CVE-2021 records published in April 2021
This page lists the 1,493 CVE-2021 records published in April 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 17 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 18112.1% of these records
- Listed in CISA KEV
- 171.1% of these records
- Reported exploited
- 40.3% of these records
- Detection signal
- 604.0% of these records
- Exploit code
- 755.0% of these records
- Actionable vendor fix
- 1,26884.9% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in April 2021 have had from about 66 months to about 67 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-31935 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.9% | 2021-04-30 | |
| CVE-2021-31934 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.9% | 2021-04-30 | |
| CVE-2021-31933 | Chamilo remote code execution | 7.2v3.1 | 13.9% | 2021-04-30 | Exploit codeFix |
| CVE-2021-31926 | Cubecoders Amp incorrect authorization | 6.5v3.1 | 0.9% | 2021-04-30 | |
| CVE-2021-31919 | Rkyv missing resource initialization | 7.5v3.1 | 1.1% | 2021-04-30 | Fix |
| CVE-2021-31873 | klibc integer overflow | 9.8v3.1 | 2.2% | 2021-04-30 | Fix |
| CVE-2021-31872 | klibc integer overflow | 9.8v3.1 | 2.1% | 2021-04-30 | Fix |
| CVE-2021-31871 | klibc integer overflow | 7.5v3.1 | 1.9% | 2021-04-30 | Fix |
| CVE-2021-31870 | klibc integer overflow | 9.8v3.1 | 2.1% | 2021-04-30 | Fix |
| CVE-2021-31792 | salesagility SuiteCRM client account page cross-site scripting | 5.4v3.1 | 0.9% | 2021-04-30 | Fix |
| CVE-2021-31232 | Improper input validation in CNCF Cortex | 5.5v3.1 | 0.4% | 2021-04-30 | Fix |
| CVE-2021-31231 | Grafana Enterprise Metrics Alertmanager vulnerability | 5.5v3.1 | 0.3% | 2021-04-30 | Fix |
| CVE-2021-29486 | cumulative-distribution-function infinite loop | 7.5CNA v3.1 | 2.0% | 2021-04-30 | Fix |
| CVE-2021-29464 | Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header | 3.3CNA v3.1 | 1.5% | 2021-04-30 | Fix |
| CVE-2021-29463 | Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata | 3.3CNA v3.1 | 1.1% | 2021-04-30 | Fix |
| CVE-2021-28959 | Zoho ManageEngine EventLog Analyzer path traversal | 9.8v3.1 | 16.9% | 2021-04-30 | Fix |
| CVE-2021-26807 | GOG galaxy untrusted search path | 7.8v3.1 | 0.5% | 2021-04-30 | |
| CVE-2021-21547 | Dell Unity cleartext storage of sensitive information | 6.4CNA v3.1 | 0.1% | 2021-04-30 | Fix |
| CVE-2021-21544 | Integrated Dell Remote Access Controller (iDRAC) client-side enforcement of server-side security | 2.7CNA v3.1 | 0.9% | 2021-04-30 | Fix |
| CVE-2021-21543 | Integrated Dell Remote Access Controller (iDRAC) cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-04-30 | Fix |
| CVE-2021-21542 | Integrated Dell Remote Access Controller (iDRAC) cross-site scripting | 4.8CNA v3.1 | 0.4% | 2021-04-30 | Fix |
| CVE-2021-21541 | Integrated Dell Remote Access Controller (iDRAC) cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-04-30 | Fix |
| CVE-2021-21540 | Integrated Dell Remote Access Controller (iDRAC) stack-based buffer overflow | 5.9CNA v3.1 | 1.2% | 2021-04-30 | Fix |
| CVE-2021-21539 | Integrated Dell Remote Access Controller (iDRAC) time-of-check time-of-use race condition | 5.9CNA v3.1 | 0.6% | 2021-04-30 | Fix |
| CVE-2021-21537 | Dell Hybrid Client (DHC) information disclosure | 6.2CNA v3.1 | 0.2% | 2021-04-30 | Fix |
| CVE-2021-21536 | Dell Hybrid Client (DHC) information disclosure | 6.2CNA v3.1 | 0.2% | 2021-04-30 | Fix |
| CVE-2021-21535 | Dell Hybrid Client (DHC) missing authentication | 7.4CNA v3.1 | 0.2% | 2021-04-30 | Fix |
| CVE-2021-21534 | Dell Hybrid Client (DHC) information disclosure | 4.0CNA v3.1 | 0.2% | 2021-04-30 | Fix |
| CVE-2021-21531 | Dell Unisphere for PowerMax client-side enforcement of server-side security | 8.1CNA v3.1 | 0.7% | 2021-04-30 | Fix |
| CVE-2021-21530 | Dell OpenManage Enterprise OS command injection | 8.3CNA v3.1 | 0.9% | 2021-04-30 | Fix |
| CVE-2021-21507 | Dell VRTX Switch Modules weak password encoding | 8.8CNA v3.1 | 0.5% | 2021-04-30 | Fix |
| CVE-2021-21233 | Google Chrome ANGLE heap-based buffer overflow | 8.8v3.1 | 1.3% | 2021-04-30 | Fix |
| CVE-2021-21232 | Google Chrome Dev tools use-after-free | 8.8v3.1 | 1.1% | 2021-04-30 | Fix |
| CVE-2021-21231 | Google Chrome V8 improper input validation | 8.8v3.1 | 1.1% | 2021-04-30 | Fix |
| CVE-2021-21230 | Google Chrome V8 type confusion | 8.8v3.1 | 1.6% | 2021-04-30 | Fix |
| CVE-2021-21229 | Google Chrome downloads incorrect security UI | 6.5v3.1 | 0.9% | 2021-04-30 | Fix |
| CVE-2021-21228 | Google Chrome extensions insufficient policy enforcement | 4.3v3.1 | 1.1% | 2021-04-30 | Fix |
| CVE-2021-21227 | Google Chrome V8 improper input validation | 8.8v3.1 | 1.2% | 2021-04-30 | Fix |
| CVE-2021-20515 | IBM Informix Dynamic Server out-of-bounds write | 6.7CNA v3.0 | 0.3% | 2021-04-30 | Fix |
| CVE-2021-20326 | MongoDB Server specially crafted query may result in a denial of service of mongod | 6.5CNA v3.1 | 0.9% | 2021-04-30 | Fix |
| CVE-2021-20266 | RPM out-of-bounds read | 4.9v3.1 | 1.7% | 2021-04-30 | Fix |
| CVE-2021-31879 | GNU Wget open redirect | 6.1NVD v3.1 | 1.1% | 2021-04-29 | Fix |
| CVE-2021-31875 | Cesanta Mongooseos Mjs off-by-one error | 9.8v3.1 | 2.2% | 2021-04-29 | Fix |
| CVE-2021-31776 | Aviatrix VPN Client unquoted search path | 7.8v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-31438 | Foxit Studio Photo stack-based buffer overflow | 7.8v3.1 | 2.8% | 2021-04-29 | Fix |
| CVE-2021-31437 | Foxit Studio Photo out-of-bounds write | 7.8v3.1 | 2.8% | 2021-04-29 | Fix |
| CVE-2021-31436 | Foxit Studio Photo heap-based buffer overflow | 7.8v3.1 | 2.8% | 2021-04-29 | Fix |
| CVE-2021-31435 | Foxit Studio Photo uninitialized variable use | 7.8v3.1 | 2.8% | 2021-04-29 | Fix |
| CVE-2021-31434 | Foxit Studio Photo out-of-bounds write | 7.8v3.1 | 2.8% | 2021-04-29 | Fix |
| CVE-2021-31433 | Foxit Studio Photo out-of-bounds write | 7.8v3.1 | 2.8% | 2021-04-29 | Fix |
| CVE-2021-31432 | Parallels Desktop out-of-bounds read | 6.0v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31431 | Parallels Desktop out-of-bounds read | 6.0v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31430 | Parallels Desktop out-of-bounds read | 6.0v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31429 | Parallels Desktop heap-based buffer overflow | 8.2v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31428 | Parallels Desktop heap-based buffer overflow | 8.2v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31427 | Parallels Desktop time-of-check time-of-use race condition | 5.6NVD v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-31426 | Parallels Desktop integer overflow | 8.8v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-31425 | Parallels Desktop integer overflow | 8.8v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-31424 | Parallels Desktop heap-based buffer overflow | 8.8v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31423 | Parallels Desktop uninitialized resource use | 6.0v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31422 | Parallels Desktop time-of-check time-of-use race condition | 7.5v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-31421 | Parallels Desktop path traversal | 6.0v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31420 | Parallels Desktop stack-based buffer overflow | 8.8v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31419 | Parallels Desktop uninitialized resource use | 6.5v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31418 | Parallels Desktop uninitialized resource use | 6.5v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-31417 | Parallels Desktop uninitialized resource use | 6.5v3.1 | 0.4% | 2021-04-29 | Fix |
| CVE-2021-30234 | China Mobile An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.3% | 2021-04-29 | |
| CVE-2021-30233 | China Mobile An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.3% | 2021-04-29 | |
| CVE-2021-30232 | China Mobile An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.3% | 2021-04-29 | |
| CVE-2021-30231 | China Mobile An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.3% | 2021-04-29 | |
| CVE-2021-30230 | China Mobile An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.3% | 2021-04-29 | |
| CVE-2021-30229 | China Mobile An Lianbao Wf-1 OS command injection | 8.8v3.1 | 2.9% | 2021-04-29 | |
| CVE-2021-30228 | China Mobile An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.3% | 2021-04-29 | |
| CVE-2021-30227 | emlog article comments feature cross-site scripting | 6.1v3.1 | 0.7% | 2021-04-29 | |
| CVE-2021-30224 | Rukovoditel cross-site request forgery | 8.8v3.1 | 0.7% | 2021-04-29 | |
| CVE-2021-30219 | Samurai null pointer dereference | 5.5v3.1 | 0.7% | 2021-04-29 | |
| CVE-2021-30218 | Samurai null pointer dereference | 5.5v3.1 | 0.7% | 2021-04-29 | |
| CVE-2021-30048 | Novel Boutique House-plus path traversal | 5.3v3.1 | 2.1% | 2021-04-29 | |
| CVE-2021-30027 | MD4C uninitialized resource use | 5.5v3.1 | 0.7% | 2021-04-29 | Fix |
| CVE-2021-29484 | TryGhost Ghost DOM XSS in Theme Preview | 6.8CNA v3.1 | 7.9% | 2021-04-29 | NucleiFix |
| CVE-2021-29468 | Arbitrary code execution when checking out an attacker-controlled Git branch | 8.8CNA v3.1 | 1.2% | 2021-04-29 | Fix |
| CVE-2021-29350 | Shipment 100-design Material Download System SQL injection | 7.2v3.1 | 1.3% | 2021-04-29 | |
| CVE-2021-29147 | Aruba ClearPass Policy Manager OS command injection | 8.8v3.1 | 3.2% | 2021-04-29 | Fix |
| CVE-2021-29146 | Aruba ClearPass Policy Manager cross-site scripting | 5.4v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-29145 | Aruba ClearPass Policy Manager server-side request forgery | 9.8v3.1 | 1.9% | 2021-04-29 | Fix |
| CVE-2021-29144 | Aruba ClearPass Policy Manager information disclosure | 6.5v3.1 | 1.1% | 2021-04-29 | Fix |
| CVE-2021-29142 | Aruba ClearPass Policy Manager cross-site scripting | 4.8v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-29141 | Aruba ClearPass Policy Manager information disclosure | 6.5v3.1 | 1.1% | 2021-04-29 | Fix |
| CVE-2021-29140 | Aruba ClearPass Policy Manager XML external entity injection | 8.2v3.1 | 1.6% | 2021-04-29 | Fix |
| CVE-2021-29139 | Aruba ClearPass Policy Manager cross-site scripting | 4.8v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-29138 | Aruba ClearPass Policy Manager information disclosure | 6.5v3.1 | 1.1% | 2021-04-29 | Fix |
| CVE-2021-29137 | Aruba AirWave Management Platform open redirect | 6.1v3.1 | 0.8% | 2021-04-29 | Fix |
| CVE-2021-28899 | Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16. | 7.5v3.1 | 1.1% | 2021-04-29 | Fix |
| CVE-2021-28280 | PHPFusion cross-site request forgery | 6.1v3.1 | 0.7% | 2021-04-29 | |
| CVE-2021-27651 | Pegasystems Pega Infinity improper authentication | 9.8CNA v3.0 | 53.8% | 2021-04-29 | NucleiExploit codeFix |
| CVE-2021-25812 | China Mobile An Lianbao Wf-1 command injection | 9.8v3.1 | 2.8% | 2021-04-29 | |
| CVE-2021-25811 | Mercusys Mercury X18G denial of service | 7.5v3.1 | 1.6% | 2021-04-29 | Fix |
| CVE-2021-25810 | Mercusys Mercury X18G cross-site scripting | 6.1v3.1 | 1.1% | 2021-04-29 | Fix |
| CVE-2021-25216 | ISC BIND GSS-TSIG out-of-bounds read | 8.1CNA v3.1 | 82.4% | 2021-04-29 | Fix |
| CVE-2021-25215 | ISC BIND DNAME query processing denial of service | 7.5CNA v3.1 | 11.4% | 2021-04-29 | Fix |
| CVE-2021-25214 | ISC BIND 9 A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly | 6.5CNA v3.1 | 6.0% | 2021-04-29 | Fix |
| CVE-2021-25167 | Aruba AirWave Management Platform OS command injection | 8.8v3.1 | 1.5% | 2021-04-29 | Fix |
| CVE-2021-25166 | Aruba AirWave Management Platform OS command injection | 8.8v3.1 | 1.5% | 2021-04-29 | Fix |
| CVE-2021-25163 | Aruba AirWave Management Platform XML external entity injection | 8.1v3.1 | 1.2% | 2021-04-29 | Fix |
| CVE-2021-21417 | FluidSynth SoundFont file loader use-after-free | 7.2CNA v3.1 | 0.9% | 2021-04-29 | Fix |
| CVE-2021-21415 | Visual Studio Code Prisma extension remote code execution | 7.8CNA v3.1 | 2.1% | 2021-04-29 | Fix |
| CVE-2021-21414 | Command injection vulnerability in @prisma/sdk in getPackedPackage function | 7.7CNA v3.1 | 2.1% | 2021-04-29 | Fix |
| CVE-2021-21391 | ckeditor5 regular expression denial of service in multiple packages | 6.5CNA v3.1 | 1.7% | 2021-04-29 | Fix |
| CVE-2021-21388 | Command injection vulnerability in Systeminformation | 8.9CNA v3.1 | 1.9% | 2021-04-29 | Fix |
| CVE-2021-20294 | binutils out-of-bounds write | 7.8NVD v3.1 | 3.3% | 2021-04-29 | Exploit codeFix |
| CVE-2021-20228 | ansible information disclosure | 7.5v3.1 | 2.1% | 2021-04-29 | Fix |
| CVE-2021-20092 | Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 improper authentication | 7.5NVD v3.1 | 8.2% | 2021-04-29 | Nuclei |
| CVE-2021-20091 | Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 remote code execution | 8.8NVD v3.1 | 8.5% | 2021-04-29 | Nuclei |
| CVE-2021-20090 | Arcadyan Buffalo Firmware path traversal | 9.8NVD v3.1 | 100.0% | 2021-04-29 | KEVNucleiFix |
| CVE-2021-1504 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software out-of-bounds write | 8.6CNA v3.1 | 1.7% | 2021-04-29 | Fix |
| CVE-2021-1501 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software denial of service | 8.6CNA v3.1 | 1.3% | 2021-04-29 | Fix |
| CVE-2021-1495 | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass vulnerability | 5.8CNA v3.1 | 1.7% | 2021-04-29 | Fix |
| CVE-2021-1493 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software buffer overflow | 8.5CNA v3.1 | 1.2% | 2021-04-29 | Fix |
| CVE-2021-1489 | Cisco Firepower Device Manager Software Filesystem Space Exhaustion denial of service | 4.9CNA v3.0 | 1.2% | 2021-04-29 | Fix |
| CVE-2021-1488 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software command injection | 6.7CNA v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-1477 | Cisco Firepower Management Center Software Policy vulnerability | 4.3CNA v3.1 | 0.7% | 2021-04-29 | Fix |
| CVE-2021-1476 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software command injection | 6.7CNA v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-1458 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-04-29 | Fix |
| CVE-2021-1457 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-04-29 | Fix |
| CVE-2021-1456 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-04-29 | Fix |
| CVE-2021-1455 | Cisco Firepower Management Center software cross-site scripting | 4.8v3.1 | 0.6% | 2021-04-29 | Fix |
| CVE-2021-1448 | Cisco Firepower Threat Defense Software command injection | 7.8CNA v3.0 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-1445 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software out-of-bounds write | 8.6CNA v3.1 | 1.7% | 2021-04-29 | Fix |
| CVE-2021-1402 | Cisco Firepower Threat Defense Software SSL Decryption Policy denial of service | 8.6CNA v3.0 | 1.4% | 2021-04-29 | Fix |
| CVE-2021-1369 | Cisco Firepower Device Manager On-Box Software XML external entity | 5.4CNA v3.1 | 1.0% | 2021-04-29 | Fix |
| CVE-2021-1256 | Cisco Firepower Threat Defense Software command File Overwrite vulnerability | 6.0CNA v3.1 | 0.5% | 2021-04-29 | Fix |
| CVE-2021-1087 | NVIDIA Virtual GPU Software Virtual GPU Manager information disclosure | 5.5CNA v3.1 | 0.2% | 2021-04-29 | Fix |
| CVE-2021-1086 | NVIDIA Virtual GPU Software incorrect authorization | 7.1CNA v3.1 | 0.2% | 2021-04-29 | Fix |
| CVE-2021-1085 | NVIDIA Virtual GPU Software denial of service | 7.3CNA v3.1 | 0.2% | 2021-04-29 | Fix |
| CVE-2021-1084 | NVIDIA Virtual GPU Software information disclosure | 7.8CNA v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-1083 | NVIDIA Virtual GPU Software improper quantity validation | 7.8CNA v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-1082 | NVIDIA Virtual GPU Software improper quantity validation | 7.8CNA v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-1081 | NVIDIA Virtual GPU Software improper quantity validation | 7.8CNA v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-1080 | NVIDIA Virtual GPU Software information disclosure | 7.8CNA v3.1 | 0.3% | 2021-04-29 | Fix |
| CVE-2021-31866 | Redmine observable discrepancy | 5.3v3.1 | 1.2% | 2021-04-28 | Fix |
| CVE-2021-31865 | Redmine attachment upload filter vulnerability | 5.3v3.1 | 1.1% | 2021-04-28 | Fix |
| CVE-2021-31864 | Redmine incoming mail handler vulnerability | 5.3v3.1 | 1.2% | 2021-04-28 | Fix |
| CVE-2021-31863 | Redmine Git repository integration improper input validation | 7.5v3.1 | 1.7% | 2021-04-28 | Fix |
| CVE-2021-31856 | Layer5 meshery REST API SQL injection | 9.8v3.1 | 75.4% | 2021-04-28 | NucleiExploit code |
| CVE-2021-31815 | Google/apple Exposure Notifications cleartext transmission of sensitive information | 3.3v3.1 | 0.1% | 2021-04-28 | |
| CVE-2021-31779 | Yoast SEO server-side request forgery in yoast_seo | 6.4v3.1 | 0.5% | 2021-04-28 | Fix |
| CVE-2021-31778 | Cross-site scripting in Media2click | 5.4v3.1 | 0.5% | 2021-04-28 | Fix |
| CVE-2021-31777 | Dynamic Content Elements SQL injection in t3/dce | 4.9v3.1 | 1.4% | 2021-04-28 | Fix |
| CVE-2021-30169 | Merit LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera sensitive data exposure-2 | 7.5v3.1 | 1.7% | 2021-04-28 | Fix |
| CVE-2021-30168 | Merit LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera sensitive data exposure-1 | 9.8CNA v3.1 | 2.1% | 2021-04-28 | Fix |
| CVE-2021-30167 | Merit LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera broken authentication | 9.8CNA v3.1 | 2.4% | 2021-04-28 | Fix |
| CVE-2021-30166 | Merit LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera command injection | 7.2CNA v3.1 | 3.8% | 2021-04-28 | Fix |
| CVE-2021-29483 | Wikiconfig API leaked private config variables set through ManageWiki | 9.4CNA v3.1 | 1.2% | 2021-04-28 | Fix |
| CVE-2021-29482 | Denial of service in github.com/ulikunitz/xz | 7.5CNA v3.1 | 1.4% | 2021-04-28 | Fix |
| CVE-2021-29388 | Budget Management System SourceCodester stored cross-site scripting | 5.4v3.1 | 0.5% | 2021-04-28 | |
| CVE-2021-29387 | Equipment Inventory System Sourcecodester stored cross-site scripting | 5.4v3.1 | 0.8% | 2021-04-28 | |
| CVE-2021-29159 | Sonatype Nexus Repository Manager cross-site scripting | 6.1v3.1 | 0.7% | 2021-04-28 | Fix |
| CVE-2021-27933 | pfSense cross-site scripting | 6.1v3.1 | 26.6% | 2021-04-28 | |
| CVE-2021-27648 | Synology Antivirus Essential externally controlled resource reference | 9.0CNA v3.1 | 2.8% | 2021-04-28 | Fix |
| CVE-2021-25165 | Aruba AirWave Management Platform XML external entity injection | 8.1v3.1 | 1.2% | 2021-04-28 | Fix |
| CVE-2021-25164 | Aruba AirWave Management Platform XML external entity injection | 6.5v3.1 | 1.3% | 2021-04-28 | Fix |
| CVE-2021-25154 | Aruba AirWave Management Platform privilege escalation | 7.5v3.1 | 1.0% | 2021-04-28 | Fix |
| CVE-2021-25153 | Aruba AirWave Management Platform SQL injection | 8.1v3.1 | 1.1% | 2021-04-28 | Fix |
| CVE-2021-25152 | Aruba AirWave Management Platform deserialization of untrusted data | 7.2v3.1 | 1.2% | 2021-04-28 | Fix |
| CVE-2021-25151 | Aruba AirWave Management Platform deserialization of untrusted data | 8.8v3.1 | 12.6% | 2021-04-28 | Fix |
| CVE-2021-25147 | Aruba AirWave Management Platform improper authentication | 8.1v3.1 | 1.3% | 2021-04-28 | Fix |
| CVE-2021-23364 | browserslist regular expression denial of service (ReDoS) | 5.3v3.1 | 2.4% | 2021-04-28 | Fix |
| CVE-2021-22514 | Application Performance Management (APM) Micro Focus arbitrary code execution | 9.8v3.1 | 2.0% | 2021-04-28 | |
| CVE-2021-22393 | CloudEngine 12800 some versions of CloudEngine denial of service | 7.5v3.1 | 0.7% | 2021-04-28 | Fix |
| CVE-2021-22332 | CloudEngine 12800 some versions of CloudEngine double free | 7.5v3.1 | 0.7% | 2021-04-28 | Fix |
| CVE-2021-22331 | HUAWEI P30 certain injection | 7.5v3.1 | 0.7% | 2021-04-28 | Fix |
| CVE-2021-22330 | HUAWEI P30 Huawei Smartphone out-of-bounds write | 6.5v3.1 | 0.3% | 2021-04-28 | Fix |
| CVE-2021-22327 | HUAWEI P30 out-of-bounds write | 6.5v3.1 | 0.5% | 2021-04-28 | Fix |
| CVE-2021-20716 | Buffalo network devices multiple hidden functionality | 9.8v3.1 | 3.2% | 2021-04-28 | Fix |
| CVE-2021-3512 | Buffalo broadband routers improper access control | 8.8v3.1 | 0.9% | 2021-04-28 | Fix |
| CVE-2021-3511 | Buffalo broadband routers information disclosure | 4.3v3.1 | 0.5% | 2021-04-28 | Fix |
| CVE-2021-3508 | PDFResurrect infinite loop | 5.5NVD v3.1 | 0.8% | 2021-04-28 | Fix |
| CVE-2021-2321 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.6% | 2021-04-28 | Fix |
| CVE-2021-31826 | Shibboleth Service Provider null pointer dereference | 7.5v3.1 | 2.0% | 2021-04-27 | Fix |
| CVE-2021-31671 | Pgsync Contains cleartext transmission of sensitive information | 7.5v3.1 | 0.7% | 2021-04-27 | Fix |
| CVE-2021-30642 | Symantec Security Analytics improper input validation | 9.8NVD v3.1 | 2.7% | 2021-04-27 | |
| CVE-2021-30638 | An information disclosure due to insufficient input validation exists in Apache Tapestry and later | 7.5v3.1 | 6.6% | 2021-04-27 | Fix |
| CVE-2021-30635 | Sonatype Nexus Repository Manager path traversal | 5.3v3.1 | 1.8% | 2021-04-27 | Fix |
| CVE-2021-30165 | Edimax Technology Co., Ltd. HD Wireless Day and Night Network Camera IC-3140W hard-coded password | 8.1v3.1 | 1.1% | 2021-04-27 | Fix |
| CVE-2021-30128 | Unsafe deserialization in Apache OFBiz | 9.8v3.1 | 81.1% | 2021-04-27 | Reported exploitedNucleiExploit codeFix |
| CVE-2021-29667 | IBM Spectrum Scale CSV injection | 7.0CNA v3.0 | 1.2% | 2021-04-27 | Fix |
| CVE-2021-29666 | IBM Spectrum Scale cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-04-27 | Fix |
| CVE-2021-29476 | Insecure deserialization of untrusted data in rmccue/Requests | 9.8CNA v3.1 | 2.1% | 2021-04-27 | Fix |
| CVE-2021-29472 | Composer's missing argument delimiter can lead to code execution | 8.8CNA v3.1 | 4.8% | 2021-04-27 | Fix |
| CVE-2021-29460 | getkirby kirby cross-site scripting (XSS) from unsanitized uploaded SVG files | 7.6CNA v3.1 | 3.2% | 2021-04-27 | Exploit codeFix |
| CVE-2021-29442 | Alibaba nacos authentication bypass | 8.6CNA v3.1 | 65.7% | 2021-04-27 | Reported exploitedNucleiExploit codeFix |
| CVE-2021-29441 | Alibaba nacos authentication bypass | 8.6CNA v3.1 | 83.5% | 2021-04-27 | Reported exploitedNucleiExploit codeFix |
| CVE-2021-29200 | RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI | 9.8v3.1 | 55.4% | 2021-04-27 | NucleiExploit codeFix |
| CVE-2021-28271 | Soyal 701server incorrect default permissions | 8.8v3.1 | 1.9% | 2021-04-27 | |
| CVE-2021-28269 | Soyal 701client incorrect permission assignment | 8.8v3.1 | 1.9% | 2021-04-27 | |
| CVE-2021-28125 | Apache Superset open redirect | 6.1v3.1 | 63.8% | 2021-04-27 | Fix |
| CVE-2021-27480 | Delta Industrial Automation COMMGR stack-based buffer overflow | 9.8v3.1 | 1.3% | 2021-04-27 | Fix |
| CVE-2021-22664 | Delta Electronics CNCSoft-B out-of-bounds write | 7.8v3.1 | 1.6% | 2021-04-27 | Fix |
| CVE-2021-22660 | Delta Electronics CNCSoft-B out-of-bounds read | 7.8v3.1 | 2.0% | 2021-04-27 | Fix |
| CVE-2021-21429 | OpenAPITools OpenAPI Generator Maven plugin vulnerability | 4.0CNA v3.1 | 0.3% | 2021-04-27 | Fix |
| CVE-2021-21365 | benjaminkott bootstrap_package cross-site scripting in Content Rendering | 5.4CNA v3.1 | 0.9% | 2021-04-27 | Fix |
| CVE-2021-20715 | Recruit Hot Pepper Gourmet App improper access control | 4.3v3.1 | 0.9% | 2021-04-27 | Fix |
| CVE-2021-20714 | emrevona WP Fastest Cache path traversal | 6.5v3.1 | 2.6% | 2021-04-27 | Fix |
| CVE-2021-20550 | IBM Content Navigator cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-04-27 | Fix |
| CVE-2021-20549 | IBM Content Navigator cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-04-27 | Fix |
| CVE-2021-20448 | IBM Content Navigator cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-04-27 | Fix |
| CVE-2021-3464 | Lenovo PC Manager uncontrolled search path | 7.8CNA v3.1 | 0.3% | 2021-04-27 | Fix |
| CVE-2021-3451 | Lenovo PC Manager incorrect default permissions | 5.5CNA v3.1 | 0.2% | 2021-04-27 | Fix |
| CVE-2021-31804 | Leocad use-after-free | 5.5v3.1 | 0.8% | 2021-04-26 | |
| CVE-2021-31803 | cPanel cross-site scripting | 6.1v3.1 | 0.6% | 2021-04-26 | Fix |
| CVE-2021-31802 | NETGEAR R7000 out-of-bounds write | 8.8v3.1 | 14.2% | 2021-04-26 | MetasploitExploit codeFix |
| CVE-2021-31784 | Opendesign Drawings SDK out-of-bounds write | 7.8v3.1 | 0.9% | 2021-04-26 | Fix |
| CVE-2021-31783 | Piwigo Localfiles Editor insufficient verification of data authenticity | 7.5v3.1 | 0.6% | 2021-04-26 | Fix |
| CVE-2021-31646 | GestSup missing brute-force protection | 9.8v3.1 | 1.3% | 2021-04-26 | Fix |
| CVE-2021-29694 | IBM Spectrum Protect Plus weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-04-26 | Fix |
| CVE-2021-29672 | IBM Spectrum Protect for Space Management out-of-bounds write | 8.4CNA v3.0 | 0.3% | 2021-04-26 | Fix |
| CVE-2021-29475 | hedgedoc PDF export allows arbitrary file reads | 10.0CNA v3.1 | 1.2% | 2021-04-26 | Fix |
| CVE-2021-29474 | hedgedoc relative path traversal Attack on note creation | 4.7CNA v3.1 | 1.6% | 2021-04-26 | Fix |
| CVE-2021-29473 | Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata | 2.5CNA v3.1 | 1.7% | 2021-04-26 | Fix |
| CVE-2021-28399 | OrangeHRM forgot password function information disclosure | 5.3v3.1 | 1.0% | 2021-04-26 | |
| CVE-2021-28079 | Jamovi cross-site scripting | 6.1v3.1 | 1.2% | 2021-04-26 | Exploit code |
| CVE-2021-27851 | Local privilege escalation in GNU Guix via guix-daemon and --keep-failed | 5.5v3.1 | 0.3% | 2021-04-26 | Fix |
| CVE-2021-26797 | Hametech Hame SD1 Wi-fi Firmware weak password requirements | 9.8v3.1 | 1.4% | 2021-04-26 | |
| CVE-2021-25928 | Prototype pollution in safe-obj | 9.8v3.1 | 3.3% | 2021-04-26 | |
| CVE-2021-25927 | Prototype pollution in safe-flat | 9.8v3.1 | 3.3% | 2021-04-26 | Fix |
| CVE-2021-25839 | Minthcm Create New User function weak credentials | 9.8v3.1 | 1.2% | 2021-04-26 | |
| CVE-2021-25838 | Minthcm cross-site scripting | 6.1v3.1 | 0.6% | 2021-04-26 | |
| CVE-2021-23382 | postcss regular expression denial of service (ReDoS) | 7.5v3.1 | 2.5% | 2021-04-26 | Fix |
| CVE-2021-23365 | github.com/TykTechnologies/tyk-identity-broker authentication bypass | 9.1v3.1 | 1.0% | 2021-04-26 | Fix |
| CVE-2021-22669 | Advantech WebAccess/SCADA incorrect permission assignment | 8.8v3.1 | 1.2% | 2021-04-26 | Fix |
| CVE-2021-21226 | Google Chrome navigation use-after-free | 9.6v3.1 | 1.4% | 2021-04-26 | Fix |
| CVE-2021-21225 | Google Chrome V8 out-of-bounds access | 8.8v3.1 | 6.6% | 2021-04-26 | Fix |
| CVE-2021-21224 | Google Chromium V8 type confusion | 8.8v3.1 | 84.2% | 2021-04-26 | KEVKCVFix |
| CVE-2021-21223 | Google Chrome Mojo integer overflow | 9.6v3.1 | 1.4% | 2021-04-26 | Fix |
| CVE-2021-21222 | Google Chrome V8 heap-based buffer overflow | 6.5v3.1 | 1.8% | 2021-04-26 | Fix |
| CVE-2021-21221 | Google Chrome improper input validation | 6.5v3.1 | 1.6% | 2021-04-26 | Fix |
| CVE-2021-21220 | Google Chromium V8 improper input validation | 8.8v3.1 | 70.4% | 2021-04-26 | KEVExploit codeFix |
| CVE-2021-21219 | Google Chrome PDFium uninitialized memory use | 5.5v3.1 | 1.2% | 2021-04-26 | Fix |
| CVE-2021-21218 | Google Chrome PDFium uninitialized memory use | 5.5v3.1 | 1.3% | 2021-04-26 | Fix |
| CVE-2021-21217 | Google Chrome PDFium uninitialized memory use | 5.5v3.1 | 1.6% | 2021-04-26 | Fix |
| CVE-2021-21216 | Google Chrome Autofill inappropriate implementation | 6.5v3.1 | 21.8% | 2021-04-26 | Fix |
| CVE-2021-21215 | Google Chrome Autofill inappropriate implementation | 6.5v3.1 | 34.5% | 2021-04-26 | Fix |
| CVE-2021-21214 | Google Chrome Network API use-after-free | 8.8v3.1 | 1.3% | 2021-04-26 | Fix |
| CVE-2021-21213 | Google Chrome WebMIDI use-after-free | 8.8v3.1 | 1.5% | 2021-04-26 | Fix |
| CVE-2021-21212 | Google Chrome Network Config UI incorrect security UI | 6.5v3.1 | 1.8% | 2021-04-26 | Fix |
| CVE-2021-21211 | Google Chrome Navigation inappropriate implementation | 6.5v3.1 | 1.0% | 2021-04-26 | Fix |
| CVE-2021-21210 | Google Chrome Network inappropriate implementation | 6.5v3.1 | 1.9% | 2021-04-26 | Fix |
| CVE-2021-21209 | Google Chrome storage inappropriate implementation | 6.5v3.1 | 1.0% | 2021-04-26 | Fix |
| CVE-2021-21208 | Google Chrome QR scanner improper input validation | 6.5v3.1 | 1.4% | 2021-04-26 | Fix |
| CVE-2021-21207 | Google Chrome IndexedDB use-after-free | 8.6v3.1 | 0.9% | 2021-04-26 | Fix |
| CVE-2021-21206 | Google Chromium Blink use-after-free | 8.8v3.1 | 9.3% | 2021-04-26 | KEVFix |
| CVE-2021-21205 | Google Chrome navigation insufficient policy enforcement | 8.1v3.1 | 1.5% | 2021-04-26 | Fix |
| CVE-2021-21204 | Google Chrome Blink use-after-free | 8.8v3.1 | 1.6% | 2021-04-26 | Fix |
| CVE-2021-21203 | Google Chrome Blink use-after-free | 8.8v3.1 | 1.8% | 2021-04-26 | Fix |
| CVE-2021-21202 | Google Chrome extensions use-after-free | 8.6v3.1 | 1.0% | 2021-04-26 | Fix |
| CVE-2021-21201 | Google Chrome permissions use-after-free | 9.6v3.1 | 1.7% | 2021-04-26 | Fix |
| CVE-2021-20712 | NEC Aterm WG2600HS Firmware improper access control | 5.3v3.1 | 0.8% | 2021-04-26 | Fix |
| CVE-2021-20711 | NEC Aterm WG2600HS OS command injection | 9.8v3.1 | 1.4% | 2021-04-26 | Fix |
| CVE-2021-20710 | Aterm WG2600HS Firmware cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-26 | Fix |
| CVE-2021-20709 | NEC Aterm WF1200CR Firmware improper integrity check validation | 7.2v3.1 | 0.7% | 2021-04-26 | Fix |
| CVE-2021-20708 | NEC Aterm devices OS command injection | 7.2v3.1 | 1.2% | 2021-04-26 | Fix |
| CVE-2021-20697 | D-Link Dap-1880ac Firmware missing authentication | 9.8v3.1 | 1.7% | 2021-04-26 | Fix |
| CVE-2021-20696 | D-Link Japan DAP-1880AC OS command injection | 8.8v3.1 | 2.4% | 2021-04-26 | Fix |
| CVE-2021-20695 | D-Link Japan DAP-1880AC improper certificate validation | 8.8v3.1 | 1.3% | 2021-04-26 | Fix |
| CVE-2021-20694 | D-Link Dap-1880ac Firmware improper access control | 8.8v3.1 | 1.7% | 2021-04-26 | Fix |
| CVE-2021-20693 | Gurunavi App improper access control | 7.5v3.1 | 1.1% | 2021-04-26 | Fix |
| CVE-2021-20680 | NEC Aterm devices cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-26 | Fix |
| CVE-2021-20546 | IBM Spectrum Protect for Space Management out-of-bounds write | 6.2CNA v3.0 | 0.3% | 2021-04-26 | Fix |
| CVE-2021-20536 | IBM Spectrum Protect Plus sensitive information in log files | 6.2CNA v3.0 | 0.3% | 2021-04-26 | Fix |
| CVE-2021-20532 | IBM Spectrum Protect for Virtual Environments incorrect default permissions | 7.4CNA v3.0 | 0.2% | 2021-04-26 | Fix |
| CVE-2021-20432 | IBM Spectrum Protect Plus cross-origin resource sharing configuration vulnerability | 6.5CNA v3.0 | 0.7% | 2021-04-26 | Fix |
| CVE-2021-3494 | foreman cleartext transmission of sensitive information | 5.9v3.1 | 0.4% | 2021-04-26 | Fix |
| CVE-2021-3472 | xorg-x11-server integer underflow | 7.8NVD v3.1 | 1.1% | 2021-04-26 | Fix |
| CVE-2021-31762 | Webmin cross-site request forgery | 8.8v3.1 | 8.8% | 2021-04-25 | Exploit code |
| CVE-2021-31761 | Webmin cross-site scripting | 9.6v3.1 | 33.6% | 2021-04-25 | Exploit code |
| CVE-2021-31760 | Webmin cross-site request forgery | 8.8v3.1 | 8.5% | 2021-04-25 | Exploit code |
| CVE-2021-31726 | Akuvox C315 command injection | 9.8v3.1 | 1.8% | 2021-04-25 | Fix |
| CVE-2021-31718 | Npupnp origin validation error | 8.8v3.1 | 1.0% | 2021-04-25 | |
| CVE-2021-30502 | Simple Glasgow Haskell Compiler remote code execution | 9.8v3.1 | 2.9% | 2021-04-25 | Fix |
| CVE-2021-31795 | Pvrsrvkm.ko out-of-bounds write | 7.0v3.1 | 0.4% | 2021-04-24 | |
| CVE-2021-31794 | Directum cross-site scripting | 6.1v3.1 | 0.7% | 2021-04-24 | |
| CVE-2021-31712 | Cross-site scripting in React Draft Wysiwyg | 5.4v3.1 | 0.8% | 2021-04-24 | Fix |
| CVE-2021-31598 | Ezxml out-of-bounds write | 7.5v3.1 | 1.3% | 2021-04-24 | Fix |
| CVE-2021-31791 | Sentrysoftware Hardware Sentry Km For Bmc Patrol cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2021-04-23 | Fix |
| CVE-2021-31780 | MISP improper removal of sensitive information | 7.5v3.1 | 1.0% | 2021-04-23 | |
| CVE-2021-31607 | Command injection in SaltStack Salt | 7.8v3.1 | 5.9% | 2021-04-23 | Fix |
| CVE-2021-31597 | Improper certificate validation in xmlhttprequest-ssl | 9.4v3.1 | 2.1% | 2021-04-23 | Fix |
| CVE-2021-31584 | Sipwise Next Generation Communication Platform cross-site request forgery | 8.8v3.1 | 0.9% | 2021-04-23 | Fix |
| CVE-2021-31583 | Sipwise Next Generation Communication Platform cross-site scripting | 5.4v3.1 | 1.1% | 2021-04-23 | |
| CVE-2021-31540 | Wowza Streaming Engine incorrect permission assignment | 7.1v3.1 | 0.4% | 2021-04-23 | Fix |
| CVE-2021-31539 | Wowza Streaming Engine cleartext storage of sensitive information | 5.5v3.1 | 0.3% | 2021-04-23 | Fix |
| CVE-2021-31410 | Project sources exposure in Vaadin Designer | 8.6CNA v3.1 | 1.7% | 2021-04-23 | Fix |
| CVE-2021-31408 | Vaadin Authentication.logout helper insufficient session expiration | 6.3CNA v3.1 | 0.3% | 2021-04-23 | Fix |
| CVE-2021-31407 | Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19 | 8.6CNA v3.1 | 2.4% | 2021-04-23 | Fix |
| CVE-2021-31406 | Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 | 4.0CNA v3.1 | 0.2% | 2021-04-23 | Fix |
| CVE-2021-31405 | Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17 | 7.5CNA v3.1 | 1.1% | 2021-04-23 | Fix |
| CVE-2021-31404 | Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 | 4.0CNA v3.1 | 0.2% | 2021-04-23 | Fix |
| CVE-2021-31403 | Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 | 4.0CNA v3.1 | 0.3% | 2021-04-23 | Fix |
| CVE-2021-29470 | Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header | 4.7CNA v3.1 | 1.6% | 2021-04-23 | Fix |
| CVE-2021-29469 | node-redis potential exponential regex in monitor mode | 5.3CNA v3.1 | 1.6% | 2021-04-23 | Fix |
| CVE-2021-29158 | Sonatype Nexus Repository Manager incorrect authorization | 4.9v3.1 | 0.8% | 2021-04-23 | Fix |
| CVE-2021-26909 | Automox Agent Guessable S3 Bucket endpoint | 5.3NVD v3.1 | 0.7% | 2021-04-23 | Fix |
| CVE-2021-26908 | Automox Agent Sensitive Log information disclosure | 3.3NVD v3.1 | 0.2% | 2021-04-23 | Fix |
| CVE-2021-26291 | Apache Maven block repositories using HTTP by default | 9.1v3.1 | 8.7% | 2021-04-23 | Exploit codeFix |
| CVE-2021-25899 | Void Aurall Rec Monitor SQL injection | 7.5v3.1 | 12.2% | 2021-04-23 | Nuclei |
| CVE-2021-25898 | Void Aural Rec Monitor cleartext storage of sensitive information | 7.5v3.1 | 0.9% | 2021-04-23 | |
| CVE-2021-25382 | Samsung Mobile Devices improper authorization | 6.1CNA v3.1 | 0.1% | 2021-04-23 | Fix |
| CVE-2021-22893 | Ivanti Pulse Connect Secure use-after-free | 10.0v3.1 | 47.2% | 2021-04-23 | KEVEmerging ThreatsExploit codeFix |
| CVE-2021-22682 | Cscape local privilege escalation | 7.8v3.1 | 0.2% | 2021-04-23 | Fix |
| CVE-2021-22678 | Cscape memory corruption | 7.8v3.1 | 1.0% | 2021-04-23 | Fix |
| CVE-2021-22207 | The Wireshark Foundation Wireshark resource exhaustion | 5.5CNA v3.1 | 2.0% | 2021-04-23 | Fix |
| CVE-2021-22205 | GitLab Community and Enterprise Editions remote code execution | 10.0CNA v3.1 | 99.7% | 2021-04-23 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-22204 | ExifTool remote code execution | 7.8NVD v3.1 | 100.0% | 2021-04-23 | KEVMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-20089 | purl prototype pollution | 8.8NVD v3.1 | 1.6% | 2021-04-23 | |
| CVE-2021-20088 | mootools-more vulnerable to prototype pollution | 8.8NVD v3.1 | 1.4% | 2021-04-23 | |
| CVE-2021-20087 | Prototype pollution in jquery-deparam | 8.8NVD v3.1 | 2.1% | 2021-04-23 | |
| CVE-2021-20086 | Prototype pollution in jquery-bbq | 8.8NVD v3.1 | 6.1% | 2021-04-23 | NucleiFix |
| CVE-2021-20085 | Prototype pollution in backbone-query-parameters | 8.8NVD v3.1 | 1.6% | 2021-04-23 | |
| CVE-2021-20084 | jQuery Sparkle prototype pollution | 8.8NVD v3.1 | 1.4% | 2021-04-23 | |
| CVE-2021-20083 | jquery-plugin-query-object contains prototype pollution | 8.8NVD v3.1 | 4.2% | 2021-04-23 | Fix |
| CVE-2021-31572 | Amazon FreeRTOS integer overflow | 9.8v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-31571 | Amazon FreeRTOS integer overflow | 9.8v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-31555 | mediawiki improper input validation | 7.5v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-31554 | mediawiki incorrect authorization | 5.4v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-31553 | mediawiki unquoted search path | 6.5v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-31552 | mediawiki incorrect authorization | 5.4v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-31551 | mediawiki cross-site scripting | 6.1v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-31550 | mediawiki cross-site scripting | 5.4v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-31549 | mediawiki information disclosure | 4.3v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-31548 | mediawiki incorrect authorization | 6.5v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-31547 | mediawiki information disclosure | 4.3v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-31546 | mediawiki sensitive information in log files | 4.3v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-31545 | mediawiki information disclosure | 5.3v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-30476 | HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1. | 9.8v3.1 | 1.6% | 2021-04-22 | Fix |
| CVE-2021-30356 | A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files. | 8.1NVD v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-29653 | HashiCorp Vault improper certificate validation | 7.5v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-29467 | birb-digital wrongthink Self-XSS | 6.1CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-29466 | Path traversal at Discord-Recon .recon Command Path | 6.5CNA v3.1 | 1.6% | 2021-04-22 | |
| CVE-2021-29465 | Remote file overwrite on Discord-Recon can result in DoS and remote code execution | 8.3CNA v3.1 | 2.0% | 2021-04-22 | |
| CVE-2021-28648 | Trend Micro Antivirus improper access control | 7.8v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-28168 | The Eclipse Foundation Eclipse Jersey local information disclosure via system temporary directory | 6.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-27736 | Fusionauth SAML V2 XML external entity injection | 6.5v3.1 | 1.3% | 2021-04-22 | |
| CVE-2021-27400 | HashiCorp Vault improper certificate validation | 7.5v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-27393 | Siemens Nucleus NET insufficient randomness | 5.3v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-27392 | Siemens Siveillance Video Open Network Bridge hard-coded cryptographic key | 8.8v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-27389 | Siemens Opcenter Quality hard-coded cryptographic key | 9.8v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-27382 | Siemens Solid Edge SE2020 stack-based buffer overflow | 7.8v3.1 | 2.3% | 2021-04-22 | Fix |
| CVE-2021-27278 | Parallels Desktop path traversal | 8.2v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-27277 | SolarWinds Orion Virtual Infrastructure Monitor deserialization of untrusted data | 7.8v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-25678 | Siemens Solid Edge SE2020 out-of-bounds write | 7.8v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-25677 | Siemens APOGEE PXC Compact (BACnet) insufficient randomness | 5.3CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-25670 | Siemens Tecnomatix RobotExpert out-of-bounds write | 7.8v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-25669 | Siemens SCALANCE X200-4P IRT stack-based buffer overflow | 9.8v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-25668 | Siemens SCALANCE X200-4P IRT heap-based buffer overflow | 9.8v3.1 | 1.6% | 2021-04-22 | Fix |
| CVE-2021-25664 | Siemens Capital Embedded AR Classic 431-422 infinite loop | 8.7CNA v4.0 | 1.9% | 2021-04-22 | Fix |
| CVE-2021-25663 | Siemens Capital Embedded AR Classic 431-422 infinite loop | 8.7CNA v4.0 | 1.9% | 2021-04-22 | Fix |
| CVE-2021-24242 | Tutor LMS WordPress plugin authenticated local file inclusion | 3.8NVD v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-24241 | Advanced Custom Field Pro WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-24240 | Business Hours Pro WordPress plugin unauthenticated arbitrary file upload to RCE | 9.8NVD v3.1 | 3.0% | 2021-04-22 | |
| CVE-2021-24239 | Pie Register WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.6% | 2021-04-22 | NucleiFix |
| CVE-2021-24238 | Realteo WordPress plugin arbitrary Property deletion via IDOR | 6.5NVD v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-24237 | Realteo WordPress plugin unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 6.3% | 2021-04-22 | NucleiFix |
| CVE-2021-24235 | Goto - Tour and Travel WordPress theme unauthenticated reflected XSS | 6.1NVD v3.1 | 2.9% | 2021-04-22 | NucleiFix |
| CVE-2021-24234 | Ivory Search WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-24233 | Cooked Pro WordPress plugin unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.7% | 2021-04-22 | Fix |
| CVE-2021-24232 | Advanced Booking Calendar WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-23133 | Linux Kernel sctp_destroy_sock race condition | 7.0NVD v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-22540 | Google XSS in Dart SDK | 6.1v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-22199 | GitLab cross-site scripting | 3.5CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-20590 | GOT2000 series GT27 model improper authentication | 7.5v3.1 | 1.3% | 2021-04-22 | |
| CVE-2021-3496 | jhead heap-based buffer overflow | 7.8NVD v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-3287 | Zoho ManageEngine OpManager deserialization of untrusted data | 9.8v3.1 | 51.3% | 2021-04-22 | NucleiMetasploitExploit codeFix |
| CVE-2021-2320 | Oracle Cloud Infrastructure Storage Gateway Management console component takeover | 9.1CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2319 | Oracle Cloud Infrastructure Storage Gateway Management console component takeover | 9.1CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2318 | Oracle Cloud Infrastructure Storage Gateway Management console component takeover | 9.1CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2317 | Oracle Cloud Infrastructure Storage Gateway Management console component takeover | 10.0CNA v3.1 | 1.9% | 2021-04-22 | Fix |
| CVE-2021-2316 | Oracle E-Business Suite HRMS (France) French HR component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2315 | Oracle HTTP Server Web Listener component unauthorized data modification | 5.4CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2314 | Oracle E-Business Suite Application Object Library Profiles component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2312 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2311 | Oracle Hospitality Inventory Management unauthorized data access | 6.5CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2310 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-2309 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-2308 | Oracle MySQL Server Information Schema component information disclosure | 2.7CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2307 | Oracle MySQL Server Packaging component unauthorized data access | 6.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2306 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2305 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-2304 | Oracle MySQL Server Stored Procedure component unauthorized data modification | 5.5CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-2303 | Oracle OSS Support Tools Diagnostic Assistant component unauthorized data access | 4.9CNA v3.1 | 1.5% | 2021-04-22 | Fix |
| CVE-2021-2302 | Oracle Platform Security for Java OPSS component takeover | 9.8CNA v3.1 | 5.7% | 2021-04-22 | Exploit codeFix |
| CVE-2021-2301 | Oracle MySQL Server Information Schema component information disclosure | 2.7CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2300 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2299 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-2298 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.5% | 2021-04-22 | Fix |
| CVE-2021-2297 | Oracle VM VirtualBox Core component unauthorized data access | 5.3CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-2296 | Oracle VM VirtualBox Core component unauthorized data access | 5.3CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-2295 | Oracle E-Business Suite Concurrent Processing unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2294 | Oracle WebLogic Server Core component unauthorized data modification | 6.5CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2293 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2292 | Oracle Document Management and Collaboration unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2291 | Oracle VM VirtualBox Core component unauthorized data access | 4.7CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2290 | Oracle E-Business Suite Engineering Change Management component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2289 | Oracle E-Business Suite Product Hub Template, GTIN search component unauthorized data access | 8.1CNA v3.1 | 15.0% | 2021-04-22 | Fix |
| CVE-2021-2288 | Oracle E-Business Suite Bills of Material Bill Issues component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2287 | Oracle VM VirtualBox Core component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2286 | Oracle VM VirtualBox Core component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2285 | Oracle VM VirtualBox Core component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2284 | Oracle VM VirtualBox Core component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2283 | Oracle VM VirtualBox Core component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2282 | Oracle VM VirtualBox Core component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2281 | Oracle VM VirtualBox Core component unauthorized data modification | 7.1CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2280 | Oracle VM VirtualBox Core component unauthorized data access | 7.1CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2279 | Oracle VM VirtualBox Core component takeover | 8.1CNA v3.1 | 3.3% | 2021-04-22 | Fix |
| CVE-2021-2278 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2277 | Oracle Coherence Core component unauthorized data access | 7.5CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2276 | Oracle E-Business Suite iSetup unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2275 | Oracle E-Business Suite Applications Manager View Reports component unauthorized data access | 6.5CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2274 | Oracle E-Business Suite E-Business Tax User interface component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2273 | Oracle E-Business Suite Legal Entity Configurator unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2272 | Oracle E-Business Suite Subledger Accounting Inquiries component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2271 | Oracle E-Business Suite Work in Process Resource Exceptions component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2270 | Oracle E-Business Suite Site Hub Sites component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2269 | Oracle E-Business Suite Advanced Pricing Price Book component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2268 | Oracle E-Business Suite Quoting Courseware component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2267 | Oracle E-Business Suite Labor Distribution User interface component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2266 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2264 | Oracle VM VirtualBox Core component unauthorized data access | 8.4CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-2263 | Oracle E-Business Suite Sourcing Intelligence, RFx component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2262 | Oracle E-Business Suite Purchasing Endeca component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2261 | Oracle Lease and Finance Management Quotes component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2260 | Oracle E-Business Suite Human Resources iRecruitment component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2259 | Oracle E-Business Suite Payables India Localization, Results component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2258 | Oracle E-Business Suite Projects User interface component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2257 | Oracle Storage Cloud Software Appliance Management console component information disclosure | 4.1CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-2256 | Oracle Storage Cloud Software Appliance Management console component takeover | 10.0CNA v3.1 | 1.7% | 2021-04-22 | Fix |
| CVE-2021-2255 | Oracle E-Business Suite Service Contracts Authoring component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2254 | Oracle E-Business Suite Project Contracts Hold Management component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2253 | Oracle Advanced Supply Chain Planning Core component unauthorized data access | 9.1CNA v3.1 | 1.5% | 2021-04-22 | Fix |
| CVE-2021-2252 | Oracle E-Business Suite Loans unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2251 | Oracle E-Business Suite CRM Technical Foundation Data Source component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2250 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2249 | Oracle E-Business Suite Landed Cost Management Shipment Workbench component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2248 | Oracle Secure Global Desktop Server component takeover | 10.0CNA v3.1 | 2.5% | 2021-04-22 | Fix |
| CVE-2021-2247 | Oracle E-Business Suite Advanced Collections Admin component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2246 | Oracle E-Business Suite Universal Work Queue unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2245 | Oracle Database Server Unified Audit vulnerability | 2.7CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-2244 | Oracle Hyperion Analytic Provider Services JAPI component takeover | 10.0CNA v3.1 | 1.8% | 2021-04-22 | Fix |
| CVE-2021-2242 | Oracle Outside In Technology Outside In Filters component unauthorized data modification | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2241 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2240 | Oracle Outside In Technology Outside In Filters component unauthorized data modification | 7.3CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2239 | Oracle E-Business Suite Time and Labor Timecard component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2238 | Oracle MES for Process Manufacturing Process Operations component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2237 | Oracle E-Business Suite General Ledger Account Hierarchy Manager component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2236 | Oracle E-Business Suite Financials Common Modules unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2235 | Oracle E-Business Suite Transportation Execution unauthorized data access | 8.1CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-2234 | Oracle Database Server Java VM vulnerability | 5.3CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2233 | Oracle E-Business Suite Enterprise Asset Management Setup component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2232 | Oracle MySQL Server Group Replication plugin component denial of service | 1.9CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-2231 | Oracle E-Business Suite Installed Base APIs component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2230 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2229 | Oracle E-Business Suite Depot Repair LOVs component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2228 | Oracle E-Business Suite Incentive Compensation User interface component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2227 | Oracle E-Business Suite Cash Management Bank Account Transfer component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2226 | Oracle MySQL Server Information Schema component unauthorized data access | 4.9CNA v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-2225 | Oracle E-Business Suite E-Business Intelligence DBI Setups component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2224 | Oracle E-Business Suite Compensation Workbench unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2223 | Oracle E-Business Suite Receivables Receipts component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2222 | Oracle E-Business Suite Bill Presentment Architecture unauthorized data access | 8.1CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2221 | Oracle Secure Global Desktop client component takeover | 9.6CNA v3.1 | 2.0% | 2021-04-22 | Fix |
| CVE-2021-2220 | Oracle PeopleSoft Enterprise SCM eProcurement unauthorized data modification | 5.4CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-2219 | Oracle PeopleSoft Enterprise PeopleTools SQR component unauthorized data modification | 7.4CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2218 | Oracle PeopleSoft Enterprise PT PeopleTools Health Center component unauthorized data modification | 8.3CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2217 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-2216 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2215 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-2214 | Oracle WebLogic Server console component unauthorized data access | 4.4CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2213 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2212 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2211 | Oracle WebLogic Server Web services component unauthorized data access | 5.9CNA v3.1 | 2.4% | 2021-04-22 | Fix |
| CVE-2021-2210 | Oracle E-Business Suite Trade Management Quotes component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2209 | Oracle E-Business Suite Email Center Message Display component unauthorized data access | 8.5CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2208 | Oracle MySQL Server Partition component denial of service | 4.9CNA v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-2207 | Oracle Database Server RMAN vulnerability | 2.3CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-2206 | Oracle E-Business Suite Trade Management Quotes component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2205 | Oracle E-Business Suite Marketing Administration component unauthorized data access | 9.1CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2204 | Oracle WebLogic Server Core component information disclosure | 5.3CNA v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-2203 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2202 | Oracle MySQL Server Replication component denial of service | 6.5CNA v3.1 | 1.4% | 2021-04-22 | Fix |
| CVE-2021-2201 | Oracle MySQL Server Partition component denial of service | 4.9CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-2200 | Oracle E-Business Suite Applications Framework Home page component unauthorized data access | 9.1CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-2199 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2198 | Oracle E-Business Suite Knowledge Management Setup, Admin component unauthorized data access | 8.2CNA v3.1 | 79.9% | 2021-04-22 | Fix |
| CVE-2021-2197 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2196 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2195 | Oracle E-Business Suite Partner Management Attribute Admin Setup component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2194 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 2.3% | 2021-04-22 | Fix |
| CVE-2021-2193 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2192 | Oracle Solaris Kernel component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2191 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-2190 | Oracle E-Business Suite Sales Offline template component denial of service | 7.5CNA v3.1 | 92.9% | 2021-04-22 | Fix |
| CVE-2021-2189 | Oracle E-Business Suite Sales Offline template component denial of service | 7.5CNA v3.1 | 14.7% | 2021-04-22 | Fix |
| CVE-2021-2188 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2187 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2186 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2185 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2184 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2183 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2182 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2181 | Oracle Document Management and Collaboration Attachments component unauthorized data access | 7.6CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2180 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 2.8% | 2021-04-22 | Fix |
| CVE-2021-2179 | Oracle MySQL Server Group Replication plugin component denial of service | 4.9CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2178 | Oracle MySQL Server Replication component denial of service | 6.5CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2177 | Oracle Secure Global Desktop Gateway component takeover | 10.0CNA v3.1 | 2.5% | 2021-04-22 | Fix |
| CVE-2021-2175 | Oracle Database Server Database Vault information disclosure | 2.7CNA v3.1 | 1.7% | 2021-04-22 | Fix |
| CVE-2021-2174 | Oracle MySQL Server InnoDB component denial of service | 4.4CNA v3.1 | 1.9% | 2021-04-22 | Fix |
| CVE-2021-2173 | Oracle Database Server Recovery component information disclosure | 4.1CNA v3.1 | 1.4% | 2021-04-22 | Exploit codeFix |
| CVE-2021-2172 | Oracle MySQL Server DML component denial of service | 6.5CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2171 | Oracle MySQL Server Replication component denial of service | 4.4CNA v3.1 | 1.8% | 2021-04-22 | Fix |
| CVE-2021-2170 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2169 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2167 | Oracle Solaris Common Desktop Environment component takeover | 7.8CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2166 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 4.9% | 2021-04-22 | Fix |
| CVE-2021-2164 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-04-22 | Fix |
| CVE-2021-2163 | Oracle Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition unauthorized data modification | 5.3CNA v3.1 | 3.6% | 2021-04-22 | Fix |
| CVE-2021-2162 | Oracle MySQL Server Audit plug-in component unauthorized data modification | 4.3CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2161 | Oracle Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition unauthorized data modification | 5.9CNA v3.1 | 3.5% | 2021-04-22 | Fix |
| CVE-2021-2160 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-2159 | Oracle PeopleSoft Enterprise CS Campus Community Frameworks component information disclosure | 3.5CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-2158 | Oracle Hyperion Financial Management Task Automation component unauthorized data modification | 3.9CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-2157 | Oracle WebLogic Server TopLink Integration component unauthorized data access | 7.5CNA v3.1 | 1.9% | 2021-04-22 | Fix |
| CVE-2021-2156 | Oracle E-Business Suite Customers Online Customer Tab component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2155 | Oracle E-Business Suite One-to-One Fulfillment Documents component unauthorized data modification | 4.3CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2154 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 2.6% | 2021-04-22 | Fix |
| CVE-2021-2153 | Oracle E-Business Suite Internet Expenses Mobile Expenses component unauthorized data modification | 4.3CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2152 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 4.0CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-2151 | Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data modification | 6.7CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2150 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data access | 8.2CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2149 | Oracle ZFS Storage Appliance Kit Core component unauthorized data modification | 2.5CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2147 | Oracle ZFS Storage Appliance Kit Installation component unauthorized data modification | 1.8CNA v3.1 | 0.3% | 2021-04-22 | Fix |
| CVE-2021-2146 | Oracle MySQL Server options component denial of service | 4.9CNA v3.1 | 2.0% | 2021-04-22 | Fix |
| CVE-2021-2145 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-2144 | Oracle MySQL Server parser component takeover | 7.2CNA v3.1 | 1.9% | 2021-04-22 | Fix |
| CVE-2021-2142 | Oracle WebLogic Server console component unauthorized data modification | 6.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2141 | Oracle Financial Services Applications FLEXCUBE Direct Banking unauthorized data modification | 2.0CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-2140 | Oracle Financial Services Analytical Applications Infrastructure unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2136 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 2.2% | 2021-04-22 | Fix |
| CVE-2021-2135 | Oracle WebLogic Server Coherence Container component takeover | 9.8CNA v3.1 | 8.4% | 2021-04-22 | NucleiFix |
| CVE-2021-2134 | Oracle Enterprise Manager for Fusion Middleware FMW Control plugin component denial of service | 6.5CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-2053 | Oracle Enterprise Manager Base Platform UI Framework component unauthorized data modification | 6.1CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-2008 | Oracle Enterprise Manager for Fusion Middleware unauthorized data modification | 7.3CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0275 | Juniper Networks Junos OS J-Web cross-site scripting | 8.8CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-0273 | Juniper Networks Junos OS Evolved incorrect control flow | 5.3CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0272 | Juniper Qfx10002-32q kernel memory leak | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0271 | Juniper Networks Junos OS software forwarding interface daemon double free | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0270 | Juniper Junos OS inline-jflow use-after-free | 7.5CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-0269 | Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks | 8.8CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0268 | Juniper Networks Junos OS HTTP headers CRLF injection | 8.8CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0267 | Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core | 7.4CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-0266 | Juniper Networks Junos OS cSRX Series software hard-coded cryptographic key | 8.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0265 | Juniper AppFormix REST API OS command injection | 8.1CNA v3.1 | 2.5% | 2021-04-22 | Fix |
| CVE-2021-0264 | Juniper Junos OS firewall filter syslog action vulnerability | 5.9CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0263 | Juniper Junos OS J-Flow sampling denial of service | 5.9CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0262 | Junos OS: QFX10002-60C: Use-after-free vulnerability found during static code analysis | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0261 | Juniper Junos OS J-Web resource exhaustion | 7.5CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-0260 | Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests | 7.3CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0259 | Juniper Junos OS VXLAN DDoS protection vulnerability | 7.4CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0258 | Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface | 5.9CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-0257 | Juniper Junos OS VPLS IRB interface memory leak | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0256 | Junos OS: Mosquitto local privilege escalation vulnerability in SUID binaries | 5.5CNA v3.1 | 0.2% | 2021-04-22 | Fix |
| CVE-2021-0255 | Junos OS: Ethtraceroute local privilege escalation vulnerability in SUID binaries | 5.5CNA v3.1 | 0.2% | 2021-04-22 | Fix |
| CVE-2021-0254 | Junos OS: Remote code execution vulnerability in overlayd service | 9.8CNA v3.1 | 2.6% | 2021-04-22 | Fix |
| CVE-2021-0253 | Junos OS: NFX Series: Local command execution vulnerability in JDMD leads to privilege escalation | 7.8CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-0252 | Junos OS: NFX Series: Local code execution vulnerability in JDMD leads to privilege escalation | 7.8CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-0251 | Juniper Networks Junos OS Captive Portal Content Delivery null pointer dereference | 8.6CNA v3.1 | 1.1% | 2021-04-22 | Fix |
| CVE-2021-0250 | Juniper Junos OS routing protocol daemon denial of service | 7.5CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0249 | Juniper Junos OS UTM packet forwarding engine buffer overflow | 8.1CNA v3.1 | 1.8% | 2021-04-22 | Fix |
| CVE-2021-0248 | Juniper Junos OS NFX Series administrative interface hard-coded credentials | 10.0CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0247 | Juniper Junos OS loopback firewall filter race condition | 5.1CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-0246 | Juniper Junos OS tenant network isolation incorrect default permissions | 7.3CNA v3.1 | 0.2% | 2021-04-22 | Fix |
| CVE-2021-0245 | Juniper Networks Junos OS A hard-coded credentials | 7.8CNA v3.1 | 0.2% | 2021-04-22 | Fix |
| CVE-2021-0244 | Juniper Networks Junos OS Layer signal handler race condition | 7.4CNA v3.1 | 0.6% | 2021-04-22 | Fix |
| CVE-2021-0243 | Junos OS: EX4300: Stateless firewall policer fails to discard traffic | 4.7CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0242 | Juniper Junos OS DMA buffer handling vulnerability | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0241 | Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart | 7.4CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0240 | Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart | 7.4CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0239 | Junos OS Evolved: Denial of service due to receipt of specific genuine layer 2 frames | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0238 | Juniper Junos OS CLI command processing resource exhaustion | 5.5CNA v3.1 | 0.2% | 2021-04-22 | Fix |
| CVE-2021-0237 | Juniper Junos OS Packet Forwarding Engine manager denial of service | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0236 | Juniper Networks Junos OS Evolved improper check for exceptional conditions | 6.5CNA v3.1 | 0.8% | 2021-04-22 | Fix |
| CVE-2021-0235 | Juniper Junos OS tenant logical firewall isolation incorrect default permissions | 7.3CNA v3.1 | 0.2% | 2021-04-22 | Fix |
| CVE-2021-0234 | Junos OS: Qfx5100-96s: DDoS protection does not work as expected | 5.8CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0233 | Juniper Junos OS Forwarding Engine Board denial of service | 7.5CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0232 | Paragon Active Assurance: Authentication bypass vulnerability in Control Center | 7.4CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0231 | Juniper Networks Junos OS A path traversal | 6.5CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-0230 | Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics | 7.5CNA v3.1 | 1.0% | 2021-04-22 | Fix |
| CVE-2021-0229 | Junos OS: Receipt of specific packets could lead to denial of service in MQTT Server | 5.3CNA v3.1 | 1.2% | 2021-04-22 | Fix |
| CVE-2021-0228 | Juniper Networks Junos OS An improper check for exceptional conditions | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0227 | Junos OS: SRX Series: Denial of service in J-Web upon receipt of crafted HTTP packets | 7.5CNA v3.1 | 1.3% | 2021-04-22 | Fix |
| CVE-2021-0226 | Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet | 7.1CNA v3.1 | 0.9% | 2021-04-22 | Fix |
| CVE-2021-0225 | Junos OS Evolved: Stateless IP firewall filter does not work as expected | 5.8CNA v3.1 | 0.7% | 2021-04-22 | Fix |
| CVE-2021-0224 | Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0216 | Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets | 6.5CNA v3.1 | 0.4% | 2021-04-22 | Fix |
| CVE-2021-0214 | Junos OS: Denial of service in ppmd upon receipt of malformed packet | 6.5CNA v3.1 | 0.5% | 2021-04-22 | Fix |
| CVE-2021-31523 | xscreensaver improper privilege management | 7.8v3.1 | 0.3% | 2021-04-21 | Fix |
| CVE-2021-31329 | RemoteClinic Remote Clinic v2.0 cross-site scripting | 5.4v3.1 | 1.7% | 2021-04-21 | Exploit code |
| CVE-2021-31327 | RemoteClinic stored cross-site scripting | 5.4v3.1 | 1.7% | 2021-04-21 | Exploit code |
| CVE-2021-30139 | Alpinelinux Apk-tools out-of-bounds read | 7.5v3.1 | 1.6% | 2021-04-21 | |
| CVE-2021-29456 | Authelia allows open redirects on the logout endpoint | 5.7CNA v3.1 | 0.5% | 2021-04-21 | Fix |
| CVE-2021-28965 | The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing. | 7.5v3.1 | 5.1% | 2021-04-21 | Fix |
| CVE-2021-28167 | The Eclipse Foundation Eclipse OpenJ9 missing resource initialization | 6.5v3.1 | 1.1% | 2021-04-21 | Fix |
| CVE-2021-21647 | Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds | 4.3v3.1 | 1.5% | 2021-04-21 | Fix |
| CVE-2021-21646 | Remote code execution vulnerability in Jenkins Templating Engine Plugin | 8.8v3.1 | 1.7% | 2021-04-21 | Fix |
| CVE-2021-21645 | Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs. | 4.3v3.1 | 0.9% | 2021-04-21 | Fix |
| CVE-2021-21644 | CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files | 5.4v3.1 | 1.1% | 2021-04-21 | Fix |
| CVE-2021-21643 | Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs | 6.5v3.1 | 1.1% | 2021-04-21 | Fix |
| CVE-2021-21642 | XML external entity Reference vulnerability in Jenkins Config File Provider Plugin | 8.1v3.1 | 37.8% | 2021-04-21 | Fix |
| CVE-2021-21427 | Backport for blind SQLi from Magento 2 | 9.1CNA v3.1 | 1.1% | 2021-04-21 | Fix |
| CVE-2021-21426 | OpenMage magento-lts Fixes a bug in Zend Framework's Stream HTTP Wrapper | 9.8CNA v3.1 | 1.2% | 2021-04-21 | Fix |
| CVE-2021-20501 | IBM i SMTP server vulnerability | 5.9CNA v3.0 | 1.3% | 2021-04-21 | Fix |
| CVE-2021-20454 | IBM WebSphere Application Server XML external entity injection | 8.2CNA v3.0 | 2.8% | 2021-04-21 | Fix |
| CVE-2021-1078 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.2% | 2021-04-21 | Fix |
| CVE-2021-1077 | NVIDIA GPU Display Driver improper resource release | 6.6CNA v3.1 | 0.3% | 2021-04-21 | Fix |
| CVE-2021-1076 | NVIDIA GPU Display Driver improper access control | 6.6CNA v3.1 | 0.3% | 2021-04-21 | Fix |
| CVE-2021-1075 | NVIDIA GPU Display Driver null pointer dereference | 7.3CNA v3.1 | 0.2% | 2021-04-21 | Fix |
| CVE-2021-1074 | NVIDIA GPU Display Driver code execution | 7.3CNA v3.1 | 0.5% | 2021-04-21 | Fix |
| CVE-2021-30496 | Telegram stack-based buffer overflow | 5.7v3.1 | 1.2% | 2021-04-20 | Fix |
| CVE-2021-30464 | Omicronenergy Stationguard denial of service | 7.5v3.1 | 1.2% | 2021-04-20 | Fix |
| CVE-2021-29462 | pupnp improper input validation | 7.6CNA v3.1 | 0.6% | 2021-04-20 | Fix |
| CVE-2021-29461 | LFI and possible code execution on Discord-Recon using tools arguments | 8.1CNA v3.1 | 2.5% | 2021-04-20 | Fix |
| CVE-2021-29459 | xwiki-platform XSS cross-site scripting | 9.6CNA v3.1 | 1.1% | 2021-04-20 | Fix |
| CVE-2021-29155 | Linux kernel out-of-bounds read | 5.5v3.1 | 1.1% | 2021-04-20 | Exploit codeFix |
| CVE-2021-28829 | TIBCO Administrator CSV injection | 6.5CNA v3.1 | 0.7% | 2021-04-20 | Fix |
| CVE-2021-28828 | TIBCO Administrator SQL injection | 7.6CNA v3.1 | 0.8% | 2021-04-20 | Fix |
| CVE-2021-28827 | TIBCO Administrator stored cross-site scripting | 9.6CNA v3.1 | 1.1% | 2021-04-20 | Fix |
| CVE-2021-28793 | Lextudio Restructuredtext incorrect authorization | 9.8v3.1 | 1.6% | 2021-04-20 | Fix |
| CVE-2021-28492 | Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format. | 4.9v3.1 | 0.8% | 2021-04-20 | Fix |
| CVE-2021-28156 | HashiCorp Consul Enterprise audit log vulnerability | 7.5v3.1 | 2.3% | 2021-04-20 | Fix |
| CVE-2021-25681 | AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 a | 7.5v3.1 | 10.8% | 2021-04-20 | Exploit code |
| CVE-2021-25680 | Adtran Personal Phone Manager cross-site scripting | 6.1v3.1 | 2.5% | 2021-04-20 | Exploit code |
| CVE-2021-25679 | Adtran Personal Phone Manager cross-site scripting | 5.4NVD v3.1 | 2.7% | 2021-04-20 | Exploit code |
| CVE-2021-21526 | Dell PowerScale OneFS OS command injection | 6.0CNA v3.1 | 0.3% | 2021-04-20 | Fix |
| CVE-2021-20453 | IBM WebSphere Application Server XML external entity injection | 8.2CNA v3.0 | 2.5% | 2021-04-20 | Fix |
| CVE-2021-20023 | SonicWall Email Security path traversal | 4.9NVD v3.1 | 51.7% | 2021-04-20 | KEVEmerging ThreatsKCVFix |
| CVE-2021-3038 | GlobalProtect App: Windows VPN kernel driver denial of service (DoS) | 5.5CNA v3.1 | 0.2% | 2021-04-20 | Fix |
| CVE-2021-3037 | PAN-OS: Secrets for scheduled configuration exports are logged in system logs | 2.3CNA v3.1 | 0.3% | 2021-04-20 | Fix |
| CVE-2021-3036 | Palo Alto Networks PAN-OS information disclosure | 4.4CNA v3.1 | 0.2% | 2021-04-20 | Fix |
| CVE-2021-3035 | Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution | 6.7CNA v3.1 | 1.3% | 2021-04-20 | Fix |
| CVE-2021-1079 | NVIDIA GeForce Experience Software code execution | 6.1CNA v3.1 | 0.3% | 2021-04-20 | Fix |
| CVE-2021-31262 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-31261 | gpac memory corruption | 5.5v3.1 | 1.1% | 2021-04-19 | Fix |
| CVE-2021-31260 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-31259 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-31258 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-31257 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-31256 | gpac stbl_GetSampleInfos function in MP4Box memory leak | 5.5v3.1 | 1.1% | 2021-04-19 | Fix |
| CVE-2021-31255 | gpac abst_box_read function in MP4Box buffer overflow | 7.8v3.1 | 1.5% | 2021-04-19 | Fix |
| CVE-2021-31254 | gpac tenc_box_read function in MP4Box buffer overflow | 7.8v3.1 | 1.5% | 2021-04-19 | Fix |
| CVE-2021-30199 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-30022 | gpac integer overflow | 5.5v3.1 | 1.1% | 2021-04-19 | Fix |
| CVE-2021-30020 | gpac out-of-bounds write | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-30019 | gpac out-of-bounds write | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-30015 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-19 | Fix |
| CVE-2021-30014 | gpac integer overflow | 5.5v3.1 | 1.1% | 2021-04-19 | Fix |
| CVE-2021-29458 | Out-of-bounds read in Exiv2::Internal::CrwMap::encode | 5.5v3.1 | 1.6% | 2021-04-19 | Fix |
| CVE-2021-29457 | Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata | 7.8v3.1 | 2.2% | 2021-04-19 | Fix |
| CVE-2021-29455 | Missing validation of JWT signature in `grassrootza/grassroot-platform` | 7.5CNA v3.1 | 0.8% | 2021-04-19 | Fix |
| CVE-2021-29453 | turt2live matrix-media-repo denial of service through memory exhaustion | 5.7CNA v3.1 | 1.0% | 2021-04-19 | Fix |
| CVE-2021-29434 | Improper validation of URLs (cross-site scripting) in Wagtail rich text fields | 6.1CNA v3.1 | 0.6% | 2021-04-19 | Fix |
| CVE-2021-29399 | xmbforum2 Xmb cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-19 | Fix |
| CVE-2021-29279 | gpac integer overflow | 7.8v3.1 | 1.0% | 2021-04-19 | |
| CVE-2021-27458 | JTEKT Corporation TOYOPUC products improper resource release | 7.5v3.1 | 1.1% | 2021-04-19 | |
| CVE-2021-27031 | Autodesk FBX Review use-after-free | 7.8v3.1 | 1.4% | 2021-04-19 | Fix |
| CVE-2021-27030 | Autodesk FBX Review path traversal | 7.8v3.1 | 59.6% | 2021-04-19 | Fix |
| CVE-2021-27029 | Autodesk FBX Review null pointer dereference | 5.5v3.1 | 0.8% | 2021-04-19 | Fix |
| CVE-2021-27028 | Autodesk FBX Review memory corruption | 7.8v3.1 | 2.3% | 2021-04-19 | Fix |
| CVE-2021-27027 | Autodesk FBX Review An out-of-bounds read | 7.8v3.1 | 1.8% | 2021-04-19 | Fix |
| CVE-2021-21981 | VMware NSX-T improper privilege management | 7.8v3.1 | 0.2% | 2021-04-19 | Fix |
| CVE-2021-21070 | Privilege escalation vulnerability in Adobe RoboHelp | 6.5CNA v3.1 | 1.6% | 2021-04-19 | Fix |
| CVE-2021-20992 | Fibaro Home Center Unencrypted management interface | 7.5v3.1 | 1.4% | 2021-04-19 | |
| CVE-2021-20991 | Fibaro Home Center Authenticated remote command execution | 8.8NVD v3.1 | 5.4% | 2021-04-19 | |
| CVE-2021-20990 | Fibaro Home Center unauthenticated access to shutdown, reboot and reboot to recovery mode | 7.5v3.1 | 3.4% | 2021-04-19 | |
| CVE-2021-20989 | Fibaro Home Center Insufficient remote access server authorization | 5.9v3.1 | 2.0% | 2021-04-19 | |
| CVE-2021-20527 | IBM Resilient OnPrem command injection | 6.0CNA v3.0 | 1.1% | 2021-04-19 | Fix |
| CVE-2021-20208 | cifs-utils incorrect privilege assignment | 6.1NVD v3.1 | 0.7% | 2021-04-19 | Fix |
| CVE-2021-3506 | kernel out-of-bounds operation vulnerability after rooting in some HUAWEI phones | 7.1NVD v3.1 | 0.4% | 2021-04-19 | Fix |
| CVE-2021-3505 | libtpms insufficient entropy | 5.5NVD v3.1 | 0.4% | 2021-04-19 | Fix |
| CVE-2021-3498 | gstreamer-plugins-good memory corruption | 7.8NVD v3.1 | 1.8% | 2021-04-19 | Fix |
| CVE-2021-3497 | gstreamer-plugins-good use-after-free | 7.8NVD v3.1 | 1.2% | 2021-04-19 | Fix |
| CVE-2021-23381 | killing arbitrary command injection | 9.8v3.1 | 1.3% | 2021-04-18 | |
| CVE-2021-23380 | roar-pidusage arbitrary command injection | 7.3v3.1 | 1.2% | 2021-04-18 | |
| CVE-2021-23379 | port-killer arbitrary command injection | 9.8v3.1 | 1.3% | 2021-04-18 | |
| CVE-2021-23378 | picotts arbitrary command injection | 9.8v3.1 | 1.9% | 2021-04-18 | |
| CVE-2021-23377 | onion-oled-js arbitrary command injection | 9.8v3.1 | 3.0% | 2021-04-18 | |
| CVE-2021-23376 | ffmpegdotjs arbitrary command injection | 9.8v3.1 | 1.9% | 2021-04-18 | |
| CVE-2021-23375 | psnode arbitrary command injection | 9.8v3.1 | 1.3% | 2021-04-18 | |
| CVE-2021-23374 | ps-visitor arbitrary command injection | 9.8v3.1 | 1.3% | 2021-04-18 | |
| CVE-2021-3493 | Linux Kernel privilege escalation | 8.8CNA v3.1 | 49.2% | 2021-04-17 | KEVExploit codeFix |
| CVE-2021-3492 | Ubuntu Linux kernel shiftfs file system double free | 8.8CNA v3.1 | 1.5% | 2021-04-17 | Exploit codeFix |
| CVE-2021-31414 | RPM Spec remote code execution | 9.8v3.1 | 2.4% | 2021-04-16 | |
| CVE-2021-31348 | Ezxml out-of-bounds read | 6.5v3.1 | 1.1% | 2021-04-16 | Fix |
| CVE-2021-31347 | ezXML ezxml_parse_str function vulnerability | 6.5v3.1 | 1.1% | 2021-04-16 | Fix |
| CVE-2021-29452 | curveball a12n-server any logged in user could edit any other logged in user | 8.1CNA v3.1 | 0.8% | 2021-04-16 | Fix |
| CVE-2021-29451 | Missing validation of JWT signature in `ManyDesigns/Portofino` | 9.1CNA v3.1 | 0.9% | 2021-04-16 | Fix |
| CVE-2021-29446 | Padding Oracle Attack due to observable timing discrepancy in jose-node-cjs-runtime | 5.9CNA v3.1 | 1.1% | 2021-04-16 | Fix |
| CVE-2021-29445 | Padding Oracle Attack due to observable timing discrepancy in jose-node-esm-runtime | 5.9CNA v3.1 | 1.1% | 2021-04-16 | Fix |
| CVE-2021-29444 | panva jose padding Oracle Attack due to observable timing discrepancy in jose-browser-runtime | 5.9CNA v3.1 | 1.1% | 2021-04-16 | Fix |
| CVE-2021-29443 | Padding Oracle Attack due to observable timing discrepancy in jose | 5.9CNA v3.1 | 1.2% | 2021-04-16 | Fix |
| CVE-2021-27692 | Tendacn G1 Tenda G1 and G3 routers command injection | 9.8v3.1 | 3.2% | 2021-04-16 | |
| CVE-2021-27691 | Tendacn G0 Tenda G0 routers command injection | 9.8v3.1 | 25.2% | 2021-04-16 | |
| CVE-2021-27394 | Siemens Mendix Applications using Mendix 7 improper privilege management | 8.8v3.1 | 0.8% | 2021-04-16 | Fix |
| CVE-2021-26830 | SQL injection in tribalsystems/Zenario | 9.1v3.1 | 4.6% | 2021-04-16 | Exploit codeFix |
| CVE-2021-26074 | Broken authentication in Atlassian Connect Spring Boot | 6.5v3.1 | 0.7% | 2021-04-16 | Fix |
| CVE-2021-26073 | Broken authentication in Atlassian Connect Express | 7.7v3.1 | 0.9% | 2021-04-16 | Fix |
| CVE-2021-22539 | Google code execution in VSCode-bazel via malicious Bazel config files | 8.2CNA v3.1 | 0.3% | 2021-04-16 | |
| CVE-2021-20491 | IBM Spectrum Protect Server out-of-bounds write | 4.4CNA v3.0 | 0.3% | 2021-04-16 | Fix |
| CVE-2021-31402 | dio vulnerable to CRLF injection with HTTP method string | 7.5v3.1 | 1.2% | 2021-04-15 | Fix |
| CVE-2021-31229 | Ezxml out-of-bounds write | 6.5v3.1 | 1.0% | 2021-04-15 | Fix |
| CVE-2021-30487 | Zulip Server topic moving API vulnerability | 2.7v3.1 | 0.7% | 2021-04-15 | Fix |
| CVE-2021-30479 | Zulip Server improper privilege management | 5.3v3.1 | 0.9% | 2021-04-15 | Fix |
| CVE-2021-30478 | Zulip Server improper privilege management | 4.3v3.1 | 0.6% | 2021-04-15 | Fix |
| CVE-2021-30477 | Zulip Server outgoing webhook replies vulnerability | 4.3v3.1 | 0.7% | 2021-04-15 | Fix |
| CVE-2021-30245 | Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks | 8.8v3.1 | 4.9% | 2021-04-15 | Fix |
| CVE-2021-30209 | Textpattern unrestricted file upload | 6.5v3.1 | 0.8% | 2021-04-15 | |
| CVE-2021-29450 | wordpress-develop WordPress Authenticated disclosure of password-protected posts and pages | 6.5CNA v3.1 | 2.1% | 2021-04-15 | Fix |
| CVE-2021-29448 | Stored DOM XSS in Pi-hole Admin Web Interface | 7.6CNA v3.1 | 0.7% | 2021-04-15 | |
| CVE-2021-29447 | wordpress-develop WordPress authenticated XXE attack when installation is running PHP 8 | 7.1CNA v3.1 | 85.7% | 2021-04-15 | Exploit codeFix |
| CVE-2021-29433 | matrix-org sydent denial of service (via resource exhaustion) due to improper input validation | 4.3CNA v3.1 | 0.9% | 2021-04-15 | Fix |
| CVE-2021-29432 | matrix-org sydent malicious users could control the content of invitation emails | 5.3CNA v3.1 | 0.9% | 2021-04-15 | Fix |
| CVE-2021-29431 | SSRF in Sydent due to missing validation of hostnames | 7.7CNA v3.1 | 1.2% | 2021-04-15 | Fix |
| CVE-2021-29430 | matrix-org sydent denial of service attack via memory exhaustion | 7.5CNA v3.1 | 1.8% | 2021-04-15 | Fix |
| CVE-2021-28549 | Adobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 6.5% | 2021-04-15 | Fix |
| CVE-2021-28548 | Adobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 6.4% | 2021-04-15 | Fix |
| CVE-2021-28242 | b2evolution "evoadm.php" component SQL injection | 8.8v3.1 | 5.0% | 2021-04-15 | Exploit code |
| CVE-2021-28055 | Predictable CSRF tokens in Centreon/Centreon | 6.5v3.1 | 0.8% | 2021-04-15 | Fix |
| CVE-2021-27850 | Remote code execution in Apache Tapestry | 9.8v3.1 | 94.1% | 2021-04-15 | NucleiMetasploitExploit codeFix |
| CVE-2021-27673 | Reflected XSS in tribalsystems/Zenario | 4.8v3.1 | 1.1% | 2021-04-15 | Fix |
| CVE-2021-27672 | SQL injection in tribalsystems/Zenario | 4.9v3.1 | 1.3% | 2021-04-15 | Fix |
| CVE-2021-27545 | PHPGurukul Beauty Parlour Management System "add-services.php" component SQL injection | 6.5v3.1 | 2.0% | 2021-04-15 | |
| CVE-2021-27544 | PHPGurukul Beauty Parlour Management System "add-services.php" component cross-site scripting | 4.8v3.1 | 1.1% | 2021-04-15 | |
| CVE-2021-27129 | Casap Automated Enrollment System cross-site scripting | 5.4v3.1 | 0.6% | 2021-04-15 | |
| CVE-2021-27112 | Lightcms remote code execution | 9.8v3.1 | 2.4% | 2021-04-15 | |
| CVE-2021-26582 | IceWall SSO Dgfw cross-site scripting | 6.1v3.1 | 0.7% | 2021-04-15 | Fix |
| CVE-2021-26076 | Atlassian Jira editor mode cookie vulnerability | 3.7v3.1 | 1.2% | 2021-04-15 | Fix |
| CVE-2021-26075 | Atlassian Jira Server information disclosure | 4.3v3.1 | 1.6% | 2021-04-15 | Fix |
| CVE-2021-23887 | Privilege escalation in McAfee DLP Endpoint for Windows | 7.8CNA v3.1 | 0.2% | 2021-04-15 | Fix |
| CVE-2021-23886 | Local denial of service in McAfee DLP Endpoint for Windows | 5.5CNA v3.1 | 0.2% | 2021-04-15 | Fix |
| CVE-2021-23884 | McAfee Content Security Reporter (CSR) ePO extension cleartext transmission of sensitive information | 4.3CNA v3.1 | 0.2% | 2021-04-15 | Fix |
| CVE-2021-21405 | filecoin-project lotus BLS Signature Malleability | 5.9CNA v3.1 | 1.0% | 2021-04-15 | Fix |
| CVE-2021-21100 | Adobe Digital Editions Arbitrary file system write vulnerability | 7.8CNA v3.1 | 1.7% | 2021-04-15 | Fix |
| CVE-2021-21096 | Adobe Bridge improper authorization | 5.5CNA v3.0 | 0.7% | 2021-04-15 | Fix |
| CVE-2021-21095 | Adobe Bridge out-of-bounds write | 7.8CNA v3.0 | 3.9% | 2021-04-15 | Fix |
| CVE-2021-21094 | Adobe Bridge out-of-bounds write | 7.8CNA v3.0 | 3.9% | 2021-04-15 | Fix |
| CVE-2021-21093 | Adobe Bridge SGI File Parsing memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 3.9% | 2021-04-15 | Fix |
| CVE-2021-21092 | Adobe Bridge DCM File Parsing memory corruption could lead to arbitrary code execution | 7.8CNA v3.0 | 3.9% | 2021-04-15 | Fix |
| CVE-2021-21091 | Adobe Bridge HEIC File Parsing out-of-bounds read vulnerability could lead to information disclosure | 3.3CNA v3.0 | 2.4% | 2021-04-15 | Fix |
| CVE-2021-21087 | Adobe Coldfusion cross-site scripting | 5.4CNA v3.0 | 37.1% | 2021-04-15 | NucleiFix |
| CVE-2021-20288 | ceph improper authentication | 7.2v3.1 | 2.1% | 2021-04-15 | Fix |
| CVE-2021-3243 | Wfiltericf Wfilter Internet Content Filter cross-site scripting | 6.1v3.1 | 0.7% | 2021-04-15 | |
| CVE-2021-0488 | Android pb_encode.c out-of-bounds write | 6.7v3.1 | 0.1% | 2021-04-15 | Fix |
| CVE-2021-31162 | rust-lang rust double free | 9.8v3.1 | 2.9% | 2021-04-14 | Fix |
| CVE-2021-31152 | Multilaser AC1200 RE018 cross-site request forgery | 8.8v3.1 | 3.8% | 2021-04-14 | Exploit code |
| CVE-2021-30494 | Razer synapse incorrect default permissions | 5.5v3.1 | 0.5% | 2021-04-14 | |
| CVE-2021-30493 | Razer synapse incorrect default permissions | 5.5v3.1 | 0.5% | 2021-04-14 | |
| CVE-2021-30459 | Jazzband Django Debug Toolbar SQL injection via in django-debug-toolbar | 9.8v3.1 | 1.9% | 2021-04-14 | Fix |
| CVE-2021-29654 | Stackpath Ajax Search Pro deserialization of untrusted data | 7.2v3.1 | 2.2% | 2021-04-14 | |
| CVE-2021-29449 | pi-hole multiple privilege escalation vulnerabilities Pihole | 6.3CNA v3.1 | 1.8% | 2021-04-14 | Exploit code |
| CVE-2021-29338 | uclouvain openjpeg integer overflow | 5.5v3.1 | 1.6% | 2021-04-14 | Fix |
| CVE-2021-28856 | Entropymine Deark divide by zero | 5.5v3.1 | 0.8% | 2021-04-14 | Fix |
| CVE-2021-28855 | Entropymine Deark null pointer dereference | 5.5v3.1 | 0.9% | 2021-04-14 | Fix |
| CVE-2021-28826 | TIBCO Messaging Eclipse Mosquitto Distribution Bridge Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-04-14 | Fix |
| CVE-2021-28825 | TIBCO Messaging Eclipse Mosquitto Distribution Core Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-04-14 | Fix |
| CVE-2021-28797 | Stack buffer overflow in Surveillance Station | 9.8CNA v3.1 | 5.9% | 2021-04-14 | Fix |
| CVE-2021-28484 | Infinite loop in Yubico yubihsm-connector | 7.5v3.1 | 1.5% | 2021-04-14 | Fix |
| CVE-2021-28300 | gpac null pointer dereference | 9.8v3.1 | 2.1% | 2021-04-14 | |
| CVE-2021-28157 | Devolutions Server An SQL injection | 7.2v3.1 | 0.8% | 2021-04-14 | |
| CVE-2021-28098 | Forescout Counteract uncontrolled search path | 7.8v3.1 | 0.4% | 2021-04-14 | |
| CVE-2021-28060 | groupoffice server-side request forgery | 5.3v3.1 | 1.4% | 2021-04-14 | |
| CVE-2021-28048 | Devolutions Server origin validation error | 6.5v3.1 | 0.6% | 2021-04-14 | |
| CVE-2021-27990 | Appspace improper authentication | 7.5v3.1 | 1.4% | 2021-04-14 | |
| CVE-2021-27989 | Appspace cross-site scripting | 5.4v3.1 | 0.5% | 2021-04-14 | |
| CVE-2021-27815 | libexif project Exif null pointer dereference | 5.5v3.1 | 1.3% | 2021-04-14 | Fix |
| CVE-2021-27710 | TOTOLINK X5000R command injection | 9.8v3.1 | 7.9% | 2021-04-14 | |
| CVE-2021-27708 | TOTOLINK X5000R command injection | 9.8v3.1 | 7.6% | 2021-04-14 | |
| CVE-2021-27707 | Tenda G1 buffer overflow | 9.8v3.1 | 2.8% | 2021-04-14 | |
| CVE-2021-27706 | Tenda G1 buffer overflow | 9.8v3.1 | 2.8% | 2021-04-14 | |
| CVE-2021-27705 | Tenda G1 buffer overflow | 9.8v3.1 | 2.9% | 2021-04-14 | |
| CVE-2021-27608 | SAP Setup unquoted search path | 7.5CNA v3.0 | 0.2% | 2021-04-14 | Fix |
| CVE-2021-27604 | SAP Process Integration In order to prevent XML external entity injection | 7.7CNA v3.0 | 0.8% | 2021-04-14 | Fix |
| CVE-2021-27599 | SAP NetWeaver Process Integration Integration Builder Framework vulnerability | 6.5CNA v3.0 | 0.8% | 2021-04-14 | Fix |
| CVE-2021-27288 | X2ENGINE X2CRM cross-site scripting | 6.1v3.1 | 0.9% | 2021-04-14 | |
| CVE-2021-27260 | Parallels Desktop out-of-bounds read | 3.2v3.1 | 0.5% | 2021-04-14 | Fix |
| CVE-2021-27259 | Parallels Desktop integer overflow | 7.8v3.1 | 0.4% | 2021-04-14 | Fix |
| CVE-2021-27258 | SolarWinds Orion Platform privilege escalation | 9.8v3.1 | 4.0% | 2021-04-14 | Fix |
| CVE-2021-27253 | NETGEAR R7800 heap-based buffer overflow | 8.8v3.1 | 1.1% | 2021-04-14 | Fix |
| CVE-2021-27252 | NETGEAR R7800 OS command injection | 8.8v3.1 | 1.1% | 2021-04-14 | Fix |
| CVE-2021-27251 | NETGEAR R7800 cleartext transmission of sensitive information | 8.8v3.1 | 0.7% | 2021-04-14 | Fix |
| CVE-2021-27250 | D-Link DAP-2020 external control of a file path | 6.5v3.1 | 67.4% | 2021-04-14 | Emerging ThreatsFix |
| CVE-2021-27249 | D-Link DAP-2020 OS command injection | 8.8v3.1 | 5.1% | 2021-04-14 | Fix |
| CVE-2021-27248 | D-Link DAP-2020 stack-based buffer overflow | 8.8v3.1 | 2.6% | 2021-04-14 | Fix |
| CVE-2021-27247 | Tencent WeChat out-of-bounds read | 6.5v3.1 | 6.4% | 2021-04-14 | |
| CVE-2021-27246 | TP-Link AC1750 stack-based buffer overflow | 8.0v3.1 | 6.6% | 2021-04-14 | Exploit code |
| CVE-2021-27183 | Altn Mdaemon externally controlled resource reference | 7.2v3.1 | 2.7% | 2021-04-14 | Fix |
| CVE-2021-27182 | Altn Mdaemon injection | 8.8v3.1 | 1.6% | 2021-04-14 | Fix |
| CVE-2021-27181 | Altn Mdaemon cross-site request forgery | 8.8v3.1 | 0.7% | 2021-04-14 | Fix |
| CVE-2021-27180 | Altn Mdaemon cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-04-14 | Fix |
| CVE-2021-27130 | Janobe Online Reviewer System SQL injection | 9.8v3.1 | 2.2% | 2021-04-14 | |
| CVE-2021-27114 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 24.6% | 2021-04-14 | Emerging Threats |
| CVE-2021-27113 | D-Link DIR-816 OS command injection | 9.8v3.1 | 3.5% | 2021-04-14 | |
| CVE-2021-26832 | Priority-software Priority Enterprise Management System cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-04-14 | |
| CVE-2021-26827 | TP-Link Tl-wr2041+ TP-Link WR2041 v1 firmware for the buffer overflow | 7.5v3.1 | 1.7% | 2021-04-14 | |
| CVE-2021-26812 | jitsi Meet cross-site scripting | 6.1v3.1 | 97.5% | 2021-04-14 | NucleiEmerging Threats |
| CVE-2021-26805 | tsMuxer buffer overflow | 5.5v3.1 | 0.7% | 2021-04-14 | |
| CVE-2021-26031 | Joomla! CMS core Inadequate filters on module layout settings | 5.3v3.1 | 1.0% | 2021-04-14 | Fix |
| CVE-2021-26030 | Joomla! CMS core Escape XSS in logo parameter error pages | 6.1v3.1 | 82.3% | 2021-04-14 | Fix |
| CVE-2021-25316 | Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in S390-tools | 3.3CNA v3.1 | 0.3% | 2021-04-14 | Fix |
| CVE-2021-25314 | SUSE Linux Enterprise High Availability 12-SP3 hawk: Insecure file permissions | 7.8CNA v3.1 | 0.4% | 2021-04-14 | Fix |
| CVE-2021-24028 | Facebook Thrift release of an invalid pointer | 9.8v3.1 | 1.7% | 2021-04-14 | Fix |
| CVE-2021-22879 | Nextcloud Desktop Client resource injection | 8.8v3.1 | 4.7% | 2021-04-14 | Fix |
| CVE-2021-3017 | Intelbras WIN 300 and WRN 342 web interface vulnerability | 7.5v3.1 | 63.0% | 2021-04-14 | NucleiFix |
| CVE-2021-30637 | HTMLy cross-site scripting | 5.4v3.1 | 1.9% | 2021-04-13 | Exploit code |
| CVE-2021-30503 | Glsl Linting remote code execution | 9.8v3.1 | 2.9% | 2021-04-13 | Fix |
| CVE-2021-30176 | Zerof Expert SQL injection | 9.8v3.1 | 29.0% | 2021-04-13 | |
| CVE-2021-30175 | Zerof Web Server SQL injection | 9.8v3.1 | 8.5% | 2021-04-13 | Nuclei |
| CVE-2021-30044 | RemoteClinic Remote Clinic v2.0 cross-site scripting | 5.4v3.1 | 1.8% | 2021-04-13 | Exploit code |
| CVE-2021-30042 | RemoteClinic Remote Clinic v2.0 cross-site scripting | 5.4v3.1 | 1.8% | 2021-04-13 | Exploit code |
| CVE-2021-30039 | RemoteClinic Remote Clinic v2.0 cross-site scripting | 5.4v3.1 | 1.8% | 2021-04-13 | Exploit code |
| CVE-2021-30034 | RemoteClinic Remote Clinic v2.0 cross-site scripting | 5.4v3.1 | 1.8% | 2021-04-13 | Exploit code |
| CVE-2021-30030 | RemoteClinic Remote Clinic v2.0 cross-site scripting | 5.4v3.1 | 1.8% | 2021-04-13 | Exploit code |
| CVE-2021-29999 | Wind River Vxworks out-of-bounds write | 9.8v3.1 | 1.8% | 2021-04-13 | Fix |
| CVE-2021-29998 | Siemens Ruggedcom Win Subscriber Station out-of-bounds write | 9.8v3.1 | 2.4% | 2021-04-13 | Fix |
| CVE-2021-29997 | Wind River Vxworks out-of-bounds read | 5.3v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-29943 | Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections | 9.1v3.1 | 5.3% | 2021-04-13 | Fix |
| CVE-2021-29440 | getgrav grav twig allowing dangerous PHP functions by default | 8.4CNA v3.1 | 30.6% | 2021-04-13 | Exploit codeFix |
| CVE-2021-29439 | Plugins can be installed with minimal admin privileges | 7.2CNA v3.1 | 2.6% | 2021-04-13 | Fix |
| CVE-2021-29438 | Improper neutralization of script-related HTML tags in a web page (basic XSS) in @Nextcloud/dialogs | 4.6CNA v3.1 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-29437 | ScratchVerifier ScratchOAuth2 account compromise by man-in-the-middle attack | 8.0CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-29436 | anuko timetracker cross-site request forgery | 5.4CNA v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-29435 | Cross-site request forgery (CSRF) in trestle-auth | 8.1CNA v3.1 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-29428 | gradle local privilege escalation through system temporary directory | 8.8CNA v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-29427 | gradle repository content filters do not work in settings pluginManagement | 8.0CNA v3.1 | 1.3% | 2021-04-13 | Exploit codeFix |
| CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8NVD v3.1 | 10.5% | 2021-04-13 | Fix |
| CVE-2021-29370 | Cheetah Browser cross-site scripting | 6.1v3.1 | 0.7% | 2021-04-13 | |
| CVE-2021-29262 | Improper permission handling in Apache Solr | 7.5v3.1 | 6.7% | 2021-04-13 | Fix |
| CVE-2021-29054 | Papoo cross-site request forgery | 8.8v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-29003 | Genexis Platinum-4410 OS command injection | 9.8v3.1 | 45.4% | 2021-04-13 | Emerging ThreatsExploit code |
| CVE-2021-28973 | Perforce Helix ALM XML external entity injection | 4.9v3.1 | 0.9% | 2021-04-13 | |
| CVE-2021-28938 | Siren Federate information disclosure | 4.3v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28647 | Trend Micro Password Manager uncontrolled search path | 7.8v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-28646 | Trend Micro Apex One An insecure permissions | 5.5v3.1 | 0.4% | 2021-04-13 | Fix |
| CVE-2021-28645 | Trend Micro Apex One An incorrect permission assignment | 7.8v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-28483 | Microsoft Exchange Server remote code execution | 9.0CNA v3.1 | 1.2% | 2021-04-13 | Fix |
| CVE-2021-28482 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 83.2% | 2021-04-13 | Emerging ThreatsExploit codeFix |
| CVE-2021-28481 | Microsoft Exchange Server remote code execution | 9.8CNA v3.1 | 36.2% | 2021-04-13 | NucleiFix |
| CVE-2021-28480 | Microsoft Exchange Server remote code execution | 9.8CNA v3.1 | 71.2% | 2021-04-13 | NucleiExploit codeFix |
| CVE-2021-28477 | Microsoft Visual Studio Code remote code execution | 7.0CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28475 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.7% | 2021-04-13 | Fix |
| CVE-2021-28473 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.7% | 2021-04-13 | Fix |
| CVE-2021-28472 | Microsoft Visual Studio Code Maven for Java extension remote code execution | 7.8CNA v3.1 | 61.8% | 2021-04-13 | Fix |
| CVE-2021-28471 | Microsoft Remote Development extension for Visual Studio Code remote code execution | 7.8CNA v3.1 | 4.1% | 2021-04-13 | Fix |
| CVE-2021-28470 | Microsoft Visual Studio Code GitHub Pull Requests and Issues extension remote code execution | 7.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28469 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.7% | 2021-04-13 | Fix |
| CVE-2021-28468 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 5.9% | 2021-04-13 | Fix |
| CVE-2021-28466 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28464 | Microsoft VP9 Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28460 | Microsoft Azure Sphere Unsigned code execution | 8.1CNA v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-28459 | Microsoft Azure DevOps Server spoofing | 6.1CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28458 | Microsoft Azure Ms-rest-nodeauth library elevation of privilege | 7.8CNA v3.1 | 2.0% | 2021-04-13 | Fix |
| CVE-2021-28457 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.7% | 2021-04-13 | Fix |
| CVE-2021-28456 | Microsoft Excel information disclosure | 5.5CNA v3.1 | 3.7% | 2021-04-13 | Fix |
| CVE-2021-28454 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 3.1% | 2021-04-13 | Fix |
| CVE-2021-28453 | Microsoft Word remote code execution | 7.8CNA v3.1 | 4.1% | 2021-04-13 | Fix |
| CVE-2021-28452 | Microsoft Outlook memory corruption | 7.1CNA v3.1 | 1.3% | 2021-04-13 | Fix |
| CVE-2021-28451 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28450 | Microsoft SharePoint denial of service | 5.0CNA v3.1 | 2.4% | 2021-04-13 | Fix |
| CVE-2021-28449 | Microsoft Office remote code execution | 7.8CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28448 | Microsoft Visual Studio Code Kubernetes tools remote code execution | 7.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28447 | Microsoft Windows Early Launch Antimalware driver security feature bypass | 4.4CNA v3.1 | 2.0% | 2021-04-13 | Fix |
| CVE-2021-28446 | Microsoft Windows Portmapping information disclosure | 7.1CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28445 | Microsoft Windows Network File System remote code execution | 8.1CNA v3.1 | 2.7% | 2021-04-13 | Fix |
| CVE-2021-28444 | Microsoft Windows Hyper-V security feature bypass | 5.7CNA v3.1 | 1.7% | 2021-04-13 | Fix |
| CVE-2021-28443 | Microsoft Windows console driver denial of service | 5.5CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28442 | Microsoft Windows TCP/IP information disclosure | 6.5CNA v3.1 | 6.5% | 2021-04-13 | Fix |
| CVE-2021-28441 | Microsoft Windows Hyper-V information disclosure | 6.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28440 | Microsoft Windows Installer elevation of privilege | 7.0CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28439 | Microsoft Windows TCP/IP driver denial of service | 7.5CNA v3.1 | 6.1% | 2021-04-13 | Fix |
| CVE-2021-28438 | Microsoft Windows console driver denial of service | 5.5CNA v3.1 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-28437 | Microsoft Windows Installer information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28436 | Microsoft Windows Speech Runtime elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28435 | Microsoft Windows Event Tracing information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28434 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28358 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28357 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28356 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28355 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28354 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28353 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28352 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28351 | Microsoft Windows Speech Runtime elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28350 | Microsoft Windows GDI+ remote code execution | 7.8CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28349 | Microsoft Windows GDI+ remote code execution | 7.8CNA v3.1 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-28348 | Microsoft Windows GDI+ remote code execution | 7.8CNA v3.1 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-28347 | Microsoft Windows Speech Runtime elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28346 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28345 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28344 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28343 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28342 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28341 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28340 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28339 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28338 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28337 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28336 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28335 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28334 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28333 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28332 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28331 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28330 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28329 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-28328 | Microsoft Windows DNS information disclosure | 6.5CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28327 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28326 | Microsoft Windows AppX Deployment Server denial of service | 5.5CNA v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-28325 | Microsoft Windows SMB information disclosure | 6.5CNA v3.1 | 62.1% | 2021-04-13 | Fix |
| CVE-2021-28324 | Microsoft Windows SMB information disclosure | 7.5CNA v3.1 | 6.2% | 2021-04-13 | Fix |
| CVE-2021-28323 | Microsoft Windows DNS information disclosure | 6.5CNA v3.1 | 4.3% | 2021-04-13 | Fix |
| CVE-2021-28322 | Microsoft Windows diagnostics Hub Standard Collector service elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-28321 | Microsoft Windows diagnostics Hub Standard Collector service elevation of privilege | 7.8CNA v3.1 | 1.3% | 2021-04-13 | Fix |
| CVE-2021-28320 | Microsoft Windows Resource Manager PSM service extension elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28319 | Microsoft Windows TCP/IP driver denial of service | 7.5CNA v3.1 | 9.4% | 2021-04-13 | Fix |
| CVE-2021-28318 | Microsoft Windows GDI+ information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28317 | Microsoft Windows Codecs library information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-28316 | Microsoft Windows WLAN AutoConfig service security feature bypass | 4.2CNA v3.1 | 1.1% | 2021-04-13 | Fix |
| CVE-2021-28315 | Microsoft Windows Media Video Decoder remote code execution | 7.8CNA v3.1 | 1.6% | 2021-04-13 | Fix |
| CVE-2021-28314 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-28313 | Microsoft Windows diagnostics Hub Standard Collector service elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-28312 | Microsoft Windows NTFS denial of service | 3.3CNA v3.1 | 6.6% | 2021-04-13 | Exploit codeFix |
| CVE-2021-28311 | Microsoft Windows Application Compatibility Cache denial of service | 6.5CNA v3.1 | 2.5% | 2021-04-13 | Fix |
| CVE-2021-28310 | Microsoft Win32k privilege escalation | 7.8CNA v3.1 | 8.4% | 2021-04-13 | KEVFix |
| CVE-2021-28309 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-27905 | Apache Solr SSRF vulnerability with the Replication handler | 9.8NVD v3.1 | 93.1% | 2021-04-13 | NucleiExploit codeFix |
| CVE-2021-27609 | SAP Focused RUN missing authorization | 4.6CNA v3.0 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-27605 | SAP Fiori Apps missing authorization | 4.3CNA v3.0 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27603 | SAP NetWeaver AS for ABAP denial of service | 6.5CNA v3.0 | 0.9% | 2021-04-13 | Fix |
| CVE-2021-27602 | SAP Commerce code injection | 9.9CNA v3.0 | 2.0% | 2021-04-13 | Fix |
| CVE-2021-27601 | SAP NetWeaver AS for Java cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-27600 | SAP Manufacturing Execution (System Rules) cross-site scripting | 6.4CNA v3.0 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27598 | SAP NetWeaver AS for JAVA missing authorization | 6.5CNA v3.0 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27096 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27095 | Microsoft Windows Media Video Decoder remote code execution | 7.8CNA v3.1 | 4.1% | 2021-04-13 | Fix |
| CVE-2021-27094 | Microsoft Windows Early Launch Antimalware driver security feature bypass | 4.4CNA v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-27093 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-27092 | Microsoft Windows azure AD Web Sign-in security feature bypass | 6.8CNA v3.1 | 2.6% | 2021-04-13 | Fix |
| CVE-2021-27091 | Microsoft Windows RPC Endpoint Mapper service elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27090 | Microsoft Windows Secure Kernel Mode elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-27089 | Microsoft Internet Messaging API remote code execution | 7.8CNA v3.1 | 2.3% | 2021-04-13 | Fix |
| CVE-2021-27088 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27086 | Microsoft Windows services and Controller App elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-27079 | Microsoft Windows Media Photo Codec information disclosure | 5.7CNA v3.1 | 2.9% | 2021-04-13 | Fix |
| CVE-2021-27072 | Microsoft Windows win32k elevation of privilege | 7.0CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-27067 | Microsoft Azure DevOps Server and Team Foundation Server information disclosure | 6.5CNA v3.1 | 2.6% | 2021-04-13 | Fix |
| CVE-2021-27064 | Visual Studio Installer elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-26417 | Microsoft Windows Overlay Filter information disclosure | 5.5CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-26416 | Microsoft Windows Hyper-V denial of service | 7.7CNA v3.1 | 3.9% | 2021-04-13 | Fix |
| CVE-2021-26415 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 3.6% | 2021-04-13 | Exploit codeFix |
| CVE-2021-26413 | Microsoft Windows Installer spoofing | 6.2CNA v3.1 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-25253 | Trend Micro Apex One An improper access control | 7.8v3.1 | 1.9% | 2021-04-13 | Exploit codeFix |
| CVE-2021-25250 | Trend Micro Apex One An improper access control | 7.8v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-23372 | mongo-express denial of service (DoS) | 7.5v3.1 | 0.9% | 2021-04-13 | |
| CVE-2021-23281 | Eaton Intelligent Power manager (IPM) remote code execution | 10.0CNA v3.1 | 2.2% | 2021-04-13 | Fix |
| CVE-2021-23280 | Eaton Intelligent Power manager (IPM) arbitrary file upload | 8.0CNA v3.1 | 0.9% | 2021-04-13 | Fix |
| CVE-2021-23279 | Eaton Intelligent Power manager (IPM) arbitrary file delete | 8.0CNA v3.1 | 27.1% | 2021-04-13 | Fix |
| CVE-2021-23278 | Eaton Intelligent Power manager (IPM) arbitrary file delete | 8.7CNA v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-23277 | Eaton Intelligent Power manager improper neutralization of directives in dynamically evaluated code | 8.3CNA v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-23276 | Eaton Intelligent Power manager improper neutralization of special elements used in an SQL command | 7.1CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-22720 | C-Bus Toolkit path traversal | 7.2v3.1 | 30.5% | 2021-04-13 | Fix |
| CVE-2021-22719 | C-Bus Toolkit path traversal | 8.8v3.1 | 40.6% | 2021-04-13 | Fix |
| CVE-2021-22718 | C-Bus Toolkit path traversal | 7.8v3.1 | 27.2% | 2021-04-13 | Fix |
| CVE-2021-22717 | C-Bus Toolkit path traversal | 8.8v3.1 | 38.9% | 2021-04-13 | Fix |
| CVE-2021-22716 | Schneider Electric C-Bus Toolkit incorrect permission assignment | 7.8CNA v3.1 | 0.8% | 2021-04-13 | Fix |
| CVE-2021-22505 | Operations Agent Micro Focus privilege escalation | 9.8v3.1 | 1.5% | 2021-04-13 | |
| CVE-2021-21784 | Accusoft ImageGear JPG format SOF marker processing out-of-bounds write | 7.8NVD v3.1 | 0.8% | 2021-04-13 | |
| CVE-2021-21731 | ZTE ZXCLOUD iRAI management page of a cross-site request forgery | 8.1v3.1 | 0.4% | 2021-04-13 | Fix |
| CVE-2021-21730 | ZXHN H168N improper access control | 9.8v3.1 | 1.0% | 2021-04-13 | Fix |
| CVE-2021-21729 | ZXHN H168N,ZXHN H108N insufficient randomness | 6.5v3.1 | 0.4% | 2021-04-13 | Fix |
| CVE-2021-21492 | SAP NetWeaver AS for JAVA (HTTP Service) authentication bypass by spoofing | 4.3CNA v3.0 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-21485 | SAP NetWeaver Application Server for Java Telnet command handler vulnerability | 7.4CNA v3.0 | 0.9% | 2021-04-13 | Fix |
| CVE-2021-21483 | SAP Solution Manager information disclosure | 8.2CNA v3.0 | 0.7% | 2021-04-13 | Fix |
| CVE-2021-21482 | SAP NetWeaver Master Data Management missing brute-force protection | 8.3CNA v3.0 | 0.4% | 2021-04-13 | Fix |
| CVE-2021-21399 | Unauthenticated SubSonic backend access in Ampache | 9.1CNA v3.1 | 1.4% | 2021-04-13 | Fix |
| CVE-2021-3473 | Lenovo XClarity Controller (XCC) cleartext transmission of sensitive information | 4.5CNA v3.1 | 0.5% | 2021-04-13 | Fix |
| CVE-2021-3463 | Lenovo Power Management Driver null pointer dereference | 4.2CNA v3.1 | 0.2% | 2021-04-13 | Fix |
| CVE-2021-3462 | Lenovo Power Management Driver privilege escalation | 5.5CNA v3.1 | 0.2% | 2021-04-13 | Fix |
| CVE-2021-3460 | Motorola MH702x improper certificate validation | 8.1CNA v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-0471 | Android CryptoPlugin.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0468 | Android LK privilege escalation | 6.6v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0446 | Android ImportVCardActivity privilege escalation | 7.3v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0445 | Android WelcomeActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0444 | Android information disclosure | 5.5v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0443 | Android ScreenshotHelper.java information disclosure | 4.7v3.1 | 0.1% | 2021-04-13 | Fix |