2021 CVEs (page 225)
Page 225 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3134 | High | 7.8 | 2021-01-12 | Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878. |
CVE-2021-1725 | Medium | 5.5 | 2021-01-12 | Bot Framework SDK Information Disclosure Vulnerability |
CVE-2021-1723 | High | 7.5 | 2021-01-12 | ASP.NET Core and Visual Studio Denial of Service Vulnerability |
CVE-2021-1719 | High | 8.0 | 2021-01-12 | Microsoft SharePoint Elevation of Privilege Vulnerability |
CVE-2021-1718 | High | 8.0 | 2021-01-12 | Microsoft SharePoint Server Tampering Vulnerability |
CVE-2021-1717 | Medium | 4.6 | 2021-01-12 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-1716 | High | 7.8 | 2021-01-12 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2021-1715 | High | 7.8 | 2021-01-12 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2021-1714 | High | 7.8 | 2021-01-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-1713 | High | 7.8 | 2021-01-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-1712 | High | 8.0 | 2021-01-12 | Microsoft SharePoint Elevation of Privilege Vulnerability |
CVE-2021-1711 | High | 7.8 | 2021-01-12 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-1710 | High | 7.8 | 2021-01-12 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2021-1709 | High | 7.0 | 2021-01-12 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2021-1708 | Medium | 5.7 | 2021-01-12 | Windows GDI+ Information Disclosure Vulnerability |
CVE-2021-1707 | High | 8.8 | 2021-01-12 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-1706 | High | 7.3 | 2021-01-12 | Windows LUAFV Elevation of Privilege Vulnerability |
CVE-2021-1705 | Medium | 4.2 | 2021-01-12 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |
CVE-2021-1704 | High | 7.3 | 2021-01-12 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2021-1703 | High | 7.8 | 2021-01-12 | Windows Event Logging Service Elevation of Privilege Vulnerability |
CVE-2021-1702 | High | 7.8 | 2021-01-12 | Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability |
CVE-2021-1701 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1700 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1699 | Medium | 5.5 | 2021-01-12 | Windows (modem.sys) Information Disclosure Vulnerability |
CVE-2021-1697 | High | 7.8 | 2021-01-12 | Windows InstallService Elevation of Privilege Vulnerability |
CVE-2021-1696 | Medium | 5.5 | 2021-01-12 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2021-1695 | High | 7.8 | 2021-01-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2021-1694 | High | 7.5 | 2021-01-12 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2021-1693 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1692 | High | 7.7 | 2021-01-12 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-1691 | High | 7.7 | 2021-01-12 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-1690 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1689 | High | 7.8 | 2021-01-12 | Windows Multipoint Management Elevation of Privilege Vulnerability |
CVE-2021-1688 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1687 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1686 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1685 | High | 7.3 | 2021-01-12 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
CVE-2021-1684 | Medium | 5.0 | 2021-01-12 | Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see t… |
CVE-2021-1683 | Medium | 5.0 | 2021-01-12 | Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see t… |
CVE-2021-1682 | High | 7.0 | 2021-01-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-1681 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1680 | High | 7.8 | 2021-01-12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2021-1679 | Medium | 6.5 | 2021-01-12 | Windows CryptoAPI Denial of Service Vulnerability |
CVE-2021-1678 | High | 8.8 | 2021-01-12 | Windows Print Spooler Spoofing Vulnerability |
CVE-2021-1677 | Medium | 5.5 | 2021-01-12 | Azure Active Directory Pod Identity Spoofing Vulnerability |
CVE-2021-1676 | Medium | 5.5 | 2021-01-12 | Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability |
CVE-2021-1674 | High | 8.8 | 2021-01-12 | Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability |
CVE-2021-1673 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1672 | Medium | 5.5 | 2021-01-12 | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
CVE-2021-1671 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1670 | Medium | 5.5 | 2021-01-12 | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
CVE-2021-1669 | High | 8.8 | 2021-01-12 | Windows Remote Desktop Security Feature Bypass Vulnerability |
CVE-2021-1668 | High | 7.8 | 2021-01-12 | Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability |
CVE-2021-1667 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1666 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1665 | High | 7.8 | 2021-01-12 | GDI+ Remote Code Execution Vulnerability |
CVE-2021-1664 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1663 | Medium | 5.5 | 2021-01-12 | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
CVE-2021-1662 | High | 7.8 | 2021-01-12 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-1661 | High | 7.8 | 2021-01-12 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2021-1660 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1659 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1658 | High | 8.8 | 2021-01-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2021-1657 | High | 7.8 | 2021-01-12 | Windows Fax Compose Form Remote Code Execution Vulnerability |
CVE-2021-1656 | Medium | 5.5 | 2021-01-12 | TPM Device Driver Information Disclosure Vulnerability |
CVE-2021-1655 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1654 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1653 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1652 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1651 | High | 7.8 | 2021-01-12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2021-1650 | High | 7.8 | 2021-01-12 | Windows Runtime C++ Template Library Elevation of Privilege Vulnerability |
CVE-2021-1649 | High | 7.8 | 2021-01-12 | Active Template Library Elevation of Privilege Vulnerability |
CVE-2021-1648 | High | 7.8 | 2021-01-12 | Microsoft splwow64 Elevation of Privilege Vulnerability |
CVE-2021-1647 | High | 7.8 | 2021-01-12 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2021-1646 | Medium | 6.6 | 2021-01-12 | Windows WLAN Service Elevation of Privilege Vulnerability |
CVE-2021-1645 | Medium | 5.0 | 2021-01-12 | Windows Docker Information Disclosure Vulnerability |
CVE-2021-1644 | High | 7.8 | 2021-01-12 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-1643 | High | 7.8 | 2021-01-12 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-1642 | High | 7.8 | 2021-01-12 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
CVE-2021-1641 | Medium | 4.6 | 2021-01-12 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-1638 | High | 7.7 | 2021-01-12 | Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see t… |
CVE-2021-1637 | Medium | 5.5 | 2021-01-12 | Windows DNS Query Information Disclosure Vulnerability |
CVE-2021-1636 | High | 8.8 | 2021-01-12 | Microsoft SQL Elevation of Privilege Vulnerability |
CVE-2021-3133 | Medium | 6.5 | 2021-01-12 | The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages. |
CVE-2021-3129 | Critical | 9.8 | 2021-01-12 | Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of fi… |
CVE-2021-21471 | Medium | 6.5 | 2021-01-12 | In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by t… |
CVE-2021-21470 | Medium | 4.4 | 2021-01-12 | SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privi… |
CVE-2021-21469 | High | 7.5 | 2021-01-12 | When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external op… |
CVE-2021-21468 | Medium | 6.5 | 2021-01-12 | The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user… |
CVE-2021-21467 | Medium | 4.3 | 2021-01-12 | SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. An… |
CVE-2021-21466 | High | 8.8 | 2021-01-12 | SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject cod… |
CVE-2021-21465 | Critical | 9.9 | 2021-01-12 | The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can includ… |
CVE-2021-21464 | Medium | 4.3 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21463 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21462 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21461 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21460 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21459 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21458 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the appli… |
CVE-2021-21457 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the appli… |