CVE-2021 records published in February 2021
This page lists the 901 CVE-2021 records published in February 2021, newest first. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 17 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 14916.5% of these records
- Listed in CISA KEV
- 171.9% of these records
- Reported exploited
- 20.2% of these records
- Detection signal
- 323.6% of these records
- Exploit code
- 576.3% of these records
- Actionable vendor fix
- 73481.5% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in February 2021 have had from about 68 months to about 69 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-27132 | Sercomm Agcombo VD625 CRLF injection | 9.8v3.1 | 16.1% | 2021-02-27 | Nuclei |
| CVE-2021-25284 | SaltStack Salt cleartext storage of sensitive information via cmdmod | 4.4v3.1 | 0.5% | 2021-02-27 | Fix |
| CVE-2021-25283 | SaltStack Salt server side template injection | 9.8v3.1 | 10.4% | 2021-02-27 | Fix |
| CVE-2021-25282 | SaltStack Salt directory traversal | 9.1v3.1 | 92.3% | 2021-02-27 | MetasploitExploit codeKCVFix |
| CVE-2021-25281 | SaltStack Salt improper authentication | 9.8v3.1 | 72.9% | 2021-02-27 | Reported exploitedNucleiMetasploitExploit codeKCVFix |
| CVE-2021-3197 | SaltStack Salt is vulnerable to shell injection via ProxyCommand argument | 9.8v3.1 | 72.3% | 2021-02-27 | Fix |
| CVE-2021-3151 | I-doit cross-site scripting | 5.4v3.1 | 1.2% | 2021-02-27 | Fix |
| CVE-2021-3148 | SaltStack Salt command injection in the Salt-API when using the Salt-SSH client | 9.8v3.1 | 8.2% | 2021-02-27 | Fix |
| CVE-2021-3144 | SaltStack Salt eauth tokens can be used once after expiration | 9.1v3.1 | 5.2% | 2021-02-27 | Fix |
| CVE-2021-27803 | w1.fi wpa_supplicant denial of service | 7.5v3.1 | 1.2% | 2021-02-26 | Fix |
| CVE-2021-27799 | Zint Barcode Generator out-of-bounds write | 7.5v3.1 | 2.4% | 2021-02-26 | Fix |
| CVE-2021-27198 | Visualware MyConnection Server unrestricted file upload | 9.8v3.1 | 13.6% | 2021-02-26 | Exploit codeFix |
| CVE-2021-26904 | Isida Retriever SQL injection | 9.8v3.1 | 2.0% | 2021-02-26 | Exploit codeFix |
| CVE-2021-26903 | Isida Retriever cross-site scripting | 6.1v3.1 | 1.0% | 2021-02-26 | Exploit codeFix |
| CVE-2021-26567 | github/knik0 faad2 frontend/main.c stack-based buffer overflow | 7.8v3.1 | 1.1% | 2021-02-26 | Fix |
| CVE-2021-26566 | Synology DiskStation Manager (DSM) synorelayd information disclosure | 8.3CNA v3.1 | 1.5% | 2021-02-26 | Fix |
| CVE-2021-26565 | Synology DiskStation Manager (DSM) synorelayd cleartext transmission of sensitive information | 8.3CNA v3.1 | 0.7% | 2021-02-26 | Fix |
| CVE-2021-26564 | Synology DiskStation Manager (DSM) synorelayd cleartext transmission of sensitive information | 8.3CNA v3.1 | 0.7% | 2021-02-26 | Fix |
| CVE-2021-26563 | Synology DiskStation Manager (DSM) synoagentregisterd incorrect authorization | 8.2CNA v3.1 | 0.5% | 2021-02-26 | Fix |
| CVE-2021-26562 | Synology DiskStation Manager (DSM) synoagentregisterd out-of-bounds write | 9.0CNA v3.1 | 1.9% | 2021-02-26 | Fix |
| CVE-2021-26561 | Synology DiskStation Manager (DSM) synoagentregisterd stack-based buffer overflow | 9.0CNA v3.1 | 2.1% | 2021-02-26 | Fix |
| CVE-2021-26560 | Synology DiskStation Manager (DSM) cleartext transmission of sensitive information | 9.0CNA v3.1 | 0.8% | 2021-02-26 | Fix |
| CVE-2021-23979 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.9% | 2021-02-26 | Fix |
| CVE-2021-23978 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.5% | 2021-02-26 | Fix |
| CVE-2021-23977 | Mozilla Firefox time-of-check time-of-use race condition | 5.3v3.1 | 0.9% | 2021-02-26 | Fix |
| CVE-2021-23976 | Mozilla Firefox clickjacking | 8.1v3.1 | 1.1% | 2021-02-26 | Fix |
| CVE-2021-23975 | Mozilla Firefox missing authorization | 6.5v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23974 | Mozilla Firefox DOMParser HTML sanitizer vulnerability | 6.1v3.1 | 0.8% | 2021-02-26 | Fix |
| CVE-2021-23973 | Mozilla Firefox information disclosure through error messages | 6.5v3.1 | 1.4% | 2021-02-26 | Fix |
| CVE-2021-23972 | Mozilla Firefox HTTP Auth phishing warning vulnerability | 8.8v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23971 | Mozilla Firefox Referrer-Policy handling vulnerability | 6.5v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23970 | Mozilla Firefox reachable assertion | 6.5v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23969 | Mozilla Firefox Content Security Policy violation reporting vulnerability | 4.3v3.1 | 1.2% | 2021-02-26 | Fix |
| CVE-2021-23968 | Mozilla Firefox information disclosure through error messages | 4.3v3.1 | 1.2% | 2021-02-26 | Fix |
| CVE-2021-23965 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23964 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.3% | 2021-02-26 | Fix |
| CVE-2021-23963 | Mozilla Firefox improper preservation of permissions | 4.3v3.1 | 0.7% | 2021-02-26 | Fix |
| CVE-2021-23962 | Mozilla Firefox crash | 8.8v3.1 | 0.9% | 2021-02-26 | Fix |
| CVE-2021-23961 | Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox < 85. | 7.4v3.1 | 1.3% | 2021-02-26 | Fix |
| CVE-2021-23960 | Mozilla Firefox crash | 8.8v3.1 | 1.2% | 2021-02-26 | Fix |
| CVE-2021-23959 | Mozilla Firefox internal error pages cross-site scripting | 6.1v3.1 | 0.6% | 2021-02-26 | Fix |
| CVE-2021-23958 | Mozilla Firefox information disclosure | 6.5v3.1 | 0.9% | 2021-02-26 | Fix |
| CVE-2021-23957 | Mozilla Firefox sandbox escape | 7.4v3.1 | 0.8% | 2021-02-26 | Fix |
| CVE-2021-23956 | Mozilla Firefox file picker vulnerability | 6.5v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23955 | Mozilla Firefox clickjacking | 6.1v3.1 | 0.7% | 2021-02-26 | Fix |
| CVE-2021-23954 | Mozilla Firefox type confusion | 8.8v3.1 | 1.1% | 2021-02-26 | Fix |
| CVE-2021-23953 | Mozilla Firefox PDF reader information disclosure | 4.3v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-23345 | github.com/thecodingmachine/gotenberg server-side request forgery (SSRF) | 5.3v3.1 | 1.1% | 2021-02-26 | |
| CVE-2021-22661 | ICX35-HWC-A, ICX35-HWC-E access control weakness | 7.5v3.1 | 1.0% | 2021-02-26 | Fix |
| CVE-2021-21724 | ZXR10 8900E memory leak | 4.4v3.1 | 0.4% | 2021-02-26 | Fix |
| CVE-2021-21330 | Open redirect vulnerability in Aiohttp | 3.1CNA v3.1 | 1.9% | 2021-02-26 | Fix |
| CVE-2021-21328 | vapor denial of service | 5.3CNA v3.1 | 1.8% | 2021-02-26 | Fix |
| CVE-2021-21309 | redis integer overflow on 32-bit systems | 5.4CNA v3.1 | 4.8% | 2021-02-26 | Fix |
| CVE-2021-21308 | PrestaShop improper session management for soft logout | 6.1CNA v3.1 | 1.9% | 2021-02-26 | Fix |
| CVE-2021-21302 | PrestaShop CSV injection via CSV export | 6.8CNA v3.1 | 2.4% | 2021-02-26 | Fix |
| CVE-2021-21298 | Path traversal in Node-Red | 3.5CNA v3.1 | 1.1% | 2021-02-26 | Fix |
| CVE-2021-21297 | Prototype pollution in Node-Red | 7.7CNA v3.1 | 1.4% | 2021-02-26 | Fix |
| CVE-2021-21274 | matrix-org synapse denial of service attack via .well-known lookups | 4.3CNA v3.1 | 2.2% | 2021-02-26 | Fix |
| CVE-2021-21273 | matrix-org synapse open redirects on some federation and push requests | 3.1CNA v3.1 | 1.8% | 2021-02-26 | Fix |
| CVE-2021-3010 | OpenText Content Server web interface stored cross-site scripting | 5.4v3.1 | 0.9% | 2021-02-26 | |
| CVE-2021-0406 | Android cameraisp out-of-bounds write | 6.7v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0405 | Android performance driver out-of-bounds write | 6.7v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0404 | Android mobile_log_d information disclosure | 4.4v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0403 | Android netdiag information disclosure | 4.4v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0402 | Android jpeg out-of-bounds write | 6.7v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0401 | Android vow memory corruption | 6.4v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0367 | Android vpu memory corruption | 6.4v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-0366 | Android vpu memory corruption | 6.4v3.1 | 0.1% | 2021-02-26 | |
| CVE-2021-27671 | Cross-site scripting in comrak | 6.1v3.1 | 0.7% | 2021-02-25 | Fix |
| CVE-2021-27670 | Appspace server-side request forgery | 9.8v3.1 | 61.3% | 2021-02-25 | Reported exploitedNuclei |
| CVE-2021-27330 | Triconsole Datepicker Calendar cross-site scripting | 6.1v3.1 | 6.2% | 2021-02-25 | Nuclei |
| CVE-2021-26701 | Microsoft .NET Core remote code execution | 8.1CNA v3.1 | 30.1% | 2021-02-25 | Fix |
| CVE-2021-26700 | Microsoft Visual Studio Code npm-script extension remote code execution | 7.8CNA v3.1 | 6.0% | 2021-02-25 | Exploit codeFix |
| CVE-2021-25195 | Microsoft Windows PKU2U elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-02-25 | Fix |
| CVE-2021-24114 | Microsoft Teams iOS information disclosure | 5.7CNA v3.1 | 3.2% | 2021-02-25 | Fix |
| CVE-2021-24113 | Microsoft Edge (Chromium-based) security feature bypass | 5.4CNA v3.1 | 1.5% | 2021-02-25 | Fix |
| CVE-2021-24112 | NET Core remote code execution | 8.1CNA v3.1 | 3.5% | 2021-02-25 | Fix |
| CVE-2021-24111 | NET Framework denial of service | 7.5CNA v3.1 | 3.8% | 2021-02-25 | Fix |
| CVE-2021-24109 | Microsoft Azure Kubernetes Service elevation of privilege | 6.8CNA v3.1 | 2.2% | 2021-02-25 | Fix |
| CVE-2021-24106 | Microsoft Windows DirectX information disclosure | 5.5CNA v3.1 | 0.9% | 2021-02-25 | Fix |
| CVE-2021-24105 | Microsoft Package Managers Configurations remote code execution | 8.4CNA v3.1 | 2.4% | 2021-02-25 | Fix |
| CVE-2021-24103 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-02-25 | Fix |
| CVE-2021-24102 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-02-25 | Fix |
| CVE-2021-24101 | Microsoft Dataverse information disclosure | 6.5CNA v3.1 | 3.1% | 2021-02-25 | Fix |
| CVE-2021-24100 | Microsoft Edge for Android information disclosure | 5.0CNA v3.1 | 3.1% | 2021-02-25 | Fix |
| CVE-2021-24099 | Microsoft Skype for Business and Lync denial of service | 6.5CNA v3.1 | 3.2% | 2021-02-25 | Fix |
| CVE-2021-24098 | Microsoft Windows console driver denial of service | 5.5CNA v3.1 | 1.5% | 2021-02-25 | Exploit codeFix |
| CVE-2021-24096 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.5% | 2021-02-25 | Exploit codeFix |
| CVE-2021-24094 | Microsoft Windows TCP/IP remote code execution | 9.8CNA v3.1 | 22.1% | 2021-02-25 | Fix |
| CVE-2021-24093 | Microsoft Windows Graphics component remote code execution | 8.8CNA v3.1 | 46.1% | 2021-02-25 | Fix |
| CVE-2021-24092 | Microsoft Defender elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-02-25 | Fix |
| CVE-2021-24091 | Microsoft Windows Camera Codec Pack remote code execution | 7.8CNA v3.1 | 3.4% | 2021-02-25 | Fix |
| CVE-2021-24088 | Microsoft Windows Local Spooler remote code execution | 8.8CNA v3.1 | 2.4% | 2021-02-25 | Fix |
| CVE-2021-24087 | Microsoft azure-iot-cli-extension azure IoT CLI extension elevation of privilege | 7.0CNA v3.1 | 0.5% | 2021-02-25 | Fix |
| CVE-2021-24086 | Microsoft Windows TCP/IP denial of service | 7.5CNA v3.1 | 59.0% | 2021-02-25 | Exploit codeFix |
| CVE-2021-24085 | Microsoft Exchange Server spoofing | 6.5CNA v3.1 | 4.6% | 2021-02-25 | Exploit codeFix |
| CVE-2021-24084 | Microsoft Windows Mobile Device Management information disclosure | 5.5CNA v3.1 | 2.8% | 2021-02-25 | Exploit codeFix |
| CVE-2021-24083 | Microsoft Windows Address Book remote code execution | 7.8CNA v3.1 | 2.9% | 2021-02-25 | Fix |
| CVE-2021-24082 | Microsoft Windows Microsoft.PowerShell.Utility Module WDAC security feature bypass | 4.3CNA v3.1 | 2.6% | 2021-02-25 | Fix |
| CVE-2021-24081 | Microsoft Windows Codecs library remote code execution | 7.8CNA v3.1 | 2.5% | 2021-02-25 | Fix |
| CVE-2021-24080 | Microsoft Windows Trust Verification API denial of service | 6.5CNA v3.1 | 3.1% | 2021-02-25 | Fix |
| CVE-2021-24079 | Microsoft Windows Backup Engine information disclosure | 5.5CNA v3.1 | 0.9% | 2021-02-25 | Fix |
| CVE-2021-24078 | Microsoft Windows DNS server remote code execution | 9.8CNA v3.1 | 11.9% | 2021-02-25 | Fix |
| CVE-2021-24077 | Microsoft Windows Fax service remote code execution | 9.8CNA v3.1 | 2.9% | 2021-02-25 | Fix |
| CVE-2021-24076 | Microsoft Windows VMSwitch information disclosure | 5.5CNA v3.1 | 0.9% | 2021-02-25 | Fix |
| CVE-2021-24075 | Microsoft Windows VMSwitch denial of service | 6.8CNA v3.1 | 2.5% | 2021-02-25 | Fix |
| CVE-2021-24074 | Microsoft Windows TCP/IP remote code execution | 9.8CNA v3.1 | 26.2% | 2021-02-25 | Fix |
| CVE-2021-24073 | Microsoft Skype for Business and Lync spoofing | 6.5CNA v3.1 | 1.8% | 2021-02-25 | Fix |
| CVE-2021-24072 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 2.4% | 2021-02-25 | Fix |
| CVE-2021-24071 | Microsoft SharePoint information disclosure | 5.3CNA v3.1 | 2.7% | 2021-02-25 | Fix |
| CVE-2021-24070 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.5% | 2021-02-25 | Fix |
| CVE-2021-24069 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.5% | 2021-02-25 | Fix |
| CVE-2021-24068 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.5% | 2021-02-25 | Fix |
| CVE-2021-24067 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.5% | 2021-02-25 | Fix |
| CVE-2021-24066 | Microsoft SharePoint remote code execution | 8.8CNA v3.1 | 6.3% | 2021-02-25 | Fix |
| CVE-2021-21066 | Adobe Bridge Font Parsing out-of-bounds write arbitrary code execution | 7.8CNA v3.0 | 3.7% | 2021-02-25 | Fix |
| CVE-2021-21065 | Adobe Bridge Font Parsing out-of-bounds write arbitrary code execution | 7.8CNA v3.0 | 3.7% | 2021-02-25 | Fix |
| CVE-2021-21064 | Adobe Magento UPWARD-php path traversal vulnerability via UPWARD Connector | 4.9CNA v3.0 | 8.5% | 2021-02-25 | Fix |
| CVE-2021-20328 | MongoDB Java Driver client-side field level encryption not verifying KMS host name | 6.4CNA v3.1 | 0.4% | 2021-02-25 | Fix |
| CVE-2021-20327 | MongoDB Node.js client side field level encryption library may not be validating KMS certificate | 6.4CNA v3.1 | 0.2% | 2021-02-25 | Fix |
| CVE-2021-20203 | QEMU vmxnet3 NIC emulator of the integer overflow | 3.2NVD v3.1 | 0.6% | 2021-02-25 | Fix |
| CVE-2021-3406 | keylime improper signature verification | 9.8v3.1 | 0.7% | 2021-02-25 | Fix |
| CVE-2021-3273 | Nagios XI code injection | 7.2v3.1 | 7.2% | 2021-02-25 | Fix |
| CVE-2021-3124 | Newtarget Custom Global Variables form field in robust.systems product stored cross-site scripting | 5.4v3.1 | 0.9% | 2021-02-25 | Fix |
| CVE-2021-1734 | Microsoft Windows Remote Procedure Call information disclosure | 7.5CNA v3.1 | 3.8% | 2021-02-25 | Fix |
| CVE-2021-1733 | Microsoft Sysinternals PsExec elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-02-25 | Fix |
| CVE-2021-1732 | Microsoft Win32k privilege escalation | 7.8CNA v3.1 | 78.4% | 2021-02-25 | KEVExploit codeFix |
| CVE-2021-1731 | Microsoft Windows PFX Encryption security feature bypass | 5.5CNA v3.1 | 0.9% | 2021-02-25 | Fix |
| CVE-2021-1730 | Microsoft Exchange Server spoofing | 5.4CNA v3.1 | 1.8% | 2021-02-25 | Fix |
| CVE-2021-1728 | Microsoft System Center Operations Manager elevation of privilege | 8.8CNA v3.1 | 2.0% | 2021-02-25 | Fix |
| CVE-2021-1727 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-02-25 | Fix |
| CVE-2021-1726 | Microsoft SharePoint server spoofing | 8.0CNA v3.1 | 2.1% | 2021-02-25 | Fix |
| CVE-2021-1724 | Microsoft Dynamics Business Central cross-site scripting | 6.1CNA v3.1 | 1.3% | 2021-02-25 | Fix |
| CVE-2021-1722 | Microsoft Windows Fax service remote code execution | 8.1CNA v3.1 | 2.4% | 2021-02-25 | Fix |
| CVE-2021-1721 | NET Core and Visual Studio denial of service | 6.5CNA v3.1 | 3.3% | 2021-02-25 | Fix |
| CVE-2021-1698 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-02-25 | Fix |
| CVE-2021-1639 | Microsoft Visual Studio Code remote code execution | 7.0CNA v3.1 | 2.1% | 2021-02-25 | Fix |
| CVE-2021-27645 | GNU glibc double free | 2.5NVD v3.1 | 0.4% | 2021-02-24 | Fix |
| CVE-2021-22667 | BB-ESWGP506-2SFP-T hard-coded credentials | 9.8v3.1 | 3.6% | 2021-02-24 | |
| CVE-2021-21974 | VMware ESXi out-of-bounds write | 8.8NVD v3.1 | 45.1% | 2021-02-24 | Emerging ThreatsExploit codeFix |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation server side request forgery (SSRF) | 5.3v3.1 | 87.6% | 2021-02-24 | KEVNucleiExploit codeFix |
| CVE-2021-21972 | VMware vCenter Server remote code execution | 9.8NVD v3.1 | 99.9% | 2021-02-24 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-21622 | Stored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin | 5.4v3.1 | 9.4% | 2021-02-24 | Fix |
| CVE-2021-21621 | Support bundles can include user session IDs in Jenkins Support Core Plugin | 5.3v3.1 | 1.2% | 2021-02-24 | Fix |
| CVE-2021-21620 | Cross-site request forgery in the Jenkins Claim Plugin | 4.3v3.1 | 1.6% | 2021-02-24 | Fix |
| CVE-2021-21619 | XSS vulnerability in Jenkins Claim Plugin | 5.4v3.1 | 9.4% | 2021-02-24 | Fix |
| CVE-2021-21618 | Stored XSS vulnerability in Jenkins Repository Connector Plugin | 5.4v3.1 | 79.5% | 2021-02-24 | Fix |
| CVE-2021-21617 | CSRF vulnerability in Jenkins Configuration Slicing Plugin | 8.8v3.1 | 0.9% | 2021-02-24 | Fix |
| CVE-2021-21616 | Stored XSS vulnerability in Jenkins Active Choices Plugin | 4.6v3.1 | 76.2% | 2021-02-24 | Fix |
| CVE-2021-20662 | Contec SolarView Compact missing authentication | 7.5v3.1 | 2.1% | 2021-02-24 | Fix |
| CVE-2021-20661 | Contec SolarView Compact path traversal | 8.1v3.1 | 2.4% | 2021-02-24 | Fix |
| CVE-2021-20660 | Contec SolarView Compact cross-site scripting | 6.1v3.1 | 47.2% | 2021-02-24 | Fix |
| CVE-2021-20659 | Contec SolarView Compact unrestricted file upload | 8.8v3.1 | 2.1% | 2021-02-24 | Fix |
| CVE-2021-20658 | Contec SolarView Compact OS command injection | 9.8v3.1 | 3.7% | 2021-02-24 | Fix |
| CVE-2021-20657 | Contec SolarView Compact improper access control | 5.4v3.1 | 2.7% | 2021-02-24 | Fix |
| CVE-2021-20656 | Contec SolarView Compact directory listing | 4.3v3.1 | 1.1% | 2021-02-24 | Fix |
| CVE-2021-3355 | Lightcms stored-self cross-site scripting | 5.4v3.1 | 7.3% | 2021-02-24 | Exploit code |
| CVE-2021-1450 | Cisco AnyConnect Secure Mobility Client denial of service | 5.5CNA v3.1 | 0.2% | 2021-02-24 | Fix |
| CVE-2021-1396 | Cisco Application Services Engine unauthorized access | 9.8CNA v3.1 | 1.0% | 2021-02-24 | Fix |
| CVE-2021-1393 | Cisco Application Services Engine unauthorized access | 9.8CNA v3.1 | 2.3% | 2021-02-24 | Fix |
| CVE-2021-1388 | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment authentication bypass | 10.0CNA v3.1 | 14.8% | 2021-02-24 | Fix |
| CVE-2021-1387 | Cisco NX-OS Software IPv6 Netstack denial of service | 8.6CNA v3.1 | 1.4% | 2021-02-24 | Fix |
| CVE-2021-1368 | Cisco FXOS and NX-OS Software Unidirectional Link Detection out-of-bounds write | 8.8CNA v3.1 | 0.5% | 2021-02-24 | Fix |
| CVE-2021-1367 | Cisco NX-OS Software Protocol Independent Multicast denial of service | 4.3CNA v3.1 | 0.4% | 2021-02-24 | Fix |
| CVE-2021-1361 | Cisco NX-OS Software Unauthenticated arbitrary File Actions vulnerability | 9.8CNA v3.1 | 1.6% | 2021-02-24 | Fix |
| CVE-2021-1231 | Cisco Nexus 9000 Series Fabric Switches Link Layer Discovery Protocol denial of service | 4.7CNA v3.1 | 0.3% | 2021-02-24 | Fix |
| CVE-2021-1230 | Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation denial of service | 8.6CNA v3.1 | 1.5% | 2021-02-24 | Fix |
| CVE-2021-1229 | Cisco NX-OS Software ICMPv6 processing memory leak | 5.8CNA v3.1 | 1.4% | 2021-02-24 | Fix |
| CVE-2021-1228 | Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN unauthorized access | 7.4CNA v3.1 | 0.4% | 2021-02-24 | Fix |
| CVE-2021-1227 | Cisco NX-OS Software NX-API cross-site request forgery | 8.1CNA v3.0 | 0.7% | 2021-02-24 | Fix |
| CVE-2021-27583 | Rangerstudio directus observable discrepancy | 5.3v3.1 | 1.1% | 2021-02-23 | |
| CVE-2021-27582 | Mitreid Connect prototype pollution | 9.1v3.1 | 2.2% | 2021-02-23 | Fix |
| CVE-2021-27579 | Snow Inventory Agent CPUID handling privilege escalation | 7.8v3.1 | 0.5% | 2021-02-23 | Fix |
| CVE-2021-27568 | Improper check for unusual or exceptional conditions in json-smart | 5.9NVD v3.1 | 2.9% | 2021-02-23 | Exploit codeFix |
| CVE-2021-27550 | Polaris Office divide by zero | 5.5v3.1 | 1.7% | 2021-02-23 | |
| CVE-2021-27189 | Cira Canadian Shield improper certificate validation | 5.9v3.1 | 1.0% | 2021-02-23 | Fix |
| CVE-2021-26927 | jasper null pointer dereference | 5.5NVD v3.1 | 1.1% | 2021-02-23 | Fix |
| CVE-2021-26926 | jasper out-of-bounds read | 7.1NVD v3.1 | 1.2% | 2021-02-23 | Fix |
| CVE-2021-26686 | Aruba ClearPass Policy Manager SQL injection | 6.5v3.1 | 1.2% | 2021-02-23 | Fix |
| CVE-2021-26685 | Aruba ClearPass Policy Manager SQL injection | 6.5v3.1 | 1.1% | 2021-02-23 | Fix |
| CVE-2021-26684 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.5% | 2021-02-23 | Fix |
| CVE-2021-26683 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.5% | 2021-02-23 | Fix |
| CVE-2021-26682 | Aruba ClearPass Policy Manager cross-site scripting | 6.1v3.1 | 0.8% | 2021-02-23 | Fix |
| CVE-2021-26681 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.5% | 2021-02-23 | Fix |
| CVE-2021-26680 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.5% | 2021-02-23 | Fix |
| CVE-2021-26679 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.5% | 2021-02-23 | Fix |
| CVE-2021-26678 | Aruba ClearPass Policy Manager cross-site scripting | 6.1v3.1 | 0.9% | 2021-02-23 | Fix |
| CVE-2021-26677 | Aruba ClearPass Policy Manager privilege escalation | 7.8v3.1 | 0.3% | 2021-02-23 | Fix |
| CVE-2021-26595 | Rangerstudio directus cleartext storage of sensitive information | 5.3v3.1 | 0.7% | 2021-02-23 | |
| CVE-2021-26594 | Rangerstudio directus improper privilege management | 8.8v3.1 | 1.2% | 2021-02-23 | |
| CVE-2021-26593 | Rangerstudio directus information disclosure | 7.5v3.1 | 1.4% | 2021-02-23 | |
| CVE-2021-25630 | Collabora Productivity Collabora Online improper privilege management | 7.8v3.1 | 0.3% | 2021-02-23 | Fix |
| CVE-2021-23827 | Keybase cleartext storage of sensitive information | 5.5v3.1 | 0.3% | 2021-02-23 | Fix |
| CVE-2021-22882 | UniFi Protect denial of service | 7.5v3.1 | 1.3% | 2021-02-23 | Fix |
| CVE-2021-22651 | Luxion KeyShot path traversal | 7.8v3.1 | 2.6% | 2021-02-23 | Fix |
| CVE-2021-22649 | Luxion KeyShot untrusted pointer dereference | 7.8v3.1 | 2.2% | 2021-02-23 | Fix |
| CVE-2021-22647 | Luxion KeyShot out-of-bounds write | 7.8v3.1 | 2.1% | 2021-02-23 | Fix |
| CVE-2021-22645 | Luxion KeyShot .bip file loader vulnerability | 7.8v3.1 | 1.5% | 2021-02-23 | Fix |
| CVE-2021-22643 | Luxion KeyShot out-of-bounds read | 7.8v3.1 | 2.1% | 2021-02-23 | Fix |
| CVE-2021-22113 | Incorrect authorization in Spring Cloud Netflix Zuul | 5.3v3.1 | 0.8% | 2021-02-23 | Fix |
| CVE-2021-22112 | Privilege escalation in Spring Security | 8.8v3.1 | 3.2% | 2021-02-23 | Fix |
| CVE-2021-21323 | brave-browser regression in DNS leakage from Tor windows | 4.3CNA v3.1 | 2.3% | 2021-02-23 | Fix |
| CVE-2021-20256 | Red Hat Satellite information disclosure | 5.3v3.1 | 0.3% | 2021-02-23 | Fix |
| CVE-2021-20252 | 3scale/backend denial of service | 6.5v3.1 | 1.0% | 2021-02-23 | |
| CVE-2021-20247 | isync/mbsync improper input validation | 7.4NVD v3.1 | 1.9% | 2021-02-23 | Fix |
| CVE-2021-20230 | stunnel improper certificate validation | 7.5NVD v3.1 | 1.2% | 2021-02-23 | Fix |
| CVE-2021-20229 | PostgreSQL incorrect authorization | 4.3NVD v3.1 | 1.5% | 2021-02-23 | Fix |
| CVE-2021-20226 | Linux kernel io_uring use-after-free | 7.8NVD v3.1 | 0.4% | 2021-02-23 | Fix |
| CVE-2021-20220 | HTTP request smuggling in Undertow | 4.8v3.1 | 1.1% | 2021-02-23 | Fix |
| CVE-2021-20198 | openshift/installer missing authentication | 8.1v3.1 | 1.8% | 2021-02-23 | Fix |
| CVE-2021-20194 | kernel heap-based buffer overflow | 7.8NVD v3.1 | 0.4% | 2021-02-23 | Fix |
| CVE-2021-20182 | Openshift A privilege escalation | 8.8v3.1 | 1.1% | 2021-02-23 | Fix |
| CVE-2021-3410 | libcaca buffer overflow | 7.8NVD v3.1 | 0.6% | 2021-02-23 | Fix |
| CVE-2021-3407 | Artifex MuPDF linearization double free | 5.5NVD v3.1 | 50.2% | 2021-02-23 | Fix |
| CVE-2021-3405 | libebml out-of-bounds write | 6.5NVD v3.1 | 1.7% | 2021-02-23 | Fix |
| CVE-2021-3252 | Kaco-newenergy XP100U insufficiently protected credentials | 7.5v3.1 | 2.6% | 2021-02-23 | |
| CVE-2021-27564 | Appspace stored cross-site scripting | 5.4v3.1 | 0.5% | 2021-02-22 | |
| CVE-2021-27559 | Monicahq Monica cross-site scripting | 5.4v3.1 | 0.6% | 2021-02-22 | |
| CVE-2021-27549 | Genymobile Genymotion Desktop cleartext storage of sensitive information | 5.3v3.1 | 1.1% | 2021-02-22 | Fix |
| CVE-2021-27516 | uri-js URIjs Hostname spoofing via backslashes in URL | 7.5v3.1 | 2.5% | 2021-02-22 | Fix |
| CVE-2021-27515 | Path traversal in url-parse | 5.3v3.1 | 2.0% | 2021-02-22 | Fix |
| CVE-2021-27514 | EyesOfNetwork missing brute-force protection | 9.8v3.1 | 3.5% | 2021-02-22 | |
| CVE-2021-27513 | EyesOfNetwork unrestricted file upload | 8.8v3.1 | 28.4% | 2021-02-22 | Emerging ThreatsExploit code |
| CVE-2021-27371 | Monicahq Monica cross-site scripting | 5.4v3.1 | 0.6% | 2021-02-22 | |
| CVE-2021-27370 | Monicahq Monica cross-site scripting | 5.4v3.1 | 3.3% | 2021-02-22 | Exploit code |
| CVE-2021-27369 | Monicahq Monica cross-site scripting | 5.4v3.1 | 0.6% | 2021-02-22 | |
| CVE-2021-27368 | Monicahq Monica cross-site scripting | 5.4v3.1 | 0.6% | 2021-02-22 | |
| CVE-2021-27279 | mybb cross-site scripting | 5.4v3.1 | 1.0% | 2021-02-22 | Fix |
| CVE-2021-27228 | Shinobi Pro hard-coded credentials | 9.8v3.1 | 1.6% | 2021-02-22 | Fix |
| CVE-2021-26725 | Authenticated command path traversal on timezone settings in Guardian/CMC | 8.6CNA v4.0 | 1.1% | 2021-02-22 | Fix |
| CVE-2021-26724 | Authenticated command injection when changing date settings or hostname in Guardian/CMC | 8.6CNA v4.0 | 2.8% | 2021-02-22 | Fix |
| CVE-2021-26120 | PHP code injection by malicious function name in Smarty | 9.8v3.1 | 82.3% | 2021-02-22 | Fix |
| CVE-2021-26119 | Sandbox escape through template_object in Smarty | 7.5v3.1 | 9.4% | 2021-02-22 | Fix |
| CVE-2021-26068 | Atlassian Jira Server for Slack server-side template injection | 8.8v3.1 | 2.7% | 2021-02-22 | Fix |
| CVE-2021-24115 | Botan encoding and decoding functions vulnerability | 9.8v3.1 | 2.0% | 2021-02-22 | Fix |
| CVE-2021-21157 | Google Chrome Web Sockets use-after-free | 8.8v3.1 | 9.5% | 2021-02-22 | Fix |
| CVE-2021-21156 | Google Chrome V8 heap-based buffer overflow | 8.8v3.1 | 2.7% | 2021-02-22 | Fix |
| CVE-2021-21155 | Google Chrome Tab Strip heap-based buffer overflow | 9.6v3.1 | 1.3% | 2021-02-22 | Fix |
| CVE-2021-21154 | Google Chrome Tab Strip heap-based buffer overflow | 9.6v3.1 | 1.4% | 2021-02-22 | Fix |
| CVE-2021-21153 | Google Chrome GPU Process stack-based buffer overflow | 8.8v3.1 | 1.3% | 2021-02-22 | Fix |
| CVE-2021-21152 | Google Chrome Media heap-based buffer overflow | 8.8v3.1 | 1.3% | 2021-02-22 | Fix |
| CVE-2021-21151 | Google Chrome Payments use-after-free | 9.6v3.1 | 1.1% | 2021-02-22 | Fix |
| CVE-2021-21150 | Google Chrome Downloads use-after-free | 9.6v3.1 | 1.2% | 2021-02-22 | Fix |
| CVE-2021-21149 | Google Chrome Data Transfer stack-based buffer overflow | 8.8v3.1 | 1.5% | 2021-02-22 | Fix |
| CVE-2021-3149 | Netshieldcorp Nano 25 OS command injection | 7.2v3.1 | 4.4% | 2021-02-22 | Fix |
| CVE-2021-3120 | YITHEMES YITH WooCommerce Gift Cards An arbitrary file upload | 9.8v3.1 | 36.8% | 2021-02-22 | Fix |
| CVE-2021-26716 | Openenergymonitor Emoncms cross-site scripting | 6.1v3.1 | 0.8% | 2021-02-21 | |
| CVE-2021-26544 | Apache Livy (Incubating) is vulnerable to cross-site scripting | 5.4v3.1 | 2.8% | 2021-02-20 | Fix |
| CVE-2021-27509 | Visualware MyConnection Server incorrect authorization | 7.5v3.1 | 1.0% | 2021-02-19 | Fix |
| CVE-2021-27405 | Regular expression denial of service in @progfay/Scrapbox-parser | 7.5v3.1 | 1.8% | 2021-02-19 | Fix |
| CVE-2021-27404 | ASUS Askey RTF8115VW open redirect | 6.1NVD v3.1 | 0.9% | 2021-02-19 | |
| CVE-2021-27403 | ASUS Askey RTF8115VW cross-site scripting | 6.1v3.1 | 1.2% | 2021-02-19 | Exploit code |
| CVE-2021-27351 | Telegram insufficient session expiration | 5.3v3.1 | 0.8% | 2021-02-19 | Fix |
| CVE-2021-27328 | Yeastar Neogate TG400 path traversal | 6.5v3.1 | 6.4% | 2021-02-19 | Exploit code |
| CVE-2021-27214 | Zoho ManageEngine ADSelfService Plus ProductConfig servlet server-side request forgery | 6.1v3.1 | 2.0% | 2021-02-19 | Fix |
| CVE-2021-26746 | Chamilo cross-site scripting | 6.1v3.1 | 0.9% | 2021-02-19 | Fix |
| CVE-2021-26713 | Digium Certified Asterisk res_rtp_ stack-based buffer overflow | 6.5v3.1 | 1.8% | 2021-02-19 | Fix |
| CVE-2021-26296 | Cross-site request forgery (CSRF) vulnerability in Apache MyFaces | 7.5v3.1 | 3.0% | 2021-02-19 | Fix |
| CVE-2021-23342 | docsify cross-site scripting (XSS) | 6.1NVD v3.1 | 1.7% | 2021-02-19 | Fix |
| CVE-2021-22703 | PowerLogic ION7400 cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2021-02-19 | Fix |
| CVE-2021-22702 | PowerLogic ION7400 cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2021-02-19 | Fix |
| CVE-2021-22701 | PowerLogic ION7400 cross-site request forgery | 4.5v3.1 | 0.3% | 2021-02-19 | Fix |
| CVE-2021-21512 | Dell Cyber Recovery information disclosure | 7.9CNA v3.1 | 0.3% | 2021-02-19 | Fix |
| CVE-2021-20588 | Mitsubishi Electric CPU Module Logging Configuration Tool improper length parameter handling | 7.5CNA v3.1 | 6.9% | 2021-02-19 | Fix |
| CVE-2021-20587 | Mitsubishi Electric CPU Module Logging Configuration Tool heap-based buffer overflow | 7.5CNA v3.1 | 3.9% | 2021-02-19 | Fix |
| CVE-2021-3339 | Microsoft Modernflow improper authentication | 4.3v3.1 | 2.0% | 2021-02-19 | |
| CVE-2021-3210 | BloodHound cross-site scripting | 9.6v3.1 | 2.7% | 2021-02-19 | |
| CVE-2021-3204 | Webware Webdesktop document conversion component server-side request forgery | 6.5v3.1 | 0.9% | 2021-02-19 | |
| CVE-2021-3189 | Google open redirect in Slashify | 6.1v3.1 | 0.5% | 2021-02-19 | Fix |
| CVE-2021-27379 | Xen denial of service | 7.8v3.1 | 0.4% | 2021-02-18 | Fix |
| CVE-2021-27378 | Rand Core incorrect check on buffer length in rand_core | 9.8v3.1 | 1.2% | 2021-02-18 | Fix |
| CVE-2021-27377 | Yottadb use-after-free | 9.8v3.1 | 1.3% | 2021-02-18 | Fix |
| CVE-2021-27376 | Nb-connect invalidly assumes the memory layout of std::net::SocketAddr | 9.8v3.1 | 1.4% | 2021-02-18 | Fix |
| CVE-2021-27375 | containous traefik clickjacking | 5.3v3.1 | 0.8% | 2021-02-18 | Fix |
| CVE-2021-27335 | Kollectapp Kollect deserialization of untrusted data | 9.8v3.1 | 3.0% | 2021-02-18 | |
| CVE-2021-27329 | Frendica server-side request forgery | 10.0v3.1 | 1.5% | 2021-02-18 | |
| CVE-2021-27124 | Doctor Appointment System expertise parameter in search_result.php SQL injection | 6.5v3.1 | 5.7% | 2021-02-18 | Nuclei |
| CVE-2021-26906 | Digium Certified Asterisk improper resource release | 5.9v3.1 | 2.5% | 2021-02-18 | Fix |
| CVE-2021-26747 | Netis Systems WF2411 OS command injection | 9.8v3.1 | 54.8% | 2021-02-18 | |
| CVE-2021-26717 | Digium Certified Asterisk crash | 7.5v3.1 | 2.2% | 2021-02-18 | Fix |
| CVE-2021-26712 | Asterisk SRTP module improper access control | 7.5v3.1 | 3.6% | 2021-02-18 | Fix |
| CVE-2021-23341 | prismjs regular expression denial of service (ReDoS) | 7.5v3.1 | 3.2% | 2021-02-18 | Fix |
| CVE-2021-23340 | pimcore/pimcore local file inclusion | 7.1v3.1 | 1.3% | 2021-02-18 | Fix |
| CVE-2021-21318 | opencast removing access may not effect published series | 5.4CNA v3.1 | 0.7% | 2021-02-18 | Fix |
| CVE-2021-20446 | IBM Maximo for Civil Infrastructure cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-02-18 | Fix |
| CVE-2021-20445 | IBM Maximo for Civil Infrastructure insufficiently protected credentials | 6.5CNA v3.0 | 1.3% | 2021-02-18 | Fix |
| CVE-2021-20444 | IBM Maximo for Civil Infrastructure cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-02-18 | Fix |
| CVE-2021-20443 | IBM Maximo for Civil Infrastructure inclusion of untrusted functionality | 6.3CNA v3.0 | 0.9% | 2021-02-18 | Fix |
| CVE-2021-20354 | IBM WebSphere Application Server path traversal | 5.9CNA v3.0 | 4.1% | 2021-02-18 | Fix |
| CVE-2021-3271 | Stored cross-site scripting in PressBooks | 4.8v3.1 | 0.9% | 2021-02-18 | Fix |
| CVE-2021-27374 | VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation." | 7.5v3.1 | 1.1% | 2021-02-17 | Fix |
| CVE-2021-27367 | Path traversal in Bolt/core | 7.5v3.1 | 1.7% | 2021-02-17 | Fix |
| CVE-2021-27362 | IrfanView out-of-bounds read | 9.8v3.1 | 4.5% | 2021-02-17 | Fix |
| CVE-2021-27224 | IrfanView out-of-bounds write | 7.5v3.1 | 38.0% | 2021-02-17 | Fix |
| CVE-2021-27138 | The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT. | 7.8v3.1 | 1.1% | 2021-02-17 | Fix |
| CVE-2021-27097 | The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. | 7.8v3.1 | 1.1% | 2021-02-17 | Fix |
| CVE-2021-26934 | Linux kernel Xen DRM front driver vulnerability | 7.8v3.1 | 0.3% | 2021-02-17 | Fix |
| CVE-2021-26933 | Xen Arm page scrubbing vulnerability | 5.5v3.1 | 0.3% | 2021-02-17 | Fix |
| CVE-2021-26932 | Linux kernel Xen PV backend drivers improper error handling | 5.5v3.1 | 0.3% | 2021-02-17 | Fix |
| CVE-2021-26931 | Linux kernel resource exhaustion | 5.5v3.1 | 0.5% | 2021-02-17 | Fix |
| CVE-2021-26930 | Linux kernel Xen block backend driver vulnerability | 7.8v3.1 | 0.3% | 2021-02-17 | Fix |
| CVE-2021-26911 | Canary Mail improper certificate validation | 7.4v3.1 | 1.1% | 2021-02-17 | |
| CVE-2021-26809 | PHPGurukul Car Rental Portal unrestricted file upload | 9.8v3.1 | 2.1% | 2021-02-17 | |
| CVE-2021-26720 | avahi link following | 7.8v3.1 | 0.4% | 2021-02-17 | Fix |
| CVE-2021-26697 | Apache Airflow: Lineage API endpoint for Experimental API missed authentication check | 5.3v3.1 | 4.6% | 2021-02-17 | Fix |
| CVE-2021-26559 | Apache Airflow improper access control on Configurations endpoint for the Stable API | 6.5v3.1 | 2.8% | 2021-02-17 | Fix |
| CVE-2021-25780 | Janobe Baby Care System unrestricted file upload | 7.2v3.1 | 2.5% | 2021-02-17 | |
| CVE-2021-25779 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.1% | 2021-02-17 | |
| CVE-2021-23885 | Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI | 9.0CNA v3.1 | 1.1% | 2021-02-17 | Fix |
| CVE-2021-23339 | com.typesafe.akka:akka-http-core HTTP request smuggling | 6.5v3.1 | 0.7% | 2021-02-17 | Fix |
| CVE-2021-22858 | ChanGate EnterPrise Co., Ltd property management system broken authentication | 8.8v3.1 | 1.2% | 2021-02-17 | Fix |
| CVE-2021-22857 | ChanGate EnterPrise Co., Ltd property management system directory traversal | 7.5v3.1 | 1.8% | 2021-02-17 | Fix |
| CVE-2021-22856 | ChanGate EnterPrise Co., Ltd property management system SQL injection | 7.5NVD v3.1 | 1.5% | 2021-02-17 | Fix |
| CVE-2021-22855 | Soar Cloud System Co., Ltd. HR Portal arbitrary code execution | 9.8v3.1 | 2.0% | 2021-02-17 | Fix |
| CVE-2021-22854 | Soar Cloud System Co., Ltd. HR Portal SQL injection | 7.5v3.1 | 1.5% | 2021-02-17 | Fix |
| CVE-2021-22853 | Soar Cloud System Co., Ltd. HR Portal broken access control | 5.4v3.1 | 1.0% | 2021-02-17 | Fix |
| CVE-2021-22553 | Google heap memory exhaustion in Gerrit | 6.5CNA v3.1 | 0.4% | 2021-02-17 | Fix |
| CVE-2021-22174 | The Wireshark Foundation Wireshark USB HID dissector crash | 3.7CNA v3.1 | 2.7% | 2021-02-17 | Fix |
| CVE-2021-22173 | The Wireshark Foundation Wireshark USB HID dissector memory leak | 3.7CNA v3.1 | 2.4% | 2021-02-17 | Fix |
| CVE-2021-20655 | Soliton Systems FileZen OS command injection | 7.2v3.1 | 3.5% | 2021-02-17 | Fix |
| CVE-2021-20653 | NEC Platforms Calsos CSDJ incorrect default permissions | 5.3v3.1 | 1.2% | 2021-02-17 | Fix |
| CVE-2021-3396 | OpenNMS Horizon RCE via JEXL2 expression | 8.8v3.1 | 2.4% | 2021-02-17 | Fix |
| CVE-2021-1416 | Cisco Identity Services Engine sensitive information disclosure | 6.5CNA v3.1 | 0.9% | 2021-02-17 | Fix |
| CVE-2021-1412 | Cisco Identity Services Engine sensitive information disclosure | 6.5CNA v3.1 | 1.0% | 2021-02-17 | Fix |
| CVE-2021-1378 | Cisco StarOS denial of service | 5.3CNA v3.1 | 1.5% | 2021-02-17 | Fix |
| CVE-2021-1372 | Cisco Webex Meetings Desktop App and Webex Productivity Tools shared memory information disclosure | 5.5CNA v3.1 | 0.4% | 2021-02-17 | Fix |
| CVE-2021-1366 | Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL hijacking | 7.8CNA v3.1 | 1.3% | 2021-02-17 | Fix |
| CVE-2021-1351 | Cisco Webex Meetings cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-02-17 | Fix |
| CVE-2021-0109 | Intel(R) SOC driver package for STK1A32SC incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-02-17 | Fix |
| CVE-2021-27237 | Blackcat CMS cross-site scripting | 4.8v3.1 | 1.0% | 2021-02-16 | |
| CVE-2021-27236 | Mutare Voice local file inclusion | 9.8v3.1 | 2.1% | 2021-02-16 | Fix |
| CVE-2021-27235 | An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database. | 4.9v3.1 | 0.8% | 2021-02-16 | Fix |
| CVE-2021-27234 | Mutare Voice SQL injection | 9.8v3.1 | 1.0% | 2021-02-16 | Fix |
| CVE-2021-27233 | Mutare Voice cleartext storage of sensitive information | 4.9v3.1 | 0.5% | 2021-02-16 | Fix |
| CVE-2021-27232 | Pelco Digital Sentry Server out-of-bounds write | 8.8v3.1 | 1.7% | 2021-02-16 | Fix |
| CVE-2021-27231 | hestiacp Control Panel spoofing | 5.4v3.1 | 1.4% | 2021-02-16 | |
| CVE-2021-27229 | Mumble link following | 8.8v3.1 | 3.2% | 2021-02-16 | Fix |
| CVE-2021-27203 | Dekart Private Disk null pointer dereference | 5.5v3.1 | 0.4% | 2021-02-16 | Fix |
| CVE-2021-27104 | Accellion FTA OS command injection | 9.8v3.1 | 56.7% | 2021-02-16 | KEVFix |
| CVE-2021-27103 | Accellion FTA server-side request forgery (SSRF) | 9.8v3.1 | 11.4% | 2021-02-16 | KEVFix |
| CVE-2021-27102 | Accellion FTA OS command injection | 7.8v3.1 | 3.7% | 2021-02-16 | KEVFix |
| CVE-2021-27101 | Accellion FTA SQL injection | 9.8v3.1 | 6.0% | 2021-02-16 | KEVExploit codeFix |
| CVE-2021-25648 | Testes-codigo Testes De Codigo tampering | 9.8v3.1 | 1.2% | 2021-02-16 | |
| CVE-2021-23841 | OpenSSL null pointer deref in X509_issuer_and_serial_hash | 5.9v3.1 | 7.5% | 2021-02-16 | Exploit codeFix |
| CVE-2021-23840 | OpenSSL integer overflow in CipherUpdate | 7.5v3.1 | 50.7% | 2021-02-16 | Exploit codeFix |
| CVE-2021-23839 | OpenSSL incorrect SSLv2 rollback protection | 3.7v3.1 | 3.0% | 2021-02-16 | Fix |
| CVE-2021-21317 | Denial of service in uap-core | 5.3CNA v3.1 | 2.5% | 2021-02-16 | Fix |
| CVE-2021-21316 | Arbitrary code execution in less-openui5 | 6.3CNA v3.1 | 1.0% | 2021-02-16 | Fix |
| CVE-2021-21315 | System Information Library for Node.JS command injection | 7.1CNA v3.1 | 90.7% | 2021-02-16 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-20987 | Hilscher: EtherNet/IP stack crash for specific CIP service | 8.6v3.1 | 1.1% | 2021-02-16 | Fix |
| CVE-2021-20986 | Hilscher: Denial of service vulnerability in PROFINET IO Device | 7.5v3.1 | 1.0% | 2021-02-16 | Fix |
| CVE-2021-20075 | Racom MIDGE Firmware improper privilege management | 7.8NVD v3.1 | 0.2% | 2021-02-16 | |
| CVE-2021-20074 | Racom MIDGE Firmware OS command injection | 8.8NVD v3.1 | 1.3% | 2021-02-16 | |
| CVE-2021-20073 | Racom MIDGE Firmware cross-site request forgery | 8.8NVD v3.1 | 0.5% | 2021-02-16 | |
| CVE-2021-20072 | Racom MIDGE Firmware path traversal | 7.2NVD v3.1 | 1.5% | 2021-02-16 | |
| CVE-2021-20071 | Racom MIDGE Firmware cross-site scripting | 4.8NVD v3.1 | 0.5% | 2021-02-16 | |
| CVE-2021-20070 | Racom MIDGE Firmware cross-site scripting | 4.8NVD v3.1 | 0.5% | 2021-02-16 | |
| CVE-2021-20069 | Racom MIDGE Firmware cross-site scripting | 4.8NVD v3.1 | 0.5% | 2021-02-16 | |
| CVE-2021-20068 | Racom MIDGE Firmware cross-site scripting | 4.8NVD v3.1 | 0.5% | 2021-02-16 | |
| CVE-2021-20067 | Racom MIDGE Firmware missing authentication | 5.3NVD v3.1 | 0.9% | 2021-02-16 | |
| CVE-2021-20066 | JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled. | 5.6NVD v3.1 | 1.4% | 2021-02-16 | Fix |
| CVE-2021-27219 | GNOME GLib incorrect numeric conversion | 7.5NVD v3.1 | 3.1% | 2021-02-15 | Fix |
| CVE-2021-27218 | GNOME GLib incorrect numeric conversion | 7.5NVD v3.1 | 4.1% | 2021-02-15 | Fix |
| CVE-2021-27211 | Steghide improper seeding | 7.5v3.1 | 3.3% | 2021-02-15 | Exploit codeFix |
| CVE-2021-27201 | Endian Firewall Community OS command injection | 8.8v3.1 | 2.6% | 2021-02-15 | Fix |
| CVE-2021-26822 | PHPGurukul Teachers Record Management System SQL injection | 9.8v3.1 | 4.8% | 2021-02-15 | |
| CVE-2021-26201 | Casap Automated Enrollment System SQL injection | 9.8v3.1 | 2.2% | 2021-02-15 | |
| CVE-2021-26200 | Library System SQL injection | 9.8v3.1 | 2.2% | 2021-02-15 | |
| CVE-2021-25299 | Nagios XI cross-site scripting | 6.1v3.1 | 97.7% | 2021-02-15 | NucleiEmerging Threats |
| CVE-2021-25298 | Nagios XI OS command injection | 8.8v3.1 | 73.6% | 2021-02-15 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-25297 | Nagios XI OS command injection | 8.8v3.1 | 56.7% | 2021-02-15 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-25296 | Nagios XI OS command injection | 8.8v3.1 | 72.2% | 2021-02-15 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-23338 | qlib deserialization of untrusted data | 7.2v3.1 | 3.6% | 2021-02-15 | Fix |
| CVE-2021-23337 | Lodash command injection | 7.2NVD v3.1 | 21.3% | 2021-02-15 | NucleiFix |
| CVE-2021-23336 | python/cpython web cache poisoning | 5.9NVD v3.1 | 40.7% | 2021-02-15 | Fix |
| CVE-2021-21702 | PHP null dereference in SoapClient | 5.3CNA v3.1 | 3.2% | 2021-02-15 | Fix |
| CVE-2021-21511 | Dell Avamar improper authorization | 8.1CNA v3.1 | 1.0% | 2021-02-15 | Fix |
| CVE-2021-3375 | Atomisystems Activepresenter out-of-bounds write | 9.8v3.1 | 3.5% | 2021-02-15 | |
| CVE-2021-3239 | eLearning System SQL injection | 9.8v3.1 | 17.9% | 2021-02-15 | Nuclei |
| CVE-2021-27213 | Pystemon deserialization of untrusted data | 9.8v3.1 | 2.6% | 2021-02-14 | |
| CVE-2021-27212 | openldap reachable assertion | 7.5NVD v3.1 | 66.1% | 2021-02-14 | Fix |
| CVE-2021-26929 | Horde Groupware cross-site scripting | 6.1v3.1 | 4.9% | 2021-02-14 | Exploit codeFix |
| CVE-2021-27210 | TP-Link Archer C5V cleartext storage of sensitive information | 6.5v3.1 | 0.8% | 2021-02-13 | |
| CVE-2021-27209 | TP-Link Archer C5V cleartext transmission of sensitive information | 7.1v3.1 | 0.2% | 2021-02-13 | |
| CVE-2021-27205 | Telegram cleartext storage of sensitive information | 5.5v3.1 | 0.3% | 2021-02-12 | |
| CVE-2021-27204 | Telegram cleartext storage of sensitive information | 5.5v3.1 | 0.3% | 2021-02-12 | |
| CVE-2021-27197 | Pelco Digital Sentry Server origin validation error | 8.1v3.1 | 0.8% | 2021-02-12 | Fix |
| CVE-2021-27190 | PEEL Shopping cross-site scripting | 5.4v3.1 | 1.6% | 2021-02-12 | Exploit codeFix |
| CVE-2021-27188 | Xn--b1agzlht Fx Aggregator Terminal Client missing brute-force protection | 7.5v3.1 | 1.8% | 2021-02-12 | Exploit code |
| CVE-2021-27187 | Xn--b1agzlht Fx Aggregator Terminal Client insufficiently protected credentials | 7.5v3.1 | 2.0% | 2021-02-12 | Exploit code |
| CVE-2021-26753 | Nedi incorrect authorization | 9.9v3.1 | 1.2% | 2021-02-12 | |
| CVE-2021-26752 | Nedi OS command injection | 8.8v3.1 | 1.5% | 2021-02-12 | |
| CVE-2021-26751 | NeDi Monitoring History function SQL injection | 8.8v3.1 | 1.2% | 2021-02-12 | |
| CVE-2021-22985 | BIG-IP APM denial of service | 7.5v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-22984 | BIG-IP Advanced WAF and BIG-IP ASM open redirect | 6.1v3.1 | 0.6% | 2021-02-12 | Fix |
| CVE-2021-22983 | BIG-IP AFM cross-site scripting | 5.4v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-22982 | BIG-IP DNS and GTM buffer overflow | 7.2v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-22981 | BIG-IP man-in-the-middle | 4.8v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-22980 | Edge Client untrusted search path | 7.8v3.1 | 0.3% | 2021-02-12 | Fix |
| CVE-2021-22979 | BIG-IP cross-site scripting | 6.1v3.1 | 0.6% | 2021-02-12 | Fix |
| CVE-2021-22978 | BIG-IP cross-site scripting | 8.3v3.1 | 0.8% | 2021-02-12 | Fix |
| CVE-2021-22977 | On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated. | 7.5v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-22976 | BIG-IP Advanced WAF and ASM bd process vulnerability | 7.5v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-22975 | F5 BIG-IP Traffic Management Microkernel vulnerability | 7.5v3.1 | 0.9% | 2021-02-12 | Fix |
| CVE-2021-22974 | BIG-IP, BIG-IQ race condition | 7.5v3.1 | 0.8% | 2021-02-12 | Fix |
| CVE-2021-22973 | BIG-IP out-of-bounds write | 7.5v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-22504 | Operations Bridge Manager arbitrary code execution | 9.8v3.1 | 3.3% | 2021-02-12 | |
| CVE-2021-20651 | ELECOM File Manager path traversal | 9.1v3.1 | 1.9% | 2021-02-12 | Fix |
| CVE-2021-20650 | ELECOM NCC-EWF100RMWH2 cross-site request forgery | 6.5v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-20649 | ELECOM WRC-300FEBK-S improper certificate validation | 4.8v3.1 | 0.3% | 2021-02-12 | Fix |
| CVE-2021-20648 | ELECOM WRC-300FEBK-S OS command injection | 6.8v3.1 | 0.4% | 2021-02-12 | Fix |
| CVE-2021-20647 | ELECOM WRC-300FEBK-S cross-site request forgery | 6.5v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-20646 | ELECOM WRC-300FEBK-A cross-site request forgery | 6.5v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-20645 | ELECOM WRC-300FEBK-A cross-site scripting | 5.4v3.1 | 0.7% | 2021-02-12 | Fix |
| CVE-2021-20644 | ELECOM WRC-1467GHBK-A injection | 6.1v3.1 | 0.6% | 2021-02-12 | Fix |
| CVE-2021-20643 | ELECOM LD-PS/U1 improper access control | 7.5v3.1 | 1.1% | 2021-02-12 | Fix |
| CVE-2021-20642 | LOGITEC LAN-W300N/RS improper exception handling | 6.5v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-20641 | LOGITEC LAN-W300N/RS cross-site request forgery | 6.5v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-20640 | LOGITEC LAN-W300N/PGRB buffer overflow | 6.8v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-20639 | LOGITEC LAN-W300N/PGRB OS command injection | 6.8v3.1 | 0.4% | 2021-02-12 | Fix |
| CVE-2021-20638 | LOGITEC LAN-W300N/PGRB OS command injection | 6.8v3.1 | 0.4% | 2021-02-12 | Fix |
| CVE-2021-20637 | LOGITEC LAN-W300N/PR5B improper exception handling | 6.5v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-20636 | LOGITEC LAN-W300N/PR5B cross-site request forgery | 6.5v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-20635 | LOGITEC LAN-WH450N/GR missing brute-force protection | 6.5v3.1 | 0.4% | 2021-02-12 | Fix |
| CVE-2021-20412 | IBM Security Verify Information Queue hard-coded credentials | 5.9CNA v3.0 | 0.9% | 2021-02-12 | Fix |
| CVE-2021-20411 | IBM Security Verify Information Queue incorrect resource transfer | 7.5CNA v3.0 | 0.4% | 2021-02-12 | Fix |
| CVE-2021-20410 | IBM Security Verify Information Queue insufficiently protected credentials | 5.3CNA v3.0 | 0.7% | 2021-02-12 | Fix |
| CVE-2021-20409 | IBM Security Verify Information Queue information disclosure | 5.9CNA v3.1 | 1.0% | 2021-02-12 | Fix |
| CVE-2021-20408 | IBM Security Verify Information Queue cleartext storage of sensitive information | 7.1CNA v3.0 | 0.2% | 2021-02-12 | Fix |
| CVE-2021-20407 | IBM Security Verify Information Queue information disclosure | 5.3CNA v3.1 | 0.7% | 2021-02-12 | Fix |
| CVE-2021-20406 | IBM Security Verify Information Queue information disclosure | 2.2CNA v3.1 | 0.5% | 2021-02-12 | Fix |
| CVE-2021-27191 | Denial of service in Get-ip-range | 7.5v3.1 | 2.0% | 2021-02-11 | Fix |
| CVE-2021-27184 | Pelco Digital Sentry Server XML external entity injection | 7.5v3.1 | 1.6% | 2021-02-11 | Fix |
| CVE-2021-25690 | PCoIP Soft Client Teradici null pointer dereference | 7.5v3.1 | 1.0% | 2021-02-11 | Fix |
| CVE-2021-25689 | PCoIP Soft Client Teradici out-of-bounds write | 9.8v3.1 | 1.5% | 2021-02-11 | Fix |
| CVE-2021-25688 | PCoIP Standard Agent sensitive information in log files | 5.5v3.1 | 0.2% | 2021-02-11 | Fix |
| CVE-2021-23335 | is-user-valid LDAP injection | 7.5v3.1 | 1.4% | 2021-02-11 | |
| CVE-2021-22881 | https://github.com/rails/rails actionpack open redirect | 6.1v3.1 | 87.3% | 2021-02-11 | NucleiFix |
| CVE-2021-22880 | https://github.com/rails/rails active Record subject to Regular Expression denial of service (ReDoS) | 7.5v3.1 | 4.4% | 2021-02-11 | Exploit codeFix |
| CVE-2021-22658 | Advantech iView SQL injection | 9.8v3.1 | 12.7% | 2021-02-11 | Fix |
| CVE-2021-22656 | Advantech iView path traversal | 7.5v3.1 | 3.1% | 2021-02-11 | Fix |
| CVE-2021-22654 | Advantech iView SQL injection | 7.5v3.1 | 11.8% | 2021-02-11 | Fix |
| CVE-2021-22652 | Advantech iView missing authentication | 9.8v3.1 | 36.8% | 2021-02-11 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-21976 | vSphere Replication OS command injection | 7.2v3.1 | 2.1% | 2021-02-11 | Fix |
| CVE-2021-21311 | Adminer server-side request forgery | 7.2CNA v3.1 | 98.5% | 2021-02-11 | KEVNucleiExploit codeFix |
| CVE-2021-21310 | Token verification bug in next-auth | 6.1CNA v3.1 | 1.7% | 2021-02-11 | Fix |
| CVE-2021-21307 | Remote Code Exploit in Lucee Admin | 8.6CNA v3.1 | 89.2% | 2021-02-11 | NucleiMetasploitExploit codeFix |
| CVE-2021-21301 | wireapp wire-ios video feed was captured while user has disabled video | 2.6CNA v3.1 | 1.0% | 2021-02-11 | Fix |
| CVE-2021-21299 | hyperium hyper multiple Transfer-Encoding headers misinterprets request payload | 4.8CNA v3.1 | 4.7% | 2021-02-11 | Fix |
| CVE-2021-21063 | Adobe Acrobat Reader DC buffer overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 2.6% | 2021-02-11 | Fix |
| CVE-2021-21062 | Adobe Acrobat Reader DC buffer overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 2.6% | 2021-02-11 | Fix |
| CVE-2021-21061 | Adobe Acrobat Pro DC use-after-free vulnerability could lead to information disclosure | 3.3CNA v3.0 | 2.1% | 2021-02-11 | Fix |
| CVE-2021-21060 | Adobe Acrobat Pro DC Improper File Parsing could lead to information disclosure | 4.6CNA v3.1 | 1.6% | 2021-02-11 | Fix |
| CVE-2021-21059 | Adobe Acrobat Reader DC buffer overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 2.6% | 2021-02-11 | Fix |
| CVE-2021-21058 | Adobe Acrobat Reader DC memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 2.6% | 2021-02-11 | Fix |
| CVE-2021-21057 | Adobe Acrobat Reader DC Invalid Memory Read due to an uninitialized pointer | 6.6CNA v3.1 | 1.1% | 2021-02-11 | Fix |
| CVE-2021-21055 | Adobe Dreamweaver untrusted search path vulnerability could lead to information disclosure | 6.2CNA v3.1 | 0.8% | 2021-02-11 | Fix |
| CVE-2021-21054 | Adobe Illustrator out-of-bounds write vulnerability could lead to remote code execution | 7.8CNA v3.0 | 4.0% | 2021-02-11 | Fix |
| CVE-2021-21053 | Adobe Illustrator out-of-bounds write vulnerability could lead to remote code execution | 7.8CNA v3.0 | 2.3% | 2021-02-11 | Fix |
| CVE-2021-21052 | Adobe Animate out-of-bounds write vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 3.8% | 2021-02-11 | Fix |
| CVE-2021-21051 | Adobe Photoshop buffer overflow vulnerability could lead to remote code execution | 7.8CNA v3.0 | 7.4% | 2021-02-11 | Fix |
| CVE-2021-21050 | Adobe Photoshop out-of-bounds read vulnerability could lead to remote code execution | 7.8CNA v3.0 | 3.5% | 2021-02-11 | Fix |
| CVE-2021-21049 | Adobe Photoshop out-of-bounds read vulnerability could lead to remote code execution | 7.8CNA v3.0 | 3.5% | 2021-02-11 | Fix |
| CVE-2021-21048 | Adobe Photoshop buffer overflow vulnerability could lead to remote code execution | 7.8CNA v3.0 | 3.0% | 2021-02-11 | Fix |
| CVE-2021-21047 | Adobe Photoshop out-of-bounds write vulnerability could lead to remote code execution | 7.8CNA v3.0 | 3.0% | 2021-02-11 | Fix |
| CVE-2021-21046 | Adobe Acrobat Reader DC buffer overflow vulnerability could lead to arbitrary code execution | 3.3CNA v3.0 | 1.7% | 2021-02-11 | Fix |
| CVE-2021-21045 | Adobe Acrobat Reader DC improper access control | 8.2CNA v3.1 | 1.8% | 2021-02-11 | Fix |
| CVE-2021-21044 | Adobe Acrobat Reader DC out-of-bounds write vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 3.5% | 2021-02-11 | Fix |
| CVE-2021-21042 | Adobe Acrobat Reader DC out-of-bounds read information disclosure | 6.5CNA v3.0 | 14.7% | 2021-02-11 | Exploit codeFix |
| CVE-2021-21041 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.1% | 2021-02-11 | Fix |
| CVE-2021-21040 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.1% | 2021-02-11 | Fix |
| CVE-2021-21039 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.1% | 2021-02-11 | Fix |
| CVE-2021-21038 | Adobe Acrobat Reader DC out-of-bounds write vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.3% | 2021-02-11 | Fix |
| CVE-2021-21037 | Adobe Acrobat Reader DC path traversal vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.3% | 2021-02-11 | Fix |
| CVE-2021-21036 | Adobe Acrobat Reader DC integer overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 2.8% | 2021-02-11 | Fix |
| CVE-2021-21035 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 8.8CNA v3.0 | 4.1% | 2021-02-11 | Fix |
| CVE-2021-21034 | Adobe Acrobat Reader DC out-of-bounds read information disclosure | 4.3CNA v3.0 | 2.6% | 2021-02-11 | Fix |
| CVE-2021-21033 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 8.8CNA v3.0 | 4.1% | 2021-02-11 | Fix |
| CVE-2021-21032 | Adobe Magento Commerce failure to Invalidate User Session could lead to unauthorized access | 5.6CNA v3.0 | 1.6% | 2021-02-11 | Fix |
| CVE-2021-21031 | Magento Commerce failure to Invalidate User Session could lead to unauthorized access | 5.6CNA v3.0 | 1.7% | 2021-02-11 | Fix |
| CVE-2021-21030 | Adobe Magento Commerce stored cross-site scripting could lead to arbitrary Javascript Execution | 8.1CNA v3.0 | 5.6% | 2021-02-11 | Fix |
| CVE-2021-21029 | Adobe Magento reflected cross-site scripting vulnerability via file parameter | 4.8CNA v3.1 | 84.6% | 2021-02-11 | Fix |
| CVE-2021-21028 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 8.8CNA v3.0 | 4.1% | 2021-02-11 | Fix |
| CVE-2021-21027 | Adobe Magento Commerce cross-site request forgery could lead to unauthorized data modification | 4.3CNA v3.0 | 1.7% | 2021-02-11 | Fix |
| CVE-2021-21026 | Adobe Magento Commerce incorrect permissions could lead to unauthorized access | 5.3CNA v3.0 | 1.8% | 2021-02-11 | Fix |
| CVE-2021-21025 | Adobe Magento Commerce XML injection could lead to arbitrary code execution | 9.1CNA v3.0 | 3.3% | 2021-02-11 | Fix |
| CVE-2021-21024 | Adobe Magento Commerce blind SQL injection could lead to unauthorized access | 9.1CNA v3.0 | 2.8% | 2021-02-11 | Fix |
| CVE-2021-21023 | Adobe Magento stored cross-site scripting vulnerability in the admin console | 4.8CNA v3.0 | 1.6% | 2021-02-11 | Fix |
| CVE-2021-21022 | Adobe Magento Commerce incorrect permissions could lead to unauthorized access | 5.3CNA v3.0 | 2.2% | 2021-02-11 | Fix |
| CVE-2021-21021 | Adobe Acrobat Reader DC use-after-free vulnerability could lead to arbitrary code execution | 8.8CNA v3.0 | 4.1% | 2021-02-11 | Fix |
| CVE-2021-21020 | Adobe Magento Commerce improper access control | 5.3CNA v3.0 | 2.4% | 2021-02-11 | Fix |
| CVE-2021-21019 | Adobe Magento Commerce XML injection could lead to remote code execution | 9.1CNA v3.0 | 3.6% | 2021-02-11 | Fix |
| CVE-2021-21018 | Adobe Magnto Commerce unauthorized data modification could lead to arbitrary code execution | 9.1CNA v3.0 | 4.0% | 2021-02-11 | Fix |
| CVE-2021-21017 | Adobe Acrobat and Reader heap-based buffer overflow | 8.8CNA v3.1 | 86.3% | 2021-02-11 | KEVExploit codeFix |
| CVE-2021-21016 | Adobe Magento Commerce unauthorized data modification could lead to arbitrary code execution | 9.1CNA v3.0 | 4.9% | 2021-02-11 | Fix |
| CVE-2021-21015 | Adobe Magento Commerce unauthorized data modification could lead to arbitrary code execution | 8.0CNA v3.0 | 2.9% | 2021-02-11 | Fix |
| CVE-2021-21014 | Adobe Magento Commerce arbitrary Folder Empty could lead to arbitrary code execution | 9.1CNA v3.0 | 4.2% | 2021-02-11 | Exploit codeFix |
| CVE-2021-20405 | IBM Security Verify Information Queue improper output encoding | 3.1CNA v3.0 | 0.8% | 2021-02-11 | Fix |
| CVE-2021-20404 | IBM Security Verify Information Queue denial of service | 2.6CNA v3.0 | 0.9% | 2021-02-11 | Fix |
| CVE-2021-20403 | IBM Security Verify Information Queue cross-site request forgery | 3.1CNA v3.0 | 0.4% | 2021-02-11 | Fix |
| CVE-2021-20402 | IBM Security Verify Information Queue information disclosure through error messages | 2.7CNA v3.0 | 1.0% | 2021-02-11 | Fix |
| CVE-2021-20335 | SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager | 6.7CNA v3.1 | 0.1% | 2021-02-11 | Fix |
| CVE-2021-20188 | podman improper authorization in github.com/containers/libpod | 7.0v3.1 | 0.3% | 2021-02-11 | Fix |
| CVE-2021-27186 | treasure-data Fluent Bit null pointer dereference | 7.5v3.1 | 2.0% | 2021-02-10 | Fix |
| CVE-2021-27185 | Command injection in Samba-client | 9.8v3.1 | 4.8% | 2021-02-10 | Fix |
| CVE-2021-27179 | FiberHome HG6245D crash | 7.5v3.1 | 13.9% | 2021-02-10 | |
| CVE-2021-27178 | FiberHome HG6245D cleartext storage of sensitive information | 7.5v3.1 | 18.2% | 2021-02-10 | |
| CVE-2021-27177 | FiberHome HG6245D incorrect authorization | 9.8v3.1 | 19.7% | 2021-02-10 | |
| CVE-2021-27176 | FiberHome HG6245D cleartext storage of sensitive information | 7.5v3.1 | 18.7% | 2021-02-10 | |
| CVE-2021-27175 | FiberHome HG6245D cleartext storage of sensitive information | 7.5v3.1 | 18.2% | 2021-02-10 | |
| CVE-2021-27174 | FiberHome HG6245D cleartext storage of sensitive information | 7.5v3.1 | 18.7% | 2021-02-10 | |
| CVE-2021-27173 | FiberHome HG6245D hidden functionality | 7.5v3.1 | 12.7% | 2021-02-10 | |
| CVE-2021-27172 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 19.8% | 2021-02-10 | |
| CVE-2021-27171 | FiberHome HG6245D out-of-bounds write | 9.8v3.1 | 17.8% | 2021-02-10 | |
| CVE-2021-27170 | FiberHome HG6245D insecure storage of sensitive information | 9.8v3.1 | 15.9% | 2021-02-10 | |
| CVE-2021-27169 | FiberHome AN5506-04-FA hard-coded credentials | 9.8v3.1 | 19.8% | 2021-02-10 | |
| CVE-2021-27168 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 19.8% | 2021-02-10 | |
| CVE-2021-27167 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 14.6% | 2021-02-10 | |
| CVE-2021-27166 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 19.8% | 2021-02-10 | |
| CVE-2021-27165 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 19.8% | 2021-02-10 | |
| CVE-2021-27164 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27163 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27162 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 26.8% | 2021-02-10 | |
| CVE-2021-27161 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 17.1% | 2021-02-10 | |
| CVE-2021-27160 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 17.1% | 2021-02-10 | |
| CVE-2021-27159 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27158 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27157 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 14.5% | 2021-02-10 | |
| CVE-2021-27156 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 14.5% | 2021-02-10 | |
| CVE-2021-27155 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 20.5% | 2021-02-10 | |
| CVE-2021-27154 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 20.5% | 2021-02-10 | |
| CVE-2021-27153 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 20.5% | 2021-02-10 | |
| CVE-2021-27152 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27151 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27150 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 20.5% | 2021-02-10 | |
| CVE-2021-27149 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27148 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27147 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 17.1% | 2021-02-10 | |
| CVE-2021-27146 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 20.5% | 2021-02-10 | |
| CVE-2021-27145 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 23.6% | 2021-02-10 | |
| CVE-2021-27144 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 21.9% | 2021-02-10 | |
| CVE-2021-27143 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 16.0% | 2021-02-10 | |
| CVE-2021-27142 | FiberHome HG6245D hard-coded credentials | 7.5v3.1 | 15.7% | 2021-02-10 | |
| CVE-2021-27141 | FiberHome HG6245D hard-coded credentials | 9.8v3.1 | 15.8% | 2021-02-10 | |
| CVE-2021-27140 | FiberHome HG6245D cleartext storage of sensitive information | 7.5v3.1 | 18.9% | 2021-02-10 | |
| CVE-2021-27139 | FiberHome HG6245D info.asp information disclosure | 7.5v3.1 | 16.2% | 2021-02-10 | |
| CVE-2021-27135 | Invisible-island Xterm denial of service | 9.8v3.1 | 7.5% | 2021-02-10 | Fix |
| CVE-2021-26939 | Henriquedornas An information disclosure | 7.5v3.1 | 1.7% | 2021-02-10 | |
| CVE-2021-26938 | Henriquedornas stored cross-site scripting | 5.4v3.1 | 0.7% | 2021-02-10 | |
| CVE-2021-26936 | Replaysorcery improper privilege management | 7.8v3.1 | 0.5% | 2021-02-10 | Fix |
| CVE-2021-25251 | Trend Micro Security (Consumer) code injection | 7.2v3.1 | 2.6% | 2021-02-10 | Fix |
| CVE-2021-23883 | Null pointer dereference vulnerability in McAfee Endpoint Security (ENS) | 4.0CNA v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-23882 | Improper access control in the ENS installer | 8.2CNA v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-23881 | Stored cross-site scripting in ENS | 4.8CNA v3.1 | 0.6% | 2021-02-10 | Fix |
| CVE-2021-23880 | Improper access control in the ENS installer | 6.7CNA v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-23878 | McAfee Endpoint Security cleartext storage of sensitive information | 7.3CNA v3.1 | 0.6% | 2021-02-10 | Fix |
| CVE-2021-23876 | McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability | 7.8CNA v3.1 | 0.4% | 2021-02-10 | Fix |
| CVE-2021-23874 | McAfee Total Protection (MTP) improper privilege management | 8.2CNA v3.1 | 1.0% | 2021-02-10 | KEVFix |
| CVE-2021-23873 | McAfee Total Protection (MTP) privilege escalation | 7.8CNA v3.1 | 0.7% | 2021-02-10 | Fix |
| CVE-2021-22133 | Information disclosure in go.Elastic.co/apm | 2.4v3.1 | 0.5% | 2021-02-10 | Fix |
| CVE-2021-21296 | Denial of service in Fleet | 2.7CNA v3.1 | 1.9% | 2021-02-10 | Fix |
| CVE-2021-20654 | Wekan cross-site scripting | 5.4v3.1 | 0.8% | 2021-02-10 | Fix |
| CVE-2021-20353 | IBM WebSphere Application Server XML external entity injection | 8.2CNA v3.0 | 5.2% | 2021-02-10 | Fix |
| CVE-2021-3033 | Prisma Cloud Compute: SAML authentication bypass vulnerability in console | 9.1CNA v3.1 | 1.2% | 2021-02-10 | Fix |
| CVE-2021-0341 | Android square OkHttp can accept the wrong certificate | 7.5v3.1 | 0.9% | 2021-02-10 | Fix |
| CVE-2021-0340 | Android IsoInterface.java information disclosure | 8.8v3.1 | 2.1% | 2021-02-10 | Fix |
| CVE-2021-0339 | Android WindowContainer.java privilege escalation | 7.8v3.1 | 0.7% | 2021-02-10 | Fix |
| CVE-2021-0338 | Android SystemSettingsValidators denial of service | 5.5v3.1 | 0.1% | 2021-02-10 | Fix |
| CVE-2021-0337 | Android FileSystemProvider.java privilege escalation | 7.8v3.1 | 0.2% | 2021-02-10 | Fix |
| CVE-2021-0336 | Android BluetoothPermissionRequest.java insecure permissions | 7.8v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0335 | Android C2SoftHevcDec.cpp out-of-bounds write | 6.5v3.1 | 0.8% | 2021-02-10 | Fix |
| CVE-2021-0334 | Android ResolverActivity.java privilege escalation | 7.8NVD v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0333 | Android BluetoothPermissionActivity.java insecure permissions | 7.3v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0332 | Android SurfaceFlinger.cpp memory corruption | 7.8v3.1 | 0.2% | 2021-02-10 | Fix |
| CVE-2021-0331 | Android privilege escalation | 7.3v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0330 | Android storaged.cpp use-after-free | 7.8v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0329 | Android AdvertiseManager.java out-of-bounds write | 7.8v3.1 | 0.3% | 2021-02-10 | Exploit codeFix |
| CVE-2021-0328 | Android GattService.java privilege escalation | 7.8v3.1 | 0.2% | 2021-02-10 | Exploit codeFix |
| CVE-2021-0327 | Android ActivityManagerService.java insecure permissions | 7.8v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0326 | Android p2p.c out-of-bounds write | 7.5v3.1 | 4.9% | 2021-02-10 | Exploit codeFix |
| CVE-2021-0325 | Android ih264d_parse_pslice.c out-of-bounds write | 8.8NVD v3.1 | 2.2% | 2021-02-10 | Fix |
| CVE-2021-0314 | Android UninstallerActivity privilege escalation | 7.3v3.1 | 0.3% | 2021-02-10 | Fix |
| CVE-2021-0305 | Android PackageInstaller privilege escalation | 7.8v3.1 | 0.5% | 2021-02-10 | Fix |
| CVE-2021-0302 | Android PackageInstaller privilege escalation | 7.8v3.1 | 0.7% | 2021-02-10 | Exploit codeFix |
| CVE-2021-26958 | Out-of-bounds read in Xcb | 8.8v3.1 | 1.6% | 2021-02-09 | Fix |
| CVE-2021-26957 | Out-of-bounds read in Xcb | 9.8v3.1 | 1.8% | 2021-02-09 | Fix |
| CVE-2021-26956 | Out-of-bounds read in Xcb | 9.8v3.1 | 1.7% | 2021-02-09 | Fix |
| CVE-2021-26955 | Out-of-bounds read in Xcb | 9.8v3.1 | 1.7% | 2021-02-09 | Fix |
| CVE-2021-26954 | Qwutils insert_slice_clone can double drop if Clone panics | 5.3v3.1 | 1.4% | 2021-02-09 | Fix |
| CVE-2021-26953 | Read on uninitialized buffer in Postscript | 7.5v3.1 | 1.5% | 2021-02-09 | Fix |
| CVE-2021-26952 | MS3D uninitialized resource use | 7.5v3.1 | 1.6% | 2021-02-09 | Fix |
| CVE-2021-26951 | Out-of-bounds write in Calamine | 9.8v3.1 | 1.7% | 2021-02-09 | Fix |
| CVE-2021-26937 | GNU Screen argument injection | 9.8v3.1 | 9.1% | 2021-02-09 | Fix |
| CVE-2021-26925 | Roundcube Webmail cross-site scripting | 5.4v3.1 | 1.0% | 2021-02-09 | Fix |
| CVE-2021-26921 | argoproj argo-cd insufficient session expiration | 6.5v3.1 | 1.3% | 2021-02-09 | Fix |
| CVE-2021-26918 | Probot BOT unrestricted file upload | 9.8v3.1 | 2.6% | 2021-02-09 | |
| CVE-2021-26719 | gradle Enterprise Test Distribution Agent path traversal | 6.5v3.1 | 1.4% | 2021-02-09 | Fix |
| CVE-2021-26676 | Intel ConnMan information disclosure | 6.5v3.1 | 1.2% | 2021-02-09 | Fix |
| CVE-2021-26675 | Intel ConnMan dnsproxy stack-based buffer overflow | 8.8v3.1 | 1.3% | 2021-02-09 | Fix |
| CVE-2021-26551 | Smartfoxserver code injection | 8.8v3.1 | 2.6% | 2021-02-09 | |
| CVE-2021-26550 | Smartfoxserver cleartext storage of sensitive information | 5.5v3.1 | 0.4% | 2021-02-09 | |
| CVE-2021-26549 | Smartfoxserver An cross-site scripting | 5.4v3.1 | 1.3% | 2021-02-09 | |
| CVE-2021-25666 | Siemens SCALANCE W780 and W740 (IEEE resource exhaustion | 4.3v3.1 | 0.7% | 2021-02-09 | Fix |
| CVE-2021-25141 | Aruba 5400R zl2 Switch Series crash | 4.4v3.1 | 0.3% | 2021-02-09 | |
| CVE-2021-25140 | HPE Moonshot Provisioning Manager path traversal | 9.8v3.1 | 12.0% | 2021-02-09 | Fix |
| CVE-2021-25139 | HPE Moonshot Provisioning Manager out-of-bounds write | 9.8v3.1 | 7.9% | 2021-02-09 | Fix |
| CVE-2021-23327 | apexcharts cross-site scripting (XSS) | 6.3CNA v3.1 | 1.4% | 2021-02-09 | Fix |
| CVE-2021-22663 | Cscape out-of-bounds read | 7.8v3.1 | 1.3% | 2021-02-09 | Fix |
| CVE-2021-22267 | HPE Web Viewpoint authentication bypass by replay | 5.9v3.1 | 1.4% | 2021-02-09 | Fix |
| CVE-2021-21502 | Dell PowerScale OneFS improper authentication | 9.8CNA v3.1 | 1.4% | 2021-02-09 | Fix |
| CVE-2021-21479 | Remote code execution in SCIMono | 8.1CNA v3.0 | 10.1% | 2021-02-09 | NucleiFix |
| CVE-2021-21478 | SAP NetWeaver AS ABAP (Web Dynpro ABAP) open redirect | 4.7CNA v3.0 | 0.9% | 2021-02-09 | Fix |
| CVE-2021-21477 | SAP Commerce code injection | 9.9CNA v3.0 | 29.8% | 2021-02-09 | Fix |
| CVE-2021-21476 | SAP UI5 open redirect | 4.7CNA v3.0 | 0.8% | 2021-02-09 | Fix |
| CVE-2021-21475 | SAP NetWeaver Master Data Management Server path traversal | 6.8CNA v3.0 | 1.9% | 2021-02-09 | Fix |
| CVE-2021-21474 | SAP HANA Database inadequate encryption strength | 6.5v3.1 | 0.7% | 2021-02-09 | Fix |
| CVE-2021-21472 | SAP Software Provisioning Manager missing authentication | 6.3CNA v3.0 | 1.2% | 2021-02-09 | Fix |
| CVE-2021-21444 | SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) clickjacking | 5.4CNA v3.0 | 0.8% | 2021-02-09 | Fix |
| CVE-2021-21148 | Google Chromium V8 heap buffer overflow | 8.8v3.1 | 20.0% | 2021-02-09 | KEVExploit codeFix |
| CVE-2021-21147 | Google Chrome Skia inappropriate implementation | 4.3v3.1 | 0.8% | 2021-02-09 | Fix |
| CVE-2021-21146 | Google Chrome Navigation use-after-free | 9.6v3.1 | 1.1% | 2021-02-09 | Fix |
| CVE-2021-21145 | Google Chrome Fonts use-after-free | 8.8v3.1 | 1.0% | 2021-02-09 | Fix |
| CVE-2021-21144 | Google Chrome Tab Groups heap-based buffer overflow | 8.8v3.1 | 0.9% | 2021-02-09 | Fix |
| CVE-2021-21143 | Google Chrome extensions heap-based buffer overflow | 8.8v3.1 | 0.8% | 2021-02-09 | Fix |
| CVE-2021-21142 | Google Chrome Payments use-after-free | 9.6v3.1 | 1.1% | 2021-02-09 | Fix |
| CVE-2021-21141 | Google Chrome File System API insufficient policy enforcement | 6.5v3.1 | 5.4% | 2021-02-09 | Fix |
| CVE-2021-21140 | Google Chrome out-of-bounds access | 6.8v3.1 | 0.8% | 2021-02-09 | Fix |
| CVE-2021-21139 | Google Chrome iframe sandbox inappropriate implementation | 6.5v3.1 | 4.7% | 2021-02-09 | Fix |
| CVE-2021-21138 | Google Chrome DevTools use-after-free | 8.6v3.1 | 0.5% | 2021-02-09 | Fix |
| CVE-2021-21137 | Google Chrome DevTools inappropriate implementation | 6.5v3.1 | 5.9% | 2021-02-09 | Fix |
| CVE-2021-21136 | Google Chrome WebView insufficient policy enforcement | 6.5v3.1 | 4.2% | 2021-02-09 | Fix |
| CVE-2021-21135 | Google Chrome Performance API inappropriate implementation | 6.5v3.1 | 19.2% | 2021-02-09 | Fix |
| CVE-2021-21134 | Google Chrome Page Info incorrect security UI | 6.5v3.1 | 5.0% | 2021-02-09 | Fix |
| CVE-2021-21133 | Google Chrome Downloads insufficient policy enforcement | 6.5v3.1 | 3.0% | 2021-02-09 | Fix |
| CVE-2021-21132 | Google Chrome DevTools inappropriate implementation | 9.6v3.1 | 23.4% | 2021-02-09 | Fix |
| CVE-2021-21131 | Google Chrome File System API insufficient policy enforcement | 6.5v3.1 | 8.0% | 2021-02-09 | Fix |
| CVE-2021-21130 | Google Chrome File System API insufficient policy enforcement | 6.5v3.1 | 5.4% | 2021-02-09 | Fix |
| CVE-2021-21129 | Google Chrome File System API insufficient policy enforcement | 6.5v3.1 | 5.4% | 2021-02-09 | Fix |
| CVE-2021-21128 | Google Chrome Blink heap-based buffer overflow | 8.8v3.1 | 6.5% | 2021-02-09 | Fix |
| CVE-2021-21127 | Google Chrome extensions insufficient policy enforcement | 8.8v3.1 | 5.9% | 2021-02-09 | Fix |
| CVE-2021-21126 | Google Chrome extensions insufficient policy enforcement | 6.5v3.1 | 8.7% | 2021-02-09 | Fix |
| CVE-2021-21125 | Google Chrome File System API insufficient policy enforcement | 8.1v3.1 | 8.1% | 2021-02-09 | Fix |
| CVE-2021-21124 | Google Chrome use-after-free | 9.6v3.1 | 7.9% | 2021-02-09 | Fix |
| CVE-2021-21123 | Google Chrome File System API improper input validation | 6.5v3.1 | 10.0% | 2021-02-09 | Exploit codeFix |
| CVE-2021-21122 | Google Chrome Blink use-after-free | 8.8v3.1 | 7.0% | 2021-02-09 | Fix |
| CVE-2021-21121 | Google Chrome Omnibox use-after-free | 9.6v3.1 | 6.2% | 2021-02-09 | Fix |
| CVE-2021-21120 | Google Chrome WebSQL use-after-free | 8.8v3.1 | 6.9% | 2021-02-09 | Fix |
| CVE-2021-21119 | Google Chrome Media use-after-free | 8.8v3.1 | 6.8% | 2021-02-09 | Fix |
| CVE-2021-21118 | Google Chrome V8 improper input validation | 8.8v3.1 | 16.8% | 2021-02-09 | Fix |
| CVE-2021-21117 | Google Chrome Cryptohome insufficient policy enforcement | 7.8v3.1 | 0.2% | 2021-02-09 | Fix |
| CVE-2021-3394 | Millewin incorrect default permissions | 8.8v3.1 | 5.8% | 2021-02-09 | Exploit code |
| CVE-2021-3191 | HPE Web Viewpoint unauthorized access | 8.8v3.1 | 3.6% | 2021-02-09 | Fix |
| CVE-2021-26917 | PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported away f | 5.5v3.1 | 0.6% | 2021-02-08 | Fix |
| CVE-2021-26916 | nopCommerce cross-site scripting | 6.1v3.1 | 1.1% | 2021-02-08 | |
| CVE-2021-26915 | Netmotionsoftware NetMotion Mobility deserialization of untrusted data | 8.1v3.1 | 41.8% | 2021-02-08 | Fix |
| CVE-2021-26914 | Netmotionsoftware NetMotion Mobility deserialization of untrusted data | 8.1v3.1 | 77.7% | 2021-02-08 | MetasploitExploit codeFix |
| CVE-2021-26913 | Netmotionsoftware NetMotion Mobility deserialization of untrusted data | 8.1v3.1 | 13.3% | 2021-02-08 | Fix |
| CVE-2021-26912 | Netmotionsoftware NetMotion Mobility deserialization of untrusted data | 8.1v3.1 | 41.0% | 2021-02-08 | Fix |
| CVE-2021-26910 | Firejail time-of-check time-of-use race condition | 7.0v3.1 | 0.4% | 2021-02-08 | Fix |
| CVE-2021-26905 | 1password Scim Bridge improper authentication | 6.5v3.1 | 1.0% | 2021-02-08 | Fix |
| CVE-2021-26826 | Godot Engine A stack-based buffer overflow | 7.8v3.1 | 1.5% | 2021-02-08 | Fix |
| CVE-2021-26825 | Godot Engine An integer overflow | 7.8v3.1 | 1.5% | 2021-02-08 | Fix |
| CVE-2021-26754 | wpDataTables SQL injection | 9.8v3.1 | 4.6% | 2021-02-08 | Fix |
| CVE-2021-26577 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.4% | 2021-02-08 | Fix |
| CVE-2021-26576 | HPE Apollo 70 System command injection | 7.8v3.1 | 0.8% | 2021-02-08 | Fix |
| CVE-2021-26575 | HPE Apollo 70 System path traversal | 7.8v3.1 | 0.4% | 2021-02-08 | Fix |
| CVE-2021-26574 | HPE Apollo 70 System path traversal | 7.8v3.1 | 0.4% | 2021-02-08 | Fix |
| CVE-2021-26573 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-26572 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-26571 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-26570 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.5% | 2021-02-08 | Fix |
| CVE-2021-26541 | Command injection in Gitlog | 9.8v3.1 | 5.4% | 2021-02-08 | Fix |
| CVE-2021-26540 | Improper input validation in sanitize-html | 5.3v3.1 | 1.8% | 2021-02-08 | Fix |
| CVE-2021-26539 | Improper input validation in sanitize-html | 5.3v3.1 | 2.0% | 2021-02-08 | Fix |
| CVE-2021-26530 | Cesanta Mongoose out-of-bounds write | 9.1v3.1 | 1.5% | 2021-02-08 | Fix |
| CVE-2021-26529 | Cesanta Mongoose out-of-bounds write | 9.1v3.1 | 1.5% | 2021-02-08 | Fix |
| CVE-2021-26528 | Cesanta Mongoose out-of-bounds write | 9.1v3.1 | 1.5% | 2021-02-08 | Fix |
| CVE-2021-26222 | Ezxml out-of-bounds write | 8.1v3.1 | 1.2% | 2021-02-08 | Fix |
| CVE-2021-26221 | Ezxml out-of-bounds write | 8.1v3.1 | 1.2% | 2021-02-08 | Fix |
| CVE-2021-26220 | Ezxml out-of-bounds write | 8.1v3.1 | 1.2% | 2021-02-08 | Fix |
| CVE-2021-25913 | Prototype pollution in set-or-get | 9.8v3.1 | 4.2% | 2021-02-08 | Fix |
| CVE-2021-25837 | ChainSafe Ethermint EVM module vulnerability | 7.5v3.1 | 1.5% | 2021-02-08 | Exploit code |
| CVE-2021-25836 | ChainSafe Ethermint EVM module vulnerability | 7.5v3.1 | 1.3% | 2021-02-08 | |
| CVE-2021-25835 | Authentication bypass by capture-replay in github.com/cosmos/ethermint | 7.5v3.1 | 1.3% | 2021-02-08 | Fix |
| CVE-2021-25834 | Authentication bypass by capture-replay in github.com/cosmos/ethermint | 7.5v3.1 | 1.1% | 2021-02-08 | Fix |
| CVE-2021-25172 | HPE Apollo 70 System command injection | 7.8v3.1 | 0.7% | 2021-02-08 | Fix |
| CVE-2021-25171 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-25170 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-25169 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-25168 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-25142 | HPE Apollo 70 System buffer overflow | 7.8v3.1 | 0.3% | 2021-02-08 | Fix |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) remote code execution | 9.8v3.1 | 96.7% | 2021-02-08 | KEVNucleiMetasploitExploit codeFix |
| CVE-2021-22122 | Fortinet FortiWeb An cross-site scripting | 6.1v3.1 | 10.5% | 2021-02-08 | NucleiFix |
| CVE-2021-21436 | OTRS CIs in Customer Frontend config item linking vulnerability | 3.5CNA v3.1 | 0.8% | 2021-02-08 | Fix |
| CVE-2021-21435 | OTRS information exposure in PDF export | 5.7CNA v3.1 | 1.3% | 2021-02-08 | Fix |
| CVE-2021-21434 | XSS in Survey module | 3.5CNA v3.1 | 0.7% | 2021-02-08 | Fix |
| CVE-2021-21306 | Denial of service in Marked | 5.3CNA v3.1 | 2.5% | 2021-02-08 | Fix |
| CVE-2021-21305 | Code injection vulnerability in CarrierWave | 7.4CNA v3.1 | 12.7% | 2021-02-08 | Fix |
| CVE-2021-21304 | Prototype pollution in Dynamoose | 7.2CNA v3.1 | 1.9% | 2021-02-08 | Fix |
| CVE-2021-21290 | Local information disclosure vulnerability in Netty on Unix-Like systems due temporary files | 6.2CNA v3.1 | 1.8% | 2021-02-08 | Fix |
| CVE-2021-21288 | Server-side request forgery in CarrierWave | 4.3CNA v3.1 | 1.2% | 2021-02-08 | Fix |
| CVE-2021-21240 | Regular expression denial of service in httplib2 | 7.5CNA v3.1 | 3.6% | 2021-02-08 | Fix |
| CVE-2021-20359 | IBM Cloud Pak for Automation sensitive information in log files | 6.5CNA v3.0 | 1.3% | 2021-02-08 | Fix |
| CVE-2021-20358 | IBM Cloud Pak for Automation cleartext storage of sensitive information | 6.5CNA v3.0 | 0.8% | 2021-02-08 | Fix |
| CVE-2021-3294 | Casap Automated Enrollment System cross-site scripting | 5.4v3.1 | 2.8% | 2021-02-08 | Exploit code |
| CVE-2021-3293 | emlog information disclosure | 5.3v3.1 | 20.7% | 2021-02-08 | Nuclei |
| CVE-2021-26843 | Sthttpd denial of service | 7.5v3.1 | 1.4% | 2021-02-07 | |
| CVE-2021-22161 | openwrt infinite loop | 6.5v3.1 | 0.5% | 2021-02-07 | Fix |
| CVE-2021-3122 | NCR Command Center Agent OS command injection | 9.8NVD v3.1 | 87.3% | 2021-02-07 | NucleiMetasploitExploit code |
| CVE-2021-26723 | Jenzabar cross-site scripting | 6.1v3.1 | 12.6% | 2021-02-06 | NucleiFix |
| CVE-2021-22500 | Application Performance Management Micro Focus cross-site request forgery | 6.5v3.1 | 0.5% | 2021-02-06 | |
| CVE-2021-22499 | Application Performance Management Micro Focus stored cross-site scripting | 4.8v3.1 | 0.6% | 2021-02-06 | |
| CVE-2021-22307 | There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module. | 5.5v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22306 | HUAWEI Mate 30 out-of-bounds read | 4.6v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22305 | HUAWEI Mate 30 buffer overflow | 3.3v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22304 | Taurus-AL00A There is a use-after-free | 3.3v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22303 | Taurus-AL00A There is a pointer double free | 3.3v3.1 | 0.5% | 2021-02-06 | Fix |
| CVE-2021-22302 | Taurus-AL00A There is an out-of-bounds read | 7.1v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22301 | HUAWEI Mate 30 buffer overflow | 6.7v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22300 | eCNS280_TD There is an information disclosure | 4.1v3.1 | 0.1% | 2021-02-06 | Fix |
| CVE-2021-22299 | Huawei iMaster MAE-M some local privilege escalation | 7.8v3.1 | 0.2% | 2021-02-06 | Fix |
| CVE-2021-22298 | Huawei ManageOne Gauss100 OLTP database vulnerability | 6.5v3.1 | 0.9% | 2021-02-06 | Fix |
| CVE-2021-22293 | CampusInsight HTTP request smuggling | 7.5v3.1 | 0.9% | 2021-02-06 | Fix |
| CVE-2021-22292 | eCNS280 There is a denial of service | 7.5v3.1 | 0.9% | 2021-02-06 | Fix |
| CVE-2021-20176 | ImageMagick divide by zero | 5.5NVD v3.1 | 0.9% | 2021-02-06 | Fix |
| CVE-2021-26722 | LinkedIn OnCall vulnerable to cross-site scripting | 6.1v3.1 | 3.2% | 2021-02-05 | Fix |
| CVE-2021-26711 | Redwood Report2web online help injection | 5.3v3.1 | 1.9% | 2021-02-05 | |
| CVE-2021-26710 | Redwood Report2web login panel cross-site scripting | 6.1v3.1 | 7.5% | 2021-02-05 | Nuclei |
| CVE-2021-26708 | Linux kernel A local privilege escalation | 7.0v3.1 | 1.6% | 2021-02-05 | Exploit codeFix |
| CVE-2021-21303 | Injection attack in Helm | 5.9CNA v3.1 | 1.0% | 2021-02-05 | Fix |
| CVE-2021-20652 | J. Peters Name Directory cross-site request forgery | 8.8v3.1 | 0.8% | 2021-02-05 | Fix |
| CVE-2021-20623 | Panasonic Video Insight VMS cleartext transmission of sensitive information | 9.8v3.1 | 2.8% | 2021-02-05 | Fix |
| CVE-2021-3382 | Buffer overflow in Gitea | 7.5v3.1 | 1.8% | 2021-02-05 | Fix |
| CVE-2021-3333 | Opmantek Open-audit cross-site scripting | 6.1v3.1 | 0.8% | 2021-02-05 | Fix |
| CVE-2021-3311 | October CMS Session ID not invalidated after logout | 9.8v3.1 | 2.9% | 2021-02-05 | Fix |
| CVE-2021-3258 | Qa-themes Q2A Ultimate Seo cross-site scripting | 5.4v3.1 | 1.6% | 2021-02-05 | Fix |
| CVE-2021-3229 | ASUS Rt-ax3000 Firmware ASUSWRT ASUS denial of service | 7.5v3.1 | 2.7% | 2021-02-05 | Fix |
| CVE-2021-1072 | NVIDIA GeForce Experience Software arbitrary file deletion | 6.0CNA v3.1 | 0.3% | 2021-02-05 | Fix |
| CVE-2021-26689 | Google Android use-after-free | 9.8v3.1 | 0.5% | 2021-02-04 | |
| CVE-2021-26688 | LG Wing biometric sensor vulnerability | 9.8v3.1 | 0.4% | 2021-02-04 | |
| CVE-2021-26687 | Google Android LG preloaded applications vulnerability | 9.8v3.1 | 0.5% | 2021-02-04 | |
| CVE-2021-25249 | Trend Micro Apex One An out-of-bounds write | 7.8v3.1 | 0.4% | 2021-02-04 | Fix |
| CVE-2021-25248 | Trend Micro Apex One An out-of-bounds read | 5.5v3.1 | 0.9% | 2021-02-04 | Fix |
| CVE-2021-25246 | Trend Micro Apex One An improper access control | 6.5v3.1 | 1.7% | 2021-02-04 | Fix |
| CVE-2021-25245 | Trend Micro Worry-Free Business Security An improper access control | 5.3v3.1 | 1.5% | 2021-02-04 | Fix |
| CVE-2021-25244 | Trend Micro Worry-Free Business Security An improper access control | 5.3v3.1 | 1.5% | 2021-02-04 | Fix |
| CVE-2021-25243 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-25242 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-25241 | Trend Micro Worry-Free Business Security Trend Micro Apex One and server-side request forgery | 5.3v3.1 | 1.9% | 2021-02-04 | Fix |
| CVE-2021-25240 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25239 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25238 | Trend Micro Worry-Free Business Security Trend Micro OfficeScan XG SP1 and improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25237 | Trend Micro Apex One An improper access control | 5.3v3.1 | 1.6% | 2021-02-04 | Fix |
| CVE-2021-25236 | Trend Micro Worry-Free Business Security server-side request forgery | 5.3v3.1 | 1.9% | 2021-02-04 | Fix |
| CVE-2021-25235 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25234 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25233 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25232 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.0% | 2021-02-04 | Fix |
| CVE-2021-25231 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-25230 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25229 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25228 | Trend Micro Apex One An improper access control | 5.3v3.1 | 2.1% | 2021-02-04 | Fix |
| CVE-2021-25227 | Trend Micro Antivirus resource exhaustion | 3.3v3.1 | 0.5% | 2021-02-04 | Fix |
| CVE-2021-3401 | Bitcoin argument injection | 9.8v3.1 | 10.5% | 2021-02-04 | |
| CVE-2021-1389 | Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass vulnerability | 5.8CNA v3.1 | 1.2% | 2021-02-04 | Fix |
| CVE-2021-1370 | Cisco IOS XR Software CLI OS command injection | 7.8CNA v3.0 | 0.4% | 2021-02-04 | Fix |
| CVE-2021-1354 | Cisco Unified Computing System Central Software improper certificate validation | 4.3CNA v3.1 | 0.4% | 2021-02-04 | Fix |
| CVE-2021-1348 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1347 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1346 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1345 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1344 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1343 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1342 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1341 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1340 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1339 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1338 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1337 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.9% | 2021-02-04 | Fix |
| CVE-2021-1336 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1335 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1334 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1333 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1332 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1331 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1330 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1329 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1328 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1327 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1326 | Cisco Small Business RV Series Routers web-based management interface stack-based buffer overflow | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1325 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1324 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1323 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1322 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1321 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1320 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-02-04 | Fix |
| CVE-2021-1319 | Cisco Small Business RV Series Routers management interface remote command execution | 7.2CNA v3.1 | 2.8% | 2021-02-04 | Fix |
| CVE-2021-1318 | Cisco Small Business RV Series Routers Management interface command injection | 7.2CNA v3.1 | 3.0% | 2021-02-04 | Fix |
| CVE-2021-1317 | Cisco Small Business RV Series Routers Management interface command injection | 7.2CNA v3.1 | 3.0% | 2021-02-04 | Fix |
| CVE-2021-1316 | Cisco Small Business RV Series Routers Management interface command injection | 7.2CNA v3.1 | 3.0% | 2021-02-04 | Fix |
| CVE-2021-1315 | Cisco Small Business RV Series Routers Management interface command injection | 7.2CNA v3.1 | 3.0% | 2021-02-04 | Fix |
| CVE-2021-1314 | Cisco Small Business RV Series Routers Management interface command injection | 7.2CNA v3.1 | 3.0% | 2021-02-04 | Fix |
| CVE-2021-1313 | Cisco IOS XR Software Enf Broker denial of service | 8.6CNA v3.1 | 2.0% | 2021-02-04 | Fix |
| CVE-2021-1297 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers arbitrary file write | 7.5CNA v3.1 | 3.7% | 2021-02-04 | Fix |
| CVE-2021-1296 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers arbitrary file write | 7.5CNA v3.1 | 3.7% | 2021-02-04 | Fix |
| CVE-2021-1295 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 4.2% | 2021-02-04 | Fix |
| CVE-2021-1294 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 4.5% | 2021-02-04 | Fix |
| CVE-2021-1293 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 5.4% | 2021-02-04 | Fix |
| CVE-2021-1292 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 4.2% | 2021-02-04 | Fix |
| CVE-2021-1291 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 4.2% | 2021-02-04 | Fix |
| CVE-2021-1290 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 4.2% | 2021-02-04 | Fix |
| CVE-2021-1289 | Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers remote code execution | 9.8CNA v3.1 | 4.2% | 2021-02-04 | Fix |
| CVE-2021-1288 | Cisco IOS XR Software Enf Broker denial of service | 8.6CNA v3.1 | 2.0% | 2021-02-04 | Fix |
| CVE-2021-1268 | Cisco IOS XR Software IPv6 Flood denial of service | 7.4CNA v3.1 | 0.5% | 2021-02-04 | Fix |
| CVE-2021-1266 | Cisco Managed Services Accelerator denial of service | 4.3CNA v3.1 | 1.1% | 2021-02-04 | Fix |
| CVE-2021-1244 | Cisco IOS XR Software boot process improper signature verification | 6.7CNA v3.1 | 0.2% | 2021-02-04 | Fix |
| CVE-2021-1243 | Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass vulnerability | 5.3CNA v3.1 | 1.3% | 2021-02-04 | Fix |
| CVE-2021-1221 | Cisco Webex Meetings and Cisco WebEx Meetings Server Software Hyperlink injection | 4.1CNA v3.1 | 1.0% | 2021-02-04 | Fix |
| CVE-2021-1136 | Cisco IOS XR Software secure boot process improper signature verification | 6.7CNA v3.1 | 0.2% | 2021-02-04 | Fix |
| CVE-2021-1128 | Cisco IOS XR Software unauthorized information disclosure | 5.5CNA v3.1 | 0.3% | 2021-02-04 | Fix |
| CVE-2021-0351 | Android wlan driver crash | 7.5v3.1 | 1.1% | 2021-02-04 | |
| CVE-2021-0350 | Android improper input validation | 4.4v3.1 | 0.1% | 2021-02-04 | |
| CVE-2021-0349 | Android display driver memory corruption | 6.7v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-0348 | Android vpu out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-0347 | Android ccu out-of-bounds read | 4.4v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-0346 | Android vpu out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-0345 | Android mobile_log_d privilege escalation | 6.7v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-0344 | Android mtkpower memory corruption | 6.7v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-0343 | Android kisd out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-04 | |
| CVE-2021-26024 | Nagios Favorites insecure direct object reference | 5.3v3.1 | 19.0% | 2021-02-03 | Fix |
| CVE-2021-26023 | Nagios Favorites cross-site scripting | 6.1v3.1 | 25.2% | 2021-02-03 | Fix |
| CVE-2021-25778 | JetBrains TeamCity user deletion vulnerability | 5.3v3.1 | 0.8% | 2021-02-03 | Fix |
| CVE-2021-25777 | JetBrains TeamCity incorrect authorization | 5.3v3.1 | 0.7% | 2021-02-03 | Fix |
| CVE-2021-25776 | JetBrains TeamCity insecure storage of sensitive information | 7.5v3.1 | 1.1% | 2021-02-03 | Fix |
| CVE-2021-25775 | JetBrains TeamCity access tokens information disclosure | 3.8v3.1 | 0.6% | 2021-02-03 | Fix |
| CVE-2021-25774 | JetBrains TeamCity incorrect authorization | 4.3v3.1 | 0.7% | 2021-02-03 | Fix |
| CVE-2021-25773 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.6% | 2021-02-03 | Fix |
| CVE-2021-25772 | JetBrains TeamCity denial of service | 5.3v3.1 | 1.0% | 2021-02-03 | Fix |
| CVE-2021-25771 | In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed. | 4.3v3.1 | 1.5% | 2021-02-03 | Fix |
| CVE-2021-25770 | JetBrains YouTrack code injection | 9.8v3.1 | 3.5% | 2021-02-03 | Fix |
| CVE-2021-25769 | JetBrains YouTrack attachments vulnerability | 7.5v3.1 | 1.8% | 2021-02-03 | Fix |
| CVE-2021-25768 | JetBrains YouTrack attachments vulnerability | 5.3v3.1 | 1.2% | 2021-02-03 | Fix |
| CVE-2021-25767 | JetBrains YouTrack command execution | 5.3v3.1 | 2.6% | 2021-02-03 | Fix |
| CVE-2021-25766 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. | 5.3v3.1 | 1.4% | 2021-02-03 | Fix |
| CVE-2021-25765 | JetBrains YouTrack cross-site request forgery | 8.8v3.1 | 0.7% | 2021-02-03 | Fix |
| CVE-2021-25763 | JetBrains Ktor weak cryptographic algorithm | 5.3v3.1 | 0.5% | 2021-02-03 | Fix |
| CVE-2021-25762 | JetBrains Ktor HTTP request smuggling | 5.3v3.1 | 0.8% | 2021-02-03 | Fix |
| CVE-2021-25761 | JetBrains Ktor inadequate encryption strength | 5.3v3.1 | 0.5% | 2021-02-03 | Fix |
| CVE-2021-25760 | JetBrains Hub information disclosure | 5.3v3.1 | 0.9% | 2021-02-03 | Fix |
| CVE-2021-25759 | In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. | 6.5v3.1 | 0.7% | 2021-02-03 | Fix |
| CVE-2021-25758 | JetBrains IntelliJ IDEA deserialization of untrusted data | 7.8v3.1 | 1.0% | 2021-02-03 | Fix |
| CVE-2021-25757 | JetBrains Hub open redirect | 6.1v3.1 | 0.6% | 2021-02-03 | Fix |
| CVE-2021-25756 | JetBrains IntelliJ IDEA remote repository links vulnerability | 5.3v3.1 | 1.3% | 2021-02-03 | Fix |
| CVE-2021-25755 | In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. | 2.5v3.1 | 0.4% | 2021-02-03 | Fix |
| CVE-2021-25276 | SolarWinds Serv-U incorrect permission assignment | 7.1v3.1 | 0.5% | 2021-02-03 | Fix |
| CVE-2021-25275 | SolarWinds Orion Platform hard-coded credentials | 7.8v3.1 | 0.6% | 2021-02-03 | Fix |
| CVE-2021-25274 | SolarWinds Orion Platform deserialization of untrusted data | 9.8v3.1 | 36.4% | 2021-02-03 | Fix |
| CVE-2021-23331 | com.squareup:connect insecure temporary file | 3.3NVD v3.1 | 0.3% | 2021-02-03 | |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 SQL injection | 9.8v3.1 | 40.0% | 2021-02-03 | KEVEmerging ThreatsFix |
| CVE-2021-0365 | Android display driver memory corruption | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0364 | Android mobile_log_d command injection | 6.7v3.1 | 0.3% | 2021-02-03 | |
| CVE-2021-0363 | Android mobile_log_d command injection | 6.7v3.1 | 0.3% | 2021-02-03 | Fix |
| CVE-2021-0362 | Android aee memory corruption | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0361 | Android kisd out-of-bounds read | 6.7v3.1 | 0.1% | 2021-02-03 | |
| CVE-2021-0360 | Android netdiag out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0359 | Android netdiag out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0358 | Android netdiag command injection | 6.7v3.1 | 0.3% | 2021-02-03 | |
| CVE-2021-0357 | Android netdiag out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0356 | Android netdiag command injection | 6.7v3.1 | 0.3% | 2021-02-03 | |
| CVE-2021-0355 | Android kisd out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0354 | Android ged out-of-bounds write | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0353 | Android kisd memory corruption | 6.7v3.1 | 0.2% | 2021-02-03 | |
| CVE-2021-0352 | Android RT regmap driver memory corruption | 4.4v3.1 | 0.1% | 2021-02-03 | |
| CVE-2021-25912 | Prototype pollution in dotty | 9.8v3.1 | 3.3% | 2021-02-02 | Fix |
| CVE-2021-25310 | Belkin Linksys WRT160NL escape sequence injection | 8.8v3.1 | 4.6% | 2021-02-02 | |
| CVE-2021-23271 | TIBCO EBX cross-site scripting (XSS) | 8.0CNA v3.1 | 0.9% | 2021-02-02 | Fix |
| CVE-2021-21294 | http4s unbounded connection acceptance in http4s-blaze-server | 7.5CNA v3.1 | 2.1% | 2021-02-02 | Fix |
| CVE-2021-21293 | http4s blaze unbounded connection acceptance leads to file handle exhaustion | 7.5CNA v3.1 | 2.1% | 2021-02-02 | Fix |
| CVE-2021-21292 | Unquoted Windows binary path in Traccar | 5.5CNA v3.1 | 0.4% | 2021-02-02 | Fix |
| CVE-2021-21291 | oauth2-proxy subdomain checking of whitelisted domains could allow unintended redirects | 4.7CNA v3.1 | 1.6% | 2021-02-02 | Fix |
| CVE-2021-21289 | Command injection vulnerability in Mechanize | 7.4CNA v3.1 | 3.5% | 2021-02-02 | Fix |
| CVE-2021-21285 | Docker daemon crash during image pull of malicious image | 6.5CNA v3.1 | 3.3% | 2021-02-02 | Fix |
| CVE-2021-21284 | Privilege escalation in Moby | 6.8CNA v3.1 | 1.1% | 2021-02-02 | Fix |
| CVE-2021-21043 | Adobe Experience Manager reflected cross-site scripting on version-compare and page-compare tools | 6.1CNA v3.1 | 3.3% | 2021-02-02 | Fix |
| CVE-2021-20199 | Podman origin validation error | 5.9v3.1 | 1.1% | 2021-02-02 | Fix |
| CVE-2021-3395 | Pryaniki cross-site scripting | 5.4v3.1 | 0.8% | 2021-02-02 | Exploit codeFix |
| CVE-2021-3281 | Django directory traversal via archive.extract | 5.3v3.1 | 7.6% | 2021-02-02 | Exploit codeFix |
| CVE-2021-23330 | launchpad command injection | 9.8CNA v3.1 | 5.2% | 2021-02-01 | |
| CVE-2021-21287 | Server-side request forgery in MinIO Browser API | 7.7CNA v3.1 | 24.8% | 2021-02-01 | NucleiFix |
| CVE-2021-21286 | Authorization bypass in AVideo Platform | 7.7CNA v3.1 | 0.8% | 2021-02-01 | Fix |
| CVE-2021-21277 | peerigon angular-expressions angular Expressions remote code execution | 8.5CNA v3.1 | 2.7% | 2021-02-01 | Fix |
| CVE-2021-21276 | Privilege escalation in Polr | 9.3CNA v3.1 | 7.2% | 2021-02-01 | Exploit codeFix |
| CVE-2021-21266 | XXE vulnerability in OpenHAB | 6.4CNA v3.1 | 1.1% | 2021-02-01 | Fix |
| CVE-2021-3378 | Fortilogger unrestricted file upload | 9.8v3.1 | 97.5% | 2021-02-01 | NucleiMetasploitExploit code |
| CVE-2021-3350 | DELETE Account cross-site scripting | 6.1v3.1 | 0.8% | 2021-02-01 | |
| CVE-2021-3349 | GNOME Evolution insufficient verification of data authenticity | 3.3v3.1 | 0.3% | 2021-02-01 | |
| CVE-2021-3348 | Linux kernel race condition | 7.0v3.1 | 0.3% | 2021-02-01 | Fix |
| CVE-2021-3340 | Wikindx many forms cross-site scripting | 6.1v3.1 | 0.8% | 2021-02-01 | Fix |
| CVE-2021-3283 | Improper privilege management in HashiCorp Nomad | 7.5v3.1 | 1.5% | 2021-02-01 | Fix |
| CVE-2021-3282 | Improper authentication in HashiCorp Vault | 7.5v3.1 | 1.3% | 2021-02-01 | Fix |
| CVE-2021-3024 | HashiCorp Vault HTTP API vulnerability | 5.3v3.1 | 1.4% | 2021-02-01 | Fix |