CVE-2021 records published in March 2021
This page lists the 1,134 CVE-2021 records published in March 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 22 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 13211.6% of these records
- Listed in CISA KEV
- 221.9% of these records
- Reported exploited
- 20.2% of these records
- Detection signal
- 443.9% of these records
- Exploit code
- 716.3% of these records
- Actionable vendor fix
- 96284.8% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in March 2021 have had from about 67 months to about 68 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-29663 | Course Registration Management System cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-31 | |
| CVE-2021-29662 | NetApp SnapCenter incorrect type conversion | 7.5v3.1 | 2.2% | 2021-03-31 | Fix |
| CVE-2021-29658 | vscode-rufo extension workspace folder loading arbitrary code execution | 8.8v3.1 | 1.2% | 2021-03-31 | Fix |
| CVE-2021-29349 | Mahara cross-site request forgery | 6.5NVD v3.1 | 1.5% | 2021-03-31 | |
| CVE-2021-28994 | Kopano Groupware Core resource exhaustion | 7.5v3.1 | 2.0% | 2021-03-31 | |
| CVE-2021-28657 | Infinite loop in Apache Tika's MP3 parser | 5.5v3.1 | 2.8% | 2021-03-31 | Fix |
| CVE-2021-28245 | PbootCMS SQL injection | 7.5v3.1 | 1.1% | 2021-03-31 | |
| CVE-2021-27349 | AlgolPlus Advanced Order Export For WooCommerce cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-31 | Fix |
| CVE-2021-27220 | Paessler PRTG Network Monitor screenshot functionality vulnerability | 5.3v3.1 | 1.8% | 2021-03-31 | Fix |
| CVE-2021-26943 | ASUS UX360CA BIOS arbitrary code execution | 8.2v3.1 | 0.9% | 2021-03-31 | Exploit code |
| CVE-2021-23988 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.1% | 2021-03-31 | Fix |
| CVE-2021-23987 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 1.4% | 2021-03-31 | Fix |
| CVE-2021-23986 | Mozilla Firefox origin validation error | 6.5v3.1 | 0.4% | 2021-03-31 | Fix |
| CVE-2021-23985 | Mozilla Firefox DevTools remote debugging information disclosure | 6.5v3.1 | 1.4% | 2021-03-31 | Fix |
| CVE-2021-23984 | Mozilla Firefox ESR authentication bypass by spoofing | 6.5v3.1 | 1.1% | 2021-03-31 | Fix |
| CVE-2021-23983 | Mozilla Firefox out-of-bounds write | 6.5v3.1 | 0.7% | 2021-03-31 | Fix |
| CVE-2021-23982 | Mozilla Firefox ESR inadequate encryption strength | 6.5v3.1 | 0.7% | 2021-03-31 | Fix |
| CVE-2021-23981 | Mozilla Firefox ESR out-of-bounds write | 8.1v3.1 | 1.1% | 2021-03-31 | Fix |
| CVE-2021-23348 | portprocesses arbitrary command injection | 8.8v3.1 | 1.8% | 2021-03-31 | Fix |
| CVE-2021-23007 | F5 BIG-IP Traffic Management Microkernel vulnerability | 5.3v3.1 | 1.6% | 2021-03-31 | Fix |
| CVE-2021-23006 | BIG-IQ cross-site scripting | 6.1v3.1 | 0.6% | 2021-03-31 | Fix |
| CVE-2021-23005 | F5 BIG-IQ Corosync high availability communication vulnerability | 9.1v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-23004 | F5 BIG-IP MPTCP forwarding flow handling vulnerability | 7.5v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-23003 | F5 BIG-IP Traffic Management Microkernel vulnerability | 7.5v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-23002 | BIG-IP APM and Edge Client f5vpn.exe vulnerability | 4.5v3.1 | 0.3% | 2021-03-31 | Fix |
| CVE-2021-23001 | BIG-IP Advanced WAF and BIG-IP ASM unrestricted file upload | 4.3v3.1 | 0.6% | 2021-03-31 | Fix |
| CVE-2021-23000 | F5 BIG-IP bad host header check vulnerability | 7.5v3.1 | 0.9% | 2021-03-31 | Fix |
| CVE-2021-22999 | F5 BIG-IP HTTP/2 to HTTP/1.x gateway vulnerability | 7.5v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-22998 | F5 BIG-IP SNAT listeners vulnerability | 5.3v3.1 | 0.9% | 2021-03-31 | Fix |
| CVE-2021-22997 | BIG-IQ missing authentication | 7.5v3.1 | 1.1% | 2021-03-31 | Fix |
| CVE-2021-22996 | BIG-IQ denial of service | 7.5v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-22995 | BIG-IQ missing authentication | 7.5v3.1 | 0.9% | 2021-03-31 | Fix |
| CVE-2021-22994 | BIG-IP cross-site scripting | 6.1v3.1 | 0.6% | 2021-03-31 | Fix |
| CVE-2021-22993 | BIG-IP Advanced WAF and BIG-IP ASM cross-site scripting | 8.8v3.1 | 0.9% | 2021-03-31 | Fix |
| CVE-2021-22992 | BIG-IP Advanced WAF and BIG-IP ASM buffer overflow | 9.8v3.1 | 67.6% | 2021-03-31 | Fix |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel buffer overflow | 9.8v3.1 | 61.1% | 2021-03-31 | KEVEmerging ThreatsFix |
| CVE-2021-22990 | BIG-IP Advanced WAF or BIG-IP ASM remote command execution | 7.2v3.1 | 8.8% | 2021-03-31 | Fix |
| CVE-2021-22989 | BIG-IP Advanced WAF or BIG-IP ASM in Appliance Mode remote command execution | 9.1v3.1 | 8.8% | 2021-03-31 | Fix |
| CVE-2021-22988 | BIG-IP remote command execution | 8.8v3.1 | 10.4% | 2021-03-31 | Fix |
| CVE-2021-22987 | BIG-IP Appliance Mode remote command execution | 9.9v3.1 | 13.7% | 2021-03-31 | Fix |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST remote code execution | 9.8NVD v3.1 | 99.9% | 2021-03-31 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-22538 | Google Exposure Notifications Verification Server privilege escalation in RBAC system | 6.3CNA v3.1 | 0.7% | 2021-03-31 | Fix |
| CVE-2021-21983 | VMware Vrealize Operations Manager arbitrary file write | 6.5v3.1 | 68.6% | 2021-03-31 | Reported exploitedMetasploitExploit codeKCVFix |
| CVE-2021-21975 | VMware server side request forgery in vRealize Operations Manager API | 7.5NVD v3.1 | 78.0% | 2021-03-31 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-21782 | Accusoft ImageGear out-of-bounds write | 8.8NVD v3.1 | 1.3% | 2021-03-31 | |
| CVE-2021-21776 | Accusoft ImageGear out-of-bounds write | 8.8NVD v3.1 | 1.3% | 2021-03-31 | |
| CVE-2021-21773 | Accusoft ImageGear TIFF header count-processing functionality out-of-bounds write | 7.8v3.1 | 0.7% | 2021-03-31 | |
| CVE-2021-21418 | PrestaShop ps_emailsubscription potential XSS injection in the newsletter conditions field | 4.6CNA v3.1 | 0.8% | 2021-03-31 | Fix |
| CVE-2021-3479 | OpenEXR resource exhaustion | 5.5NVD v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-3478 | OpenEXR resource exhaustion | 5.5NVD v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-3477 | OpenEXR integer overflow | 5.5NVD v3.1 | 1.0% | 2021-03-31 | Fix |
| CVE-2021-3470 | Redis A heap-based buffer overflow | 5.3NVD v3.1 | 1.1% | 2021-03-31 | Fix |
| CVE-2021-29650 | Linux kernel denial of service | 5.5v3.1 | 0.4% | 2021-03-30 | Fix |
| CVE-2021-29649 | Linux kernel memory leak | 5.5v3.1 | 0.3% | 2021-03-30 | Fix |
| CVE-2021-29648 | Linux kernel missing brute-force protection | 5.5v3.1 | 0.3% | 2021-03-30 | Fix |
| CVE-2021-29647 | Linux kernel missing resource initialization | 5.5v3.1 | 0.4% | 2021-03-30 | Fix |
| CVE-2021-29646 | Linux kernel TIPC netlink key handling vulnerability | 5.5v3.1 | 0.3% | 2021-03-30 | Fix |
| CVE-2021-29642 | Gistpad incorrect authorization | 5.3v3.1 | 0.9% | 2021-03-30 | |
| CVE-2021-29418 | Improper parsing of octal bytes in Netmask | 5.3v3.1 | 1.7% | 2021-03-30 | Fix |
| CVE-2021-29376 | Eterna Ircii denial of service | 7.5v3.1 | 2.3% | 2021-03-30 | Fix |
| CVE-2021-29343 | Ovidentia SQL injection | 5.4v3.1 | 0.8% | 2021-03-30 | |
| CVE-2021-28935 | CMS Made Simple cross-site scripting | 5.4v3.1 | 1.6% | 2021-03-30 | Exploit code |
| CVE-2021-27271 | Foxit PhantomPDF out-of-bounds read | 7.8v3.1 | 3.3% | 2021-03-30 | Fix |
| CVE-2021-27270 | Foxit PhantomPDF out-of-bounds read | 7.8v3.1 | 2.7% | 2021-03-30 | Fix |
| CVE-2021-27269 | Foxit PhantomPDF out-of-bounds write | 7.8v3.1 | 2.5% | 2021-03-30 | Fix |
| CVE-2021-27268 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 2.5% | 2021-03-30 | Fix |
| CVE-2021-27267 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 2.5% | 2021-03-30 | Fix |
| CVE-2021-27266 | Foxit PhantomPDF out-of-bounds read | 3.3v3.1 | 2.2% | 2021-03-30 | Fix |
| CVE-2021-27265 | Foxit PhantomPDF out-of-bounds read | 3.3v3.1 | 2.0% | 2021-03-30 | Fix |
| CVE-2021-27264 | Foxit PhantomPDF out-of-bounds read | 3.3v3.1 | 2.2% | 2021-03-30 | Fix |
| CVE-2021-27263 | Foxit PhantomPDF out-of-bounds read | 3.3v3.1 | 2.9% | 2021-03-30 | Fix |
| CVE-2021-27262 | Foxit PhantomPDF out-of-bounds read | 3.3v3.1 | 2.0% | 2021-03-30 | Fix |
| CVE-2021-27261 | Foxit PhantomPDF out-of-bounds read | 7.8v3.1 | 2.7% | 2021-03-30 | Fix |
| CVE-2021-26919 | Apache Druid Authenticated users can execute arbitrary code from malicious MySQL database systems | 8.8v3.1 | 35.2% | 2021-03-30 | Fix |
| CVE-2021-26810 | D-Link DIR-816 OS command injection | 9.8v3.1 | 4.9% | 2021-03-30 | |
| CVE-2021-26579 | HPE Unified Data Management (UDM) hard-coded credentials | 5.5v3.1 | 0.2% | 2021-03-30 | Fix |
| CVE-2021-25162 | Aruba Instant Access Points OS command injection | 8.1v3.1 | 25.6% | 2021-03-30 | Exploit codeFix |
| CVE-2021-25161 | Aruba Instant Access Points cross-site scripting | 6.1v3.1 | 16.4% | 2021-03-30 | NucleiExploit codeFix |
| CVE-2021-25160 | Aruba Instant Access Points arbitrary file write | 4.9v3.1 | 7.1% | 2021-03-30 | Exploit codeFix |
| CVE-2021-25159 | Aruba Instant Access Points arbitrary file write | 6.5v3.1 | 13.5% | 2021-03-30 | Exploit codeFix |
| CVE-2021-25158 | Aruba Instant Access Points race condition | 5.9v3.1 | 30.6% | 2021-03-30 | Emerging ThreatsExploit codeFix |
| CVE-2021-25157 | Aruba Instant Access Points arbitrary file read | 4.9v3.1 | 10.3% | 2021-03-30 | Exploit codeFix |
| CVE-2021-25156 | A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below | 4.9v3.1 | 40.5% | 2021-03-30 | Emerging ThreatsExploit codeFix |
| CVE-2021-25155 | Aruba Instant Access Points arbitrary file write | 6.5v3.1 | 13.3% | 2021-03-30 | Exploit codeFix |
| CVE-2021-25150 | Aruba Instant Access Points OS command injection | 8.8v3.1 | 2.8% | 2021-03-30 | Fix |
| CVE-2021-25149 | Aruba Instant Access Points buffer overflow | 9.8v3.1 | 1.6% | 2021-03-30 | Fix |
| CVE-2021-25148 | Aruba Instant Access Points arbitrary file write | 8.1v3.1 | 0.9% | 2021-03-30 | Fix |
| CVE-2021-25146 | Aruba Instant Access Points OS command injection | 7.2v3.1 | 2.7% | 2021-03-30 | Fix |
| CVE-2021-25145 | Aruba Instant Access Points information disclosure | 6.5v3.1 | 0.4% | 2021-03-30 | Fix |
| CVE-2021-23363 | kill-by-port arbitrary command injection | 8.8v3.1 | 1.8% | 2021-03-30 | Fix |
| CVE-2021-21638 | CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials | 8.8v3.1 | 0.8% | 2021-03-30 | Fix |
| CVE-2021-21637 | Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials | 6.5v3.1 | 1.0% | 2021-03-30 | |
| CVE-2021-21636 | Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs | 4.3v3.1 | 0.8% | 2021-03-30 | |
| CVE-2021-21635 | Stored XSS vulnerability in Jenkins REST List Parameter Plugin | 5.4v3.1 | 8.8% | 2021-03-30 | Fix |
| CVE-2021-21634 | Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin | 6.5v3.1 | 0.8% | 2021-03-30 | Fix |
| CVE-2021-21633 | CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials | 8.8v3.1 | 0.8% | 2021-03-30 | Fix |
| CVE-2021-21632 | Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials | 6.5v3.1 | 1.1% | 2021-03-30 | Fix |
| CVE-2021-21631 | Missing permission check in Jenkins Cloud Statistics Plugin | 4.3v3.1 | 0.8% | 2021-03-30 | Fix |
| CVE-2021-21630 | Stored XSS vulnerability in Jenkins Extra COLUMNS Plugin | 5.4v3.1 | 72.4% | 2021-03-30 | Fix |
| CVE-2021-21629 | CSRF vulnerability in Jenkins Build With Parameters Plugin | 8.8v3.1 | 0.8% | 2021-03-30 | Fix |
| CVE-2021-21628 | Stored XSS vulnerability in Jenkins Build With Parameters Plugin | 5.4v3.1 | 81.9% | 2021-03-30 | Fix |
| CVE-2021-21413 | isolated-vm Reference API vulnerability | 8.0CNA v3.1 | 0.7% | 2021-03-30 | Fix |
| CVE-2021-21412 | thi-ng egf potential arbitrary code execution of `#gpg`-tagged property values | 6.4CNA v3.1 | 1.3% | 2021-03-30 | Fix |
| CVE-2021-21409 | netty possible request smuggling in HTTP/2 due missing validation of content-length | 5.9CNA v3.1 | 4.9% | 2021-03-30 | Fix |
| CVE-2021-21398 | PrestaShop possible XSS injection through DataColumn Grid class | 5.4CNA v3.1 | 0.7% | 2021-03-30 | Fix |
| CVE-2021-20520 | IBM Engineering Workflow Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-20518 | IBM Engineering Lifecycle Optimization cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-20506 | IBM Engineering Lifecycle Optimization cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-20504 | IBM Rational Team Concert cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-20503 | IBM Engineering Workflow Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-20502 | IBM Engineering Lifecycle Optimization XML external entity injection | 7.1CNA v3.0 | 1.4% | 2021-03-30 | Fix |
| CVE-2021-20482 | IBM Cloud Pak for Automation XML external entity injection | 7.1CNA v3.0 | 1.4% | 2021-03-30 | Fix |
| CVE-2021-20447 | IBM Rational Engineering Lifecycle Manager cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-20352 | IBM Engineering Workflow Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-03-30 | Fix |
| CVE-2021-3476 | OpenEXR integer overflow | 5.3NVD v3.1 | 1.8% | 2021-03-30 | Fix |
| CVE-2021-3475 | OpenEXR integer overflow | 5.3NVD v3.1 | 1.8% | 2021-03-30 | Fix |
| CVE-2021-3474 | OpenEXR integer overflow | 5.3NVD v3.1 | 1.8% | 2021-03-30 | Fix |
| CVE-2021-29417 | Gitjacker arbitrary code execution | 9.8v3.1 | 3.8% | 2021-03-29 | Fix |
| CVE-2021-29416 | PortSwigger Burp Suite upstream proxy configuration handling vulnerability | 6.5v3.1 | 1.1% | 2021-03-29 | Fix |
| CVE-2021-29274 | Redmine cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-29 | Fix |
| CVE-2021-29267 | Sherlockim cross-site scripting | 6.1v3.1 | 0.9% | 2021-03-29 | Exploit code |
| CVE-2021-28937 | Acexy Wireless-n Wifi Repeater cleartext storage of sensitive information | 7.5v3.1 | 4.2% | 2021-03-29 | Nuclei |
| CVE-2021-28936 | Acexy Wireless-n Wifi Repeater incorrect authorization | 7.5v3.1 | 2.0% | 2021-03-29 | |
| CVE-2021-28673 | Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01 (Bridge), B600/B610 before 32.61.23 and 32.59.01 (Bridge), B605/B615 before 33.61.23 and 33.59.01 (B | 9.8v3.1 | 1.9% | 2021-03-29 | Fix |
| CVE-2021-28672 | Xerox Workcentre 6515 buffer overflow | 9.8v3.1 | 2.1% | 2021-03-29 | Fix |
| CVE-2021-28671 | Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (B | 9.8v3.1 | 2.6% | 2021-03-29 | Fix |
| CVE-2021-28670 | Xerox Altalink B8045 arbitrary file deletion | 9.1v3.1 | 1.0% | 2021-03-29 | Fix |
| CVE-2021-28669 | Xerox Altalink B8045 missing authorization | 7.5v3.1 | 0.8% | 2021-03-29 | Fix |
| CVE-2021-28668 | Xerox Altalink B8045 SQL injection | 9.8v3.1 | 1.0% | 2021-03-29 | Fix |
| CVE-2021-27352 | Ilch Cms An open redirect | 5.4v3.1 | 0.8% | 2021-03-29 | |
| CVE-2021-27276 | NETGEAR ProSAFE Network Management System path traversal | 7.1v3.1 | 72.5% | 2021-03-29 | Fix |
| CVE-2021-27275 | NETGEAR ProSAFE Network Management System path traversal | 8.3v3.1 | 73.3% | 2021-03-29 | Fix |
| CVE-2021-27274 | NETGEAR ProSAFE Network Management System unrestricted file upload | 9.8v3.1 | 8.2% | 2021-03-29 | Fix |
| CVE-2021-27273 | NETGEAR ProSAFE Network Management System OS command injection | 8.8v3.1 | 66.0% | 2021-03-29 | Fix |
| CVE-2021-27272 | NETGEAR ProSAFE Network Management System path traversal | 7.1v3.1 | 73.8% | 2021-03-29 | Fix |
| CVE-2021-27245 | TP-Link Archer A7 protection mechanism failure | 8.1v3.1 | 3.2% | 2021-03-29 | |
| CVE-2021-27244 | Parallels Desktop out-of-bounds read | 6.5v3.1 | 0.3% | 2021-03-29 | Fix |
| CVE-2021-27243 | Parallels Desktop integer overflow | 8.8v3.1 | 0.3% | 2021-03-29 | Fix |
| CVE-2021-27242 | Parallels Desktop out-of-bounds write | 8.8v3.1 | 0.3% | 2021-03-29 | Fix |
| CVE-2021-27241 | Avast Premium Security link following | 6.1v3.1 | 0.3% | 2021-03-29 | |
| CVE-2021-27240 | SolarWinds Patch Manager deserialization of untrusted data | 7.8v3.1 | 0.4% | 2021-03-29 | Fix |
| CVE-2021-27239 | NETGEAR Multiple Routers stack-based buffer overflow | 8.8v3.1 | 0.7% | 2021-03-29 | Fix |
| CVE-2021-26714 | Mitel Micontact Center Enterprise improper access control | 9.8v3.1 | 2.5% | 2021-03-29 | Exploit codeFix |
| CVE-2021-25144 | Aruba Instant Access Points buffer overflow | 8.8v3.1 | 2.1% | 2021-03-29 | Fix |
| CVE-2021-25143 | Aruba Instant Access Points denial of service | 7.5v3.1 | 1.3% | 2021-03-29 | Fix |
| CVE-2021-23358 | underscore arbitrary code injection | 7.2NVD v3.1 | 4.2% | 2021-03-29 | Exploit codeFix |
| CVE-2021-21727 | ZTE ZXHN F623 IPv6 packet handling denial of service | 7.5v3.1 | 1.4% | 2021-03-29 | Fix |
| CVE-2021-3391 | MobileIron Mobile@Work login lockout vulnerability | 5.3v3.1 | 1.1% | 2021-03-29 | |
| CVE-2021-29272 | Cross-site scripting in Bluemonday | 6.1v3.1 | 0.9% | 2021-03-27 | Fix |
| CVE-2021-29271 | remark42 cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-27 | |
| CVE-2021-29266 | Linux kernel use-after-free | 7.8v3.1 | 0.3% | 2021-03-26 | Fix |
| CVE-2021-29265 | Linux kernel race condition | 4.7v3.1 | 0.3% | 2021-03-26 | Fix |
| CVE-2021-29264 | Linux kernel Freescale Gianfar Ethernet driver denial of service | 5.5v3.1 | 0.3% | 2021-03-26 | Fix |
| CVE-2021-29255 | Microseven Mym71080i-b insufficiently protected credentials | 7.5v3.1 | 0.6% | 2021-03-26 | |
| CVE-2021-29249 | BTCPay Server payment button vulnerability | 7.5v3.1 | 1.2% | 2021-03-26 | Fix |
| CVE-2021-28250 | CA Technologies Ehealth Performance Manager improper privilege management | 7.8v3.1 | 0.3% | 2021-03-26 | |
| CVE-2021-28249 | CA Technologies Ehealth Performance Manager untrusted search path | 8.8v3.1 | 0.4% | 2021-03-26 | |
| CVE-2021-28248 | Broadcom Ehealth missing brute-force protection | 7.5v3.1 | 1.4% | 2021-03-26 | |
| CVE-2021-28247 | CA Technologies Ehealth Performance Manager cross-site scripting | 5.4v3.1 | 0.7% | 2021-03-26 | |
| CVE-2021-28246 | Broadcom Ehealth untrusted search path | 7.8v3.1 | 0.4% | 2021-03-26 | |
| CVE-2021-25372 | Samsung Mobile Devices improper bounds check | 6.1CNA v3.1 | 0.8% | 2021-03-26 | KEVFix |
| CVE-2021-25371 | Samsung Mobile Devices hidden functionality | 6.1CNA v3.1 | 0.8% | 2021-03-26 | KEVFix |
| CVE-2021-25370 | Samsung Mobile Devices memory corruption | 6.1CNA v3.1 | 0.9% | 2021-03-26 | KEVKCVFix |
| CVE-2021-25369 | Samsung Mobile Devices improper access control | 6.2CNA v3.1 | 1.1% | 2021-03-26 | KEVKCVFix |
| CVE-2021-23890 | McAfee ePO information leak | 6.5CNA v3.1 | 0.9% | 2021-03-26 | Fix |
| CVE-2021-23889 | McAfee ePO cross-site scripting | 3.5CNA v3.1 | 0.5% | 2021-03-26 | Fix |
| CVE-2021-23888 | McAfee ePO unvalidated URL redirect vulnerability | 6.3CNA v3.1 | 0.6% | 2021-03-26 | Fix |
| CVE-2021-22886 | Rocket.Chat cross-site scripting | 6.1v3.1 | 1.7% | 2021-03-26 | |
| CVE-2021-22506 | Micro Focus Access Manager information leakage | 7.5v3.1 | 25.7% | 2021-03-26 | KEVFix |
| CVE-2021-22194 | GitLab cleartext storage of sensitive information | 5.7CNA v3.1 | 0.2% | 2021-03-26 | Fix |
| CVE-2021-22184 | GitLab An information disclosure | 6.2CNA v3.1 | 0.3% | 2021-03-26 | Fix |
| CVE-2021-22180 | GitLab forced browsing | 4.3CNA v3.1 | 0.9% | 2021-03-26 | Fix |
| CVE-2021-22172 | GitLab improper authorization | 4.3CNA v3.1 | 1.0% | 2021-03-26 | Fix |
| CVE-2021-21411 | Incorrect authorization in OAuth2-Proxy | 5.5CNA v3.1 | 1.1% | 2021-03-26 | Fix |
| CVE-2021-21403 | Authentication bypass by primary weakness in github.com/Kongchuanhujiao/server | 7.5CNA v3.1 | 1.4% | 2021-03-26 | Fix |
| CVE-2021-21396 | wireapp wire-server bulk list client endpoint exposes too much metadata about a client | 6.5CNA v3.1 | 1.1% | 2021-03-26 | Fix |
| CVE-2021-21389 | BuddyPress privilege escalation via REST API | 8.1CNA v3.1 | 13.5% | 2021-03-26 | NucleiExploit codeFix |
| CVE-2021-21374 | nim-lang security nimble fails to validate certificates due to insecure httpClient defaults | 8.1CNA v3.1 | 1.0% | 2021-03-26 | Fix |
| CVE-2021-21373 | nim-lang security nimble falls back to insecure HTTP URL when fetching packages | 7.5CNA v3.1 | 1.2% | 2021-03-26 | Fix |
| CVE-2021-21372 | nim-lang security nimble arbitrary code execution for specially crafted package metadata | 8.3CNA v3.1 | 3.6% | 2021-03-26 | Fix |
| CVE-2021-21333 | matrix-org synapse HTML injection in email and account expiry notifications | 6.1CNA v3.1 | 1.4% | 2021-03-26 | Fix |
| CVE-2021-21332 | matrix-org synapse cross-site scripting (XSS) vulnerability in the password reset endpoint | 6.9CNA v3.1 | 1.2% | 2021-03-26 | Fix |
| CVE-2021-20683 | Cross-site scripting (XSS) in baserCMS | 5.4v3.1 | 0.7% | 2021-03-26 | Fix |
| CVE-2021-20682 | OS command injection in baserCMS | 7.2v3.1 | 2.5% | 2021-03-26 | Fix |
| CVE-2021-20681 | Cross-site scripting (XSS) in baserCMS | 5.4v3.1 | 0.7% | 2021-03-26 | Fix |
| CVE-2021-20677 | NEC Platforms UNIVERGE Aspire series PBX denial of service | 3.1v3.1 | 0.9% | 2021-03-26 | Fix |
| CVE-2021-20289 | Exposure of class information in RESTEasy | 5.3v3.1 | 1.4% | 2021-03-26 | Fix |
| CVE-2021-20285 | UPX ELF packer buffer overflow | 6.6NVD v3.1 | 0.8% | 2021-03-26 | Fix |
| CVE-2021-20284 | binutils heap-based buffer overflow | 5.5NVD v3.1 | 1.3% | 2021-03-26 | Fix |
| CVE-2021-20271 | RPM insufficient verification of data authenticity | 7.0v3.1 | 0.8% | 2021-03-26 | Fix |
| CVE-2021-20206 | containernetworking-cni containernetworking/cni improper limitation of path name | 7.2NVD v3.1 | 1.5% | 2021-03-26 | Fix |
| CVE-2021-20197 | binutils link following | 6.3NVD v3.1 | 0.3% | 2021-03-26 | Fix |
| CVE-2021-20193 | GNU tar list.c parser memory leak | 3.3NVD v3.1 | 1.1% | 2021-03-26 | Fix |
| CVE-2021-3275 | TP-Link Archer C3150 multiple stored cross-site scripting | 6.1v3.1 | 1.8% | 2021-03-26 | |
| CVE-2021-3153 | HashiCorp Terraform Enterprise improper authentication | 6.5v3.1 | 0.7% | 2021-03-26 | Fix |
| CVE-2021-3109 | SolarWinds Orion Platform reverse tabnabbing | 4.8v3.1 | 0.8% | 2021-03-26 | Fix |
| CVE-2021-3027 | Librit Passhport LDAP injection | 6.5v3.1 | 1.2% | 2021-03-26 | |
| CVE-2021-1629 | Tableau open redirect | 6.1v3.1 | 1.3% | 2021-03-26 | Fix |
| CVE-2021-1628 | Mulesoft XML external entity injection | 9.8v3.1 | 1.2% | 2021-03-26 | Fix |
| CVE-2021-1627 | Mulesoft server-side request forgery | 9.8v3.1 | 1.0% | 2021-03-26 | Fix |
| CVE-2021-1626 | Mulesoft remote code execution | 9.8v3.1 | 2.0% | 2021-03-26 | Fix |
| CVE-2021-29156 | ForgeRock OpenAM LDAP injection | 7.5v3.1 | 76.4% | 2021-03-25 | NucleiExploit code |
| CVE-2021-29098 | ArcGIS general raster security update: Uninitialized pointer | 7.8CNA v3.0 | 2.0% | 2021-03-25 | Fix |
| CVE-2021-29097 | ArcGIS general raster security update: Buffer overflow | 7.8CNA v3.0 | 2.4% | 2021-03-25 | Fix |
| CVE-2021-29096 | ArcGIS general raster security update: Use-after-free | 7.8CNA v3.0 | 1.5% | 2021-03-25 | Fix |
| CVE-2021-29095 | ArcGIS Server image service and raster analytics security update: Uninitialized pointer | 6.4CNA v3.0 | 0.9% | 2021-03-25 | Fix |
| CVE-2021-29094 | ArcGIS Server image service and raster analytics security update: Buffer overflow | 6.4CNA v3.0 | 1.0% | 2021-03-25 | Fix |
| CVE-2021-29093 | ArcGIS Server image service and raster analytics security update: Use-after-free | 6.4CNA v3.0 | 0.9% | 2021-03-25 | Fix |
| CVE-2021-29010 | SEO Panel cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-25 | |
| CVE-2021-29009 | SEO Panel cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-25 | |
| CVE-2021-29008 | SEO Panel cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-25 | |
| CVE-2021-27454 | Reason DR60 execution with unnecessary privileges | 7.8v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-27452 | MU320E hard-coded password | 7.8v3.1 | 0.3% | 2021-03-25 | Fix |
| CVE-2021-27450 | MU320E inadequate encryption strength | 7.8v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-27448 | MU320E execution with unnecessary privileges | 7.8v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-27440 | Reason DR60 hard-coded password | 9.8v3.1 | 1.4% | 2021-03-25 | Fix |
| CVE-2021-27438 | Reason DR60 code injection | 8.8v3.1 | 1.2% | 2021-03-25 | Fix |
| CVE-2021-27372 | Realtek Xpon RTL9601D insufficiently protected credentials | 9.8v3.1 | 1.6% | 2021-03-25 | Fix |
| CVE-2021-27195 | NetOp Vision Pro improper authorization | 5.9v3.1 | 0.8% | 2021-03-25 | |
| CVE-2021-27194 | NetOp Vision Pro cleartext transmission of sensitive information | 8.8v3.1 | 0.4% | 2021-03-25 | |
| CVE-2021-27193 | NetOp Vision Pro API incorrect default permissions | 9.8v3.1 | 1.5% | 2021-03-25 | |
| CVE-2021-27192 | NetOp Vision Pro Windows clients local privilege escalation | 7.8v3.1 | 0.2% | 2021-03-25 | |
| CVE-2021-26715 | Mitreid Connect server side request forgery (SSRF) in org.mitre:openid-connect-server | 9.1v3.1 | 1.5% | 2021-03-25 | |
| CVE-2021-26597 | Nokia Netact unrestricted file upload | 6.5v3.1 | 1.4% | 2021-03-25 | |
| CVE-2021-26596 | Nokia Netact cross-site scripting | 5.4v3.1 | 0.7% | 2021-03-25 | |
| CVE-2021-25368 | Samsung Mobile Samsung Cloud improper authentication | 3.3CNA v3.1 | 0.6% | 2021-03-25 | Fix |
| CVE-2021-25367 | Samsung Mobile Samsung Notes path traversal | 3.7CNA v3.1 | 0.6% | 2021-03-25 | Fix |
| CVE-2021-25366 | Samsung Mobile Samsung Internet improper access control | 3.2CNA v3.1 | 0.3% | 2021-03-25 | Fix |
| CVE-2021-25355 | Samsung Mobile Samsung Notes improper authorization | 5.5CNA v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-25354 | Samsung Mobile Samsung Internet improper authorization | 3.3CNA v3.1 | 0.5% | 2021-03-25 | Fix |
| CVE-2021-25353 | Samsung Mobile Galaxy Themes improper authorization | 5.5CNA v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-25352 | Samsung Mobile Bixby Voice improper authorization | 5.5CNA v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-25351 | Samsung Mobile Samsung Account EmailValidationView improper access control | 3.2CNA v3.1 | 0.3% | 2021-03-25 | Fix |
| CVE-2021-25350 | Samsung Mobile Samsung Account information disclosure | 2.0CNA v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-25349 | Samsung Mobile Slow Motion Editor unauthorized access | 5.5CNA v3.1 | 0.2% | 2021-03-25 | Fix |
| CVE-2021-22889 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 6.1v3.1 | 30.5% | 2021-03-25 | Fix |
| CVE-2021-22888 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 6.1v3.1 | 16.3% | 2021-03-25 | Fix |
| CVE-2021-22659 | Rockwell Automation MicroLogix 1400 buffer overflow | 8.6v3.1 | 1.7% | 2021-03-25 | |
| CVE-2021-22496 | Access Manager Micro Focus authentication bypass | 7.5v3.1 | 1.1% | 2021-03-25 | |
| CVE-2021-21783 | Genivia WS-Addressing plugin functionality code execution | 9.8v3.1 | 5.0% | 2021-03-25 | Fix |
| CVE-2021-20679 | Fuji Xerox multifunction devices and printers denial of service | 7.5v3.1 | 1.5% | 2021-03-25 | Fix |
| CVE-2021-20217 | privoxy reachable assertion | 7.5NVD v3.1 | 1.4% | 2021-03-25 | Fix |
| CVE-2021-20216 | Privoxy decompression handling memory leak | 7.5NVD v3.1 | 2.3% | 2021-03-25 | Fix |
| CVE-2021-20215 | Privoxy show-status CGI handler memory leak | 7.5NVD v3.1 | 2.3% | 2021-03-25 | Fix |
| CVE-2021-20214 | Privoxy client-tags CGI handler memory leak | 7.5NVD v3.1 | 2.0% | 2021-03-25 | Fix |
| CVE-2021-20213 | privoxy null pointer dereference | 7.5NVD v3.1 | 1.6% | 2021-03-25 | Fix |
| CVE-2021-20212 | Privoxy filter execution memory leak | 7.5NVD v3.1 | 2.0% | 2021-03-25 | Fix |
| CVE-2021-20211 | Privoxy client tags handling memory leak | 7.5NVD v3.1 | 2.1% | 2021-03-25 | Fix |
| CVE-2021-20210 | Privoxy show-status CGI handler memory leak | 7.5NVD v3.1 | 2.4% | 2021-03-25 | Fix |
| CVE-2021-3467 | jasper way null pointer dereference | 5.5NVD v3.1 | 0.6% | 2021-03-25 | Fix |
| CVE-2021-3466 | libmicrohttpd buffer overflow | 9.8NVD v3.1 | 8.7% | 2021-03-25 | Fix |
| CVE-2021-3450 | OpenSSL CA certificate check bypass with X509_V_FLAG_X509_STRICT | 7.4NVD v3.1 | 18.3% | 2021-03-25 | Exploit codeFix |
| CVE-2021-3449 | OpenSSL null pointer deref in signature_algorithms processing | 5.9NVD v3.1 | 63.5% | 2021-03-25 | Emerging ThreatsExploit codeFix |
| CVE-2021-3446 | libtpms weak cryptographic algorithm | 5.5NVD v3.1 | 0.1% | 2021-03-25 | Fix |
| CVE-2021-3443 | jasper way null pointer dereference | 5.5NVD v3.1 | 0.8% | 2021-03-25 | Fix |
| CVE-2021-3119 | Zetetic SQLCipher null pointer dereference | 7.5v3.1 | 1.6% | 2021-03-25 | Fix |
| CVE-2021-1492 | Cisco Duo Authentication Proxy Installer denial of service | 6.6CNA v3.1 | 0.3% | 2021-03-25 | Fix |
| CVE-2021-29133 | Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem. | 5.5v3.1 | 1.1% | 2021-03-24 | Exploit codeFix |
| CVE-2021-29033 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29032 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29031 | Bitweaver cross-site scripting | 4.8v3.1 | 0.9% | 2021-03-24 | |
| CVE-2021-29030 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29029 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29028 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29027 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29026 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29025 | Bitweaver cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-29002 | Plone A stored cross-site scripting | 5.4v3.1 | 0.8% | 2021-03-24 | |
| CVE-2021-28967 | Gimly Matlab arbitrary code execution | 9.8v3.1 | 2.0% | 2021-03-24 | Fix |
| CVE-2021-28362 | Contiki-os Contiki integer underflow | 7.5v3.1 | 1.3% | 2021-03-24 | Fix |
| CVE-2021-27320 | Doctor Appointment System contactus.php blind SQL injection | 7.5v3.1 | 9.3% | 2021-03-24 | Nuclei |
| CVE-2021-27319 | Doctor Appointment System contactus.php blind SQL injection | 7.5v3.1 | 7.8% | 2021-03-24 | Nuclei |
| CVE-2021-27316 | Doctor Appointment System contactus.php blind SQL injection | 7.5v3.1 | 7.8% | 2021-03-24 | Nuclei |
| CVE-2021-27315 | Doctor Appointment System contactus.php blind SQL injection | 7.5v3.1 | 7.8% | 2021-03-24 | Nuclei |
| CVE-2021-22193 | GitLab information disclosure through error messages | 3.5CNA v3.1 | 1.0% | 2021-03-24 | Fix |
| CVE-2021-22192 | GitLab arbitrary code execution | 9.9CNA v3.1 | 13.1% | 2021-03-24 | Exploit codeFix |
| CVE-2021-22186 | GitLab incorrect authorization | 4.9CNA v3.1 | 0.9% | 2021-03-24 | Fix |
| CVE-2021-22185 | GitLab cross-site scripting | 5.4CNA v3.1 | 0.8% | 2021-03-24 | Fix |
| CVE-2021-22179 | GitLab server-side request forgery | 5.4CNA v3.1 | 0.9% | 2021-03-24 | Fix |
| CVE-2021-22178 | GitLab server-side request forgery | 5.0CNA v3.1 | 1.1% | 2021-03-24 | Fix |
| CVE-2021-22176 | GitLab incorrect authorization | 4.3CNA v3.1 | 1.0% | 2021-03-24 | Fix |
| CVE-2021-22169 | GitLab information disclosure through error messages | 4.3CNA v3.1 | 0.8% | 2021-03-24 | Fix |
| CVE-2021-21386 | dwisiswant0 apkleaks improper neutralization of Argument Delimiters in a Decompiling Package Process | 9.3CNA v3.1 | 2.3% | 2021-03-24 | Fix |
| CVE-2021-21385 | openMF mifos-mobile disabled hostname verification and accepting self-signed certificates | 8.8CNA v3.1 | 0.7% | 2021-03-24 | Fix |
| CVE-2021-1471 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 9.9CNA v3.1 | 1.3% | 2021-03-24 | Fix |
| CVE-2021-1469 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 9.9CNA v3.1 | 1.0% | 2021-03-24 | Fix |
| CVE-2021-1460 | Cisco IOx Application Framework denial of service | 5.3CNA v3.1 | 1.3% | 2021-03-24 | Fix |
| CVE-2021-1454 | Cisco IOS Xe Sd-wan software parameter injection | 6.0CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1453 | Cisco IOS XE Software for the Catalyst 9000 Family arbitrary code execution | 6.8CNA v3.1 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1452 | Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS command injection | 6.8CNA v3.1 | 0.4% | 2021-03-24 | Fix |
| CVE-2021-1451 | Cisco IOS XE Software Easy Virtual Switching System arbitrary code execution | 8.1CNA v3.1 | 3.2% | 2021-03-24 | Fix |
| CVE-2021-1449 | Cisco Access Point Software arbitrary code execution | 6.7CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1446 | Cisco IOS XE Software DNS NAT protocol Application Layer Gateway denial of service | 8.6CNA v3.1 | 1.5% | 2021-03-24 | Fix |
| CVE-2021-1443 | Cisco IOS XE Software Web UI OS command injection | 5.5CNA v3.1 | 2.3% | 2021-03-24 | Fix |
| CVE-2021-1442 | Cisco IOS XE Software Plug-and-Play privilege escalation | 7.0CNA v3.0 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1441 | Cisco IOS XE Software Hardware Initialization Routines arbitrary code execution | 6.7CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1439 | Cisco Aironet Access Points FlexConnect Multicast DNS denial of service | 7.4CNA v3.1 | 0.4% | 2021-03-24 | Fix |
| CVE-2021-1437 | Cisco Aironet Access Points FlexConnect Upgrade information disclosure | 7.5CNA v3.1 | 1.5% | 2021-03-24 | SnortFix |
| CVE-2021-1436 | Cisco IOS XE SD-WAN software path traversal | 4.4CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1435 | Cisco IOS XE Software Web UI command injection | 6.6CNA v3.0 | 8.1% | 2021-03-24 | Fix |
| CVE-2021-1434 | Cisco IOS XE SD-WAN Software arbitrary File Corruption vulnerability | 4.4CNA v3.1 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1433 | Cisco IOS XE SD-WAN Software vDaemon buffer overflow | 8.1CNA v3.1 | 2.3% | 2021-03-24 | Fix |
| CVE-2021-1432 | Cisco IOS XE SD-WAN software arbitrary command execution | 7.3CNA v3.1 | 0.4% | 2021-03-24 | Fix |
| CVE-2021-1431 | Cisco IOS XE SD-WAN Software vDaemon denial of service | 7.5CNA v3.1 | 1.6% | 2021-03-24 | Fix |
| CVE-2021-1423 | Cisco Aironet Access Points arbitrary file overwrite | 4.4CNA v3.1 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1418 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 9.9CNA v3.1 | 0.9% | 2021-03-24 | Fix |
| CVE-2021-1417 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 9.9CNA v3.1 | 1.0% | 2021-03-24 | Fix |
| CVE-2021-1411 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 9.9CNA v3.1 | 1.4% | 2021-03-24 | Fix |
| CVE-2021-1403 | Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking vulnerability | 7.4CNA v3.1 | 0.6% | 2021-03-24 | Fix |
| CVE-2021-1398 | Cisco IOS XE Software arbitrary code execution | 6.8CNA v3.1 | 0.4% | 2021-03-24 | Fix |
| CVE-2021-1394 | Cisco IOS XE Software for Network Convergence System 520 Routers denial of service | 5.3CNA v3.1 | 1.3% | 2021-03-24 | Fix |
| CVE-2021-1392 | Cisco IOS and IOS XE Software Common Industrial protocol privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1391 | Cisco IOS and IOS XE software privilege escalation | 5.1CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1390 | Cisco IOS XE Software local privilege escalation | 5.1CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1385 | Cisco IOx Application Environment path traversal | 6.5CNA v3.1 | 2.7% | 2021-03-24 | Fix |
| CVE-2021-1384 | Cisco IOx for IOS XE software command injection | 6.5CNA v3.1 | 35.4% | 2021-03-24 | Fix |
| CVE-2021-1383 | Cisco IOS XE SD-WAN software parameter injection | 6.0CNA v3.1 | 0.6% | 2021-03-24 | Fix |
| CVE-2021-1382 | Cisco IOS XE SD-WAN software command injection | 6.0CNA v3.1 | 0.7% | 2021-03-24 | Fix |
| CVE-2021-1381 | Cisco IOS XE Software active debug code | 6.1CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1377 | Cisco IOS and IOS XE Software ARP Resource Management Exhaustion denial of service | 5.8CNA v3.1 | 1.4% | 2021-03-24 | Fix |
| CVE-2021-1376 | Cisco IOS XE Software Fast Reload vulnerabilities | 6.7CNA v3.0 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1375 | Cisco IOS XE Software Fast Reload vulnerabilities | 6.7CNA v3.0 | 0.2% | 2021-03-24 | Fix |
| CVE-2021-1374 | Cisco IOS XE Wireless controller Software for the Catalyst 9000 Family stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-03-24 | Fix |
| CVE-2021-1373 | Cisco IOS XE Wireless controller Software for the Catalyst 9000 Family CAPWAP denial of service | 8.6CNA v3.1 | 1.5% | 2021-03-24 | Fix |
| CVE-2021-1371 | Cisco IOS XE SD-WAN Software console privilege escalation | 6.6CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1356 | Cisco IOS XE Software Web UI denial of service | 4.3CNA v3.1 | 0.9% | 2021-03-24 | Fix |
| CVE-2021-1352 | Cisco IOS XE Software DECnet Phase IV/OSI denial of service | 7.4CNA v3.1 | 0.4% | 2021-03-24 | Fix |
| CVE-2021-1281 | Cisco IOS XE SD-WAN software privilege escalation | 5.1CNA v3.1 | 0.3% | 2021-03-24 | Fix |
| CVE-2021-1220 | Cisco IOS XE Software Web UI denial of service | 4.3CNA v3.1 | 0.9% | 2021-03-24 | Fix |
| CVE-2021-29082 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBK754 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before | 8.8NVD v3.1 | 0.4% | 2021-03-23 | Fix |
| CVE-2021-29081 | NETGEAR RBK753S out-of-bounds write | 8.4v3.1 | 0.4% | 2021-03-23 | Fix |
| CVE-2021-29080 | NETGEAR R6900P weak password recovery | 8.1v3.1 | 0.4% | 2021-03-23 | Fix |
| CVE-2021-29079 | NETGEAR RBK852 command injection | 9.6v3.1 | 0.7% | 2021-03-23 | Fix |
| CVE-2021-29078 | NETGEAR RBK753S command injection | 9.6v3.1 | 0.8% | 2021-03-23 | Fix |
| CVE-2021-29077 | NETGEAR RBK753S command injection | 9.6v3.1 | 0.8% | 2021-03-23 | Fix |
| CVE-2021-29076 | NETGEAR RBK852 command injection | 9.6v3.1 | 0.8% | 2021-03-23 | Fix |
| CVE-2021-29075 | NETGEAR RBK753S out-of-bounds write | 8.4v3.1 | 0.4% | 2021-03-23 | Fix |
| CVE-2021-29074 | NETGEAR RBK753S out-of-bounds write | 8.4v3.1 | 0.4% | 2021-03-23 | Fix |
| CVE-2021-29073 | NETGEAR R7900P out-of-bounds write | 8.4v3.1 | 0.3% | 2021-03-23 | Fix |
| CVE-2021-29072 | NETGEAR RBK852 command injection | 8.4v3.1 | 0.6% | 2021-03-23 | Fix |
| CVE-2021-29071 | NETGEAR RBR753S command injection | 9.0v3.1 | 0.7% | 2021-03-23 | Fix |
| CVE-2021-29070 | NETGEAR RBK852 command injection | 8.4v3.1 | 0.6% | 2021-03-23 | Fix |
| CVE-2021-29069 | NETGEAR WNR2000V5 command injection | 8.4v3.1 | 0.5% | 2021-03-23 | Fix |
| CVE-2021-29068 | NETGEAR AC2100 buffer overflow | 8.8NVD v3.1 | 1.1% | 2021-03-23 | Fix |
| CVE-2021-29067 | NETGEAR RBK753S authentication bypass | 9.6v3.1 | 0.6% | 2021-03-23 | Fix |
| CVE-2021-29066 | NETGEAR RBK852 authentication bypass | 9.6v3.1 | 0.6% | 2021-03-23 | Fix |
| CVE-2021-29065 | NETGEAR RBR850 authentication bypass | 9.6v3.1 | 0.6% | 2021-03-23 | Fix |
| CVE-2021-28824 | TIBCO ActiveSpaces Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-03-23 | |
| CVE-2021-28823 | TIBCO eFTL Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-03-23 | |
| CVE-2021-28822 | TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability | 8.8CNA v3.1 | 0.2% | 2021-03-23 | |
| CVE-2021-28821 | TIBCO Enterprise Message Service Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-03-23 | |
| CVE-2021-28820 | TIBCO FTL Windows Platform Artifact Search vulnerability | 8.8CNA v3.1 | 0.3% | 2021-03-23 | |
| CVE-2021-28819 | TIBCO FTL Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-03-23 | |
| CVE-2021-28818 | TIBCO Rendezvous Windows Platform Artifact Search vulnerability | 8.8CNA v3.1 | 0.3% | 2021-03-23 | |
| CVE-2021-28817 | TIBCO Rendezvous Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.3% | 2021-03-23 | |
| CVE-2021-28100 | Netflix/Priam: Temporary Directory information disclosure | 5.5v3.1 | 0.3% | 2021-03-23 | |
| CVE-2021-28099 | Insecure temporary file in Netflix OSS Hollow | 4.4v3.1 | 0.2% | 2021-03-23 | |
| CVE-2021-27969 | Boonex Dolphin cross-site scripting | 4.8v3.1 | 0.7% | 2021-03-23 | |
| CVE-2021-27908 | Mautic vulnerable to secret data exfiltration via symfony parameters | 5.8CNA v3.1 | 0.3% | 2021-03-23 | Fix |
| CVE-2021-27531 | Dynpg A cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-23 | |
| CVE-2021-27530 | Dynpg A cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-23 | |
| CVE-2021-27529 | Dynpg A cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-23 | |
| CVE-2021-27528 | Dynpg A cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-23 | |
| CVE-2021-27527 | Dynpg A cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-23 | |
| CVE-2021-27526 | Dynpg A cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-23 | |
| CVE-2021-27310 | Csphere ClanSphere cross-site scripting | 6.1v3.1 | 2.8% | 2021-03-23 | Nuclei |
| CVE-2021-27309 | Csphere ClanSphere cross-site scripting | 6.1v3.1 | 2.0% | 2021-03-23 | Nuclei |
| CVE-2021-23362 | hosted-git-info regular expression denial of service (ReDoS) | 5.3v3.1 | 3.6% | 2021-03-23 | Fix |
| CVE-2021-23274 | TIBCO API Exchange Gateway Config UI clickjacking | 9.8CNA v3.1 | 1.2% | 2021-03-23 | Fix |
| CVE-2021-22864 | GitHub Enterprise Server GitHub Pages command injection | 8.8v3.1 | 2.5% | 2021-03-23 | Fix |
| CVE-2021-21402 | Unauthenticated arbitrary File Access in Jellyfin | 7.7CNA v3.1 | 79.3% | 2021-03-23 | NucleiExploit codeFix |
| CVE-2021-21401 | Invalid free call in Nanopb | 7.1CNA v3.1 | 1.8% | 2021-03-23 | Fix |
| CVE-2021-21380 | Rating script service expose XWiki to SQL injection | 7.7CNA v3.1 | 1.3% | 2021-03-23 | Fix |
| CVE-2021-21377 | omero-web open redirect in OMERO.web | 4.8CNA v3.1 | 0.8% | 2021-03-23 | Fix |
| CVE-2021-21376 | omero-web information exposure in OMERO.web | 6.4CNA v3.1 | 1.5% | 2021-03-23 | Fix |
| CVE-2021-21370 | TYPO3 CMS cross-site scripting in Content Preview (CType menu) | 5.4CNA v3.1 | 0.9% | 2021-03-23 | Fix |
| CVE-2021-21359 | TYPO3 CMS denial of service in Page Error Handling | 5.9CNA v3.1 | 1.7% | 2021-03-23 | Fix |
| CVE-2021-21358 | Improper neutralization of input during web page generation (cross-site scripting) in TYPO3/cms-form | 5.4CNA v3.1 | 0.9% | 2021-03-23 | Fix |
| CVE-2021-21357 | TYPO3 CMS broken access control in Form Framework | 8.3CNA v3.1 | 1.6% | 2021-03-23 | Fix |
| CVE-2021-21355 | TYPO3 CMS unrestricted file upload in Form Framework | 8.6CNA v3.1 | 1.6% | 2021-03-23 | Fix |
| CVE-2021-21340 | TYPO3 CMS cross-site scripting in Content Preview | 5.4CNA v3.1 | 0.9% | 2021-03-23 | Fix |
| CVE-2021-21339 | TYPO3 CMS cleartext storage of session identifier | 5.9CNA v3.1 | 0.9% | 2021-03-23 | Fix |
| CVE-2021-21338 | TYPO3 CMS open redirection in Login Handling | 4.7CNA v3.1 | 1.1% | 2021-03-23 | Fix |
| CVE-2021-20270 | Infinite loop in Pygments | 7.5NVD v3.1 | 2.8% | 2021-03-23 | Fix |
| CVE-2021-20227 | sqlite use-after-free | 5.5NVD v3.1 | 0.7% | 2021-03-23 | Fix |
| CVE-2021-20222 | Code injection in Keycloak | 7.5v3.1 | 1.2% | 2021-03-23 | Fix |
| CVE-2021-20219 | kernel denial of service | 5.5NVD v3.1 | 0.4% | 2021-03-23 | Fix |
| CVE-2021-3444 | Linux Kernel bpf verifier incorrect mod32 truncation | 7.8NVD v3.1 | 0.6% | 2021-03-23 | Fix |
| CVE-2021-3409 | QEMU out-of-bounds read | 5.7NVD v3.1 | 0.5% | 2021-03-23 | Fix |
| CVE-2021-3392 | QEMU MegaRAID emulator use-after-free | 3.2NVD v3.1 | 0.5% | 2021-03-23 | Fix |
| CVE-2021-28972 | Linux kernel buffer overflow | 6.7NVD v3.1 | 0.8% | 2021-03-22 | Fix |
| CVE-2021-28971 | Linux kernel improper exception handling | 5.5v3.1 | 0.4% | 2021-03-22 | Fix |
| CVE-2021-28968 | GNU Punbb cross-site scripting | 5.4v3.1 | 0.5% | 2021-03-22 | |
| CVE-2021-28964 | Linux kernel get_old_root in fs/btrfs/ctree.c in the race condition | 4.7v3.1 | 0.3% | 2021-03-22 | Fix |
| CVE-2021-28963 | Shibboleth Service Provider HTML injection | 5.3v3.1 | 1.3% | 2021-03-22 | Fix |
| CVE-2021-28956 | The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer | 8.8v3.1 | 1.5% | 2021-03-22 | Fix |
| CVE-2021-28955 | Git-bug arbitrary code execution due to an uncontrolled search path for the git binary | 9.8v3.1 | 1.7% | 2021-03-22 | Fix |
| CVE-2021-28148 | Grafana missing authentication | 7.5v3.1 | 3.5% | 2021-03-22 | Fix |
| CVE-2021-28147 | Grafana improper access control | 6.5v3.1 | 1.6% | 2021-03-22 | Fix |
| CVE-2021-28146 | Grafana incorrect authorization | 6.5v3.1 | 1.4% | 2021-03-22 | Fix |
| CVE-2021-27962 | Grafana Enterprise data source permission check vulnerability | 7.1v3.1 | 2.1% | 2021-03-22 | Fix |
| CVE-2021-27596 | SAP 3D Visual Enterprise Viewer denial of service | 4.3CNA v3.0 | 0.7% | 2021-03-22 | Fix |
| CVE-2021-27595 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.4% | 2021-03-22 | Fix |
| CVE-2021-27594 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 0.6% | 2021-03-22 | Fix |
| CVE-2021-27593 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 0.6% | 2021-03-22 | Fix |
| CVE-2021-27308 | 4Homepages 4images admin login panel in cross-site scripting | 4.8v3.1 | 2.0% | 2021-03-22 | Exploit codeFix |
| CVE-2021-26578 | HPE Network Orchestrator SQL injection | 7.5v3.1 | 1.0% | 2021-03-22 | Fix |
| CVE-2021-26295 | RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI | 9.8v3.1 | 97.8% | 2021-03-22 | NucleiMetasploitExploit codeFix |
| CVE-2021-26070 | Atlassian Jira Server improper authentication | 7.2v3.1 | 2.0% | 2021-03-22 | Fix |
| CVE-2021-26069 | Atlassian Jira Server information disclosure | 5.3v3.1 | 2.5% | 2021-03-22 | Fix |
| CVE-2021-25922 | OpenEMR cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-22 | |
| CVE-2021-25921 | OpenEMR cross-site scripting | 5.4v3.1 | 91.1% | 2021-03-22 | |
| CVE-2021-25920 | OpenEMR case sensitivity bypass | 6.5v3.1 | 1.1% | 2021-03-22 | |
| CVE-2021-25919 | OpenEMR cross-site scripting | 4.8v3.1 | 69.9% | 2021-03-22 | |
| CVE-2021-25918 | OpenEMR cross-site scripting | 4.8v3.1 | 0.6% | 2021-03-22 | |
| CVE-2021-25917 | OpenEMR cross-site scripting | 4.8v3.1 | 0.6% | 2021-03-22 | |
| CVE-2021-25265 | Sophos Connect Client remote code execution | 8.8v3.1 | 1.8% | 2021-03-22 | Fix |
| CVE-2021-22321 | Huawei NIP6300 There is a use-after-free | 5.3v3.1 | 0.7% | 2021-03-22 | Fix |
| CVE-2021-22320 | Huawei IPS Module There is a denial of service | 7.5v3.1 | 0.7% | 2021-03-22 | Fix |
| CVE-2021-22314 | ManageOne some versions local privilege escalation | 7.8v3.1 | 0.2% | 2021-03-22 | Fix |
| CVE-2021-22311 | ManageOne Huawei improper permissions | 7.2v3.1 | 0.7% | 2021-03-22 | Fix |
| CVE-2021-22310 | Huawei NIP6300 some information disclosure | 4.4v3.1 | 0.2% | 2021-03-22 | Fix |
| CVE-2021-22309 | USG9500 insufficient randomness | 7.5v3.1 | 0.8% | 2021-03-22 | Fix |
| CVE-2021-21438 | FAQ articles are shown to users without permission | 3.5CNA v3.1 | 0.6% | 2021-03-22 | Fix |
| CVE-2021-21437 | OTRSCIsInCustomerFrontend config Items are shown to users without permission | 3.5CNA v3.1 | 0.7% | 2021-03-22 | Fix |
| CVE-2021-21351 | XStream is vulnerable to an arbitrary code execution attack | 5.4CNA v3.1 | 82.1% | 2021-03-22 | NucleiFix |
| CVE-2021-21350 | XStream is vulnerable to an arbitrary code execution attack | 5.3CNA v3.1 | 15.2% | 2021-03-22 | Fix |
| CVE-2021-21349 | XStream XML unmarshalling server-side request forgery | 6.1CNA v3.1 | 46.8% | 2021-03-22 | Exploit codeFix |
| CVE-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a denial of service (ReDos) | 5.3CNA v3.1 | 13.8% | 2021-03-22 | Fix |
| CVE-2021-21347 | XStream is vulnerable to an arbitrary code execution attack | 6.1CNA v3.1 | 14.3% | 2021-03-22 | Fix |
| CVE-2021-21346 | XStream is vulnerable to an arbitrary code execution attack | 6.1CNA v3.1 | 76.4% | 2021-03-22 | Fix |
| CVE-2021-21345 | XStream is vulnerable to a remote command execution attack | 5.8CNA v3.1 | 72.3% | 2021-03-22 | NucleiFix |
| CVE-2021-21344 | XStream is vulnerable to an arbitrary code execution attack | 5.3CNA v3.1 | 76.0% | 2021-03-22 | Fix |
| CVE-2021-21343 | XStream XML unmarshalling arbitrary file deletion | 5.3CNA v3.1 | 46.7% | 2021-03-22 | Fix |
| CVE-2021-21342 | XStream XML unmarshalling server-side request forgery | 5.3CNA v3.1 | 50.0% | 2021-03-22 | Fix |
| CVE-2021-21341 | XStream can cause a denial of service | 7.5CNA v3.1 | 77.8% | 2021-03-22 | Exploit codeFix |
| CVE-2021-28961 | openwrt OS command injection | 8.8v3.1 | 1.5% | 2021-03-21 | Fix |
| CVE-2021-28957 | lxml vulnerable to cross-site scripting | 6.1v3.1 | 4.0% | 2021-03-21 | Fix |
| CVE-2021-28954 | Bit uncontrolled search path | 7.8v3.1 | 1.0% | 2021-03-21 | Fix |
| CVE-2021-28953 | C/c++ Advanced Lint uncontrolled search path | 7.8v3.1 | 1.0% | 2021-03-21 | |
| CVE-2021-23360 | kill-port arbitrary command injection | 8.8v3.1 | 2.3% | 2021-03-21 | Fix |
| CVE-2021-28952 | Linux kernel buffer overflow | 7.8v3.1 | 0.4% | 2021-03-20 | Fix |
| CVE-2021-28951 | Linux kernel improper locking | 5.5v3.1 | 0.3% | 2021-03-20 | Fix |
| CVE-2021-28950 | Linux kernel excessive iteration | 5.5v3.1 | 0.3% | 2021-03-20 | Fix |
| CVE-2021-28117 | libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.) | 7.5v3.1 | 1.6% | 2021-03-20 | Fix |
| CVE-2021-28834 | Remote code execution in Kramdown | 9.8v3.1 | 2.8% | 2021-03-19 | Fix |
| CVE-2021-28831 | BusyBox improper exception handling | 7.5v3.1 | 2.7% | 2021-03-19 | Fix |
| CVE-2021-28653 | Western Digital Armorlock insecure storage of sensitive information | 6.5v3.1 | 0.9% | 2021-03-19 | Fix |
| CVE-2021-28126 | Compassplus Tranzware E-commerce Payment Gateway cross-site scripting | 6.1v3.1 | 0.6% | 2021-03-19 | |
| CVE-2021-28110 | Compassplus Tranzware E-commerce Payment Gateway XML external entity injection | 7.5v3.1 | 1.0% | 2021-03-19 | |
| CVE-2021-28109 | Compassplus Tranzware Fimi cross-site scripting | 6.1v3.1 | 0.7% | 2021-03-19 | |
| CVE-2021-28090 | torproject Tor reachable assertion | 5.3v3.1 | 2.1% | 2021-03-19 | Fix |
| CVE-2021-28089 | torproject Tor resource exhaustion | 7.5v3.1 | 1.7% | 2021-03-19 | Fix |
| CVE-2021-27928 | MariaDB remote code execution | 7.2v3.1 | 38.2% | 2021-03-19 | Exploit codeFix |
| CVE-2021-27906 | Uncontrolled Memory Allocation in Apache PDFBox | 5.5v3.1 | 3.3% | 2021-03-19 | Fix |
| CVE-2021-27807 | Apache PDFBox A carefully crafted PDF file can trigger an infinite loop while loading the file | 5.5v3.1 | 3.0% | 2021-03-19 | Fix |
| CVE-2021-27520 | Fudforum A cross-site scripting | 6.1v3.1 | 6.4% | 2021-03-19 | NucleiExploit code |
| CVE-2021-27519 | Fudforum A cross-site scripting | 6.1v3.1 | 7.6% | 2021-03-19 | NucleiExploit code |
| CVE-2021-27506 | ClamAV denial of service | 5.5v3.1 | 1.3% | 2021-03-19 | Fix |
| CVE-2021-27221 | MikroTik RouterOS export command vulnerability | 8.1v3.1 | 4.5% | 2021-03-19 | |
| CVE-2021-26992 | Cloud Manager denial of service | 7.5v3.1 | 1.4% | 2021-03-19 | Fix |
| CVE-2021-26991 | Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact with Cloud Manager. | 7.5v3.1 | 1.2% | 2021-03-19 | Fix |
| CVE-2021-26990 | Cloud Manager missing authorization | 9.1v3.1 | 1.5% | 2021-03-19 | Fix |
| CVE-2021-26275 | Command injection in Eslint-fixer | 9.8v3.1 | 3.0% | 2021-03-19 | |
| CVE-2021-25293 | Out-of-bounds read in Pillow | 7.5v3.1 | 1.6% | 2021-03-19 | Fix |
| CVE-2021-25292 | Regular expression denial of service (ReDoS) in Pillow | 6.5v3.1 | 1.6% | 2021-03-19 | Fix |
| CVE-2021-25291 | Out-of-bounds read in Pillow | 7.5v3.1 | 1.4% | 2021-03-19 | Fix |
| CVE-2021-25290 | Out-of-bounds write in Pillow | 7.5v3.1 | 2.4% | 2021-03-19 | Fix |
| CVE-2021-25289 | Out-of-bounds write in Pillow | 9.8v3.1 | 2.3% | 2021-03-19 | Fix |
| CVE-2021-25278 | Ftapi cross-site scripting | 4.8v3.1 | 0.6% | 2021-03-19 | Fix |
| CVE-2021-25277 | Ftapi cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-19 | Fix |
| CVE-2021-21390 | MITM modification of request bodies in MinIO | 6.5CNA v3.1 | 0.9% | 2021-03-19 | |
| CVE-2021-21387 | wrongthink inadequate encryption strength | 8.1CNA v3.1 | 0.4% | 2021-03-19 | Fix |
| CVE-2021-21384 | Null characters not escaped in shescape | 6.3CNA v3.1 | 0.6% | 2021-03-19 | Fix |
| CVE-2021-21267 | Regular Expression denial of service in npm schema-inspector | 7.5CNA v3.1 | 2.1% | 2021-03-19 | Fix |
| CVE-2021-20077 | Tenable Nessus Agent EC2 linking process information disclosure | 6.7NVD v3.1 | 0.3% | 2021-03-19 | |
| CVE-2021-3327 | Ovation Dynamic Content cross-site scripting | 5.4v3.1 | 0.7% | 2021-03-19 | Fix |
| CVE-2021-28796 | Increments Qiita cross-site scripting in Qiita-Markdown | 6.1v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-28794 | The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath. | 9.8v3.1 | 1.8% | 2021-03-18 | Fix |
| CVE-2021-28792 | Swift Development Environment arbitrary code execution | 7.8v3.1 | 1.7% | 2021-03-18 | Fix |
| CVE-2021-28791 | Swiftformat incorrect authorization | 7.8v3.1 | 1.6% | 2021-03-18 | Fix |
| CVE-2021-28790 | Swiftlint arbitrary code execution | 7.8v3.1 | 1.7% | 2021-03-18 | Fix |
| CVE-2021-28789 | Apple-swift-format arbitrary code execution | 7.8v3.1 | 1.7% | 2021-03-18 | Fix |
| CVE-2021-28681 | WebRTC incorrect authorization | 5.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-28667 | Stackstorm infinite loop | 7.5v3.1 | 2.2% | 2021-03-18 | Fix |
| CVE-2021-28420 | SEO Panel cross-site scripting | 4.8v3.1 | 1.9% | 2021-03-18 | Exploit code |
| CVE-2021-28419 | SEO Panel SQL injection | 7.2v3.1 | 10.7% | 2021-03-18 | Exploit code |
| CVE-2021-28418 | SEO Panel cross-site scripting | 4.8v3.1 | 1.9% | 2021-03-18 | Exploit code |
| CVE-2021-28417 | SEO Panel cross-site scripting | 4.8v3.1 | 1.9% | 2021-03-18 | Exploit code |
| CVE-2021-28160 | Acexy Wireless-n Wifi Repeater cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-18 | |
| CVE-2021-28145 | Concrete CMS cross-site scripting via Survey blocks | 5.4v3.1 | 0.9% | 2021-03-18 | KCVFix |
| CVE-2021-28133 | Zoom information disclosure | 4.3v3.1 | 19.9% | 2021-03-18 | |
| CVE-2021-27656 | exacqVision Web services information exposure | 5.3CNA v3.1 | 1.2% | 2021-03-18 | Fix |
| CVE-2021-27436 | Advantech WebAccess/SCADA cross-site scripting | 6.1v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-27358 | Denial of service in Grafana | 7.5v3.1 | 83.0% | 2021-03-18 | Reported exploitedNucleiFix |
| CVE-2021-27306 | KongHQ Kong Gateway JWT plugin improper access control | 7.5v3.1 | 1.8% | 2021-03-18 | Fix |
| CVE-2021-26935 | WoWonder SQL injection | 7.5v3.1 | 2.3% | 2021-03-18 | |
| CVE-2021-26237 | FastStone Image Viewer out-of-bounds write | 7.8v3.1 | 2.7% | 2021-03-18 | |
| CVE-2021-26236 | FastStone Image Viewer out-of-bounds write | 7.8v3.1 | 2.0% | 2021-03-18 | |
| CVE-2021-26235 | FastStone Image Viewer null pointer dereference | 7.8v3.1 | 1.1% | 2021-03-18 | |
| CVE-2021-26234 | FastStone Image Viewer out-of-bounds write | 7.8v3.1 | 1.1% | 2021-03-18 | |
| CVE-2021-26233 | FastStone Image Viewer out-of-bounds write | 7.8v3.1 | 1.1% | 2021-03-18 | |
| CVE-2021-26216 | Seeddms cross-site request forgery | 4.3v3.1 | 0.5% | 2021-03-18 | |
| CVE-2021-26215 | Seeddms cross-site request forgery | 4.3v3.1 | 0.5% | 2021-03-18 | |
| CVE-2021-25764 | JetBrains PhpStorm debug logs vulnerability | 5.3v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-24149 | Modern Events Calendar Lite WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.5% | 2021-03-18 | Fix |
| CVE-2021-24148 | MStore API WordPress plugin authentication bypass with Sign in with Apple | 9.8NVD v3.1 | 3.4% | 2021-03-18 | Fix |
| CVE-2021-24147 | Modern Events Calendar Lite WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-24146 | Modern Events Calendar Lite WordPress plugin unauthenticated Events export | 7.5NVD v3.1 | 31.0% | 2021-03-18 | NucleiExploit codeFix |
| CVE-2021-24145 | Modern Events Calendar Lite WordPress plugin authenticated arbitrary file upload leading to RCE | 7.2NVD v3.1 | 87.2% | 2021-03-18 | NucleiMetasploitExploit codeFix |
| CVE-2021-24144 | Contact Form 7 Database Addon WordPress plugin CSV injection | 7.8NVD v3.1 | 1.2% | 2021-03-18 | Fix |
| CVE-2021-24143 | AccessPress Social Icons WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.3% | 2021-03-18 | Fix |
| CVE-2021-24142 | 301 Redirects - Easy Redirect Manager WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.2% | 2021-03-18 | Fix |
| CVE-2021-24141 | Advanced Database Cleaner WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.2% | 2021-03-18 | Fix |
| CVE-2021-24140 | Ajax Load More WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.2% | 2021-03-18 | Fix |
| CVE-2021-24139 | Photo Gallery by 10Web WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 5.5% | 2021-03-18 | NucleiFix |
| CVE-2021-24138 | AdRotate WordPress plugin authenticated SQL injection | 5.5NVD v3.1 | 1.2% | 2021-03-18 | Fix |
| CVE-2021-24137 | Blog2Social: Social Media Auto Post and Scheduler WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.5% | 2021-03-18 | Fix |
| CVE-2021-24136 | Testimonials Widget WordPress plugin Multiple authenticated stored XSS | 5.4NVD v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-24135 | WP Customer Reviews WordPress plugin Multiple unauthenticated and low Priv authenticated stored XSS | 6.1NVD v3.1 | 1.1% | 2021-03-18 | Fix |
| CVE-2021-24134 | Constant Contact Forms WordPress plugin Multiple authenticated stored XSS | 4.8NVD v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-24133 | ActiveCampaign WordPress plugin cross-site request forgery in settings | 4.3NVD v3.1 | 0.5% | 2021-03-18 | Fix |
| CVE-2021-24132 | Slider by 10Web WordPress plugin Multiple authenticated SQL injection | 8.8NVD v3.1 | 2.6% | 2021-03-18 | Fix |
| CVE-2021-24131 | Anti-Spam by CleanTalk WordPress plugin Multiple authenticated SQL Injections | 7.2NVD v3.1 | 1.4% | 2021-03-18 | Fix |
| CVE-2021-24130 | WP Google Map WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.4% | 2021-03-18 | Fix |
| CVE-2021-24129 | Themify Portfolio Post WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-24128 | Team Members WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-24127 | ThirstyAffiliates WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-24126 | Envira Gallery Lite WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-24125 | Contact Form Submissions WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-03-18 | Fix |
| CVE-2021-24124 | WP Shieldon unauthenticated cross-site scripting (XSS) | 6.1NVD v3.1 | 1.1% | 2021-03-18 | Fix |
| CVE-2021-24123 | PowerPress WordPress plugin authenticated arbitrary file upload leading to RCE | 7.2NVD v3.1 | 1.6% | 2021-03-18 | Fix |
| CVE-2021-23359 | port-killer arbitrary command injection | 8.8v3.1 | 1.7% | 2021-03-18 | |
| CVE-2021-22848 | HGiga MailSherlock SQL injection-2 | 9.8v3.1 | 1.0% | 2021-03-18 | Fix |
| CVE-2021-22665 | Rockwell Automation DriveTools SP and Drives AOP uncontrolled search path | 7.8v3.1 | 0.4% | 2021-03-18 | Fix |
| CVE-2021-21627 | CSRF vulnerability in Jenkins Libvirt Agents Plugin | 8.8v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-21626 | Jenkins Warnings Next Generation Plugin missing authorization | 4.3v3.1 | 0.9% | 2021-03-18 | Fix |
| CVE-2021-21625 | Jenkins CloudBees AWS Credentials Plugin missing authorization | 4.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-21624 | Jenkins Role-based Authorization Strategy Plugin incorrect authorization | 4.3v3.1 | 0.9% | 2021-03-18 | Fix |
| CVE-2021-21623 | Jenkins Matrix Authorization Strategy Plugin incorrect authorization | 6.5v3.1 | 1.0% | 2021-03-18 | Fix |
| CVE-2021-21383 | Requarks Wiki.js code block rendering stored cross-site scripting | 7.6CNA v3.1 | 0.9% | 2021-03-18 | Fix |
| CVE-2021-20678 | strangerstudios Paid Memberships Pro SQL injection | 8.8v3.1 | 2.0% | 2021-03-18 | Fix |
| CVE-2021-20676 | M-System DL8 series incorrect authorization | 4.3v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-20675 | M-System DL8 series denial of service | 6.5v3.1 | 1.3% | 2021-03-18 | Fix |
| CVE-2021-20634 | Cybozu Office Custom App improper access control | 4.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-20633 | Cybozu Office Cabinet improper access control | 4.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-20632 | Cybozu Office Bulletin Board improper access control | 4.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-20631 | Cybozu Office Custom App improper input validation | 6.5v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-20630 | Cybozu Office Phone messages improper access control | 4.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-20629 | Cybozu Office E-mail cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-20628 | Cybozu Office Address Book cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-20627 | Cybozu Office Address Book cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-20626 | Cybozu Office Workflow improper access control | 6.5v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-20625 | Cybozu Office Bulletin Board improper access control | 4.3v3.1 | 0.7% | 2021-03-18 | Fix |
| CVE-2021-20624 | Cybozu Office Scheduler improper access control | 6.5v3.1 | 0.8% | 2021-03-18 | Fix |
| CVE-2021-3416 | QEMU NIC emulation infinite loop | 6.0NVD v3.1 | 0.5% | 2021-03-18 | Fix |
| CVE-2021-3141 | Unisys Stealth insufficiently protected credentials | 7.8v3.1 | 0.2% | 2021-03-18 | Fix |
| CVE-2021-1287 | Cisco Small Business RV132W and RV134W Routers management interface remote command execution | 7.2CNA v3.1 | 2.2% | 2021-03-18 | Fix |
| CVE-2021-28660 | Linux kernel out-of-bounds write | 8.8v3.1 | 1.3% | 2021-03-17 | Fix |
| CVE-2021-28650 | Gnome-autoar link following | 5.5v3.1 | 0.5% | 2021-03-17 | Fix |
| CVE-2021-27292 | Regular expression denial of service (ReDoS) in ua-parser-js | 7.5v3.1 | 3.4% | 2021-03-17 | Fix |
| CVE-2021-27291 | Pygments vulnerable to regular expression denial of service (ReDoS) | 7.5v3.1 | 3.9% | 2021-03-17 | Fix |
| CVE-2021-22860 | Eic e-document system broken authentication | 9.8v3.1 | 2.6% | 2021-03-17 | Fix |
| CVE-2021-22859 | Eic e-document system SQL injection | 9.8v3.1 | 3.8% | 2021-03-17 | Fix |
| CVE-2021-28543 | Varnish-cache Varnish-modules null pointer dereference | 7.5v3.1 | 1.5% | 2021-03-16 | Fix |
| CVE-2021-28381 | SQL injection in Vhs (aka Vhs: Fluid ViewHelpers) | 9.8v3.1 | 1.0% | 2021-03-16 | Fix |
| CVE-2021-28380 | Aimeos Typo3 extension contains cross-site scripting | 5.4v3.1 | 0.5% | 2021-03-16 | Fix |
| CVE-2021-28295 | Online Ordering System SQL injection | 7.5v3.1 | 15.9% | 2021-03-16 | |
| CVE-2021-28294 | Online Ordering System unrestricted file upload | 9.8v3.1 | 3.7% | 2021-03-16 | |
| CVE-2021-27938 | Symbiote Silverstripe Queued Jobs XSS in CreateQueuedJobTask | 6.1v3.1 | 0.8% | 2021-03-16 | Fix |
| CVE-2021-25916 | Prototype pollution vulnerability in patchmerge | 9.8v3.1 | 3.5% | 2021-03-16 | Fix |
| CVE-2021-22887 | PSA5000, PSA7000 embedded malicious code | 2.3v3.1 | 0.2% | 2021-03-16 | Fix |
| CVE-2021-21193 | Google Chromium Blink use-after-free | 8.8v3.1 | 9.9% | 2021-03-16 | KEVFix |
| CVE-2021-21192 | Google Chrome tab groups heap-based buffer overflow | 8.8v3.1 | 1.5% | 2021-03-16 | Fix |
| CVE-2021-21191 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 1.4% | 2021-03-16 | Fix |
| CVE-2021-20218 | fabric8-kubernetes-client path traversal | 7.4NVD v3.1 | 1.3% | 2021-03-16 | Fix |
| CVE-2021-3344 | openshift/builder privilege escalation | 8.8v3.1 | 1.2% | 2021-03-16 | Fix |
| CVE-2021-3127 | Nats-io/JWT not enforcing checking of Import token permissions | 7.5v3.1 | 1.4% | 2021-03-16 | Fix |
| CVE-2021-28379 | VestaCP Vesta Control Panel unrestricted file upload | 8.8v3.1 | 6.0% | 2021-03-15 | Exploit code |
| CVE-2021-28378 | Cross-site scripting in Gitea | 5.4v3.1 | 8.8% | 2021-03-15 | Exploit codeFix |
| CVE-2021-28375 | Linux kernel missing authorization | 7.8v3.1 | 0.3% | 2021-03-15 | Fix |
| CVE-2021-28374 | Debian Courier-authlib incorrect permission assignment | 7.5v3.1 | 1.3% | 2021-03-15 | Fix |
| CVE-2021-28363 | Python urllib3 improper certificate validation | 6.5NVD v3.1 | 2.2% | 2021-03-15 | Fix |
| CVE-2021-27949 | mybb cross-site scripting | 6.1v3.1 | 0.6% | 2021-03-15 | Fix |
| CVE-2021-27948 | MyBB user groups SQL injection | 7.2v3.1 | 0.9% | 2021-03-15 | Fix |
| CVE-2021-27947 | MyBB Copy Forum feature SQL injection | 7.2v3.1 | 0.9% | 2021-03-15 | Fix |
| CVE-2021-27946 | MyBB poll vote count SQL injection | 8.8v3.1 | 4.2% | 2021-03-15 | Exploit codeKCVFix |
| CVE-2021-27893 | SSH Tectia Client local privilege escalation | 7.0v3.1 | 0.4% | 2021-03-15 | Fix |
| CVE-2021-27892 | SSH Tectia Client local privilege escalation | 7.8v3.1 | 0.3% | 2021-03-15 | Fix |
| CVE-2021-27891 | Tectia key generation vulnerability | 8.8v3.1 | 1.0% | 2021-03-15 | Fix |
| CVE-2021-27890 | MyBB theme XML import SQL injection | 8.8v3.1 | 10.6% | 2021-03-15 | Exploit codeKCVFix |
| CVE-2021-27889 | mybb cross-site scripting | 6.1v3.1 | 5.1% | 2021-03-15 | Exploit codeKCVFix |
| CVE-2021-27817 | ShopXO A remote command execution | 9.8v3.1 | 3.2% | 2021-03-15 | |
| CVE-2021-27695 | Openmaint Multiple stored cross-site scripting | 6.1v3.1 | 3.0% | 2021-03-15 | Exploit code |
| CVE-2021-27576 | Apache OpenMeetings: Bandwidth can be overloaded with public web service | 7.5v3.1 | 2.8% | 2021-03-15 | Fix |
| CVE-2021-27381 | Siemens Solid Edge SE2020 out-of-bounds read | 7.8v3.1 | 0.9% | 2021-03-15 | Fix |
| CVE-2021-27380 | Siemens Solid Edge SE2020 out-of-bounds write | 7.8v3.1 | 1.4% | 2021-03-15 | Fix |
| CVE-2021-27230 | ExpressionEngine code injection | 8.8v3.1 | 2.8% | 2021-03-15 | Fix |
| CVE-2021-27208 | Xilinx Zynq-7000s buffer overflow | 6.8v3.1 | 0.4% | 2021-03-15 | Fix |
| CVE-2021-26987 | Element Plug-in for vCenter Server remote code execution | 9.8v3.1 | 2.4% | 2021-03-15 | Fix |
| CVE-2021-26924 | argoproj argo-cd cross-site scripting | 6.1v3.1 | 0.7% | 2021-03-15 | |
| CVE-2021-26923 | argoproj argo-cd information disclosure | 7.5v3.1 | 1.4% | 2021-03-15 | |
| CVE-2021-25676 | Siemens RUGGEDCOM RM1224 missing brute-force protection | 7.5v3.1 | 1.3% | 2021-03-15 | Fix |
| CVE-2021-25675 | Siemens SIMATIC S7-PLCSIM divide by zero | 5.5v3.1 | 0.2% | 2021-03-15 | |
| CVE-2021-25674 | Siemens SIMATIC S7-PLCSIM null pointer dereference | 5.5v3.1 | 0.2% | 2021-03-15 | |
| CVE-2021-25673 | Siemens SIMATIC S7-PLCSIM infinite loop | 5.5v3.1 | 0.2% | 2021-03-15 | |
| CVE-2021-25672 | Siemens Mendix Forgot Password Appstore module improper access control | 8.8v3.1 | 0.9% | 2021-03-15 | Fix |
| CVE-2021-25667 | Siemens RUGGEDCOM RM1224 stack-based buffer overflow | 8.8v3.1 | 0.9% | 2021-03-15 | Fix |
| CVE-2021-24029 | Facebook mvfst reachable assertion | 7.5v3.1 | 1.2% | 2021-03-15 | Fix |
| CVE-2021-23879 | McAfee Endpoint Product Removal Tool unquoted search path | 6.7CNA v3.1 | 0.3% | 2021-03-15 | Fix |
| CVE-2021-23357 | github.com/TykTechnologies/tyk/gateway directory traversal | 5.3v3.1 | 0.5% | 2021-03-15 | |
| CVE-2021-23356 | kill-process-by-name arbitrary command injection | 9.8v3.1 | 1.1% | 2021-03-15 | |
| CVE-2021-23355 | ps-kill arbitrary command injection | 9.8v3.1 | 1.2% | 2021-03-15 | |
| CVE-2021-22191 | The Wireshark Foundation Wireshark injection | 6.3CNA v3.1 | 3.7% | 2021-03-15 | Fix |
| CVE-2021-20440 | IBM API Connect member registration vulnerability | 6.4CNA v3.0 | 0.7% | 2021-03-15 | Fix |
| CVE-2021-20286 | libnbd reachable assertion | 2.7v3.1 | 1.1% | 2021-03-15 | Fix |
| CVE-2021-20283 | Missing permission check in Moodle | 4.3NVD v3.1 | 1.1% | 2021-03-15 | Fix |
| CVE-2021-20282 | Moodle Bypass email verification secret when confirming account registration | 5.3NVD v3.1 | 1.3% | 2021-03-15 | Fix |
| CVE-2021-20281 | Moodle allowed some users without permission to view other users' full names | 5.3NVD v3.1 | 1.3% | 2021-03-15 | Fix |
| CVE-2021-20280 | Cross-site scripting (XSS) and server side request forgery (SSRF) in Moodle | 5.4NVD v3.1 | 1.3% | 2021-03-15 | Fix |
| CVE-2021-20279 | Moodle contains stored XSS via ID number user profile field | 5.4NVD v3.1 | 1.0% | 2021-03-15 | Fix |
| CVE-2021-20179 | pki-core incorrect authorization | 8.1v3.1 | 1.2% | 2021-03-15 | Fix |
| CVE-2021-3418 | grub2 improper preservation of permissions | 6.4NVD v3.1 | 0.5% | 2021-03-15 | Fix |
| CVE-2021-3167 | Cloudera DATA Engineering sensitive information in log files | 6.5v3.1 | 1.1% | 2021-03-15 | Fix |
| CVE-2021-3150 | Cryptshare Server cross-site scripting | 6.1v3.1 | 0.6% | 2021-03-15 | Fix |
| CVE-2021-28373 | Tt-rss Tiny Tiny RSS incorrect authorization | 7.5v3.1 | 0.9% | 2021-03-13 | Fix |
| CVE-2021-28361 | Spdk Storage Performance Development Kit null pointer dereference | 7.5v3.1 | 1.1% | 2021-03-13 | Fix |
| CVE-2021-20018 | SonicWall SMA100 information disclosure | 4.9v3.1 | 0.7% | 2021-03-13 | Fix |
| CVE-2021-20017 | SonicWall SMA100 post-authenticated command injection | 8.8v3.1 | 1.8% | 2021-03-13 | Fix |
| CVE-2021-28308 | Null pointer deference in Fltk | 9.1v3.1 | 1.3% | 2021-03-12 | Fix |
| CVE-2021-28307 | Null pointer deference in Fltk | 7.5v3.1 | 1.1% | 2021-03-12 | Fix |
| CVE-2021-28306 | Null pointer deference in Fltk | 7.5v3.1 | 1.1% | 2021-03-12 | Fix |
| CVE-2021-28305 | Diesel fix a use-after-free bug in diesels Sqlite backend | 9.8v3.1 | 1.3% | 2021-03-12 | Fix |
| CVE-2021-28302 | pupnp A stack-based buffer overflow | 7.5v3.1 | 1.4% | 2021-03-12 | Fix |
| CVE-2021-28162 | Command injection in @Theia/messages | 6.1v3.1 | 0.8% | 2021-03-12 | Fix |
| CVE-2021-28161 | Improper neutralization of Input in Theia console | 6.1v3.1 | 0.7% | 2021-03-12 | Fix |
| CVE-2021-28092 | Is-svg regular expression denial of service (ReDoS) | 7.5v3.1 | 2.2% | 2021-03-12 | Fix |
| CVE-2021-27647 | Synology DiskStation Manager (DSM) iscsi_snapshot_comm_core out-of-bounds read | 9.8CNA v3.1 | 3.2% | 2021-03-12 | Fix |
| CVE-2021-27646 | Synology DiskStation Manager (DSM) iscsi_snapshot_comm_core use-after-free | 9.8CNA v3.1 | 3.9% | 2021-03-12 | Fix |
| CVE-2021-27290 | Ssri regular expression denial of service (ReDoS) | 7.5v3.1 | 4.7% | 2021-03-12 | Fix |
| CVE-2021-26569 | Synology DiskStation Manager (DSM) iscsi_snapshot_comm_core race condition | 9.8CNA v3.1 | 2.3% | 2021-03-12 | Fix |
| CVE-2021-23354 | printf regular expression denial of service (ReDoS) | 7.5v3.1 | 2.2% | 2021-03-12 | Fix |
| CVE-2021-21726 | Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects: | 2.3v3.1 | 0.4% | 2021-03-12 | Fix |
| CVE-2021-21518 | Dell SupportAssist Client uncontrolled search path | 7.8CNA v3.1 | 0.4% | 2021-03-12 | Fix |
| CVE-2021-21379 | XWiki Platform wikimacrocontent macro vulnerability | 7.7CNA v3.1 | 0.5% | 2021-03-12 | Fix |
| CVE-2021-21368 | msgpack5 map decoding vulnerability | 6.7CNA v3.1 | 1.6% | 2021-03-12 | Fix |
| CVE-2021-21367 | Incorrect authorization in switchboard-plug-bluetooth | 6.1CNA v3.1 | 0.6% | 2021-03-12 | Fix |
| CVE-2021-21366 | xmldom misinterpretation of malicious XML input | 4.3CNA v3.1 | 1.3% | 2021-03-12 | Fix |
| CVE-2021-21085 | Adobe Connect CSV injection via export feature could lead to code execution | 7.8CNA v3.1 | 3.9% | 2021-03-12 | Fix |
| CVE-2021-21082 | Adobe Photoshop memory corruption | 7.8CNA v3.1 | 4.6% | 2021-03-12 | Fix |
| CVE-2021-21080 | Adobe Connect reflected cross-site scripting via query parameter | 6.1CNA v3.0 | 1.2% | 2021-03-12 | Fix |
| CVE-2021-21079 | Adobe Connect reflected cross-site scripting via archiveOffset parameter | 6.1CNA v3.0 | 1.1% | 2021-03-12 | Fix |
| CVE-2021-21078 | Adobe Creative Cloud unquoted service path in CCXProcess | 6.5CNA v3.0 | 1.1% | 2021-03-12 | Fix |
| CVE-2021-21077 | Adobe Animate heap-based overflow | 7.8CNA v3.0 | 8.3% | 2021-03-12 | Fix |
| CVE-2021-21076 | Adobe Animate out-of-bounds read | 7.1CNA v3.0 | 3.5% | 2021-03-12 | Fix |
| CVE-2021-21075 | Adobe Animate out-of-bounds read | 7.1CNA v3.0 | 3.3% | 2021-03-12 | Fix |
| CVE-2021-21074 | Adobe Animate out-of-bounds read | 7.1CNA v3.0 | 3.5% | 2021-03-12 | Fix |
| CVE-2021-21073 | Adobe Animate out-of-bounds read | 7.1CNA v3.0 | 3.3% | 2021-03-12 | Fix |
| CVE-2021-21072 | Adobe Animate out-of-bounds read | 7.1CNA v3.0 | 3.3% | 2021-03-12 | Fix |
| CVE-2021-21071 | Adobe Animate memory corruption | 7.8CNA v3.0 | 4.6% | 2021-03-12 | Fix |
| CVE-2021-21069 | Adobe Creative Cloud privilege escalation | 7.8CNA v3.0 | 2.6% | 2021-03-12 | Fix |
| CVE-2021-21068 | Adobe Creative Cloud installer arbitrary file overwrite | 6.1CNA v3.0 | 0.6% | 2021-03-12 | Fix |
| CVE-2021-21067 | Adobe Photoshop CoolType arbitrary stack manipulation in Type 1/Multiple Master | 7.8CNA v3.1 | 3.0% | 2021-03-12 | Fix |
| CVE-2021-21056 | Adobe FrameMaker out-of-bounds read vulnerability could lead to remote code execution | 7.8CNA v3.0 | 22.6% | 2021-03-12 | Fix |
| CVE-2021-20674 | NTT TechnoCross Installer of MagicConnect Client program untrusted search path | 7.8v3.1 | 0.9% | 2021-03-12 | Fix |
| CVE-2021-20232 | gnutls use-after-free | 9.8NVD v3.1 | 3.5% | 2021-03-12 | Fix |
| CVE-2021-20231 | gnutls use-after-free | 9.8NVD v3.1 | 3.8% | 2021-03-12 | Fix |
| CVE-2021-28154 | Camunda Modeler missing authorization | 9.1v3.1 | 1.5% | 2021-03-11 | |
| CVE-2021-28153 | GNOME GLib link following | 5.3NVD v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-28144 | D-Link Dir-3060 OS command injection | 8.8v3.1 | 6.0% | 2021-03-11 | Fix |
| CVE-2021-28143 | D-Link Dir-841 OS command injection | 8.0v3.1 | 47.3% | 2021-03-11 | Fix |
| CVE-2021-28141 | Progress Telerik UI for ASP.NET AJAX missing authorization | 9.8v3.1 | 2.2% | 2021-03-11 | |
| CVE-2021-28134 | Clipper remote command execution | 9.8v3.1 | 5.2% | 2021-03-11 | Fix |
| CVE-2021-28132 | Lucysecurity Security Awareness OS command injection | 9.8v3.1 | 3.2% | 2021-03-11 | |
| CVE-2021-28088 | ImpressCMS cross-site scripting (XSS) | 5.4v3.1 | 0.9% | 2021-03-11 | |
| CVE-2021-27919 | Go denial of service | 5.5v3.1 | 1.5% | 2021-03-11 | Fix |
| CVE-2021-27918 | Go encoding/xml package infinite loop | 7.5v3.1 | 2.5% | 2021-03-11 | Fix |
| CVE-2021-27679 | Batflat Navigation cross-site scripting | 5.4v3.1 | 0.6% | 2021-03-11 | |
| CVE-2021-27678 | Batflat Snippets cross-site scripting | 5.4v3.1 | 0.6% | 2021-03-11 | |
| CVE-2021-27677 | Batflat Galleries cross-site scripting | 5.4v3.1 | 0.6% | 2021-03-11 | |
| CVE-2021-27085 | Microsoft Internet Explorer remote code execution | 8.8CNA v3.1 | 5.4% | 2021-03-11 | KEVFix |
| CVE-2021-27084 | Microsoft Visual Studio Code Java Extension Pack remote code execution | 7.8CNA v3.1 | 62.1% | 2021-03-11 | Fix |
| CVE-2021-27083 | Microsoft Remote Development extension for Visual Studio Code Remote code execution | 7.8CNA v3.1 | 61.9% | 2021-03-11 | Fix |
| CVE-2021-27082 | Quantum Development Kit for Visual Studio Code remote code execution | 7.8CNA v3.1 | 3.9% | 2021-03-11 | Fix |
| CVE-2021-27081 | Visual Studio Code ESLint extension remote code execution | 7.8CNA v3.1 | 4.3% | 2021-03-11 | Fix |
| CVE-2021-27080 | Microsoft Azure Sphere Unsigned code execution | 9.3CNA v3.1 | 1.3% | 2021-03-11 | Fix |
| CVE-2021-27077 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 1.4% | 2021-03-11 | Fix |
| CVE-2021-27076 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 15.2% | 2021-03-11 | Fix |
| CVE-2021-27075 | Microsoft Azure Virtual Machine information disclosure | 6.8CNA v3.1 | 1.4% | 2021-03-11 | Fix |
| CVE-2021-27074 | Microsoft Azure Sphere Unsigned code execution | 6.2CNA v3.1 | 1.3% | 2021-03-11 | Fix |
| CVE-2021-27070 | Microsoft Windows 10 Update Assistant elevation of privilege | 7.3CNA v3.1 | 4.1% | 2021-03-11 | Fix |
| CVE-2021-27066 | Microsoft Windows Admin Center security feature bypass | 4.3CNA v3.1 | 3.0% | 2021-03-11 | Fix |
| CVE-2021-27063 | Microsoft Windows DNS server denial of service | 7.5CNA v3.1 | 6.7% | 2021-03-11 | Fix |
| CVE-2021-27062 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-27061 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 4.6% | 2021-03-11 | Fix |
| CVE-2021-27060 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 3.2% | 2021-03-11 | Fix |
| CVE-2021-27059 | Microsoft Office remote code execution | 7.6CNA v3.1 | 6.1% | 2021-03-11 | KEVFix |
| CVE-2021-27058 | Microsoft Office ClickToRun remote code execution | 7.8CNA v3.1 | 3.5% | 2021-03-11 | Fix |
| CVE-2021-27057 | Microsoft Office remote code execution | 7.8CNA v3.1 | 4.3% | 2021-03-11 | Fix |
| CVE-2021-27056 | Microsoft PowerPoint remote code execution | 7.8CNA v3.1 | 4.3% | 2021-03-11 | Fix |
| CVE-2021-27055 | Microsoft Visio security feature bypass | 7.0CNA v3.1 | 2.5% | 2021-03-11 | Fix |
| CVE-2021-27054 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 4.3% | 2021-03-11 | Fix |
| CVE-2021-27053 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 4.6% | 2021-03-11 | Fix |
| CVE-2021-27052 | Microsoft SharePoint server information disclosure | 5.3CNA v3.1 | 3.1% | 2021-03-11 | Fix |
| CVE-2021-27051 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-27050 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-27049 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-27048 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-27047 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.9% | 2021-03-11 | Fix |
| CVE-2021-26902 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 5.9% | 2021-03-11 | Fix |
| CVE-2021-26901 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-26900 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 2.4% | 2021-03-11 | Fix |
| CVE-2021-26899 | Microsoft Windows UPnP device host elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-03-11 | Fix |
| CVE-2021-26898 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-03-11 | Fix |
| CVE-2021-26897 | Microsoft Windows DNS server remote code execution | 9.8CNA v3.1 | 11.6% | 2021-03-11 | Emerging ThreatsFix |
| CVE-2021-26896 | Microsoft Windows DNS server denial of service | 7.5CNA v3.1 | 7.8% | 2021-03-11 | Fix |
| CVE-2021-26895 | Microsoft Windows DNS server remote code execution | 9.8CNA v3.1 | 7.8% | 2021-03-11 | Fix |
| CVE-2021-26894 | Microsoft Windows DNS server remote code execution | 9.8CNA v3.1 | 7.8% | 2021-03-11 | Fix |
| CVE-2021-26893 | Microsoft Windows DNS server remote code execution | 9.8CNA v3.1 | 7.0% | 2021-03-11 | Fix |
| CVE-2021-26892 | Microsoft Windows Extensible firmware interface security feature bypass | 6.2CNA v3.1 | 1.3% | 2021-03-11 | Fix |
| CVE-2021-26891 | Microsoft Windows Container Execution agent elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-03-11 | Fix |
| CVE-2021-26890 | Microsoft Windows application Virtualization remote code execution | 7.8CNA v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-26889 | Microsoft Windows Update Stack elevation of privilege | 7.8CNA v3.1 | 1.2% | 2021-03-11 | Fix |
| CVE-2021-26887 | Microsoft Windows Folder Redirection elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-03-11 | Fix |
| CVE-2021-26886 | Microsoft Windows user Profile service denial of service | 6.1CNA v3.1 | 1.1% | 2021-03-11 | Fix |
| CVE-2021-26885 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 3.5% | 2021-03-11 | Fix |
| CVE-2021-26884 | Microsoft Windows Media Photo Codec information disclosure | 5.5CNA v3.1 | 1.0% | 2021-03-11 | Fix |
| CVE-2021-26882 | Microsoft Windows remote Access API elevation of privilege | 7.8CNA v3.1 | 2.1% | 2021-03-11 | Exploit codeFix |
| CVE-2021-26881 | Microsoft Windows Media Foundation remote code execution | 7.5CNA v3.1 | 2.8% | 2021-03-11 | Fix |
| CVE-2021-26880 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-03-11 | Fix |
| CVE-2021-26879 | Microsoft Windows Network Address Translation (NAT) denial of service | 7.5CNA v3.1 | 3.8% | 2021-03-11 | Fix |
| CVE-2021-26878 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-26877 | Microsoft Windows DNS server remote code execution | 9.8CNA v3.1 | 17.6% | 2021-03-11 | Emerging ThreatsFix |
| CVE-2021-26876 | Microsoft Windows OpenType Font Parsing remote code execution | 8.8CNA v3.1 | 2.9% | 2021-03-11 | Fix |
| CVE-2021-26875 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-03-11 | Fix |
| CVE-2021-26874 | Microsoft Windows Overlay Filter elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-26873 | Microsoft Windows User Profile service elevation of privilege | 7.0CNA v3.1 | 1.1% | 2021-03-11 | Fix |
| CVE-2021-26872 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-03-11 | Fix |
| CVE-2021-26871 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 1.4% | 2021-03-11 | Exploit codeFix |
| CVE-2021-26870 | Microsoft Windows Projected File System elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-03-11 | Fix |
| CVE-2021-26869 | Microsoft Windows ActiveX Installer service information disclosure | 5.5CNA v3.1 | 1.0% | 2021-03-11 | Fix |
| CVE-2021-26868 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 3.1% | 2021-03-11 | Exploit codeKCVFix |
| CVE-2021-26867 | Microsoft Windows Hyper-V remote code execution | 9.9CNA v3.1 | 2.8% | 2021-03-11 | Fix |
| CVE-2021-26866 | Microsoft Windows Update service elevation of privilege | 7.1CNA v3.1 | 1.1% | 2021-03-11 | Fix |
| CVE-2021-26865 | Microsoft Windows Container Execution agent elevation of privilege | 8.8CNA v3.1 | 1.1% | 2021-03-11 | Fix |
| CVE-2021-26864 | Microsoft Windows Virtual Registry Provider elevation of privilege | 8.4CNA v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-26863 | Microsoft Windows Win32k elevation of privilege | 7.0CNA v3.1 | 11.8% | 2021-03-11 | Fix |
| CVE-2021-26862 | Microsoft Windows Installer elevation of privilege | 7.0CNA v3.1 | 1.2% | 2021-03-11 | Fix |
| CVE-2021-26861 | Microsoft Windows Graphics component remote code execution | 7.8CNA v3.1 | 2.9% | 2021-03-11 | Fix |
| CVE-2021-26860 | Microsoft Windows App-V Overlay Filter elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-03-11 | Fix |
| CVE-2021-26859 | Microsoft Power BI information disclosure | 7.7CNA v3.1 | 3.4% | 2021-03-11 | Fix |
| CVE-2021-26776 | CSZ CMS cross-site scripting | 5.4v3.1 | 0.5% | 2021-03-11 | |
| CVE-2021-26411 | Microsoft Internet Explorer memory corruption | 8.8CNA v3.1 | 81.7% | 2021-03-11 | KEVExploit codeKCVFix |
| CVE-2021-24110 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-24108 | Microsoft Office remote code execution | 7.8CNA v3.1 | 2.7% | 2021-03-11 | Fix |
| CVE-2021-24107 | Microsoft Windows Event Tracing information disclosure | 5.5CNA v3.1 | 1.0% | 2021-03-11 | Fix |
| CVE-2021-24104 | Microsoft SharePoint server spoofing | 4.6CNA v3.1 | 1.5% | 2021-03-11 | Fix |
| CVE-2021-24095 | Microsoft Windows DirectX elevation of privilege | 7.0CNA v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-24090 | Microsoft Windows Error Reporting elevation of privilege | 7.8CNA v3.1 | 3.5% | 2021-03-11 | Fix |
| CVE-2021-24089 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 4.6% | 2021-03-11 | Fix |
| CVE-2021-22714 | PowerLogic ION7400, PM8000 and ION9000 memory corruption | 9.8v3.1 | 2.4% | 2021-03-11 | Fix |
| CVE-2021-22713 | PowerLogic ION8650 memory corruption | 7.5v3.1 | 1.2% | 2021-03-11 | Fix |
| CVE-2021-22712 | Interactive Graphical SCADA System (IGSS) Definition (Def.exe) memory corruption | 7.8v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-22711 | Interactive Graphical SCADA System (IGSS) Definition (Def.exe) memory corruption | 7.8v3.1 | 0.8% | 2021-03-11 | Fix |
| CVE-2021-22710 | Interactive Graphical SCADA System (IGSS) Definition (Def.exe) memory corruption | 7.8v3.1 | 2.0% | 2021-03-11 | Fix |
| CVE-2021-22709 | Interactive Graphical SCADA System (IGSS) Definition (Def.exe) memory corruption | 7.8v3.1 | 2.0% | 2021-03-11 | Fix |
| CVE-2021-21381 | flatpak sandbox escape via special tokens in .desktop file | 7.1CNA v3.1 | 1.5% | 2021-03-11 | Fix |
| CVE-2021-21378 | envoyproxy envoy JWT authentication bypass with unknown issuer token | 8.2CNA v3.1 | 1.7% | 2021-03-11 | Fix |
| CVE-2021-21364 | swagger-api swagger-codegen Generated Code Contains Local information disclosure | 5.3CNA v3.1 | 0.3% | 2021-03-11 | Fix |
| CVE-2021-21363 | swagger-api swagger-codegen Generator Web Application: Local privilege escalation vulnerability | 5.3CNA v3.1 | 0.4% | 2021-03-11 | Fix |
| CVE-2021-20336 | IBM Tivoli Netcool/OMNIbus_GUI cross-site scripting | 6.4CNA v3.0 | 0.6% | 2021-03-11 | Fix |
| CVE-2021-20261 | Linux kernel A race condition | 6.4NVD v3.1 | 0.2% | 2021-03-11 | Fix |
| CVE-2021-1729 | Microsoft Windows Update Stack Setup elevation of privilege | 7.1CNA v3.1 | 1.0% | 2021-03-11 | Fix |
| CVE-2021-28122 | Open5GS missing authentication | 9.8v3.1 | 4.0% | 2021-03-10 | Fix |
| CVE-2021-28007 | Web Based Quiz System cross-site scripting | 6.1v3.1 | 0.9% | 2021-03-10 | |
| CVE-2021-24030 | Facebook Gameroom argument injection | 9.8v3.1 | 1.7% | 2021-03-10 | Fix |
| CVE-2021-24025 | Facebook HHVM heap-based buffer overflow | 9.8v3.1 | 1.7% | 2021-03-10 | Fix |
| CVE-2021-21772 | lib3mf OPC package reader use-after-free | 8.1NVD v3.1 | 4.2% | 2021-03-10 | Fix |
| CVE-2021-21491 | SAP NetWeaver Application Server Java open redirect | 4.7CNA v3.0 | 0.7% | 2021-03-10 | Fix |
| CVE-2021-21375 | pjsip pjproject crash in receiving updated SDP answer after initial SDP negotiation failed | 6.5CNA v3.1 | 2.1% | 2021-03-10 | Fix |
| CVE-2021-21371 | Tenable integration-jira-cloud execution of untrusted code through config file | 5.0CNA v3.1 | 0.5% | 2021-03-10 | Fix |
| CVE-2021-21334 | Linux Foundation containerd CRI environment variable handling vulnerability | 6.3CNA v3.1 | 2.0% | 2021-03-10 | Fix |
| CVE-2021-21265 | October CMS vulnerable to potential host header poisoning on misconfigured servers | 6.8CNA v3.1 | 1.7% | 2021-03-10 | Fix |
| CVE-2021-20673 | WESEEK GROWI (v4.2 Series) Admin page stored cross-site scripting | 4.8v3.1 | 0.8% | 2021-03-10 | Fix |
| CVE-2021-20672 | WESEEK GROWI (v4.2 Series) cross-site scripting | 6.1v3.1 | 0.9% | 2021-03-10 | Fix |
| CVE-2021-20671 | WESEEK GROWI arbitrary code execution | 7.2v3.1 | 1.8% | 2021-03-10 | Fix |
| CVE-2021-20670 | WESEEK GROWI improper access control | 7.5v3.1 | 1.5% | 2021-03-10 | Fix |
| CVE-2021-20669 | WESEEK GROWI path traversal | 4.7v3.1 | 0.8% | 2021-03-10 | Fix |
| CVE-2021-20668 | WESEEK GROWI path traversal | 2.7v3.1 | 0.8% | 2021-03-10 | Fix |
| CVE-2021-20667 | WESEEK GROWI cross-site scripting | 5.4v3.1 | 0.7% | 2021-03-10 | Fix |
| CVE-2021-20265 | kernel crash | 5.5NVD v3.1 | 0.3% | 2021-03-10 | Fix |
| CVE-2021-20205 | libjpeg-turbo divide by zero | 6.5NVD v3.1 | 1.2% | 2021-03-10 | Fix |
| CVE-2021-3310 | Western Digital My Cloud OS link following | 7.8v3.1 | 1.0% | 2021-03-10 | Exploit codeFix |
| CVE-2021-3224 | CSZ CMS A stored cross-site scripting | 5.4v3.1 | 0.5% | 2021-03-10 | |
| CVE-2021-3034 | Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs | 5.1CNA v3.1 | 0.2% | 2021-03-10 | Fix |
| CVE-2021-1640 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-03-10 | Fix |
| CVE-2021-0465 | Android face.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0464 | Android platform.h out-of-bounds write | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0463 | Android convert.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0462 | Android the NXP NFC firmware privilege escalation | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0461 | Android iaxxx-module.c out-of-bounds write | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0460 | Android the FingerTipS touch screen driver out-of-bounds read | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0459 | Android fts_proc.c out-of-bounds read | 4.4v3.1 | 0.2% | 2021-03-10 | Fix |
| CVE-2021-0458 | Android the FingerTipS touch screen driver out-of-bounds read | 4.4v3.1 | 0.2% | 2021-03-10 | Fix |
| CVE-2021-0457 | Android the FingerTipS touch screen driver out-of-bounds write | 6.7v3.1 | 0.2% | 2021-03-10 | Fix |
| CVE-2021-0456 | Android the Citadel chip firmware out-of-bounds write | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0455 | Android the Citadel chip firmware out-of-bounds write | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0454 | Android the Citadel chip firmware out-of-bounds write | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0453 | Android the Titan-M chip firmware information disclosure | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0452 | Android the Titan M chip firmware information disclosure | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0451 | Android the Titan M chip firmware information disclosure | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0450 | Android the Titan M chip firmware information disclosure | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0449 | Android the Titan M chip firmware information disclosure | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0399 | Android xt_qtaguid.c memory corruption | 7.8v3.1 | 0.4% | 2021-03-10 | Exploit codeFix |
| CVE-2021-0398 | Android ActiveServices.java privilege escalation | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0397 | Android sdp_discovery.cc remote code execution | 9.8v3.1 | 5.7% | 2021-03-10 | Fix |
| CVE-2021-0396 | Android builtins-arm.cc out-of-bounds write | 9.8v3.1 | 1.9% | 2021-03-10 | Exploit codeFix |
| CVE-2021-0395 | Android use-after-free | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0394 | Android android_os_Parcel.cpp out-of-bounds read | 5.5v3.1 | 0.3% | 2021-03-10 | Exploit codeFix |
| CVE-2021-0393 | Android scanner.cc out-of-bounds write | 7.8v3.1 | 1.0% | 2021-03-10 | Exploit codeFix |
| CVE-2021-0392 | Android main.cpp memory corruption | 7.8v3.1 | 0.2% | 2021-03-10 | Exploit codeFix |
| CVE-2021-0391 | Android ChooseTypeAndAccountActivity.java privilege escalation | 7.8v3.1 | 0.7% | 2021-03-10 | Fix |
| CVE-2021-0390 | Android WifiNetworkSuggestionsManager.java privilege escalation | 7.8v3.1 | 0.2% | 2021-03-10 | Exploit codeFix |
| CVE-2021-0389 | Android missing authorization | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0388 | Android ImsPhoneCallTracker.java privilege escalation | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0387 | Android QuotaUtils.cpp use-after-free | 6.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0386 | Android UsbConfirmActivity privilege escalation | 7.8v3.1 | 0.3% | 2021-03-10 | Fix |
| CVE-2021-0385 | Android ConnectToNetworkNotificationBuilder.java privilege escalation | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0383 | Android confused deputy | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0382 | Android SliceManagerService.java resource exposure | 5.5v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0381 | Android DeviceStorageMonitorService.java insecure permissions | 5.5v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0380 | Android DcTracker.java privilege escalation | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0379 | Android pvmp3_getbits.cpp out-of-bounds read | 6.5v3.1 | 0.8% | 2021-03-10 | Fix |
| CVE-2021-0378 | Android pvmp3_getbits.cpp out-of-bounds read | 6.5v3.1 | 0.8% | 2021-03-10 | Fix |
| CVE-2021-0377 | Android improper input validation | 5.5v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0376 | Android MediaProvider.java privilege escalation | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0375 | Android VoiceInteractionManagerService.java privilege escalation | 5.5v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0374 | Android IAudioPolicyService.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0372 | Android RemoteMediaSlice.java insecure permissions | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0371 | Android nci_hrcv.cc out-of-bounds read | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0370 | Android NxpMfcReader.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0369 | Google Android cross-profile apps service privilege escalation | 7.8v3.1 | 0.1% | 2021-03-10 | Fix |
| CVE-2021-0368 | Android bitwise.c out-of-bounds read | 6.5v3.1 | 0.7% | 2021-03-10 | Fix |
| CVE-2021-28119 | Twinkle Tray remote command execution | 9.8v3.1 | 3.6% | 2021-03-09 | |
| CVE-2021-28116 | squid-cache squid out-of-bounds read | 5.3v3.1 | 13.0% | 2021-03-09 | Fix |
| CVE-2021-28115 | Ougc Feedback cross-site scripting | 6.1v3.1 | 0.9% | 2021-03-09 | |
| CVE-2021-28006 | Web Based Quiz System cross-site scripting | 6.1v3.1 | 0.9% | 2021-03-09 | |
| CVE-2021-27592 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-27591 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-27590 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-27589 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-27588 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-27587 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-27586 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-27585 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-27584 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 0.7% | 2021-03-09 | Fix |
| CVE-2021-25915 | Changeset vulnerable to prototype pollution | 9.8v3.1 | 3.5% | 2021-03-09 | Fix |
| CVE-2021-24033 | react-dev-utils OS command injection in function `getProcessForPort` | 5.6v3.1 | 3.3% | 2021-03-09 | Fix |
| CVE-2021-23353 | jspdf regular expression denial of service (ReDoS) | 7.5v3.1 | 2.6% | 2021-03-09 | Fix |
| CVE-2021-23352 | madge command injection | 9.8v3.1 | 2.1% | 2021-03-09 | Fix |
| CVE-2021-23273 | TIBCO Spotfire cross-site scripting | 8.0CNA v3.1 | 0.7% | 2021-03-09 | Fix |
| CVE-2021-21493 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 1.7% | 2021-03-09 | Fix |
| CVE-2021-21488 | SAP NetWeaver (Knowledge Management) deserialization of untrusted data | 6.5CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-21487 | SAP Payment Engine missing authorization | 6.8CNA v3.0 | 0.8% | 2021-03-09 | Fix |
| CVE-2021-21486 | SAP Enterprise Financial Services (Bank Customer Accounts) missing authorization | 6.8CNA v3.0 | 0.8% | 2021-03-09 | Fix |
| CVE-2021-21484 | SAP HANA incorrect authorization | 7.7CNA v3.0 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-21481 | SAP NetWeaver AS JAVA (MigrationService) incorrect authorization | 9.6CNA v3.0 | 0.5% | 2021-03-09 | Fix |
| CVE-2021-21480 | SAP Manufacturing Integration and Intelligence code injection | 9.9CNA v3.0 | 52.1% | 2021-03-09 | Fix |
| CVE-2021-21369 | Potential DoS in Besu HTTP JSON-RPC API | 6.5CNA v3.1 | 1.7% | 2021-03-09 | Fix |
| CVE-2021-21361 | JLLeitschuh security-research sensitive information disclosure | 5.3CNA v3.1 | 1.2% | 2021-03-09 | Fix |
| CVE-2021-21360 | Exposure of sensitive information to an unauthorized actor in Products.GenericSetup | 5.3CNA v3.1 | 1.5% | 2021-03-09 | Fix |
| CVE-2021-21300 | git malicious repositories can execute remote code while cloning | 8.0CNA v3.1 | 88.5% | 2021-03-09 | Exploit codeFix |
| CVE-2021-21295 | netty io.netty:netty-codec-http2 possible request smuggling in HTTP/2 due missing validation | 5.9CNA v3.1 | 18.9% | 2021-03-09 | Fix |
| CVE-2021-21190 | Google Chrome PDFium uninitialized memory use | 8.8v3.1 | 1.5% | 2021-03-09 | Fix |
| CVE-2021-21189 | Google Chrome payments insufficient policy enforcement | 4.3v3.1 | 1.5% | 2021-03-09 | Fix |
| CVE-2021-21188 | Google Chrome Blink use-after-free | 8.8v3.1 | 1.6% | 2021-03-09 | Fix |
| CVE-2021-21187 | Google Chrome URL formatting improper input validation | 4.3v3.1 | 1.5% | 2021-03-09 | Fix |
| CVE-2021-21186 | Google Chrome QR scanning insufficient policy enforcement | 4.3v3.1 | 1.1% | 2021-03-09 | Fix |
| CVE-2021-21185 | Google Chrome extensions insufficient policy enforcement | 4.3v3.1 | 1.3% | 2021-03-09 | Fix |
| CVE-2021-21184 | Google Chrome performance APIs inappropriate implementation | 4.3v3.1 | 1.0% | 2021-03-09 | Fix |
| CVE-2021-21183 | Google Chrome performance APIs inappropriate implementation | 4.3v3.1 | 1.0% | 2021-03-09 | Fix |
| CVE-2021-21182 | Google Chrome navigations insufficient policy enforcement | 6.5v3.1 | 1.9% | 2021-03-09 | Fix |
| CVE-2021-21181 | Google Chrome autofill side-channel information leak | 6.5v3.1 | 1.6% | 2021-03-09 | Fix |
| CVE-2021-21180 | Google Chrome tab search use-after-free | 8.8v3.1 | 1.6% | 2021-03-09 | Fix |
| CVE-2021-21179 | Google Chrome Network Internals use-after-free | 8.8v3.1 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-21178 | Google Chrome Compositing inappropriate implementation | 6.5v3.1 | 1.6% | 2021-03-09 | Fix |
| CVE-2021-21177 | Google Chrome Autofill insufficient policy enforcement | 6.5v3.1 | 17.3% | 2021-03-09 | Fix |
| CVE-2021-21176 | Google Chrome full screen mode inappropriate implementation | 6.5v3.1 | 1.7% | 2021-03-09 | Fix |
| CVE-2021-21175 | Google Chrome Site isolation inappropriate implementation | 6.5v3.1 | 1.2% | 2021-03-09 | Fix |
| CVE-2021-21174 | Google Chrome Referrer inappropriate implementation | 8.8v3.1 | 1.5% | 2021-03-09 | Fix |
| CVE-2021-21173 | Google Chrome Network Internals side-channel information leak | 6.5v3.1 | 1.6% | 2021-03-09 | Fix |
| CVE-2021-21172 | Google Chrome File System API insufficient policy enforcement | 8.1v3.1 | 1.7% | 2021-03-09 | Fix |
| CVE-2021-21171 | Google Chrome TabStrip and Navigation incorrect security UI | 6.5v3.1 | 1.7% | 2021-03-09 | Fix |
| CVE-2021-21170 | Google Chrome Loader incorrect security UI | 6.5v3.1 | 1.6% | 2021-03-09 | Fix |
| CVE-2021-21169 | Google Chrome V8 out-of-bounds access | 8.8v3.1 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-21168 | Google Chrome appcache insufficient policy enforcement | 6.5v3.1 | 1.8% | 2021-03-09 | Fix |
| CVE-2021-21167 | Google Chrome bookmarks use-after-free | 8.8v3.1 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-21166 | Google Chromium race condition | 8.8v3.1 | 24.0% | 2021-03-09 | KEVKCVFix |
| CVE-2021-21165 | Google Chrome audio race condition | 8.8v3.1 | 1.1% | 2021-03-09 | Fix |
| CVE-2021-21164 | Google Chrome Chrome on iOS improper input validation | 6.5v3.1 | 0.8% | 2021-03-09 | Fix |
| CVE-2021-21163 | Google Chrome Reader Mode improper input validation | 6.5v3.1 | 0.9% | 2021-03-09 | Fix |
| CVE-2021-21162 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 1.4% | 2021-03-09 | Fix |
| CVE-2021-21161 | Google Chrome TabStrip heap-based buffer overflow | 8.8v3.1 | 1.5% | 2021-03-09 | Fix |
| CVE-2021-21160 | Google Chrome WebAudio heap-based buffer overflow | 8.8v3.1 | 1.9% | 2021-03-09 | Fix |
| CVE-2021-21159 | Google Chrome TabStrip heap-based buffer overflow | 8.8v3.1 | 1.7% | 2021-03-09 | Fix |
| CVE-2021-20341 | IBM Cloud Pak for Multicloud Management monitoring headers vulnerability | 5.3CNA v3.0 | 1.1% | 2021-03-09 | Fix |
| CVE-2021-20276 | privoxy denial of service | 7.5NVD v3.1 | 2.0% | 2021-03-09 | Fix |
| CVE-2021-20275 | privoxy denial of service | 7.5NVD v3.1 | 2.0% | 2021-03-09 | Fix |
| CVE-2021-20274 | privoxy null pointer dereference | 7.5NVD v3.1 | 1.9% | 2021-03-09 | Fix |
| CVE-2021-20273 | Privoxy CGI request handler improper input validation | 7.5NVD v3.1 | 2.0% | 2021-03-09 | Fix |
| CVE-2021-20272 | privoxy reachable assertion | 7.5NVD v3.1 | 2.1% | 2021-03-09 | Fix |
| CVE-2021-20268 | Linux kernel An out-of-bounds access | 7.8NVD v3.1 | 0.3% | 2021-03-09 | Fix |
| CVE-2021-20263 | QEMU improper preservation of permissions | 3.3NVD v3.1 | 0.4% | 2021-03-09 | Fix |
| CVE-2021-20262 | Keycloak missing authentication for critical function | 6.8v3.1 | 0.3% | 2021-03-09 | Fix |
| CVE-2021-20255 | QEMU eepro100 device emulator infinite loop | 5.5NVD v3.1 | 0.4% | 2021-03-09 | Fix |
| CVE-2021-20253 | ansible-tower files accessible to external parties | 6.7NVD v3.1 | 0.4% | 2021-03-09 | Fix |
| CVE-2021-20246 | ImageMagick divide by zero | 5.5NVD v3.1 | 1.2% | 2021-03-09 | Fix |
| CVE-2021-20245 | ImageMagick divide by zero | 5.5NVD v3.1 | 1.2% | 2021-03-09 | Fix |
| CVE-2021-20244 | ImageMagick divide by zero | 5.5NVD v3.1 | 1.2% | 2021-03-09 | Fix |
| CVE-2021-20243 | ImageMagick divide by zero | 5.5NVD v3.1 | 1.1% | 2021-03-09 | Fix |
| CVE-2021-20241 | ImageMagick divide by zero | 5.5NVD v3.1 | 1.1% | 2021-03-09 | Fix |
| CVE-2021-3417 | Lenovo XClarity Orchestrator cleartext transmission of sensitive information | 4.9CNA v3.1 | 0.6% | 2021-03-09 | Fix |
| CVE-2021-3411 | Linux kernel code injection | 6.7NVD v3.1 | 0.4% | 2021-03-09 | Fix |
| CVE-2021-27222 | Obss Time In Status cross-site scripting | 5.4v3.1 | 0.9% | 2021-03-08 | Fix |
| CVE-2021-26788 | Oryx-embedded Cyclonetcp denial of service | 7.5v3.1 | 1.2% | 2021-03-08 | |
| CVE-2021-23351 | github.com/pires/go-proxyproto denial of service (DoS) | 4.9v3.1 | 1.9% | 2021-03-08 | Fix |
| CVE-2021-22134 | Elasticsearch exposure of sensitive information to an unauthorized actor | 4.3v3.1 | 1.1% | 2021-03-08 | Fix |
| CVE-2021-21510 | Integrated Dell Remote Access Controller (iDRAC) host header injection | 6.1CNA v3.0 | 1.0% | 2021-03-08 | Fix |
| CVE-2021-21506 | Dell PowerScale OneFS improper input validation | 8.8CNA v3.1 | 1.1% | 2021-03-08 | Fix |
| CVE-2021-21503 | Dell PowerScale OneFS OS command injection | 7.8CNA v3.1 | 0.3% | 2021-03-08 | Fix |
| CVE-2021-21362 | minio bypassing readOnly policy by creating a temporary mc share upload URL | 7.7CNA v3.1 | 1.3% | 2021-03-08 | Fix |
| CVE-2021-21354 | Mozilla open redirect in PollBot | 7.4CNA v3.1 | 1.4% | 2021-03-08 | Fix |
| CVE-2021-21337 | URL redirection to untrusted site (open redirect) in Products.PluggableAuthService | 5.7CNA v3.1 | 8.4% | 2021-03-08 | Exploit codeFix |
| CVE-2021-21336 | Zope Products.PluggableAuthService ZODB Role Manager plugin information disclosure | 6.5CNA v3.1 | 1.5% | 2021-03-08 | Fix |
| CVE-2021-21335 | Basic Authentication can be bypassed using a malformed username | 5.3CNA v3.1 | 1.7% | 2021-03-08 | Fix |
| CVE-2021-21329 | ractf core Multi Factor Authentication Token improperly Validated on User Login | 8.7CNA v3.1 | 1.6% | 2021-03-08 | Fix |
| CVE-2021-21327 | glpi unsafe reflection in getItemForItemtype | 6.8CNA v3.1 | 2.3% | 2021-03-08 | Fix |
| CVE-2021-21326 | glpi horizontal privilege escalation | 7.7CNA v3.1 | 1.4% | 2021-03-08 | Fix |
| CVE-2021-21325 | glpi stored XSS in budget type | 6.2CNA v3.1 | 0.6% | 2021-03-08 | Fix |
| CVE-2021-21324 | glpi insecure direct object reference (IDOR) on Solutions | 6.8CNA v3.1 | 1.4% | 2021-03-08 | Fix |
| CVE-2021-27365 | Linux kernel out-of-bounds write | 7.8v3.1 | 2.1% | 2021-03-07 | Fix |
| CVE-2021-27364 | Linux kernel out-of-bounds read | 7.1v3.1 | 1.0% | 2021-03-07 | Fix |
| CVE-2021-27363 | Linux kernel iSCSI transport sysfs interface vulnerability | 4.4v3.1 | 0.7% | 2021-03-07 | Fix |
| CVE-2021-26294 | Afterlogic Webmail Pro path traversal | 7.5v3.1 | 16.9% | 2021-03-07 | Nuclei |
| CVE-2021-26814 | wazuh improper input validation (RCE) | 8.8v3.1 | 8.7% | 2021-03-06 | Exploit codeFix |
| CVE-2021-28042 | Deutschepost Mailoptimizer path traversal | 7.8v3.1 | 3.3% | 2021-03-05 | |
| CVE-2021-28041 | OpenBSD OpenSSH double free | 7.1NVD v3.1 | 3.5% | 2021-03-05 | Fix |
| CVE-2021-28040 | Ossec uncontrolled recursion | 7.5v3.1 | 1.2% | 2021-03-05 | |
| CVE-2021-28039 | Linux kernel incorrect buffer size calculation | 6.5v3.1 | 0.4% | 2021-03-05 | Fix |
| CVE-2021-28038 | Linux kernel resource exhaustion | 6.5v3.1 | 0.7% | 2021-03-05 | Fix |
| CVE-2021-28037 | Data race in internment | 9.8v3.1 | 1.2% | 2021-03-05 | Fix |
| CVE-2021-28036 | quinn invalidly assumes the memory layout of std::net::SocketAddr | 7.5v3.1 | 1.3% | 2021-03-05 | Fix |
| CVE-2021-28035 | Stack Dst drop of uninitialized memory in stack_dst | 9.8v3.1 | 1.2% | 2021-03-05 | Fix |
| CVE-2021-28034 | Stack Dst drop of uninitialized memory in stack_dst | 9.8v3.1 | 1.2% | 2021-03-05 | Fix |
| CVE-2021-28033 | Byte Struct deserializing an array can free uninitialized memory in byte_struct | 9.8v3.1 | 1.2% | 2021-03-05 | Fix |
| CVE-2021-28032 | Nano Arena use-after-free in nano_arena | 9.8v3.1 | 1.4% | 2021-03-05 | Fix |
| CVE-2021-28031 | Scratchpad move_elements can double free objects on panic | 9.8v3.1 | 1.4% | 2021-03-05 | Fix |
| CVE-2021-28030 | Truetype uninitialized resource use | 7.5v3.1 | 1.1% | 2021-03-05 | Fix |
| CVE-2021-28029 | Double free in Toodee | 7.5v3.1 | 1.1% | 2021-03-05 | Fix |
| CVE-2021-28028 | Double free in Toodee | 9.8v3.1 | 1.2% | 2021-03-05 | Fix |
| CVE-2021-28027 | Bam loading a bgzip block can write out-of-bounds if size overflows | 9.8v3.1 | 1.2% | 2021-03-05 | Fix |
| CVE-2021-28026 | Jpeg-xl out-of-bounds write | 7.8v3.1 | 1.2% | 2021-03-05 | |
| CVE-2021-27965 | MSI Dragon Center buffer overflow | 9.8v3.1 | 11.8% | 2021-03-05 | Exploit codeFix |
| CVE-2021-27964 | Sfcyazilim Sonlogger unrestricted file upload | 9.8v3.1 | 48.5% | 2021-03-05 | NucleiExploit codeFix |
| CVE-2021-27963 | Sfcyazilim Sonlogger missing authentication | 8.2v3.1 | 2.4% | 2021-03-05 | Exploit codeFix |
| CVE-2021-27907 | Apache Superset stored XSS on Dashboard markdown | 5.4v3.1 | 86.0% | 2021-03-05 | Emerging ThreatsFix |
| CVE-2021-27581 | Kentico CMS SQL injection | 9.8v3.1 | 1.6% | 2021-03-05 | Fix |
| CVE-2021-27314 | Doctor Appointment System admin.php SQL injection | 9.8v3.1 | 12.4% | 2021-03-05 | Nuclei |
| CVE-2021-27257 | NETGEAR R7800 improper certificate validation | 6.5v3.1 | 0.3% | 2021-03-05 | Fix |
| CVE-2021-27256 | NETGEAR R7800 OS command injection | 8.8v3.1 | 0.9% | 2021-03-05 | Fix |
| CVE-2021-27255 | NETGEAR R7800 missing authentication | 8.8v3.1 | 1.3% | 2021-03-05 | Fix |
| CVE-2021-27254 | NETGEAR R7800 hard-coded password | 8.8v3.1 | 0.5% | 2021-03-05 | Fix |
| CVE-2021-27099 | Cloud Native Computing Foundation (CNCF) Spire incorrect authorization | 6.8v3.1 | 0.7% | 2021-03-05 | Fix |
| CVE-2021-27098 | Legacy Node API allows Impersonation in github.com/spiffe/Spire/pkg/server/endpoints/node | 8.1v3.1 | 0.6% | 2021-03-05 | Fix |
| CVE-2021-26971 | Aruba AirWave Management Platform arbitrary command execution | 6.3v3.1 | 1.3% | 2021-03-05 | Fix |
| CVE-2021-26970 | Aruba AirWave Management Platform OS command injection | 6.3v3.1 | 1.3% | 2021-03-05 | Fix |
| CVE-2021-26969 | Aruba AirWave Management Platform XML external entity injection | 6.5v3.1 | 1.4% | 2021-03-05 | Fix |
| CVE-2021-26968 | Aruba AirWave Management Platform cross-site scripting | 4.8v3.1 | 0.6% | 2021-03-05 | Fix |
| CVE-2021-26967 | Aruba AirWave Management Platform cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-05 | Fix |
| CVE-2021-26966 | Aruba AirWave Management Platform SQL injection | 6.5v3.1 | 1.1% | 2021-03-05 | Fix |
| CVE-2021-26965 | Aruba AirWave Management Platform SQL injection | 6.5v3.1 | 1.1% | 2021-03-05 | Fix |
| CVE-2021-26964 | Aruba AirWave Management Platform incorrect authorization | 7.1v3.1 | 1.0% | 2021-03-05 | Fix |
| CVE-2021-26963 | Aruba AirWave Management Platform arbitrary command execution | 7.2v3.1 | 2.9% | 2021-03-05 | Fix |
| CVE-2021-26962 | Aruba AirWave Management Platform OS command injection | 7.2v3.1 | 3.1% | 2021-03-05 | Fix |
| CVE-2021-26961 | Aruba AirWave Management Platform cross-site request forgery | 8.8v3.1 | 0.6% | 2021-03-05 | Fix |
| CVE-2021-26960 | Aruba AirWave Management Platform cross-site request forgery | 8.8v3.1 | 0.6% | 2021-03-05 | Fix |
| CVE-2021-26705 | Squarebox Catdv missing authentication | 9.1v3.1 | 2.1% | 2021-03-05 | |
| CVE-2021-25313 | Rancher: XSS on /v3/cluster/ | 7.1CNA v3.1 | 1.5% | 2021-03-05 | Fix |
| CVE-2021-21725 | ZXHN H196Q incorrect authorization | 5.7v3.1 | 0.5% | 2021-03-05 | Fix |
| CVE-2021-20665 | Six Apart Movable Type cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-05 | Fix |
| CVE-2021-20664 | Six Apart Movable Type in Asset registration screen cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-05 | Fix |
| CVE-2021-20663 | Six Apart Movable Type in Role authority setting screen cross-site scripting | 6.1v3.1 | 0.8% | 2021-03-05 | Fix |
| CVE-2021-3420 | newlib integer overflow | 9.8NVD v3.1 | 2.1% | 2021-03-05 | Fix |
| CVE-2021-3377 | Ansi Up ansi_up cross-site scripting | 6.1v3.1 | 8.0% | 2021-03-05 | NucleiFix |
| CVE-2021-27217 | Yubico Yubihsm-shell out-of-bounds read | 4.4v3.1 | 1.6% | 2021-03-04 | Fix |
| CVE-2021-26989 | Clustered Data ONTAP denial of service | 6.5v3.1 | 1.1% | 2021-03-04 | Fix |
| CVE-2021-26988 | Clustered Data ONTAP missing authorization | 3.5v3.1 | 0.4% | 2021-03-04 | Fix |
| CVE-2021-26293 | Afterlogic Webmail Pro path traversal | 9.8v3.1 | 7.1% | 2021-03-04 | |
| CVE-2021-26029 | Joomla! CMS core Inadequate filtering of form contents could allow to overwrite the author field | 5.3v3.1 | 1.0% | 2021-03-04 | Fix |
| CVE-2021-26028 | Core path traversal within Joomla/archive zip class | 5.5v3.1 | 1.0% | 2021-03-04 | Fix |