Menu

Star on GitHub · 3.2k

2021

20,154 vulnerabilities published in 2021.

Results

8,464 of 20,154· Page 83/170
8.6
CVE-2021-0279

Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded cr

8.8
CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker

8.8
CVE-2021-0277

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol D

7.8
CVE-2020-11634

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configur

7.8
CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversa

7.5
CVE-2021-32770

Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks

8.8
CVE-2021-34830

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.8
CVE-2021-34829

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.8
CVE-2021-34828

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.8
CVE-2021-34827

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1

8.0
CVE-2021-29742

IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 2

7.2
CVE-2021-20533

IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on th

7.5
CVE-2021-20497

IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker

7.5
CVE-2021-3043

A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remot

7.8
CVE-2021-3042

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms t

8.1
CVE-2021-21586

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated

8.8
CVE-2021-32743

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

7.5
CVE-2021-29725

IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a

7.5
CVE-2021-20439

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text

8.1
CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment

7.5
CVE-2020-12733

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET

8.8
CVE-2021-32739

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

7.8
CVE-2020-25736

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC

7.8
CVE-2020-15495

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service

7.5
CVE-2020-12731

The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whe

7.8
CVE-2021-34692

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC

7.5
CVE-2021-34691

iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a v

7.8
CVE-2020-15496

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.

7.8
CVE-2021-33505

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters argumen

8.8
CVE-2021-31999

A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as oth

8.8
CVE-2021-25318

A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify r

7.5
CVE-2020-36420

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a mal

7.8
CVE-2020-29157

An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system

7.5
CVE-2021-34173

An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malform

7.8
CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability

7.8
CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability

8.8
CVE-2021-34525

Windows DNS Server Remote Code Execution Vulnerability

7.8
CVE-2021-34522

Microsoft Defender Remote Code Execution Vulnerability

7.8
CVE-2021-34521

Raw Image Extension Remote Code Execution Vulnerability

8.1
CVE-2021-34520

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.8
CVE-2021-34518

Microsoft Excel Remote Code Execution Vulnerability

7.8
CVE-2021-34516

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-34513

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

7.8
CVE-2021-34512

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

7.8
CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability

7.8
CVE-2021-34510

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

8.8
CVE-2021-34508

Windows Kernel Remote Code Execution Vulnerability

7.8
CVE-2021-34504

Windows Address Book Remote Code Execution Vulnerability

7.8
CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Test your stack for 2021issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.