CVE-2021 records published in January 2021
This page lists the 739 CVE-2021 records published in January 2021, newest first. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists four of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 699.3% of these records
- Listed in CISA KEV
- 40.5% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 182.4% of these records
- Exploit code
- 354.7% of these records
- Actionable vendor fix
- 61282.8% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in January 2021 have had from about 69 months to about 70 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-23329 | nested-object-assign prototype pollution | 7.5CNA v3.1 | 1.5% | 2021-01-31 | Fix |
| CVE-2021-26308 | Uninitialized buffer use in Marc | 7.5v3.1 | 1.5% | 2021-01-29 | Fix |
| CVE-2021-26307 | Error on unsupported architectures in Raw-cpuid | 5.5v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-26306 | Error on unsupported architectures in Raw-cpuid | 7.5v3.1 | 1.3% | 2021-01-29 | Fix |
| CVE-2021-26305 | Read of uninitialized memory in cdr | 9.8v3.1 | 1.7% | 2021-01-29 | Fix |
| CVE-2021-26304 | PHPGurukul Daily Expense Tracker System cross-site scripting | 5.4v3.1 | 0.6% | 2021-01-29 | |
| CVE-2021-26303 | PHPGurukul Daily Expense Tracker System cross-site scripting | 6.1v3.1 | 0.8% | 2021-01-29 | |
| CVE-2021-25910 | ZIV AUTOMATION 4CCT vulnerable to improper authentication | 6.5NVD v3.1 | 0.5% | 2021-01-29 | Fix |
| CVE-2021-25909 | ZIV AUTOMATION 4CCT denial of service | 7.5v3.1 | 1.3% | 2021-01-29 | Fix |
| CVE-2021-25646 | Code injection in Apache Druid | 8.8NVD v3.1 | 99.0% | 2021-01-29 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-25138 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25137 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25136 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25135 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25134 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25133 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25132 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25131 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25130 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25129 | HPE Cloudline CL5800 Gen9 Server path traversal | 7.8v3.1 | 0.4% | 2021-01-29 | Fix |
| CVE-2021-25128 | HPE Cloudline CL5800 Gen9 Server path traversal | 7.8v3.1 | 0.4% | 2021-01-29 | Fix |
| CVE-2021-25127 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.2% | 2021-01-29 | Fix |
| CVE-2021-25126 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-25125 | HPE Cloudline CL5800 Gen9 Server path traversal | 7.8v3.1 | 0.4% | 2021-01-29 | Fix |
| CVE-2021-25124 | HPE Cloudline CL5800 Gen9 Server path traversal | 7.8v3.1 | 0.4% | 2021-01-29 | Fix |
| CVE-2021-25123 | HPE Cloudline CL5800 Gen9 Server buffer overflow | 7.8v3.1 | 0.3% | 2021-01-29 | Fix |
| CVE-2021-23328 | iniparserjs prototype pollution | 5.6CNA v3.1 | 1.0% | 2021-01-29 | |
| CVE-2021-21254 | ckeditor5 regular expression denial of service in Markdown plugin | 6.5CNA v3.1 | 1.8% | 2021-01-29 | Fix |
| CVE-2021-20586 | MELFA FR Series robot controllers resource management error | 7.5v3.1 | 2.7% | 2021-01-29 | |
| CVE-2021-3347 | Linux kernel use-after-free | 7.8v3.1 | 1.4% | 2021-01-29 | Exploit codeFix |
| CVE-2021-3346 | Foris login template vulnerability | 9.8v3.1 | 1.6% | 2021-01-29 | Fix |
| CVE-2021-3345 | GnuPG Libgcrypt out-of-bounds write | 7.8v3.1 | 1.1% | 2021-01-29 | Exploit codeFix |
| CVE-2021-3341 | DH2I Dxenterprise DxWebEngine component path traversal | 7.5v3.1 | 1.3% | 2021-01-29 | Fix |
| CVE-2021-3336 | wolfSSL improper certificate validation | 8.1v3.1 | 0.8% | 2021-01-29 | Fix |
| CVE-2021-3298 | O-dyn Collabtive cross-site scripting | 5.4v3.1 | 2.1% | 2021-01-29 | Exploit codeFix |
| CVE-2021-3176 | Mitel Businesscti Enterprise improper input validation | 8.0v3.1 | 0.9% | 2021-01-29 | Fix |
| CVE-2021-26067 | Atlassian Bamboo information disclosure | 5.3v3.1 | 1.1% | 2021-01-28 | Fix |
| CVE-2021-25647 | Testes-codigo Testes De Codigo cross-site scripting | 5.4v3.1 | 0.7% | 2021-01-28 | |
| CVE-2021-22875 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 6.1v3.1 | 18.2% | 2021-01-28 | Fix |
| CVE-2021-22874 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 6.1v3.1 | 18.2% | 2021-01-28 | Fix |
| CVE-2021-20622 | Aterm WG2600HP Firmware cross-site scripting | 6.1v3.1 | 1.0% | 2021-01-28 | Fix |
| CVE-2021-20621 | Aterm WG2600HP Firmware cross-site request forgery | 8.8v3.1 | 0.6% | 2021-01-28 | Fix |
| CVE-2021-20620 | NEC Aterm WF800HP cross-site scripting | 6.1v3.1 | 1.0% | 2021-01-28 | Fix |
| CVE-2021-20187 | Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration | 7.2NVD v3.1 | 1.6% | 2021-01-28 | Fix |
| CVE-2021-20186 | Moodle cross-site scripting | 5.4NVD v3.1 | 0.8% | 2021-01-28 | Fix |
| CVE-2021-20185 | Moodle client side denial of service via personal message | 5.3NVD v3.1 | 1.4% | 2021-01-28 | Fix |
| CVE-2021-20184 | Moodle Grade information disclosure in grade's external fetch functions | 4.3NVD v3.1 | 0.7% | 2021-01-28 | Fix |
| CVE-2021-20183 | Moodle vulnerable to reflected cross-site scripting | 5.4NVD v3.1 | 0.8% | 2021-01-28 | Fix |
| CVE-2021-3337 | Hide Thread Content incorrect authorization | 7.5v3.1 | 11.5% | 2021-01-28 | Exploit code |
| CVE-2021-3160 | Aca Assuweb login page deserialization of untrusted data | 9.8v3.1 | 4.7% | 2021-01-28 | Fix |
| CVE-2021-26276 | GoDaddy Node-config-shield improper control of dynamically-managed code resources in config-shield | 5.3v3.1 | 1.2% | 2021-01-27 | Fix |
| CVE-2021-26118 | Flaw in ActiveMQ Artemis OpenWire support | 7.5v3.1 | 3.9% | 2021-01-27 | Fix |
| CVE-2021-26117 | ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind | 7.5v3.1 | 11.2% | 2021-01-27 | Fix |
| CVE-2021-25312 | wisc HTCondor missing authentication | 8.8v3.1 | 1.0% | 2021-01-27 | Fix |
| CVE-2021-25311 | wisc HTCondor path traversal | 9.9v3.1 | 3.2% | 2021-01-27 | Fix |
| CVE-2021-25247 | Trend Micro HouseCall for Home Networks uncontrolled search path | 7.8v3.1 | 0.7% | 2021-01-27 | Fix |
| CVE-2021-25226 | Trend Micro ServerProtect A resource exhaustion | 5.5v3.1 | 0.4% | 2021-01-27 | Fix |
| CVE-2021-25225 | Trend Micro ServerProtect A resource exhaustion | 5.5v3.1 | 0.4% | 2021-01-27 | Fix |
| CVE-2021-25224 | Trend Micro ServerProtect A resource exhaustion | 5.5v3.1 | 0.4% | 2021-01-27 | Fix |
| CVE-2021-22655 | Tellus Lite V-Simulator and V-Server Lite out-of-bounds read | 7.8v3.1 | 1.2% | 2021-01-27 | Fix |
| CVE-2021-22653 | Tellus Lite V-Simulator and V-Server Lite out-of-bounds write | 7.8v3.1 | 1.2% | 2021-01-27 | Fix |
| CVE-2021-22641 | Tellus Lite V-Simulator and V-Server Lite heap-based buffer overflow | 7.8v3.1 | 2.1% | 2021-01-27 | Fix |
| CVE-2021-22639 | Tellus Lite V-Simulator and V-Server Lite uninitialized pointer access | 7.8v3.1 | 1.9% | 2021-01-27 | Fix |
| CVE-2021-22637 | Tellus Lite V-Simulator and V-Server Lite stack-based buffer overflow | 7.8v3.1 | 2.1% | 2021-01-27 | Fix |
| CVE-2021-20357 | IBM Rational DOORS Next Generation cross-site scripting | 5.4CNA v3.0 | 0.7% | 2021-01-27 | Fix |
| CVE-2021-3331 | Winscp arbitrary code execution | 9.8NVD v3.1 | 7.6% | 2021-01-27 | Fix |
| CVE-2021-3326 | GNU glibc reachable assertion | 7.5NVD v3.1 | 3.8% | 2021-01-27 | Fix |
| CVE-2021-3325 | Monitorix authentication bypass | 9.8v3.1 | 2.2% | 2021-01-27 | Fix |
| CVE-2021-3318 | Dzzoffice cross-site scripting | 6.1v3.1 | 2.8% | 2021-01-27 | Exploit code |
| CVE-2021-3272 | jasper out-of-bounds read | 5.5v3.1 | 1.1% | 2021-01-27 | Fix |
| CVE-2021-26272 | Inclusion of functionality from untrusted control sphere in CKEditor 4 | 6.5v3.1 | 2.2% | 2021-01-26 | Fix |
| CVE-2021-26271 | CKEditor inclusion of untrusted functionality | 6.5v3.1 | 2.0% | 2021-01-26 | Fix |
| CVE-2021-26267 | cPanel account suspension vulnerability | 7.5v3.1 | 0.9% | 2021-01-26 | Fix |
| CVE-2021-26266 | cPanel suspension lock vulnerability | 7.5v3.1 | 0.9% | 2021-01-26 | Fix |
| CVE-2021-26026 | ACDSee Photo Studio 2021 incorrect authorization | 7.8v3.1 | 0.7% | 2021-01-26 | |
| CVE-2021-26025 | ACDSee Photo Studio 2021 incorrect authorization | 7.8v3.1 | 0.7% | 2021-01-26 | |
| CVE-2021-25908 | Double free in Fil-ocl | 7.5v3.1 | 1.3% | 2021-01-26 | |
| CVE-2021-25907 | Double free in Containers | 9.8v3.1 | 1.6% | 2021-01-26 | Fix |
| CVE-2021-25906 | Basic Dsp Matrix double free in basic_dsp_matrix | 7.5v3.1 | 1.3% | 2021-01-26 | Fix |
| CVE-2021-25905 | Out-of-bounds read in Bra | 9.1v3.1 | 1.6% | 2021-01-26 | Fix |
| CVE-2021-25904 | Null pointer deference in Av-data | 7.5v3.1 | 1.3% | 2021-01-26 | Fix |
| CVE-2021-25903 | Null pointer deference in Cache | 7.5v3.1 | 1.4% | 2021-01-26 | |
| CVE-2021-25902 | Double free in Glsl-layout | 7.5v3.1 | 1.4% | 2021-01-26 | Fix |
| CVE-2021-25901 | Out-of-bounds read in Lazy-init | 5.3v3.1 | 1.3% | 2021-01-26 | Fix |
| CVE-2021-25900 | Buffer overflow in SmallVec::insert_many | 9.8v3.1 | 1.7% | 2021-01-26 | Fix |
| CVE-2021-25864 | Dgtl Huemagic path traversal in node-red-contrib-huemagic | 7.5v3.1 | 9.3% | 2021-01-26 | Nuclei |
| CVE-2021-25863 | Open5GS improper authentication | 8.8v3.1 | 1.2% | 2021-01-26 | |
| CVE-2021-23272 | TIBCO BPM cross-site scripting (XSS) | 4.6CNA v3.1 | 0.5% | 2021-01-26 | |
| CVE-2021-22873 | https://github.com/revive-adserver/revive-adserver open redirect | 6.1v3.1 | 69.6% | 2021-01-26 | NucleiExploit codeFix |
| CVE-2021-22872 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 6.1v3.1 | 3.4% | 2021-01-26 | Fix |
| CVE-2021-22871 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 4.8v3.1 | 2.1% | 2021-01-26 | Fix |
| CVE-2021-22698 | EcoStruxure Power Build unrestricted file upload | 7.8v3.1 | 3.9% | 2021-01-26 | Fix |
| CVE-2021-22697 | EcoStruxure Power Build unrestricted file upload | 7.8v3.1 | 3.5% | 2021-01-26 | Fix |
| CVE-2021-22159 | Proofpoint Insider Threat Management missing authentication | 7.8v3.1 | 0.3% | 2021-01-26 | Fix |
| CVE-2021-21723 | Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affects: | 7.5v3.1 | 1.2% | 2021-01-26 | Fix |
| CVE-2021-21615 | Time-of-check time-of-use (TOCTOU) race condition in Jenkins | 5.3v3.1 | 0.9% | 2021-01-26 | Fix |
| CVE-2021-21283 | XSS in Flarum Sticky extension | 5.4CNA v3.1 | 0.8% | 2021-01-26 | Fix |
| CVE-2021-21278 | Risk of code injection in RSSHub | 8.6CNA v3.1 | 1.6% | 2021-01-26 | Fix |
| CVE-2021-21271 | Denial of service in TenderMint Core | 6.5CNA v3.1 | 1.7% | 2021-01-26 | Fix |
| CVE-2021-3317 | KLog Server OS command injection | 8.8v3.1 | 41.4% | 2021-01-26 | Emerging ThreatsExploit code |
| CVE-2021-3309 | WeKan improper certificate validation | 8.1v3.1 | 1.7% | 2021-01-26 | Fix |
| CVE-2021-3308 | An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors us | 5.5v3.1 | 0.4% | 2021-01-26 | Fix |
| CVE-2021-3304 | Sagemcom F@st 3686 buffer overflow | 9.8v3.1 | 1.6% | 2021-01-26 | |
| CVE-2021-3297 | Zyxel NBG2105 improper authentication | 7.8v3.1 | 20.5% | 2021-01-26 | NucleiEmerging ThreatsFix |
| CVE-2021-3291 | Zen Cart vulnerable to authenticated remote code execution | 7.2v3.1 | 16.8% | 2021-01-26 | Exploit codeFix |
| CVE-2021-3286 | spotweb SQL injection | 9.8v3.1 | 1.0% | 2021-01-26 | |
| CVE-2021-3285 | Ti Code Composer Studio Intgrated Development Environment improper certificate validation | 5.3v3.1 | 1.1% | 2021-01-26 | Fix |
| CVE-2021-3278 | Local Services Search Engine Management System SQL injection | 9.8v3.1 | 25.3% | 2021-01-26 | Exploit code |
| CVE-2021-3223 | Path traversal in Node-RED-Dashboard | 7.5v3.1 | 18.5% | 2021-01-26 | NucleiFix |
| CVE-2021-3195 | Bitcoin Core improper input validation | 7.5v3.1 | 1.2% | 2021-01-26 | Fix |
| CVE-2021-3193 | Nagios XI Docker Config Wizard vulnerability | 9.8v3.1 | 9.8% | 2021-01-26 | Fix |
| CVE-2021-3190 | OS command injection in async-git | 9.8v3.1 | 5.3% | 2021-01-26 | Fix |
| CVE-2021-3188 | phpList CSV injection | 9.8v3.1 | 1.8% | 2021-01-26 | |
| CVE-2021-3186 | Tenda AC5 /main.html Wifi settings stored cross-site scripting | 5.4v3.1 | 2.5% | 2021-01-26 | Exploit code |
| CVE-2021-3185 | GStreamer buffer overflow | 9.8NVD v3.1 | 2.4% | 2021-01-26 | Fix |
| CVE-2021-3165 | Missionlabs Smartagent incorrect permission assignment | 8.8v3.1 | 2.2% | 2021-01-26 | Fix |
| CVE-2021-3164 | Churchdesk Churchrota unrestricted file upload | 8.8v3.1 | 4.2% | 2021-01-26 | Exploit code |
| CVE-2021-3156 | Sudo heap-based buffer overflow | 7.8NVD v3.1 | 100.0% | 2021-01-26 | KEVExploit codeFix |
| CVE-2021-3152 | Home-assistant path traversal | 5.3v3.1 | 2.2% | 2021-01-26 | NucleiFix |
| CVE-2021-3115 | Go uncontrolled search path | 7.5v3.1 | 6.5% | 2021-01-26 | Fix |
| CVE-2021-3114 | Go incorrect calculation | 6.5v3.1 | 2.7% | 2021-01-26 | Fix |
| CVE-2021-1071 | NVIDIA Jetson AGX Xavier Series improper access control | 5.6CNA v3.1 | 0.3% | 2021-01-26 | Fix |
| CVE-2021-1070 | NVIDIA Jetson AGX Xavier Series improper access control | 7.1CNA v3.1 | 0.3% | 2021-01-26 | Fix |
| CVE-2021-23901 | An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser | 9.1v3.1 | 4.4% | 2021-01-25 | Fix |
| CVE-2021-21275 | CSRF in MediaWiki Report extension | 5.3CNA v3.1 | 0.7% | 2021-01-25 | Fix |
| CVE-2021-21272 | Zip slip directory exploit in github.com/deislabs/oras | 7.7CNA v3.1 | 1.4% | 2021-01-25 | Fix |
| CVE-2021-22849 | Hyweb HyCMS-J1 stored XSS | 5.4v3.1 | 0.5% | 2021-01-22 | Fix |
| CVE-2021-22847 | Hyweb HyCMS-J1 SQL injection | 8.8v3.1 | 1.6% | 2021-01-22 | Fix |
| CVE-2021-21270 | Octopus Deploy OctopusDSC cleartext storage of sensitive information | 6.2CNA v3.1 | 0.3% | 2021-01-22 | Fix |
| CVE-2021-21260 | bigprof-software online-invoicing-system XSS in description field | 7.6CNA v3.1 | 0.6% | 2021-01-22 | |
| CVE-2021-21259 | hedgedoc stored XSS in slide mode | 7.4CNA v3.1 | 1.4% | 2021-01-22 | Fix |
| CVE-2021-3199 | ONLYOFFICE Docs Server path traversal | 9.8NVD v3.1 | 19.4% | 2021-01-22 | KEV |
| CVE-2021-21253 | OnlineVotingSystem unsalted password hash | 5.8CNA v3.1 | 0.7% | 2021-01-21 | Fix |
| CVE-2021-21239 | IdentityPython pysaml2 open default xmlsec1 key-type preference | 6.5CNA v3.1 | 1.3% | 2021-01-21 | Exploit codeFix |
| CVE-2021-21238 | IdentityPython pysaml2 SAML XML Signature wrapping | 6.5CNA v3.1 | 1.1% | 2021-01-21 | Fix |
| CVE-2021-23326 | @graphql-tools/git-loader command injection | 8.8v3.1 | 2.8% | 2021-01-20 | Fix |
| CVE-2021-21269 | Path traversal in Keymaker | 7.7CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-3137 | Cross-site scripting (XSS) in XWiki | 5.4v3.1 | 0.7% | 2021-01-20 | Fix |
| CVE-2021-3130 | Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible. | 5.9v3.1 | 1.3% | 2021-01-20 | Exploit codeFix |
| CVE-2021-3110 | PrestaShop SQL injection | 9.8v3.1 | 18.7% | 2021-01-20 | Nuclei |
| CVE-2021-2131 | Oracle VM VirtualBox Core component unauthorized data modification | 6.0CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2130 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2129 | Oracle VM VirtualBox Core component unauthorized data access | 7.9CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2128 | Oracle VM VirtualBox Core component unauthorized data access | 6.5CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2127 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2126 | Oracle VM VirtualBox Core component unauthorized data modification | 6.0CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2125 | Oracle VM VirtualBox Core component unauthorized data modification | 4.6CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2124 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2123 | Oracle VM VirtualBox Core component information disclosure | 3.2CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2122 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 2.1% | 2021-01-20 | Fix |
| CVE-2021-2121 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2120 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2119 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 1.0% | 2021-01-20 | Exploit codeFix |
| CVE-2021-2118 | Oracle E-Business Suite Marketing Administration component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2117 | Oracle Application Express Survey Builder vulnerability | 5.4CNA v3.1 | 0.7% | 2021-01-20 | Fix |
| CVE-2021-2116 | Oracle Application Express Opportunity Tracker vulnerability | 5.4CNA v3.1 | 0.7% | 2021-01-20 | Fix |
| CVE-2021-2115 | Oracle E-Business Suite Common Applications Calendar Tasks component unauthorized data access | 7.6CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2114 | Oracle E-Business Suite Common Applications Calendar unauthorized data access | 8.2CNA v3.1 | 59.3% | 2021-01-20 | Fix |
| CVE-2021-2113 | Oracle Financial Services Revenue Management and Billing unauthorized data modification | 4.3CNA v3.1 | 0.8% | 2021-01-20 | Fix |
| CVE-2021-2112 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2111 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2110 | Oracle Argus Safety Letters component information disclosure | 5.0CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2109 | Oracle WebLogic Server console component takeover | 7.2CNA v3.1 | 70.4% | 2021-01-20 | Reported exploitedEmerging ThreatsExploit codeKCVFix |
| CVE-2021-2108 | Oracle WebLogic Server Core components component takeover | 9.8CNA v3.1 | 3.7% | 2021-01-20 | Fix |
| CVE-2021-2107 | Oracle E-Business Suite Customer Interaction History unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2106 | Oracle E-Business Suite Customer Interaction History unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2105 | Oracle E-Business Suite Customer Interaction History unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2104 | Oracle Complex Maintenance, Repair, and Overhaul Dialog Box component unauthorized data access | 8.2CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-2103 | Oracle Complex Maintenance, Repair, and Overhaul Dialog Box component unauthorized data access | 8.2CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-2102 | Oracle Complex Maintenance, Repair, and Overhaul Dialog Box component unauthorized data access | 8.2CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-2101 | Oracle E-Business Suite One-to-One Fulfillment Print Server component unauthorized data access | 9.1CNA v3.1 | 1.5% | 2021-01-20 | Fix |
| CVE-2021-2100 | Oracle E-Business Suite One-to-One Fulfillment Print Server component unauthorized data access | 9.1CNA v3.1 | 1.5% | 2021-01-20 | Fix |
| CVE-2021-2099 | Oracle E-Business Suite CRM Technical Foundation Preferences component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2098 | Oracle E-Business Suite Email Center Message Display component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2097 | Oracle E-Business Suite iSupport Profile component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2096 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2094 | Oracle E-Business Suite One-to-One Fulfillment Print Server component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2093 | Oracle E-Business Suite Common Applications unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2092 | Oracle E-Business Suite CRM Technical Foundation Preferences component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2091 | Oracle E-Business Suite Scripting Miscellaneous component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2090 | Oracle E-Business Suite Email Center Message Display component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2089 | Oracle E-Business Suite iStore Runtime Catalog component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2088 | Oracle MySQL Server DML component denial of service | 4.4CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2087 | Oracle MySQL Server DML component denial of service | 4.4CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2086 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2085 | Oracle E-Business Suite CRM Technical Foundation Preferences component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2084 | Oracle E-Business Suite CRM Technical Foundation Preferences component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2083 | Oracle E-Business Suite iSupport User Responsibilities component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2082 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2081 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.8% | 2021-01-20 | Fix |
| CVE-2021-2080 | Oracle Supply Chain Configurator UI Servlet component unauthorized data access | 8.2CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-2079 | Oracle Supply Chain Configurator UI Servlet component unauthorized data access | 8.2CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-2078 | Oracle Supply Chain Configurator UI Servlet component unauthorized data access | 8.2CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-2077 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2076 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2075 | Oracle WebLogic Server Samples component takeover | 9.8CNA v3.1 | 3.8% | 2021-01-20 | Fix |
| CVE-2021-2074 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2073 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.5% | 2021-01-20 | Fix |
| CVE-2021-2072 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2071 | Oracle PeopleSoft Enterprise PeopleTools Elastic Search component takeover | 8.1CNA v3.1 | 1.6% | 2021-01-20 | Fix |
| CVE-2021-2070 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2069 | Oracle Outside In Technology Outside In Filters component unauthorized data modification | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2068 | Oracle Outside In Technology Outside In Filters component unauthorized data modification | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2067 | Oracle Outside In Technology Outside In Filters component unauthorized data modification | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2066 | Oracle Outside In Technology Outside In Filters component unauthorized data modification | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2065 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2064 | Oracle WebLogic Server Core components component takeover | 9.8CNA v3.1 | 3.7% | 2021-01-20 | Fix |
| CVE-2021-2063 | Oracle PeopleSoft Enterprise PeopleTools portal component takeover | 8.4CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2062 | Oracle BI Publisher Web Server component unauthorized data access | 7.6CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2061 | Oracle MySQL Server DDL component denial of service | 4.4CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2060 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2059 | Oracle E-Business Suite iStore Web interface component information disclosure | 5.3CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2058 | Oracle MySQL Server Locking component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2057 | Oracle Retail Customer Management and Segmentation Foundation unauthorized data modification | 6.3CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2056 | Oracle MySQL Server DML component denial of service | 4.4CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2055 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2054 | Oracle Database takeover | 7.2CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2052 | Oracle JD Edwards EnterpriseOne Orchestrator information disclosure | 5.8CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2051 | Oracle BI Publisher E-Business Suite - XDO component unauthorized data access | 7.6CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-2050 | Oracle BI Publisher E-Business Suite - XDO component unauthorized data access | 7.6CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-2049 | Oracle BI Publisher Administration component unauthorized data access | 7.6CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-2048 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.0CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2047 | Oracle WebLogic Server Core components component takeover | 9.8CNA v3.1 | 3.8% | 2021-01-20 | Fix |
| CVE-2021-2046 | Oracle MySQL Server Stored Procedure component denial of service | 6.8CNA v3.1 | 2.3% | 2021-01-20 | Fix |
| CVE-2021-2045 | Oracle Text denial of service | 3.1CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2044 | Oracle PeopleSoft Enterprise FIN Payables Financial Sanctions component unauthorized data access | 6.5CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2043 | Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification | 6.1CNA v3.1 | 1.0% | 2021-01-20 | Fix |
| CVE-2021-2042 | Oracle MySQL Server InnoDB component information disclosure | 2.3CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-2041 | Oracle Business Intelligence Enterprise Edition Installation component takeover | 8.1CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2040 | Oracle Argus Safety Case Form, Local Affiliate form component unauthorized data modification | 6.1CNA v3.1 | 1.0% | 2021-01-20 | Fix |
| CVE-2021-2039 | Oracle Siebel Core - Server Framework Search component unauthorized data access | 7.6CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2038 | Oracle MySQL Server components services component denial of service | 4.4CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2036 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2035 | Oracle Database takeover | 8.8CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2034 | Oracle E-Business Suite Common Applications Calendar Tasks component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2033 | Oracle WebLogic Server Core components component denial of service | 4.3CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2032 | Oracle MySQL Server Information Schema component information disclosure | 4.3CNA v3.1 | 1.6% | 2021-01-20 | Fix |
| CVE-2021-2031 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.3% | 2021-01-20 | Fix |
| CVE-2021-2030 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2029 | Oracle E-Business Suite Scripting Miscellaneous component takeover | 9.8CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2028 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2027 | Oracle E-Business Suite Marketing Administration component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2026 | Oracle E-Business Suite Marketing Administration component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2025 | Oracle Business Intelligence Enterprise Edition unauthorized data access | 8.2CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-2024 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2023 | Oracle E-Business Suite Installed Base APIs component unauthorized data modification | 4.7CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-2022 | Oracle MySQL Server InnoDB component denial of service | 4.4CNA v3.1 | 1.9% | 2021-01-20 | Fix |
| CVE-2021-2021 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 10.0% | 2021-01-20 | Fix |
| CVE-2021-2020 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 2.9% | 2021-01-20 | Fix |
| CVE-2021-2019 | Oracle MySQL Server Security Privileges component information disclosure | 2.7CNA v3.1 | 1.6% | 2021-01-20 | Fix |
| CVE-2021-2018 | Oracle Database Server Advanced Networking Option vulnerability | 8.3CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2017 | Oracle E-Business Suite User Management Proxy User Delegation component information disclosure | 4.3CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-2016 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-01-20 | Fix |
| CVE-2021-2015 | Oracle E-Business Suite Workflow Worklist component unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-2014 | Oracle MySQL Server PAM Auth plugin component denial of service | 4.9CNA v3.1 | 2.1% | 2021-01-20 | Fix |
| CVE-2021-2013 | Oracle BI Publisher BI Publisher Security component unauthorized data access | 7.6CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-2012 | Oracle MySQL Server Security Privileges component denial of service | 4.9CNA v3.1 | 2.3% | 2021-01-20 | Fix |
| CVE-2021-2011 | Oracle MySQL Client C API component denial of service | 5.9CNA v3.1 | 3.0% | 2021-01-20 | Fix |
| CVE-2021-2010 | Oracle MySQL Client C API component unauthorized data modification | 4.2CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2009 | Oracle MySQL Server Security Roles component denial of service | 4.9CNA v3.1 | 2.4% | 2021-01-20 | Fix |
| CVE-2021-2007 | Oracle MySQL Client C API component information disclosure | 3.7CNA v3.1 | 2.3% | 2021-01-20 | Fix |
| CVE-2021-2006 | Oracle MySQL Client C API component denial of service | 5.3CNA v3.1 | 1.8% | 2021-01-20 | Fix |
| CVE-2021-2005 | Oracle Business Intelligence Enterprise Edition information disclosure | 4.7CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-2004 | Oracle Siebel Core - Server BizLogic Script Integration - Scripting component information disclosure | 4.3CNA v3.1 | 1.0% | 2021-01-20 | Fix |
| CVE-2021-2003 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.7% | 2021-01-20 | Fix |
| CVE-2021-2002 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 2.6% | 2021-01-20 | Fix |
| CVE-2021-2001 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-01-20 | Fix |
| CVE-2021-2000 | Oracle Database Server Unified Audit vulnerability | 2.4CNA v3.1 | 0.8% | 2021-01-20 | Fix |
| CVE-2021-1999 | Oracle ZFS Storage Appliance Kit RAS subsystems component unauthorized data modification | 5.0CNA v3.1 | 0.3% | 2021-01-20 | Fix |
| CVE-2021-1998 | Oracle MySQL Server Optimizer component unauthorized data modification | 3.8CNA v3.1 | 1.6% | 2021-01-20 | Fix |
| CVE-2021-1997 | Oracle Hospitality Reporting and Analytics unauthorized data access | 8.1CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1996 | Oracle WebLogic Server Web services component information disclosure | 2.4CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1995 | Oracle WebLogic Server Web services component unauthorized data modification | 6.5CNA v3.1 | 1.5% | 2021-01-20 | Fix |
| CVE-2021-1994 | Oracle WebLogic Server Web services component takeover | 9.8CNA v3.1 | 5.5% | 2021-01-20 | Exploit codeFix |
| CVE-2021-1993 | Oracle Database Server Java VM vulnerability | 4.8CNA v3.1 | 0.8% | 2021-01-20 | Fix |
| CVE-2021-1364 | Cisco Unified Communications Manager IM and Presence Service SQL injection | 6.5CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1357 | Cisco Unified Communications Manager IM and Presence Service path traversal | 6.5CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1355 | Cisco Unified Communications Manager IM and Presence Service path traversal | 6.5CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1353 | Cisco StarOS IPv4 denial of service | 5.8CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1350 | Cisco Umbrella Dashboard Packet Flood vulnerability | 5.3CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1349 | Cisco SD-WAN vManage Cypher Query Language injection | 6.5CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1312 | Cisco Elastic Services Controller denial of service | 5.3CNA v3.1 | 2.5% | 2021-01-20 | Fix |
| CVE-2021-1305 | Cisco SD-WAN vManage authorization bypass | 8.8CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1304 | Cisco SD-WAN vManage authorization bypass | 8.8CNA v3.1 | 1.6% | 2021-01-20 | Fix |
| CVE-2021-1303 | Cisco DNA Center privilege escalation | 4.3CNA v3.0 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1302 | Cisco SD-WAN vManage authorization bypass | 8.8CNA v3.1 | 2.0% | 2021-01-20 | Fix |
| CVE-2021-1301 | Cisco SD-WAN buffer overflow | 9.8CNA v3.0 | 2.1% | 2021-01-20 | Fix |
| CVE-2021-1300 | Cisco SD-WAN buffer overflow | 9.8CNA v3.0 | 2.1% | 2021-01-20 | Fix |
| CVE-2021-1299 | Cisco SD-WAN command injection | 8.1CNA v3.0 | 2.4% | 2021-01-20 | Fix |
| CVE-2021-1298 | Cisco SD-WAN command injection | 8.1CNA v3.0 | 2.4% | 2021-01-20 | Fix |
| CVE-2021-1286 | Cisco Data Center Network Manager management interface cross-site scripting | 6.5CNA v3.1 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-1283 | Cisco DATA Center Network Manager information disclosure | 5.5CNA v3.1 | 0.3% | 2021-01-20 | Fix |
| CVE-2021-1282 | Cisco Unified Communications Manager IM and Presence Service path traversal | 6.5CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1280 | Cisco Advanced Malware Protection For Endpoints and Immunet for Windows DLL hijacking | 7.8CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-1279 | Cisco SD-WAN denial of service | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1278 | Cisco SD-WAN denial of service | 8.6CNA v3.1 | 1.7% | 2021-01-20 | Fix |
| CVE-2021-1277 | Cisco DATA Center Network Manager Certificate Validation vulnerabilities | 7.5CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-1276 | Cisco DATA Center Network Manager Certificate Validation vulnerabilities | 7.5CNA v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-1274 | Cisco SD-WAN denial of service | 8.6CNA v3.1 | 1.9% | 2021-01-20 | Fix |
| CVE-2021-1273 | Cisco SD-WAN denial of service | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1272 | Cisco DATA Center Network Manager server-side request forgery | 8.8CNA v3.1 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1271 | Cisco Web Security Appliance stored cross-site scripting | 4.8CNA v3.1 | 0.8% | 2021-01-20 | Fix |
| CVE-2021-1270 | Cisco DATA Center Network Manager authorization bypass | 6.3CNA v3.1 | 0.6% | 2021-01-20 | Fix |
| CVE-2021-1269 | Cisco DATA Center Network Manager authorization bypass | 6.3CNA v3.1 | 0.8% | 2021-01-20 | Fix |
| CVE-2021-1265 | Cisco DNA Center information disclosure | 7.7CNA v3.0 | 0.9% | 2021-01-20 | Fix |
| CVE-2021-1264 | Cisco DNA Center Command Runner command injection | 9.6CNA v3.1 | 3.7% | 2021-01-20 | Fix |
| CVE-2021-1263 | Cisco SD-WAN command injection | 8.1CNA v3.0 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1262 | Cisco SD-WAN command injection | 8.1CNA v3.0 | 1.3% | 2021-01-20 | Fix |
| CVE-2021-1261 | Cisco SD-WAN command injection | 8.1CNA v3.0 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1260 | Cisco SD-WAN command injection | 8.1CNA v3.0 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1259 | Cisco SD-WAN vManage software path traversal | 5.3CNA v3.0 | 1.9% | 2021-01-20 | Fix |
| CVE-2021-1257 | Cisco DNA Center cross-site request forgery | 7.1CNA v3.0 | 0.8% | 2021-01-20 | Fix |
| CVE-2021-1255 | Cisco DATA Center Network Manager REST API vulnerabilities | 4.6CNA v3.1 | 0.7% | 2021-01-20 | Fix |
| CVE-2021-1253 | Cisco Data Center Network Manager management interface cross-site scripting | 6.5CNA v3.1 | 0.6% | 2021-01-20 | Fix |
| CVE-2021-1250 | Cisco Data Center Network Manager management interface cross-site scripting | 6.5CNA v3.1 | 0.6% | 2021-01-20 | Fix |
| CVE-2021-1249 | Cisco Data Center Network Manager management interface cross-site scripting | 6.5CNA v3.1 | 0.6% | 2021-01-20 | Fix |
| CVE-2021-1248 | Cisco DATA Center Network Manager SQL injection | 8.8CNA v3.1 | 1.9% | 2021-01-20 | Fix |
| CVE-2021-1247 | Cisco DATA Center Network Manager SQL injection | 8.8CNA v3.1 | 1.9% | 2021-01-20 | Fix |
| CVE-2021-1241 | Cisco SD-WAN denial of service | 8.6CNA v3.1 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1235 | Cisco SD-WAN vManage information disclosure | 5.5CNA v3.0 | 0.3% | 2021-01-20 | Fix |
| CVE-2021-1233 | Cisco SD-WAN information disclosure | 4.4CNA v3.0 | 0.3% | 2021-01-20 | Fix |
| CVE-2021-1225 | Cisco SD-WAN vManage SQL injection | 6.5CNA v3.0 | 1.4% | 2021-01-20 | Fix |
| CVE-2021-1222 | Cisco Smart Software Manager Satellite SQL injection | 6.8CNA v3.0 | 1.2% | 2021-01-20 | Fix |
| CVE-2021-1219 | Cisco Smart Software Manager Satellite Static Credential vulnerability | 7.8CNA v3.0 | 0.3% | 2021-01-20 | Fix |
| CVE-2021-1218 | Cisco Smart Software Manager Satellite open redirect | 4.6CNA v3.0 | 0.6% | 2021-01-20 | Fix |
| CVE-2021-1142 | Cisco Smart Software Manager Satellite Web UI command injection | 9.8CNA v3.1 | 4.3% | 2021-01-20 | Fix |
| CVE-2021-1141 | Cisco Smart Software Manager Satellite Web UI command injection | 9.8CNA v3.1 | 4.0% | 2021-01-20 | Fix |
| CVE-2021-1140 | Cisco Smart Software Manager Satellite Web UI command injection | 9.8CNA v3.1 | 4.4% | 2021-01-20 | Fix |
| CVE-2021-1139 | Cisco Smart Software Manager Satellite Web UI command injection | 9.8CNA v3.1 | 4.0% | 2021-01-20 | Fix |
| CVE-2021-1138 | Cisco Smart Software Manager Satellite Web UI command injection | 9.8CNA v3.1 | 4.4% | 2021-01-20 | Fix |
| CVE-2021-1135 | Cisco DATA Center Network Manager REST API vulnerabilities | 4.6CNA v3.1 | 0.6% | 2021-01-20 | Fix |
| CVE-2021-1133 | Cisco DATA Center Network Manager REST API vulnerabilities | 4.6CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-1129 | Cisco Email Security Appliance general purpose API information disclosure | 5.3CNA v3.1 | 1.1% | 2021-01-20 | Fix |
| CVE-2021-1069 | NVIDIA SHIELD TV null pointer dereference | 6.1v3.1 | 0.3% | 2021-01-20 | Fix |
| CVE-2021-1068 | NVIDIA SHIELD TV out-of-bounds read | 7.8v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-1067 | NVIDIA SHIELD TV denial of service | 6.8v3.1 | 0.4% | 2021-01-20 | Fix |
| CVE-2021-25325 | MISP cross-site scripting | 6.1v3.1 | 0.8% | 2021-01-19 | |
| CVE-2021-25324 | MISP cross-site scripting | 6.1v3.1 | 0.8% | 2021-01-19 | |
| CVE-2021-25323 | MISP weak password recovery | 9.1v3.1 | 1.3% | 2021-01-19 | |
| CVE-2021-22852 | HGiga OAKloud Portal SQL injection -2 | 8.8v3.1 | 1.0% | 2021-01-19 | Fix |
| CVE-2021-22851 | HGiga OAKloud Portal SQL injection -1 | 9.8v3.1 | 1.2% | 2021-01-19 | Fix |
| CVE-2021-22850 | HGiga OAKloud Portal Security Misconfiguration | 9.8v3.1 | 1.0% | 2021-01-19 | |
| CVE-2021-22498 | Application Lifecycle Management Micro Focus XML external entity injection | 8.1v3.1 | 1.0% | 2021-01-19 | |
| CVE-2021-21263 | Query Binding Exploitation in Laravel | 7.2CNA v3.1 | 1.6% | 2021-01-19 | Fix |
| CVE-2021-20619 | WESEEK GROWI (v4.2 Series) cross-site scripting | 6.1v3.1 | 1.0% | 2021-01-19 | Fix |
| CVE-2021-20190 | Deserialization of untrusted data in jackson-databind | 8.1NVD v3.1 | 7.5% | 2021-01-19 | Fix |
| CVE-2021-3184 | MISP cross-site scripting | 6.1v3.1 | 0.8% | 2021-01-19 | |
| CVE-2021-3183 | Files Fat Client insufficient session expiration | 7.5v3.1 | 1.2% | 2021-01-19 | |
| CVE-2021-3182 | D-Link Dcs-5220 buffer overflow | 8.0v3.1 | 0.9% | 2021-01-19 | Fix |
| CVE-2021-3181 | Mutt rfc822.c address parsing memory leak | 6.5v3.1 | 2.8% | 2021-01-19 | Fix |
| CVE-2021-3178 | Linux kernel path traversal | 6.5v3.1 | 2.4% | 2021-01-19 | Fix |
| CVE-2021-3177 | Python buffer overflow | 9.8NVD v3.1 | 24.2% | 2021-01-19 | Fix |
| CVE-2021-25295 | OpenCATS cross-site scripting | 6.1v3.1 | 1.5% | 2021-01-18 | Fix |
| CVE-2021-25294 | OpenCATS deserialization of untrusted data | 9.8v3.1 | 10.7% | 2021-01-18 | Fix |
| CVE-2021-25178 | Opendesign Drawings Software Development Kit out-of-bounds write | 7.8v3.1 | 3.2% | 2021-01-18 | Fix |
| CVE-2021-25177 | Opendesign Drawings Software Development Kit type confusion | 7.8v3.1 | 2.3% | 2021-01-18 | Fix |
| CVE-2021-25176 | Opendesign Drawings Software Development Kit null pointer dereference | 7.8v3.1 | 2.3% | 2021-01-18 | Fix |
| CVE-2021-25175 | Opendesign Drawings Software Development Kit incorrect type conversion | 7.8v3.1 | 2.6% | 2021-01-18 | Fix |
| CVE-2021-25174 | Opendesign Drawings Software Development Kit out-of-bounds write | 7.8v3.1 | 2.2% | 2021-01-18 | Fix |
| CVE-2021-25173 | Opendesign Drawings Software Development Kit resource exhaustion | 7.8v3.1 | 2.3% | 2021-01-18 | Fix |
| CVE-2021-3166 | ASUS DSL-N14U_B1 unrestricted file upload | 7.5v3.1 | 2.9% | 2021-01-18 | Exploit code |
| CVE-2021-3113 | Netsia Seba+ forced browsing | 7.5v3.1 | 3.2% | 2021-01-17 | Fix |
| CVE-2021-23838 | Flatcore cross-site scripting | 4.8v3.1 | 1.0% | 2021-01-15 | |
| CVE-2021-23837 | Flatcore SQL injection | 6.5v3.1 | 1.5% | 2021-01-15 | |
| CVE-2021-23836 | Flatcore cross-site scripting | 4.8v3.1 | 0.9% | 2021-01-15 | |
| CVE-2021-23835 | Flatcore improper input validation | 4.9v3.1 | 1.7% | 2021-01-15 | |
| CVE-2021-22171 | GitLab improper authentication | 7.3CNA v3.1 | 1.3% | 2021-01-15 | Fix |
| CVE-2021-22168 | GitLab regular expression denial of service | 4.3CNA v3.1 | 1.0% | 2021-01-15 | Fix |
| CVE-2021-22167 | GitLab project page headers information disclosure | 5.3CNA v3.1 | 1.8% | 2021-01-15 | Fix |
| CVE-2021-22166 | GitLab denial of service | 5.3CNA v3.1 | 1.4% | 2021-01-15 | Fix |
| CVE-2021-21251 | theonedev onedev ZipSlip arbitrary file upload | 7.7CNA v3.1 | 12.7% | 2021-01-15 | Fix |
| CVE-2021-21250 | theonedev onedev Post-Auth External Entity Expansion (XXE) | 7.7CNA v3.1 | 0.9% | 2021-01-15 | Fix |
| CVE-2021-21249 | theonedev onedev Post-Auth Unsafe Yaml deserialization | 9.6CNA v3.1 | 2.9% | 2021-01-15 | Fix |
| CVE-2021-21248 | theonedev onedev Post-Auth arbitrary code execution via Groovy script injection | 9.6CNA v3.1 | 1.5% | 2021-01-15 | Fix |
| CVE-2021-21247 | theonedev onedev Post-Auth unsafe deserialization on BasePage (AJAX) | 9.6CNA v3.1 | 1.5% | 2021-01-15 | Fix |
| CVE-2021-21246 | theonedev onedev Pre-Auth Access token leak | 8.6CNA v3.1 | 49.1% | 2021-01-15 | NucleiFix |
| CVE-2021-21245 | theonedev onedev Pre-Auth arbitrary file upload | 10.0CNA v3.1 | 1.2% | 2021-01-15 | Fix |
| CVE-2021-21244 | theonedev onedev Pre-Auth SSTI via Bean validation message tampering | 10.0CNA v3.1 | 1.5% | 2021-01-15 | Fix |
| CVE-2021-21243 | theonedev onedev Pre-Auth unsafe deserialization on KubernetesResource | 10.0CNA v3.1 | 54.5% | 2021-01-15 | Fix |
| CVE-2021-21242 | theonedev onedev Pre-Auth unsafe deserialization on AttachmentUploadServet | 10.0CNA v3.1 | 74.2% | 2021-01-15 | Fix |
| CVE-2021-21237 | Git LFS can execute a Git binary from the current directory on Windows | 7.2CNA v3.1 | 0.4% | 2021-01-15 | Fix |
| CVE-2021-3162 | Docker improper certificate validation | 7.8v3.1 | 0.2% | 2021-01-15 | Fix |
| CVE-2021-0223 | Junos OS: Telnetd.real local privilege escalation vulnerabilities in SUID binaries | 7.8CNA v3.1 | 0.4% | 2021-01-15 | Fix |
| CVE-2021-0222 | Juniper Networks Junos OS denial of service | 7.4CNA v3.1 | 0.6% | 2021-01-15 | Fix |
| CVE-2021-0221 | Junos OS: QFX Series: Traffic loop denial of service upon receipt of specific IP multicast traffic | 6.5CNA v3.1 | 0.5% | 2021-01-15 | Fix |
| CVE-2021-0220 | Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI | 6.8CNA v3.1 | 1.2% | 2021-01-15 | Fix |
| CVE-2021-0219 | Junos OS: Command injection vulnerability in request system software CLI command | 6.7CNA v3.1 | 0.7% | 2021-01-15 | Fix |
| CVE-2021-0218 | Junos OS: Command injection vulnerability in license-check daemon | 7.8CNA v3.1 | 0.8% | 2021-01-15 | Fix |
| CVE-2021-0217 | Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets | 7.4CNA v3.1 | 0.7% | 2021-01-15 | Fix |
| CVE-2021-0215 | Juniper Junos OS 802.1X authenticator packet forwarding engine memory leak | 6.5CNA v3.1 | 0.8% | 2021-01-15 | Fix |
| CVE-2021-0212 | Contrail Networking: Administrator credentials are exposed in a plaintext file | 5.0CNA v3.1 | 0.3% | 2021-01-15 | Fix |
| CVE-2021-0211 | Juniper Networks Junos OS Evolved improper check for exceptional conditions | 10.0CNA v3.1 | 1.3% | 2021-01-15 | Fix |
| CVE-2021-0210 | Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution | 6.8CNA v3.1 | 1.1% | 2021-01-15 | Fix |
| CVE-2021-0209 | Juniper Junos OS Evolved RPD BGP update processing uninitialized pointer access | 6.5CNA v3.1 | 0.4% | 2021-01-15 | Fix |
| CVE-2021-0208 | Juniper Networks Junos OS Routing protocol daemon improper input validation | 8.8CNA v3.1 | 0.7% | 2021-01-15 | Fix |
| CVE-2021-0207 | Juniper Junos OS VLAN traffic filtering denial of service | 7.5CNA v3.1 | 1.3% | 2021-01-15 | Fix |
| CVE-2021-0206 | Juniper Networks Junos OS A null pointer dereference | 7.5CNA v3.1 | 1.3% | 2021-01-15 | Fix |
| CVE-2021-0205 | Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix | 5.8CNA v3.1 | 1.2% | 2021-01-15 | Fix |
| CVE-2021-0204 | Junos OS: Dexp local privilege escalation vulnerabilities in SUID binaries | 7.8CNA v3.1 | 0.3% | 2021-01-15 | Fix |
| CVE-2021-0203 | Juniper Junos OS Storm Control vulnerability | 8.6CNA v3.1 | 1.0% | 2021-01-15 | Fix |
| CVE-2021-0202 | Juniper Junos OS Trio-based MPC memory leak | 7.5CNA v3.1 | 1.0% | 2021-01-15 | Fix |
| CVE-2021-24122 | Apache Tomcat information disclosure | 5.9NVD v3.1 | 22.9% | 2021-01-14 | Fix |
| CVE-2021-23926 | XMLBeans XML entity expansion | 9.1v3.1 | 6.2% | 2021-01-14 | Fix |
| CVE-2021-22132 | Insufficiently protected credentials in Elasticsearch | 4.8v3.1 | 1.2% | 2021-01-14 | Fix |
| CVE-2021-21722 | ZXV10 B860A sensitive information in log files | 4.4v3.1 | 0.4% | 2021-01-14 | Fix |
| CVE-2021-21261 | Flatpak sandbox escape via spawn portal | 7.3CNA v3.1 | 0.6% | 2021-01-14 | Fix |
| CVE-2021-20618 | Seeds acmailer and acmailer DB improper privilege management | 9.8v3.1 | 3.3% | 2021-01-14 | Fix |
| CVE-2021-20617 | Seeds acmailer and acmailer DB improper access control | 9.8v3.1 | 7.9% | 2021-01-14 | NucleiFix |
| CVE-2021-3138 | discourse missing brute-force protection | 7.5v3.1 | 3.1% | 2021-01-14 | Exploit codeFix |
| CVE-2021-23900 | Uncaught exception leading to denial of service in Json-sanitizer | 7.5v3.1 | 2.1% | 2021-01-13 | Fix |
| CVE-2021-23899 | Arbitrary code injection in Json-sanitizer | 9.8v3.1 | 2.1% | 2021-01-13 | Fix |
| CVE-2021-21614 | Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin | 5.5v3.1 | 0.3% | 2021-01-13 | Fix |
| CVE-2021-21613 | XSS vulnerability in Jenkins Tics Plugin | 6.1v3.1 | 0.9% | 2021-01-13 | Fix |
| CVE-2021-21612 | Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin | 5.5v3.1 | 0.3% | 2021-01-13 | Fix |
| CVE-2021-21611 | Stored XSS vulnerability in Jenkins on new item page | 5.4v3.1 | 1.0% | 2021-01-13 | Fix |
| CVE-2021-21610 | Reflected XSS vulnerability in Jenkins markup formatter preview | 6.1v3.1 | 1.2% | 2021-01-13 | Fix |
| CVE-2021-21609 | Missing permission check for paths with specific prefix in Jenkins | 5.3v3.1 | 1.3% | 2021-01-13 | Fix |
| CVE-2021-21608 | Stored XSS vulnerability in Jenkins button labels | 5.4v3.1 | 1.0% | 2021-01-13 | Fix |
| CVE-2021-21607 | Excessive memory allocation in graph URLs leads to denial of service in Jenkins | 6.5v3.1 | 1.4% | 2021-01-13 | Fix |
| CVE-2021-21606 | Arbitrary file existence check in file fingerprints in Jenkins | 4.3v3.1 | 1.2% | 2021-01-13 | Fix |
| CVE-2021-21605 | Path traversal vulnerability in Jenkins agent names | 8.0v3.1 | 2.2% | 2021-01-13 | Fix |
| CVE-2021-21604 | Improper handling of REST API XML deserialization errors in Jenkins | 8.0v3.1 | 1.7% | 2021-01-13 | Fix |
| CVE-2021-21603 | XSS vulnerability in Jenkins notification bar | 5.4v3.1 | 1.0% | 2021-01-13 | Fix |
| CVE-2021-21602 | Arbitrary file read vulnerability in workspace browsers in Jenkins | 6.5v3.1 | 2.2% | 2021-01-13 | Fix |
| CVE-2021-21252 | Regular expression denial of service in jquery-validation | 5.3CNA v3.1 | 3.4% | 2021-01-13 | Fix |
| CVE-2021-21013 | Adobe Magento Commerce insecure direct object reference could lead to information disclosure | 8.1CNA v3.1 | 3.2% | 2021-01-13 | Fix |
| CVE-2021-21012 | Adobe Magento Commerce checkout module insecure direct object reference | 5.3CNA v3.0 | 4.0% | 2021-01-13 | Fix |
| CVE-2021-21011 | Uncontrolled search path element in Adobe Captivate 2019 | 7.0CNA v3.1 | 2.0% | 2021-01-13 | Fix |
| CVE-2021-21010 | Uncontrolled search path element in Adobe InCopy | 7.0CNA v3.1 | 2.5% | 2021-01-13 | Fix |
| CVE-2021-21009 | Adobe server-side request forgery in Campaign Classic could lead to sensitive information disclosure | 8.6CNA v3.1 | 3.0% | 2021-01-13 | Fix |
| CVE-2021-21008 | Adobe uncontrolled search path element vulnerability in Animate | 7.0CNA v3.1 | 2.4% | 2021-01-13 | Fix |
| CVE-2021-21007 | Adobe Illustrator uncontrolled search path | 7.0CNA v3.1 | 2.2% | 2021-01-13 | Fix |
| CVE-2021-21006 | Adobe Photoshop heap-based buffer overflow | 8.6CNA v3.1 | 5.6% | 2021-01-13 | Fix |
| CVE-2021-20616 | SKYSEA Client View installer untrusted search path | 7.8v3.1 | 0.3% | 2021-01-13 | Fix |
| CVE-2021-3139 | Tcmu-runner path traversal | 8.1v3.1 | 2.6% | 2021-01-13 | Fix |
| CVE-2021-3131 | 1C inadequate encryption strength | 7.5v3.1 | 1.0% | 2021-01-13 | Exploit code |
| CVE-2021-3032 | PAN-OS: Configuration secrets for log forwarding may be logged in system logs | 4.4CNA v3.1 | 0.2% | 2021-01-13 | Fix |
| CVE-2021-3031 | PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) | 4.3CNA v3.1 | 0.5% | 2021-01-13 | Fix |
| CVE-2021-3028 | Git-big-picture code execution | 9.8v3.1 | 2.8% | 2021-01-13 | Fix |
| CVE-2021-1360 | Cisco Small Business RV Series Router Firmware stack-based buffer overflow | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1311 | Cisco Webex Meetings and Cisco WebEx Meetings Server Host Key Brute Forcing vulnerability | 5.4CNA v3.1 | 1.3% | 2021-01-13 | Fix |
| CVE-2021-1310 | Cisco Webex Meetings open redirect | 4.7CNA v3.1 | 1.6% | 2021-01-13 | Fix |
| CVE-2021-1307 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1267 | Cisco Firepower Management Center XML entity expansion | 4.3CNA v3.0 | 1.0% | 2021-01-13 | Fix |
| CVE-2021-1258 | Cisco AnyConnect Secure Mobility Client arbitrary file read | 5.5CNA v3.1 | 0.3% | 2021-01-13 | Fix |
| CVE-2021-1246 | Cisco Finesse OpenSocial Gadget Editor unauthenticated access | 6.5CNA v3.1 | 1.4% | 2021-01-13 | Fix |
| CVE-2021-1245 | Cisco Finesse OpenSocial Gadget Editor cross-site scripting | 6.5CNA v3.1 | 1.4% | 2021-01-13 | Fix |
| CVE-2021-1242 | Cisco Webex Teams Shared File Manipulation vulnerability | 4.3CNA v3.1 | 1.4% | 2021-01-13 | Fix |
| CVE-2021-1240 | Cisco Proximity Desktop for Windows DLL hijacking | 4.8CNA v3.1 | 0.9% | 2021-01-13 | Fix |
| CVE-2021-1239 | Cisco Firepower Management Center stored cross-site scripting | 4.8CNA v3.0 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1238 | Cisco Firepower Management Center stored cross-site scripting | 4.8CNA v3.0 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1237 | Cisco AnyConnect Secure Mobility Client for Windows DLL injection | 7.8CNA v3.1 | 0.4% | 2021-01-13 | Fix |
| CVE-2021-1236 | Multiple Cisco Products Snort Application Detection Engine Policy Bypass vulnerability | 4.0CNA v3.0 | 2.1% | 2021-01-13 | Fix |
| CVE-2021-1226 | Cisco Unified Communications Products information disclosure | 4.3CNA v3.1 | 0.9% | 2021-01-13 | Fix |
| CVE-2021-1224 | Multiple Cisco Products Snort TCP Fast Open File Policy Bypass vulnerability | 5.8CNA v3.1 | 2.0% | 2021-01-13 | Fix |
| CVE-2021-1223 | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass vulnerability | 5.8CNA v3.0 | 2.0% | 2021-01-13 | Fix |
| CVE-2021-1217 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1216 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1215 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1214 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1213 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1212 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1211 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1210 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1209 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1208 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1207 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1206 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1205 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1204 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1203 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1202 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1201 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1200 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1199 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1198 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1197 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1196 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1195 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1194 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1193 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1192 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1191 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1190 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1189 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1188 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1187 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1186 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1185 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1184 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1183 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1182 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1181 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1180 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1179 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1178 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1177 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1176 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1175 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1174 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1173 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1172 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1171 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1170 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1169 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1168 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1167 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 5.6% | 2021-01-13 | |
| CVE-2021-1166 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1165 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1164 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1163 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1162 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1161 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1160 | Cisco Small Business RV Series Routers management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.2% | 2021-01-13 | |
| CVE-2021-1159 | Cisco Small Business RV Series Routers management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-01-13 | |
| CVE-2021-1158 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.7% | 2021-01-13 | Fix |
| CVE-2021-1157 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1156 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1155 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1154 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1153 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1152 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1151 | Cisco Small Business RV Series Routers management interface stored cross-site scripting | 4.8CNA v3.1 | 0.7% | 2021-01-13 | Fix |
| CVE-2021-1150 | Cisco Small Business RV Series Routers management interface command injection | 7.2CNA v3.1 | 2.4% | 2021-01-13 | |
| CVE-2021-1149 | Cisco Small Business RV Series Routers management interface command injection | 7.2CNA v3.1 | 2.4% | 2021-01-13 | |
| CVE-2021-1148 | Cisco Small Business RV Series Routers management interface command injection | 7.2CNA v3.1 | 2.4% | 2021-01-13 | |
| CVE-2021-1147 | Cisco Small Business RV Series Routers management interface command injection | 7.2CNA v3.1 | 2.4% | 2021-01-13 | |
| CVE-2021-1146 | Cisco Small Business RV Series Routers management interface command injection | 7.2CNA v3.1 | 2.4% | 2021-01-13 | |
| CVE-2021-1145 | Cisco StarOS for Cisco Asr 5000 Series Routers arbitrary file read | 6.5CNA v3.1 | 1.3% | 2021-01-13 | Fix |
| CVE-2021-1144 | Cisco Connected Mobile Experiences privilege escalation | 8.8CNA v3.1 | 1.4% | 2021-01-13 | Fix |
| CVE-2021-1143 | Cisco Connected Mobile Experiences incorrect authorization | 4.3CNA v3.1 | 0.7% | 2021-01-13 | Fix |
| CVE-2021-1131 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery protocol denial of service | 6.5CNA v3.1 | 0.5% | 2021-01-13 | Fix |
| CVE-2021-1130 | Cisco DNA Center cross-site scripting | 4.8CNA v3.1 | 0.8% | 2021-01-13 | Fix |
| CVE-2021-1127 | Cisco Enterprise NFV Infrastructure Software cross-site scripting | 5.4CNA v3.1 | 0.6% | 2021-01-13 | Fix |
| CVE-2021-1126 | Cisco Firepower Management Center information disclosure | 5.5CNA v3.0 | 0.3% | 2021-01-13 | Fix |
| CVE-2021-23936 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.9% | 2021-01-12 | |
| CVE-2021-23935 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23934 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23933 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23932 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23931 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23930 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23929 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23928 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.1% | 2021-01-12 | |
| CVE-2021-23927 | Open-xchange Appsuite server-side request forgery | 6.4v3.1 | 0.8% | 2021-01-12 | |
| CVE-2021-23240 | sudo sudoedit SELinux RBAC support privilege escalation | 7.8v3.1 | 1.1% | 2021-01-12 | Fix |
| CVE-2021-23239 | sudo sudoedit race condition | 2.5v3.1 | 1.0% | 2021-01-12 | Fix |
| CVE-2021-23125 | Joomla! CMS core XSS in com_tags image parameters | 6.1v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-23124 | Joomla! CMS core XSS in mod_breadcrumbs aria-label attribute | 6.1v3.1 | 79.0% | 2021-01-12 | Fix |
| CVE-2021-23123 | Joomla! CMS core com_modules exposes module names | 5.3v3.1 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21471 | SAP CLA Assistant improper access control | 6.5CNA v3.0 | 0.7% | 2021-01-12 | |
| CVE-2021-21470 | SAP EPM Add-in for Microsoft Office XML external entity injection | 3.6CNA v3.0 | 0.2% | 2021-01-12 | Fix |
| CVE-2021-21469 | SAP NetWeaver Master Data Management information disclosure | 5.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21468 | SAP Business Warehouse missing authorization | 6.5CNA v3.0 | 1.9% | 2021-01-12 | Fix |
| CVE-2021-21467 | SAP Banking Services (Generic Market Data) missing authorization | 4.3CNA v3.0 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-21466 | SAP Business Warehouse code injection | 9.9CNA v3.0 | 3.1% | 2021-01-12 | Fix |
| CVE-2021-21465 | SAP Business Warehouse SQL injection | 9.9CNA v3.0 | 3.7% | 2021-01-12 | Fix |
| CVE-2021-21464 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.0% | 2021-01-12 | Fix |
| CVE-2021-21463 | SAP 3D Visual Enterprise Viewer out-of-bounds read | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21462 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21461 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21460 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21459 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21458 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21457 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21456 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21455 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21454 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21453 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21452 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21451 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21450 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21449 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-21448 | SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can access information which would otherwise be restricted. The exploit can only be executed locally on the c | 5.3CNA v3.0 | 0.3% | 2021-01-12 | Fix |
| CVE-2021-21447 | SAP BusinessObjects Business Intelligence Platform cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-01-12 | Fix |
| CVE-2021-21446 | SAP NetWeaver Application Server ABAP denial of service | 7.5CNA v3.0 | 1.4% | 2021-01-12 | Fix |
| CVE-2021-21445 | SAP Commerce Cloud HTTP request smuggling | 5.4CNA v3.0 | 0.6% | 2021-01-12 | Fix |
| CVE-2021-3134 | Mubu privilege escalation | 7.8v3.1 | 0.4% | 2021-01-12 | Fix |
| CVE-2021-3133 | Sean Barton (Tortoise IT) Elementor Contact Form DB cross-site request forgery | 6.5v3.1 | 0.9% | 2021-01-12 | Fix |
| CVE-2021-3129 | Laravel Ignition file upload | 9.8NVD v3.1 | 99.9% | 2021-01-12 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-1725 | Microsoft Bot Framework SDK information disclosure | 5.5CNA v3.1 | 1.1% | 2021-01-12 | Fix |
| CVE-2021-1723 | Microsoft ASP.NET Core and Visual Studio denial of service | 7.5CNA v3.1 | 4.9% | 2021-01-12 | Fix |
| CVE-2021-1719 | Microsoft SharePoint elevation of privilege | 8.0CNA v3.1 | 2.2% | 2021-01-12 | Fix |
| CVE-2021-1718 | Microsoft SharePoint server tampering | 8.0CNA v3.1 | 2.6% | 2021-01-12 | Fix |
| CVE-2021-1717 | Microsoft SharePoint server spoofing | 4.6CNA v3.1 | 1.8% | 2021-01-12 | Fix |
| CVE-2021-1716 | Microsoft Word remote code execution | 7.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1715 | Microsoft Word remote code execution | 7.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1714 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 3.1% | 2021-01-12 | Fix |
| CVE-2021-1713 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 3.1% | 2021-01-12 | Fix |
| CVE-2021-1712 | Microsoft SharePoint elevation of privilege | 8.0CNA v3.1 | 2.2% | 2021-01-12 | Fix |
| CVE-2021-1711 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1710 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1709 | Microsoft Windows Win32k elevation of privilege | 7.0CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1708 | Microsoft Windows GDI+ information disclosure | 5.7CNA v3.1 | 3.4% | 2021-01-12 | Fix |
| CVE-2021-1707 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1706 | Microsoft Windows LUAFV elevation of privilege | 7.3CNA v3.1 | 2.1% | 2021-01-12 | Fix |
| CVE-2021-1705 | Microsoft Edge (HTML-based) memory corruption | 4.2CNA v3.1 | 1.9% | 2021-01-12 | Fix |
| CVE-2021-1704 | Microsoft Windows Hyper-V elevation of privilege | 7.3CNA v3.1 | 1.0% | 2021-01-12 | Fix |
| CVE-2021-1703 | Microsoft Windows Event Logging service elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1702 | Microsoft Windows Remote Procedure Call Runtime elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1701 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1700 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1699 | Microsoft Windows (modem.sys) information disclosure | 5.5CNA v3.1 | 2.1% | 2021-01-12 | Exploit codeFix |
| CVE-2021-1697 | Microsoft Windows InstallService elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1696 | Microsoft Windows Graphics component information disclosure | 5.5CNA v3.1 | 4.4% | 2021-01-12 | Fix |
| CVE-2021-1695 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-01-12 | Fix |
| CVE-2021-1694 | Microsoft Windows Update Stack elevation of privilege | 7.5CNA v3.1 | 3.2% | 2021-01-12 | Fix |
| CVE-2021-1693 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1692 | Microsoft Windows Hyper-V denial of service | 7.7CNA v3.1 | 3.9% | 2021-01-12 | Fix |
| CVE-2021-1691 | Microsoft Windows Hyper-V denial of service | 7.7CNA v3.1 | 3.8% | 2021-01-12 | Fix |
| CVE-2021-1690 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1689 | Microsoft Windows Multipoint Management elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1688 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1687 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1686 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1685 | Microsoft Windows AppX Deployment extensions elevation of privilege | 7.3CNA v3.1 | 0.9% | 2021-01-12 | Fix |
| CVE-2021-1684 | Microsoft Windows Bluetooth security feature bypass | 5.0CNA v3.1 | 1.6% | 2021-01-12 | Fix |
| CVE-2021-1683 | Microsoft Windows Bluetooth security feature bypass | 5.0CNA v3.1 | 1.7% | 2021-01-12 | Fix |
| CVE-2021-1682 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.6% | 2021-01-12 | Fix |
| CVE-2021-1681 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1680 | Microsoft Windows Diagnostics Hub Standard Collector elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1679 | Microsoft Windows CryptoAPI denial of service | 6.5CNA v3.1 | 3.5% | 2021-01-12 | Fix |
| CVE-2021-1678 | Microsoft Windows Print Spooler spoofing | 8.8CNA v3.1 | 10.0% | 2021-01-12 | Fix |
| CVE-2021-1677 | Azure Active Directory Pod Identity spoofing | 5.5CNA v3.1 | 1.1% | 2021-01-12 | Fix |
| CVE-2021-1676 | Microsoft Windows NT Lan Manager Datagram Receiver driver information disclosure | 5.5CNA v3.1 | 1.3% | 2021-01-12 | Fix |
| CVE-2021-1674 | Microsoft Windows Remote Desktop Protocol Core security feature bypass | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1673 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1672 | Microsoft Windows Projected File System FS Filter driver information disclosure | 5.5CNA v3.1 | 1.3% | 2021-01-12 | Fix |
| CVE-2021-1671 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1670 | Microsoft Windows Projected File System FS Filter driver information disclosure | 5.5CNA v3.1 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-1669 | Microsoft Windows Remote Desktop security feature bypass | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1668 | Microsoft DTV-DVD Video Decoder remote code execution | 7.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1667 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.6% | 2021-01-12 | Fix |
| CVE-2021-1666 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1665 | Microsoft Windows GDI+ remote code execution | 7.8CNA v3.1 | 3.8% | 2021-01-12 | Fix |
| CVE-2021-1664 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1663 | Microsoft Windows Projected File System FS Filter driver information disclosure | 5.5CNA v3.1 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-1662 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1661 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1660 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1659 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1658 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.0% | 2021-01-12 | Fix |
| CVE-2021-1657 | Microsoft Windows Fax Compose form remote code execution | 7.8CNA v3.1 | 0.9% | 2021-01-12 | Fix |
| CVE-2021-1656 | Microsoft Windows TPM Device driver information disclosure | 5.5CNA v3.1 | 3.0% | 2021-01-12 | Exploit codeFix |
| CVE-2021-1655 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1654 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1653 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1652 | Microsoft Windows CSC service elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1651 | Microsoft Windows Diagnostics Hub Standard Collector elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1650 | Microsoft Windows Runtime C++ template library elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1649 | Microsoft Windows active template library elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1648 | Microsoft splwow64 elevation of privilege | 7.8CNA v3.1 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-1647 | Microsoft Defender remote code execution | 7.8CNA v3.1 | 39.4% | 2021-01-12 | KEVExploit codeFix |
| CVE-2021-1646 | Microsoft Windows WLAN service elevation of privilege | 6.6CNA v3.1 | 0.8% | 2021-01-12 | Fix |
| CVE-2021-1645 | Microsoft Windows Docker information disclosure | 5.0CNA v3.1 | 7.3% | 2021-01-12 | Fix |
| CVE-2021-1644 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 3.8% | 2021-01-12 | Fix |
| CVE-2021-1643 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 3.9% | 2021-01-12 | Fix |
| CVE-2021-1642 | Microsoft Windows AppX Deployment extensions elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-01-12 | Fix |
| CVE-2021-1641 | Microsoft SharePoint server spoofing | 4.6CNA v3.1 | 1.8% | 2021-01-12 | Fix |
| CVE-2021-1638 | Microsoft Windows Bluetooth security feature bypass | 7.7CNA v3.1 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-1637 | Microsoft Windows DNS Query information disclosure | 5.5CNA v3.1 | 1.2% | 2021-01-12 | Fix |
| CVE-2021-1636 | Microsoft SQL elevation of privilege | 8.8CNA v3.1 | 6.7% | 2021-01-12 | Fix |
| CVE-2021-23253 | Opera Mini address field vulnerability | 5.3v3.1 | 0.8% | 2021-01-11 | Fix |
| CVE-2021-21241 | CSRF can expose users authentication token in Flask-Security-Too | 7.4CNA v3.1 | 0.9% | 2021-01-11 | Fix |
| CVE-2021-3121 | Improper input validation in GoGo Protobuf | 8.6v3.1 | 3.5% | 2021-01-11 | Fix |
| CVE-2021-3118 | Medicalexpo Ecs Imaging SQL injection | 9.8v3.1 | 1.8% | 2021-01-11 | |
| CVE-2021-3116 | Logic error in authentication in Proxy.py | 7.5v3.1 | 1.7% | 2021-01-11 | Fix |
| CVE-2021-0342 | Android use-after-free | 6.7v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0322 | Android SlicePermissionActivity.java information disclosure | 5.0v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0321 | Android ActivityManagerService.java information disclosure | 5.5v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0320 | Android keystore_keymaster_enforcement.h information disclosure | 4.7v3.1 | 0.1% | 2021-01-11 | Fix |
| CVE-2021-0319 | Android CompanionDeviceManagerService.java privilege escalation | 7.3v3.1 | 0.3% | 2021-01-11 | Fix |
| CVE-2021-0318 | Android SensorEventConnection.cpp out-of-bounds write | 7.8v3.1 | 0.3% | 2021-01-11 | Fix |
| CVE-2021-0317 | Android incorrect authorization | 7.8v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0316 | Android avrc_pars_tg.cc out-of-bounds write | 9.8v3.1 | 3.1% | 2021-01-11 | Fix |
| CVE-2021-0315 | Android GrantCredentialsPermissionActivity.java privilege escalation | 7.3v3.1 | 0.3% | 2021-01-11 | Exploit codeFix |
| CVE-2021-0313 | Android LayoutUtils.cpp crash | 7.5v3.1 | 1.7% | 2021-01-11 | Exploit codeFix |
| CVE-2021-0312 | Android WAVExtractor.cpp out-of-bounds write | 6.5v3.1 | 1.1% | 2021-01-11 | Fix |
| CVE-2021-0311 | Android ESQueue.cpp out-of-bounds write | 6.5v3.1 | 1.1% | 2021-01-11 | Fix |
| CVE-2021-0310 | Android LazyServiceRegistrar.cpp memory corruption | 7.8v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0309 | Android confused deputy | 5.5v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0308 | Android basicmbr.cc out-of-bounds write | 6.8v3.1 | 0.4% | 2021-01-11 | Exploit codeFix |
| CVE-2021-0307 | Android PermissionManagerService.java privilege escalation | 7.8v3.1 | 0.2% | 2021-01-11 | KCVFix |
| CVE-2021-0306 | Android PermissionManagerService.java insecure permissions | 7.8v3.1 | 0.3% | 2021-01-11 | Fix |
| CVE-2021-0304 | Android GlobalScreenshot.java insecure permissions | 5.5v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-0303 | Android StreamSetObserver.cpp use-after-free | 7.0v3.1 | 0.1% | 2021-01-11 | Fix |
| CVE-2021-0301 | Android ged out-of-bounds write | 6.7v3.1 | 0.2% | 2021-01-11 | Fix |
| CVE-2021-21116 | Google Chrome audio heap-based buffer overflow | 8.8v3.1 | 1.4% | 2021-01-08 | Fix |
| CVE-2021-21115 | Google Chrome use-after-free | 9.6v3.1 | 1.4% | 2021-01-08 | Fix |
| CVE-2021-21114 | Google Chrome audio use-after-free | 8.8v3.1 | 1.4% | 2021-01-08 | Fix |
| CVE-2021-21113 | Google Chrome Skia heap-based buffer overflow | 8.8v3.1 | 1.5% | 2021-01-08 | Fix |
| CVE-2021-21112 | Google Chrome Blink use-after-free | 8.8v3.1 | 1.4% | 2021-01-08 | Fix |
| CVE-2021-21111 | Google Chrome WebUI insufficient policy enforcement | 9.6v3.1 | 1.1% | 2021-01-08 | Fix |
| CVE-2021-21110 | Google Chrome safe browsing use-after-free | 9.6v3.1 | 3.1% | 2021-01-08 | Exploit codeFix |
| CVE-2021-21109 | Google Chrome payments use-after-free | 9.6v3.1 | 1.3% | 2021-01-08 | Fix |
| CVE-2021-21108 | Google Chrome media use-after-free | 9.6v3.1 | 1.3% | 2021-01-08 | Fix |
| CVE-2021-21107 | Google Chrome drag and drop use-after-free | 9.6v3.1 | 1.1% | 2021-01-08 | Fix |
| CVE-2021-21106 | Google Chrome autofill use-after-free | 9.6v3.1 | 2.2% | 2021-01-08 | Fix |
| CVE-2021-3111 | Concrete CMS cross-site scripting | 4.8v3.1 | 3.0% | 2021-01-08 | Exploit codeFix |
| CVE-2021-3025 | invisioncommunity IPS Community Suite SQL injection | 8.8v3.1 | 1.4% | 2021-01-08 | Fix |
| CVE-2021-1066 | NVIDIA Virtual GPU Manager denial of service | 5.5v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1065 | NVIDIA Virtual GPU Manager tampering | 7.1v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1064 | NVIDIA Virtual GPU Manager null pointer dereference | 7.1v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1063 | NVIDIA Virtual GPU Manager out-of-bounds read | 7.8v3.1 | 0.4% | 2021-01-08 | Fix |
| CVE-2021-1062 | NVIDIA Virtual GPU Manager improper quantity validation | 7.1v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1061 | NVIDIA Virtual GPU Manager race condition | 6.3v3.1 | 0.2% | 2021-01-08 | Fix |
| CVE-2021-1060 | NVIDIA Virtual GPU Software tampering | 7.1v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1059 | NVIDIA Virtual GPU Manager integer overflow | 7.8v3.1 | 0.4% | 2021-01-08 | Fix |
| CVE-2021-1058 | NVIDIA Virtual GPU Software improper quantity validation | 7.1v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1057 | NVIDIA Virtual GPU Manager resource exhaustion | 7.8v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1056 | NVIDIA GPU Display Driver incorrect default permissions | 7.1v3.1 | 1.8% | 2021-01-08 | Exploit codeFix |
| CVE-2021-1055 | NVIDIA GPU Display Driver improper access control | 5.3v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1054 | NVIDIA GPU Display Driver incorrect authorization | 5.5v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-1053 | NVIDIA GPU Display Driver improper input validation | 5.5v3.1 | 0.4% | 2021-01-08 | Fix |
| CVE-2021-1052 | NVIDIA GPU Display Driver denial of service | 7.8v3.1 | 0.5% | 2021-01-08 | Fix |
| CVE-2021-1051 | NVIDIA GPU Display Driver improper privilege management | 8.4CNA v3.1 | 0.3% | 2021-01-08 | Fix |
| CVE-2021-23242 | Mercusys Mercury X18G path traversal | 5.3v3.1 | 1.8% | 2021-01-07 | Fix |
| CVE-2021-23241 | Mercusys Mercury X18G path traversal | 5.3v3.1 | 13.4% | 2021-01-07 | NucleiFix |
| CVE-2021-3029 | Evolucare Ecs Imaging OS command injection | 9.8v3.1 | 3.0% | 2021-01-07 | |
| CVE-2021-3011 | Google Titan Security Key incorrect control flow | 4.2v3.1 | 0.2% | 2021-01-07 | |
| CVE-2021-21236 | Regular expression denial of service in CairoSVG | 5.7CNA v3.1 | 1.4% | 2021-01-06 | Fix |
| CVE-2021-21235 | kamadak exif-rs infinite loop in parsing PNG files in | 5.7CNA v3.1 | 1.5% | 2021-01-06 | Fix |
| CVE-2021-22495 | Samsung Exynos out-of-bounds write | 5.5v3.1 | 0.3% | 2021-01-05 | Fix |
| CVE-2021-22494 | Samsung Galaxy Note20 fingerprint scanner vulnerability | 5.5v3.1 | 0.3% | 2021-01-05 | Fix |
| CVE-2021-22492 | Google Android buffer overflow | 8.8v3.1 | 0.3% | 2021-01-05 | Fix |
| CVE-2021-21234 | lukashinsch spring-boot-actuator-logview directory traversal | 7.7CNA v3.1 | 21.0% | 2021-01-05 | NucleiExploit codeFix |
| CVE-2021-3026 | invisioncommunity IPS Community Suite cross-site scripting | 6.1v3.1 | 0.6% | 2021-01-05 | Fix |
| CVE-2021-3022 | An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 (January 2021). | 5.5v3.1 | 0.1% | 2021-01-05 | |
| CVE-2021-3021 | ISPConfig SQL injection | 9.8v3.1 | 2.1% | 2021-01-05 | Fix |
| CVE-2021-3019 | Lanproxy path traversal | 7.5NVD v3.1 | 16.6% | 2021-01-05 | NucleiExploit code |
| CVE-2021-3018 | Ipeakcms SQL injection | 9.8v3.1 | 18.4% | 2021-01-05 | NucleiExploit code |
| CVE-2021-21495 | Mk-auth cross-site request forgery | 8.8v3.1 | 0.5% | 2021-01-04 | |
| CVE-2021-21494 | Mk-auth incorrect permission assignment | 4.8v3.1 | 0.5% | 2021-01-04 | |
| CVE-2021-3014 | MikroTik RouterOS cross-site scripting | 6.1v3.1 | 0.9% | 2021-01-04 | |
| CVE-2021-3007 | Remote code execution in zendframework and Laminas-http | 9.8v3.1 | 75.3% | 2021-01-04 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2021-3006 | Seal Finance breed function vulnerability | 7.5v3.1 | 1.3% | 2021-01-03 | |
| CVE-2021-3005 | Mk-auth information disclosure | 4.3v3.1 | 0.9% | 2021-01-03 | |
| CVE-2021-3004 | Stableyieldcredit incorrect calculation | 7.5v3.1 | 1.3% | 2021-01-03 | |
| CVE-2021-3002 | SEO Panel cross-site scripting | 6.1v3.1 | 4.3% | 2021-01-01 | Nuclei |