kernel Information Disclosure Vulnerability

7.8
CVE-2021-27096

NTFS Elevation of Privilege Vulnerability

7.8
CVE-2021-27095

Windows Media Video Decoder Remote Code Execution Vulnerability

4.4
CVE-2021-27094

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

5.5
CVE-2021-27093

Windows Kernel Information Disclosure Vulnerability

6.8
CVE-2021-27092

Azure AD Web Sign-in Security Feature Bypass Vulnerability

7.8
CVE-2021-27091

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

7.8
CVE-2021-27090

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

7.8
CVE-2021-27089

Microsoft Internet Messaging API Remote Code Execution Vulnerability

7.8
CVE-2021-27088

Windows Event Tracing Elevation of Privilege Vulnerability

7.8
CVE-2021-27086

Windows Services and Controller App Elevation of Privilege Vulnerability

5.7
CVE-2021-27079

Windows Media Photo Codec Information Disclosure Vulnerability

7.0
CVE-2021-27072

Win32k Elevation of Privilege Vulnerability

6.5
CVE-2021-27067

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

7.8
CVE-2021-27064

Visual Studio Installer Elevation of Privilege Vulnerability

5.5
CVE-2021-26417

Windows Overlay Filter Information Disclosure Vulnerability

7.7
CVE-2021-26416

Windows Hyper-V Denial of Service Vulnerability

7.8
CVE-2021-26415

Windows Installer Elevation of Privilege Vulnerability

6.2
CVE-2021-26413

Windows Installer Spoofing Vulnerability

4.4
CVE-2021-23372

All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CS

9.1
CVE-2021-21399

Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated

6.5
CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allo

4.3
CVE-2021-27605

SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authe

6.5
CVE-2021-27603

An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work

9.9
CVE-2021-27602

SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create

5.4
CVE-2021-27601

SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicio

5.4
CVE-2021-27600

SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed ma

5.3
CVE-2021-27598

SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read som

10.0
CVE-2021-23281

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability

8.0
CVE-2021-23280

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability.

8.0
CVE-2021-23279

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability

8.7
CVE-2021-23278

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability i

8.3
CVE-2021-23277

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The s

7.1
CVE-2021-23276

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can s

7.2
CVE-2021-22720

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T

8.8
CVE-2021-22719

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T

7.8
CVE-2021-22718

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T

8.8
CVE-2021-22717

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T

7.8
CVE-2021-22716

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execu

7.8
CVE-2021-21784

An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specia

4.3
CVE-2021-21492

SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suffi

6.5
CVE-2021-21485

An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Applicatio

4.9
CVE-2021-21483

Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensiti

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.