CVE-2021 records published in April 2021
Page two of two: records 1,001 to 1,493 of the 1,493 published in April 2021, newest first. The first page carries the figures for April 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-0442 | Android privilege escalation | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0439 | Android out-of-bounds write | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0438 | Android clickjacking | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0437 | Android DrmPlugin.cpp double free | 7.8v3.1 | 0.2% | 2021-04-13 | Fix |
| CVE-2021-0436 | Android CryptoPlugin.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0435 | Android avrc_api.cc information disclosure | 7.5v3.1 | 1.7% | 2021-04-13 | Fix |
| CVE-2021-0433 | Android DeviceChooserActivity.java privilege escalation | 8.0v3.1 | 0.6% | 2021-04-13 | Fix |
| CVE-2021-0432 | Android StatsPullerManager.cpp use-after-free | 7.0v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0431 | Android avrc_api.cc out-of-bounds read | 7.5v3.1 | 1.7% | 2021-04-13 | Fix |
| CVE-2021-0430 | Android rw_mfc.cc out-of-bounds write | 9.8v3.1 | 2.8% | 2021-04-13 | Fix |
| CVE-2021-0429 | Android use-after-free | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0428 | Android TelephonyManager.java information disclosure | 5.5v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0427 | Android LogEvent.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0426 | Android LogEvent.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-0400 | Android improper input validation | 5.5v3.1 | 0.1% | 2021-04-13 | Fix |
| CVE-2021-29429 | gradle information disclosure through temporary directory permissions | 4.0CNA v3.1 | 0.5% | 2021-04-12 | Fix |
| CVE-2021-29379 | D-Link Dir-802 OS command injection | 8.8v3.1 | 3.5% | 2021-04-12 | |
| CVE-2021-29357 | OutSystems Lifetime Management Console server-side request forgery | 8.6v3.1 | 1.0% | 2021-04-12 | Fix |
| CVE-2021-29302 | TP-Link TL-WR802N buffer overflow | 8.1v3.1 | 5.9% | 2021-04-12 | Fix |
| CVE-2021-27486 | FATEK Automation WinProladder integer underflow | 7.8v3.1 | 1.0% | 2021-04-12 | |
| CVE-2021-25926 | Cross-site scripting in Sickrage | 6.1v3.1 | 0.8% | 2021-04-12 | Fix |
| CVE-2021-25925 | Cross-site scripting in SiCKRAGE | 5.4v3.1 | 0.7% | 2021-04-12 | Fix |
| CVE-2021-24231 | Patreon WordPress plugin CSRF to Disconnect Sites from Patreon | 6.5NVD v3.1 | 0.6% | 2021-04-12 | Fix |
| CVE-2021-24230 | Patreon WordPress plugin CSRF to Overwrite/Create user Meta | 8.1NVD v3.1 | 0.6% | 2021-04-12 | Fix |
| CVE-2021-24229 | Patreon WordPress plugin reflected XSS on patreon_save_attachment_patreon_level AJAX action | 9.6NVD v3.1 | 1.8% | 2021-04-12 | Fix |
| CVE-2021-24228 | Patreon WordPress plugin reflected XSS on login form | 9.6NVD v3.1 | 1.9% | 2021-04-12 | Fix |
| CVE-2021-24227 | Patreon WordPress plugin unauthenticated local file disclosure | 7.5NVD v3.1 | 5.9% | 2021-04-12 | NucleiFix |
| CVE-2021-24226 | AccessAlly WordPress plugin $_SERVER Superglobal leakage | 7.5NVD v3.1 | 5.4% | 2021-04-12 | NucleiFix |
| CVE-2021-24225 | Advanced Booking Calendar WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-04-12 | Fix |
| CVE-2021-24224 | Easy Form Builder WordPress plugin authenticated arbitrary file upload | 8.8NVD v3.1 | 1.9% | 2021-04-12 | |
| CVE-2021-24223 | N5 Upload Form WordPress plugin unauthenticated arbitrary file upload to RCE | 9.8NVD v3.1 | 2.2% | 2021-04-12 | |
| CVE-2021-24222 | Williamluis WP-Curriculo Vitae Free resume upload form arbitrary file upload | 9.8NVD v3.1 | 2.4% | 2021-04-12 | |
| CVE-2021-24221 | Quiz And Survey Master WordPress plugin authenticated SQL injection via shortcode | 8.8NVD v3.1 | 1.9% | 2021-04-12 | Fix |
| CVE-2021-24220 | Rise by Thrive Themes WordPress theme unrestricted file upload | 9.1NVD v3.1 | 3.9% | 2021-04-12 | NucleiFix |
| CVE-2021-24219 | All Thrive Themes and Plugins Unauthenticated Option Update | 5.3NVD v3.1 | 2.1% | 2021-04-12 | NucleiFix |
| CVE-2021-24218 | Facebook for WordPress CSRF to stored XSS and Settings Deletion | 8.8NVD v3.1 | 0.7% | 2021-04-12 | Fix |
| CVE-2021-24217 | Facebook for WordPress plugin PHP object injection with POP Chain | 8.1NVD v3.1 | 3.5% | 2021-04-12 | Fix |
| CVE-2021-24215 | Controlled Admin Access WordPress plugin improper access control and privilege escalation | 9.8NVD v3.1 | 8.7% | 2021-04-12 | NucleiFix |
| CVE-2021-24213 | GiveWP WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.4% | 2021-04-12 | NucleiFix |
| CVE-2021-24200 | wpDataTables WordPress plugin blind SQL injection via length parameter | 6.5NVD v3.1 | 1.3% | 2021-04-12 | Fix |
| CVE-2021-24199 | wpDataTables WordPress plugin blind SQL injection via start parameter | 6.5NVD v3.1 | 1.3% | 2021-04-12 | Fix |
| CVE-2021-24198 | wpDataTables WordPress plugin improper access control leading to Table data deletion | 8.1NVD v3.1 | 1.5% | 2021-04-12 | Fix |
| CVE-2021-24197 | wpDataTables WordPress plugin improper access control leading to Table Permission takeover | 8.1NVD v3.1 | 1.2% | 2021-04-12 | Fix |
| CVE-2021-24024 | Fortinet FortiADCManager, FortiADC sensitive information in log files | 4.3CNA v3.1 | 0.9% | 2021-04-12 | Fix |
| CVE-2021-23371 | chrono-node regular expression denial of service (ReDoS) | 7.5v3.1 | 2.0% | 2021-04-12 | Fix |
| CVE-2021-23370 | swiper prototype pollution | 9.8v3.1 | 2.2% | 2021-04-12 | Fix |
| CVE-2021-23369 | handlebars remote code execution (RCE) | 9.8NVD v3.1 | 7.0% | 2021-04-12 | Exploit codeFix |
| CVE-2021-23368 | postcss regular expression denial of service (ReDoS) | 5.3v3.1 | 3.5% | 2021-04-12 | Fix |
| CVE-2021-23270 | Gargoyle-router Gargoyle excessive iteration | 7.5v3.1 | 1.0% | 2021-04-12 | |
| CVE-2021-22497 | Advanced Authentication Improper Session Management | 3.8CNA v3.1 | 0.8% | 2021-04-12 | Fix |
| CVE-2021-22190 | GitLab path traversal | 8.5CNA v3.1 | 1.6% | 2021-04-12 | Fix |
| CVE-2021-21545 | Dell Peripheral Manager uncontrolled search path | 7.8CNA v3.1 | 0.3% | 2021-04-12 | Fix |
| CVE-2021-21524 | Dell EMC Storage Monitoring and Reporting deserialization of untrusted data | 9.8CNA v3.0 | 3.2% | 2021-04-12 | Fix |
| CVE-2021-21394 | Matrix.org Synapse third-party identifier endpoints denial of service | 5.3CNA v3.1 | 1.5% | 2021-04-12 | Fix |
| CVE-2021-21393 | Matrix.org Synapse groups and communities endpoints denial of service | 5.3CNA v3.1 | 1.6% | 2021-04-12 | Fix |
| CVE-2021-21392 | matrix-org synapse open redirect via transitional IPv6 addresses on dual-stack networks | 6.3CNA v3.1 | 0.9% | 2021-04-12 | Fix |
| CVE-2021-20519 | IBM Rational Quality Manager cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-04-12 | Fix |
| CVE-2021-3163 | Cross-site scripting in Quill | 6.1v3.1 | 1.3% | 2021-04-12 | |
| CVE-2021-3128 | ASUS RT-AX3000 excessive iteration | 7.5v3.1 | 2.2% | 2021-04-12 | Fix |
| CVE-2021-3125 | TP-Link Tl-xdr1850 excessive iteration | 7.5v3.1 | 1.5% | 2021-04-12 | Fix |
| CVE-2021-30485 | Ezxml null pointer dereference | 6.5v3.1 | 1.1% | 2021-04-11 | Fix |
| CVE-2021-28879 | rust-lang rust integer overflow | 9.8v3.1 | 2.4% | 2021-04-11 | Fix |
| CVE-2021-28878 | rust-lang rust memory corruption | 7.5v3.1 | 2.0% | 2021-04-11 | Fix |
| CVE-2021-28877 | rust-lang rust memory corruption | 7.5v3.1 | 1.4% | 2021-04-11 | Fix |
| CVE-2021-28876 | rust-lang rust improper exception handling | 5.3v3.1 | 1.6% | 2021-04-11 | Fix |
| CVE-2021-28875 | rust-lang rust unchecked return value | 7.5v3.1 | 2.1% | 2021-04-11 | Fix |
| CVE-2021-30481 | Valve Software Steam Client buffer overflow | 9.0v3.1 | 3.5% | 2021-04-10 | Exploit code |
| CVE-2021-20020 | SonicWall Global Management System (GMS) command execution | 9.8v3.1 | 3.7% | 2021-04-10 | Fix |
| CVE-2021-30480 | Zoom Chat arbitrary code execution | 8.8v3.1 | 5.8% | 2021-04-09 | Fix |
| CVE-2021-30458 | Wikimedia Parsoid vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 1.0% | 2021-04-09 | Fix |
| CVE-2021-30159 | MediaWiki page move handling vulnerability | 4.3v3.1 | 1.6% | 2021-04-09 | Fix |
| CVE-2021-30156 | mediawiki information disclosure | 4.3v3.1 | 1.2% | 2021-04-09 | Fix |
| CVE-2021-30155 | mediawiki missing authorization | 4.3v3.1 | 1.2% | 2021-04-09 | Fix |
| CVE-2021-30152 | mediawiki improper privilege management | 4.3v3.1 | 1.2% | 2021-04-09 | Fix |
| CVE-2021-29671 | IBM Spectrum Scale file audit logging vulnerability | 4.0CNA v3.0 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-29221 | Erlang Project Erlang/OTP untrusted search path | 7.0v3.1 | 0.6% | 2021-04-09 | Fix |
| CVE-2021-25381 | Samsung Mobile Samsung Account improper authorization | 5.5CNA v3.1 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-25380 | Samsung Mobile Bixby improper exception handling | 5.8CNA v3.1 | 0.6% | 2021-04-09 | Fix |
| CVE-2021-25379 | Samsung Mobile Gallery improper export of Android application components | 4.0CNA v3.1 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-25378 | Samsung Mobile SmartThings improper access control | 4.3CNA v3.1 | 1.0% | 2021-04-09 | Fix |
| CVE-2021-25377 | Samsung Mobile Samsung Experience Service improper authentication | 3.3CNA v3.1 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-25376 | Samsung Mobile Samsung Email An improper synchronization | 3.1CNA v3.1 | 0.8% | 2021-04-09 | Fix |
| CVE-2021-25375 | Samsung Mobile Samsung Email information disclosure | 6.5CNA v3.1 | 1.2% | 2021-04-09 | Fix |
| CVE-2021-25374 | Samsung Mobile Samsung Members An improper authorization | 8.6CNA v3.1 | 3.1% | 2021-04-09 | Exploit codeFix |
| CVE-2021-25373 | Samsung Mobile Customization Service improper authorization | 5.5CNA v3.1 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-25365 | Samsung Mobile Devices improper privilege management | 5.9CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25364 | Samsung Mobile Devices information disclosure | 4.0CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25363 | Samsung Mobile Devices ActivityManagerService improper access control | 6.8CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25362 | Samsung Mobile Devices CertInstaller improper permissions | 6.8CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25361 | Samsung Mobile Devices stickerCenter improper access control | 7.9CNA v3.1 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-25360 | Samsung Mobile Devices libswmfextractor library improper input validation | 9.0CNA v3.1 | 0.7% | 2021-04-09 | Fix |
| CVE-2021-25359 | Samsung Mobile Devices improper access control | 4.0CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25358 | Samsung Mobile Devices plaintext password storage | 4.0CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25357 | Samsung Mobile Devices information disclosure | 5.6CNA v3.1 | 0.1% | 2021-04-09 | Fix |
| CVE-2021-25356 | Samsung Mobile Devices improper input validation | 7.1CNA v3.1 | 0.2% | 2021-04-09 | Fix |
| CVE-2021-25328 | Skyworthdigital RN510 buffer overflow | 8.8v3.1 | 3.9% | 2021-04-09 | |
| CVE-2021-25327 | Skyworthdigital RN510 cross-site request forgery | 6.5v3.1 | 0.9% | 2021-04-09 | |
| CVE-2021-25326 | Skyworthdigital RN510 cross-site request forgery | 5.4v3.1 | 1.5% | 2021-04-09 | |
| CVE-2021-21728 | ZXA10 C300M resource exhaustion | 5.3v3.1 | 1.0% | 2021-04-09 | Fix |
| CVE-2021-21433 | Discord-Recon dirsearch and arjun commands remote command execution | 9.9CNA v3.1 | 3.0% | 2021-04-09 | |
| CVE-2021-21432 | go-vela server reject unauthorized access with GitHub PATs | 7.5CNA v3.1 | 1.0% | 2021-04-09 | Fix |
| CVE-2021-21431 | MirahezeBots sopel-channelmgnt improper input validation in sopel-plugins.Channelmgnt | 7.6CNA v3.1 | 1.1% | 2021-04-09 | Fix |
| CVE-2021-21199 | Google Chrome Aura use-after-free | 8.8v3.1 | 1.1% | 2021-04-09 | Fix |
| CVE-2021-21198 | Google Chrome IPC out-of-bounds read | 7.4v3.1 | 1.8% | 2021-04-09 | Fix |
| CVE-2021-21197 | Google Chrome TabStrip heap-based buffer overflow | 8.8v3.1 | 1.4% | 2021-04-09 | Fix |
| CVE-2021-21196 | Google Chrome TabStrip heap-based buffer overflow | 8.8v3.1 | 1.3% | 2021-04-09 | Fix |
| CVE-2021-21195 | Google Chrome V8 use-after-free | 8.8v3.1 | 1.4% | 2021-04-09 | Fix |
| CVE-2021-21194 | Google Chrome screen sharing use-after-free | 8.8v3.1 | 1.2% | 2021-04-09 | Fix |
| CVE-2021-20080 | ManageEngine ServiceDesk Plus cross-site scripting | 6.1NVD v3.1 | 93.1% | 2021-04-09 | Emerging Threats |
| CVE-2021-20022 | SonicWall Email Security unrestricted upload of File | 7.2NVD v3.1 | 16.6% | 2021-04-09 | KEVKCVFix |
| CVE-2021-20021 | SonicWall Email Security improper privilege management | 9.8v3.1 | 88.7% | 2021-04-09 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2021-30463 | VestaCP Control Panel link following | 7.8v3.1 | 0.5% | 2021-04-08 | |
| CVE-2021-30462 | VestaCP Vesta Control Panel missing authentication | 7.2v3.1 | 1.8% | 2021-04-08 | |
| CVE-2021-30114 | Web-school Enterprise Resource Planning cross-site request forgery | 6.5v3.1 | 0.7% | 2021-04-08 | |
| CVE-2021-30113 | Web-school Enterprise Resource Planning blind cross-site scripting | 6.1v3.1 | 0.9% | 2021-04-08 | |
| CVE-2021-30112 | Web-school Enterprise Resource Planning cross-site request forgery | 6.5v3.1 | 0.7% | 2021-04-08 | |
| CVE-2021-30111 | Web-school Enterprise Resource Planning stored cross-site scripting | 5.4v3.1 | 0.7% | 2021-04-08 | |
| CVE-2021-29154 | Linux kernel command injection | 7.8v3.1 | 0.9% | 2021-04-08 | Fix |
| CVE-2021-28925 | Nagios Network Analyzer SQL injection | 9.8v3.1 | 4.8% | 2021-04-08 | Fix |
| CVE-2021-28924 | Nagios Network Analyzer cross-site scripting | 6.1v3.1 | 10.5% | 2021-04-08 | Fix |
| CVE-2021-28686 | ASUS GPUTweakII out-of-bounds write | 5.5v3.1 | 0.3% | 2021-04-08 | Fix |
| CVE-2021-28685 | ASUS GPU Tweak II AsIO2 driver vulnerability | 7.8v3.1 | 0.3% | 2021-04-08 | Fix |
| CVE-2021-28174 | Mitake Smart Stock Selection System broken authentication | 6.5v3.1 | 1.0% | 2021-04-08 | Fix |
| CVE-2021-27945 | Squirro cross-site scripting | 6.1v3.1 | 0.6% | 2021-04-08 | Fix |
| CVE-2021-27522 | Learnsite improper authentication | 8.8v3.1 | 1.1% | 2021-04-08 | |
| CVE-2021-22513 | Missing permission checks in Micro Focus Application Automation Tools Plugin | 6.5v3.1 | 1.2% | 2021-04-08 | Fix |
| CVE-2021-22512 | CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin | 6.5v3.1 | 0.7% | 2021-04-08 | Fix |
| CVE-2021-22511 | Micro Focus Application Automation Tools Plugin improper certificate validation | 6.5v3.1 | 0.4% | 2021-04-08 | Fix |
| CVE-2021-22510 | Reflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools Plugin | 6.1v3.1 | 5.0% | 2021-04-08 | Fix |
| CVE-2021-22507 | Operations Bridge Manager Micro Focus authentication bypass | 9.8v3.1 | 1.7% | 2021-04-08 | |
| CVE-2021-22312 | Huawei IPS6000E some memory leak | 6.5v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-22115 | Cloud Control API insufficiently protected credentials | 6.5v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-20480 | IBM WebSphere Application Server server-side request forgery | 4.3CNA v3.0 | 1.2% | 2021-04-08 | Fix |
| CVE-2021-3482 | exiv2 improper input validation | 6.5NVD v3.1 | 2.3% | 2021-04-08 | Fix |
| CVE-2021-3448 | dnsmasq improperly implemented security check | 4.0NVD v3.1 | 2.3% | 2021-04-08 | Fix |
| CVE-2021-3413 | Satellite information disclosure | 6.3v3.1 | 0.7% | 2021-04-08 | Fix |
| CVE-2021-3328 | Aprelium Abyss Web Server X1 out-of-bounds read | 7.5v3.1 | 1.8% | 2021-04-08 | |
| CVE-2021-3146 | Dolby Audio X2 untrusted search path | 7.8v3.1 | 0.4% | 2021-04-08 | Fix |
| CVE-2021-3012 | Esri ArcGIS Enterprise Document Link of documents cross-site scripting | 5.4v3.1 | 0.7% | 2021-04-08 | |
| CVE-2021-1485 | Cisco IOS XR Software command injection | 6.6CNA v3.1 | 0.3% | 2021-04-08 | Fix |
| CVE-2021-1480 | Cisco SD-WAN vManage Software memory corruption | 7.8CNA v3.1 | 1.8% | 2021-04-08 | Exploit codeFix |
| CVE-2021-1479 | Cisco SD-WAN vManage Software memory corruption | 7.8CNA v3.1 | 1.9% | 2021-04-08 | Fix |
| CVE-2021-1475 | Cisco Umbrella Link and CSV formula injection | 6.5CNA v3.1 | 0.7% | 2021-04-08 | Fix |
| CVE-2021-1474 | Cisco Umbrella Link and CSV formula injection | 6.5CNA v3.1 | 0.7% | 2021-04-08 | Fix |
| CVE-2021-1473 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 5.3CNA v3.1 | 64.4% | 2021-04-08 | MetasploitExploit codeKCVFix |
| CVE-2021-1472 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 5.3CNA v3.1 | 72.0% | 2021-04-08 | Reported exploitedNucleiMetasploitExploit codeKCVFix |
| CVE-2021-1467 | Cisco Webex Meetings for Android Avatar Modification vulnerability | 4.3CNA v3.1 | 0.7% | 2021-04-08 | Fix |
| CVE-2021-1463 | Cisco Unified Intelligence Center reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-1459 | Cisco Small Business RV Series Router Firmware improper input validation | 9.8CNA v3.1 | 3.0% | 2021-04-08 | |
| CVE-2021-1420 | Cisco Webex Meetings HTML injection | 4.7CNA v3.1 | 0.9% | 2021-04-08 | Fix |
| CVE-2021-1415 | Cisco Small Business RV Series Router Firmware deserialization of untrusted data | 6.3CNA v3.1 | 1.6% | 2021-04-08 | Fix |
| CVE-2021-1414 | Cisco Small Business RV Series Router Firmware deserialization of untrusted data | 6.3CNA v3.1 | 1.9% | 2021-04-08 | Fix |
| CVE-2021-1413 | Cisco Small Business RV Series Router Firmware deserialization of untrusted data | 6.3CNA v3.1 | 1.6% | 2021-04-08 | Fix |
| CVE-2021-1409 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-1408 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-1407 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-1406 | Cisco Unified Communications Manager information disclosure | 4.9CNA v3.1 | 1.1% | 2021-04-08 | Fix |
| CVE-2021-1405 | Cisco Clam AntiVirus (ClamAV) PDF parser denial of service | 7.5CNA v3.1 | 3.0% | 2021-04-08 | Fix |
| CVE-2021-1404 | Cisco Clam AntiVirus (ClamAV) Email parser denial of service | 7.5CNA v3.1 | 2.1% | 2021-04-08 | Fix |
| CVE-2021-1399 | Cisco Unified Communications Manager Self Care portal authorization bypass | 4.3CNA v3.1 | 0.6% | 2021-04-08 | Fix |
| CVE-2021-1386 | Cisco Advanced Malware Protection for Endpoints, ClamAV and Immunet DLL loading DLL hijacking | 7.0CNA v3.1 | 0.3% | 2021-04-08 | Fix |
| CVE-2021-1380 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-04-08 | Fix |
| CVE-2021-1362 | Cisco Unified Communications Products remote code execution | 8.8CNA v3.1 | 2.7% | 2021-04-08 | Fix |
| CVE-2021-1309 | Cisco Small Business RV Series Routers Link Layer Discovery protocol vulnerabilities | 7.4CNA v3.1 | 0.5% | 2021-04-08 | Fix |
| CVE-2021-1308 | Cisco Small Business RV Series Routers Link Layer Discovery protocol vulnerabilities | 7.4CNA v3.1 | 0.4% | 2021-04-08 | Fix |
| CVE-2021-1252 | Cisco Clam AntiVirus (ClamAV) Excel XLM parser denial of service | 7.5CNA v3.1 | 2.5% | 2021-04-08 | Fix |
| CVE-2021-1251 | Cisco Small Business RV Series Routers Link Layer Discovery protocol vulnerabilities | 7.4CNA v3.1 | 0.4% | 2021-04-08 | Fix |
| CVE-2021-1137 | Cisco SD-WAN vManage Software memory corruption | 7.8CNA v3.1 | 0.6% | 2021-04-08 | Fix |
| CVE-2021-30457 | Double free in Id-map | 9.8v3.1 | 1.1% | 2021-04-07 | |
| CVE-2021-30456 | Double free in Id-map | 9.8v3.1 | 1.1% | 2021-04-07 | |
| CVE-2021-30455 | Double free in Id-map | 9.8v3.1 | 1.1% | 2021-04-07 | |
| CVE-2021-30454 | Outer CGI uninitialized memory access in outer_cgi | 9.8v3.1 | 1.1% | 2021-04-07 | Fix |
| CVE-2021-30246 | RSA signature validation vulnerability on maleable encoded message in jsrsasign | 9.1v3.1 | 1.0% | 2021-04-07 | Fix |
| CVE-2021-30185 | Indico tampering with links (e.g. password reset) in sent emails | 7.5v3.1 | 1.0% | 2021-04-07 | Fix |
| CVE-2021-30184 | GNU Chess buffer overflow | 7.8v3.1 | 1.8% | 2021-04-07 | Fix |
| CVE-2021-30178 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2021-04-07 | Fix |
| CVE-2021-30177 | Php-nuke There is a SQL injection | 9.8v3.1 | 2.4% | 2021-04-07 | |
| CVE-2021-30147 | Dmasoftlab RADIUS Manager cross-site request forgery | 8.8v3.1 | 3.5% | 2021-04-07 | Exploit code |
| CVE-2021-30123 | FFmpeg buffer overflow | 8.8v3.1 | 3.4% | 2021-04-07 | Fix |
| CVE-2021-29641 | Rangerstudio directus unrestricted file upload | 8.8v3.1 | 4.9% | 2021-04-07 | |
| CVE-2021-29627 | FreeBSD accept filter accf_create callback double free | 7.8v3.1 | 0.7% | 2021-04-07 | Exploit codeFix |
| CVE-2021-29626 | FreeBSD use-after-free | 5.5v3.1 | 0.3% | 2021-04-07 | Fix |
| CVE-2021-28927 | libretro RetroArch OS command injection | 7.8v3.1 | 1.3% | 2021-04-07 | |
| CVE-2021-28166 | The Eclipse Foundation Eclipse Mosquitto null pointer dereference | 6.5CNA v3.1 | 1.0% | 2021-04-07 | Fix |
| CVE-2021-26758 | litespeedtech openlitespeed LiteSpeed Technologies privilege escalation | 8.8v3.1 | 2.7% | 2021-04-07 | |
| CVE-2021-26709 | D-Link Dsl-320b-d1 out-of-bounds write | 9.8v3.1 | 40.1% | 2021-04-07 | |
| CVE-2021-21641 | CSRF vulnerability in Jenkins Promoted Builds Plugin | 4.3v3.1 | 1.2% | 2021-04-07 | Fix |
| CVE-2021-21640 | View name validation bypass in Jenkins | 4.3v3.1 | 1.9% | 2021-04-07 | Fix |
| CVE-2021-21639 | Lack of type validation in agent related REST API in Jenkins | 4.3v3.1 | 2.7% | 2021-04-07 | Fix |
| CVE-2021-21425 | getgrav grav-plugin-admin unauthenticated arbitrary YAML Write/Update leads to code execution | 9.3CNA v3.1 | 80.6% | 2021-04-07 | MetasploitExploit code |
| CVE-2021-20692 | EikiSoft Archive collectively operation utility path traversal | 7.1v3.1 | 1.0% | 2021-04-07 | Fix |
| CVE-2021-20691 | WonderLink Yomi-Search cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-20690 | WonderLink Yomi-Search cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-20689 | WonderLink Yomi-Search cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-20688 | GoPlace! Click Ranker cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-20687 | daifukuya.com Kagemai cross-site request forgery | 8.8v3.1 | 0.6% | 2021-04-07 | |
| CVE-2021-20686 | daifukuya.com Kagemai cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-20685 | daifukuya.com Kagemai cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-20684 | CGI Script Market MagazinegerZ cross-site scripting | 6.1v3.1 | 0.8% | 2021-04-07 | |
| CVE-2021-1892 | Qualcomm Snapdragon improper input validation in WLAN | 8.4CNA v3.1 | 0.2% | 2021-04-07 | Fix |
| CVE-2021-30164 | Redmine Issues API vulnerability | 9.8v3.1 | 1.3% | 2021-04-06 | Fix |
| CVE-2021-30163 | Redmine issue journal vulnerability | 7.5v3.1 | 1.2% | 2021-04-06 | Fix |
| CVE-2021-30162 | An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control on specific content providers. The LG ID is LVE-SMP-210003 (April 2021). | 7.1v3.1 | 0.1% | 2021-04-06 | |
| CVE-2021-30161 | An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 (April 2021). | 5.5v3.1 | 0.1% | 2021-04-06 | |
| CVE-2021-30158 | mediawiki improper authentication | 5.3v3.1 | 1.7% | 2021-04-06 | Fix |
| CVE-2021-30157 | mediawiki cross-site scripting | 6.1v3.1 | 1.4% | 2021-04-06 | Fix |
| CVE-2021-30154 | mediawiki cross-site scripting | 6.1v3.1 | 1.3% | 2021-04-06 | Fix |
| CVE-2021-30151 | Cross-site scripting in Sidekiq | 6.1v3.1 | 4.2% | 2021-04-06 | NucleiFix |
| CVE-2021-30150 | Ocproducts Composr cross-site scripting | 6.1v3.1 | 2.8% | 2021-04-06 | Exploit code |
| CVE-2021-30149 | Ocproducts Composr unrestricted file upload | 9.8v3.1 | 10.1% | 2021-04-06 | Exploit code |
| CVE-2021-30146 | Seafile cross-site scripting | 5.4v3.1 | 0.9% | 2021-04-06 | Exploit code |
| CVE-2021-30144 | glpi-project DashBoard forced browsing | 4.3v3.1 | 0.8% | 2021-04-06 | Fix |
| CVE-2021-30140 | LiquidFiles cross-site scripting | 5.4v3.1 | 1.4% | 2021-04-06 | Fix |
| CVE-2021-30130 | Improper certificate validation in phpseclib | 7.5v3.1 | 1.1% | 2021-04-06 | Fix |
| CVE-2021-30046 | Vigra Computer Vision Library improper exception handling | 6.5v3.1 | 1.0% | 2021-04-06 | |
| CVE-2021-30045 | SerenityOS buffer overflow | 9.1v3.1 | 1.8% | 2021-04-06 | |
| CVE-2021-29424 | Fedora incorrect type conversion | 7.5v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-29136 | Improper input validation in Umoci | 5.5v3.1 | 0.3% | 2021-04-06 | Fix |
| CVE-2021-28874 | SerenityOS buffer overflow | 7.8v3.1 | 1.0% | 2021-04-06 | |
| CVE-2021-28688 | Linux kernel improper initialization | 6.5v3.1 | 0.3% | 2021-04-06 | Fix |
| CVE-2021-28658 | Directory traversal in Django | 5.3v3.1 | 3.9% | 2021-04-06 | Fix |
| CVE-2021-28209 | ASUS BMC's firmware: Path traversal Delete video file function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28208 | ASUS BMC's firmware: Path traversal Get video file function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28207 | ASUS BMC's firmware: Path traversal Get Help file function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28206 | ASUS BMC's firmware: Path traversal Record video file function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28205 | ASUS BMC's firmware: Path traversal Delete SOL video file function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28204 | ASUS BMC's firmware: Command injection Modify user’s information function | 7.2v3.1 | 2.0% | 2021-04-06 | Fix |
| CVE-2021-28203 | ASUS BMC's firmware: Command injection Web Set Media Image function | 7.2v3.1 | 2.0% | 2021-04-06 | Fix |
| CVE-2021-28202 | ASUS BMC's firmware: Buffer overflow service configuration-2 function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28201 | ASUS BMC's firmware: Buffer overflow service configuration-1 function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28200 | ASUS BMC's firmware: Buffer overflow CD media configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28199 | ASUS BMC's firmware: Buffer overflow Modify user’s information function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28198 | ASUS BMC's firmware: Buffer overflow firmware protocol configuration | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28197 | ASUS BMC's firmware: Buffer overflow Active Directory configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28196 | ASUS BMC's firmware: Buffer overflow Generate SSL certificate function | 4.9v3.1 | 1.2% | 2021-04-06 | Fix |
| CVE-2021-28195 | ASUS BMC's firmware: Buffer overflow Radius configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28194 | ASUS BMC's firmware: Buffer overflow Remote image configuration setting | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28193 | ASUS BMC's firmware: Buffer overflow SMTP configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28192 | ASUS BMC's firmware: Buffer overflow Remote video storage function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28191 | ASUS BMC's firmware: Buffer overflow firmware update function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28190 | ASUS BMC's firmware: Buffer overflow Generate new certificate function | 4.9v3.1 | 1.2% | 2021-04-06 | Fix |
| CVE-2021-28189 | ASUS BMC's firmware: Buffer overflow SMTP configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28188 | ASUS BMC's firmware: Buffer overflow Modify user’s information function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28187 | ASUS BMC's firmware: Buffer overflow Generate new SSL certificate | 4.9v3.1 | 1.2% | 2021-04-06 | Fix |
| CVE-2021-28186 | ASUS BMC's firmware: Buffer overflow ActiveX configuration-2 acquisition | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28185 | ASUS BMC's firmware: Buffer overflow ActiveX configuration-1 acquisition | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28184 | ASUS BMC's firmware: Buffer overflow Active Directory configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28183 | ASUS BMC's firmware: Buffer overflow Web License configuration setting | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28182 | ASUS BMC's firmware: Buffer overflow Web service configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28181 | ASUS BMC's firmware: Buffer overflow Remote video configuration setting | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28180 | ASUS BMC's firmware: Buffer overflow Audit log configuration setting | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28179 | ASUS BMC's firmware: Buffer overflow Media support configuration setting | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28178 | ASUS BMC's firmware: Buffer overflow UEFI configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28177 | ASUS BMC's firmware: Buffer overflow LDAP configuration function | 4.9v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28176 | ASUS BMC's firmware: Buffer overflow DNS configuration function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28175 | ASUS BMC's firmware: Buffer overflow Radius configuration function | 4.9v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-28173 | Vangene deltaFlow E-platform arbitrary file upload | 9.8v3.1 | 1.6% | 2021-04-06 | Fix |
| CVE-2021-28172 | Vangene deltaFlow E-platform path traversal | 7.5v3.1 | 1.8% | 2021-04-06 | Fix |
| CVE-2021-28171 | Vangene deltaFlow E-platform broken authentication | 9.8v3.1 | 1.2% | 2021-04-06 | Fix |
| CVE-2021-28142 | Citsmart SQL injection | 8.8v3.1 | 5.8% | 2021-04-06 | Exploit codeFix |
| CVE-2021-28075 | Ikuai8 Ikuaios arbitrary file read | 7.5v3.1 | 1.0% | 2021-04-06 | |
| CVE-2021-27900 | Proofpoint Insider Threat Management missing authorization | 8.1v3.1 | 2.5% | 2021-04-06 | Fix |
| CVE-2021-27899 | Proofpoint Insider Threat Management improper certificate validation | 7.4v3.1 | 0.6% | 2021-04-06 | Fix |
| CVE-2021-27698 | RIOT-OS RIOT buffer overflow | 9.8v3.1 | 1.2% | 2021-04-06 | |
| CVE-2021-27697 | RIOT-OS RIOT buffer overflow | 9.8v3.1 | 1.3% | 2021-04-06 | |
| CVE-2021-27357 | RIOT-OS RIOT buffer overflow | 9.8v3.1 | 1.2% | 2021-04-06 | |
| CVE-2021-27343 | SerenityOS buffer overflow | 7.5v3.1 | 1.7% | 2021-04-06 | |
| CVE-2021-26833 | Timelybills file or on Disk cleartext storage of sensitive information | 5.9v3.1 | 1.0% | 2021-04-06 | |
| CVE-2021-25692 | Teradici PCoIP Connection Manager and Security Gateway cleartext storage of sensitive information | 4.6v3.1 | 0.2% | 2021-04-06 | Fix |
| CVE-2021-24027 | Facebook WhatsApp Business sensitive information in cache | 7.5v3.1 | 3.8% | 2021-04-06 | Exploit codeFix |
| CVE-2021-24026 | Facebook WhatsApp Business out-of-bounds write | 9.8v3.1 | 1.4% | 2021-04-06 | Fix |
| CVE-2021-22158 | Proofpoint Insider Threat Management XML external entity injection | 7.2v3.1 | 0.6% | 2021-04-06 | Fix |
| CVE-2021-22157 | Proofpoint Insider Threat Management cross-site scripting | 6.1v3.1 | 1.9% | 2021-04-06 | Fix |
| CVE-2021-21423 | Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen | 6.8CNA v3.1 | 1.4% | 2021-04-06 | Exploit codeFix |
| CVE-2021-21404 | syncthing crash due to malformed relay protocol message | 7.5CNA v3.1 | 2.0% | 2021-04-06 | Fix |
| CVE-2021-20334 | Local privilege escalation in MongoDB Compass for Windows | 4.8CNA v3.1 | 0.2% | 2021-04-06 | Fix |
| CVE-2021-30141 | Friendica memory leak | 7.5v3.1 | 1.5% | 2021-04-05 | |
| CVE-2021-30109 | Cross-site scripting in Froala Editor | 6.1NVD v3.1 | 1.2% | 2021-04-05 | |
| CVE-2021-30058 | eng KNOWAGE cross-site scripting | 6.1v3.1 | 1.0% | 2021-04-05 | |
| CVE-2021-30057 | eng KNOWAGE stored HTML injection | 4.8v3.1 | 0.7% | 2021-04-05 | |
| CVE-2021-30056 | eng KNOWAGE cross-site scripting | 5.4v3.1 | 0.6% | 2021-04-05 | |
| CVE-2021-30055 | eng KNOWAGE SQL injection | 8.8v3.1 | 1.6% | 2021-04-05 | |
| CVE-2021-29996 | MarkText cross-site scripting | 9.6v3.1 | 2.8% | 2021-04-05 | |
| CVE-2021-29261 | Svelte arbitrary code execution | 7.8v3.1 | 1.2% | 2021-04-05 | Fix |
| CVE-2021-28832 | vim arbitrary code execution | 7.8v3.1 | 1.2% | 2021-04-05 | |
| CVE-2021-24212 | WooCommerce Help Scout WordPress plugin unauthenticated arbitrary file upload leading to RCE | 9.8NVD v3.1 | 7.9% | 2021-04-05 | NucleiFix |
| CVE-2021-24211 | WordPress Related Posts plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-04-05 | |
| CVE-2021-24210 | PhastPress WordPress plugin open redirect | 6.1NVD v3.1 | 3.1% | 2021-04-05 | NucleiFix |
| CVE-2021-24209 | WP Super Cache WordPress plugin authenticated remote code execution (RCE) | 7.2NVD v3.1 | 27.7% | 2021-04-05 | Fix |
| CVE-2021-24208 | WP Page Builder WordPress plugin Multiple stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24207 | Themeum WP Page Builder incorrect authorization | 4.3NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24206 | Elementor WordPress plugin authenticated stored cross-site scripting (XSS) in Image Box widget | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24205 | Elementor WordPress plugin authenticated stored cross-site scripting (XSS) in Icon Box widget | 5.4NVD v3.1 | 0.8% | 2021-04-05 | Fix |
| CVE-2021-24204 | Elementor WordPress plugin authenticated stored cross-site scripting (XSS) in Accordion widget | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24203 | Elementor WordPress plugin authenticated stored cross-site scripting (XSS) in Divider widget | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24202 | Elementor WordPress plugin authenticated stored cross-site scripting (XSS) in Heading widget | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24201 | Elementor WordPress plugin authenticated stored cross-site scripting (XSS) in Column Element | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24196 | Social Slider Widget WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24187 | SEO Redirection WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-04-05 | Fix |
| CVE-2021-24186 | Tutor LMS WordPress plugin SQL injection via tutor_answering_quiz_question/get_answer_by_id | 6.5NVD v3.1 | 1.3% | 2021-04-05 | Fix |
| CVE-2021-24185 | Tutor LMS WordPress plugin SQL injection via tutor_place_rating | 6.5NVD v3.1 | 1.3% | 2021-04-05 | Fix |
| CVE-2021-24184 | Tutor LMS WordPress plugin Unprotected AJAX including privilege escalation | 8.8NVD v3.1 | 1.4% | 2021-04-05 | Fix |
| CVE-2021-24183 | Tutor LMS WordPress plugin SQL injection via tutor_quiz_builder_get_question_form | 6.5NVD v3.1 | 1.7% | 2021-04-05 | Fix |
| CVE-2021-24182 | Tutor LMS WordPress plugin SQL injection via tutor_quiz_builder_get_answers_by_question | 6.5NVD v3.1 | 1.7% | 2021-04-05 | Fix |
| CVE-2021-24181 | Tutor LMS WordPress plugin SQL injection via tutor_mark_answer_as_correct | 6.5NVD v3.1 | 1.3% | 2021-04-05 | Fix |
| CVE-2021-24180 | Related Posts for WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-04-05 | Fix |
| CVE-2021-24177 | WP File Manager WordPress plugin reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.9% | 2021-04-05 | Fix |
| CVE-2021-24176 | JH 404 Logger WordPress plugin unauthenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 2.0% | 2021-04-05 | Nuclei |
| CVE-2021-24175 | The Plus Addons for Elementor Page Builder WordPress plugin authentication bypass | 9.8NVD v3.1 | 14.5% | 2021-04-05 | NucleiFix |
| CVE-2021-24174 | Database Backups WordPress plugin CSRF to Backup download | 8.1NVD v3.1 | 3.2% | 2021-04-05 | Exploit code |
| CVE-2021-24173 | VM Backups WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2021-04-05 | |
| CVE-2021-24172 | VM Backups WordPress plugin CSRF to Database Backup download | 4.3NVD v3.1 | 0.4% | 2021-04-05 | |
| CVE-2021-24171 | WooCommerce Upload Files WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 1.9% | 2021-04-05 | Fix |
| CVE-2021-24170 | User Profile Picture WordPress plugin sensitive information disclosure | 7.5NVD v3.1 | 4.8% | 2021-04-05 | NucleiFix |
| CVE-2021-24169 | Advanced Order Export For WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 10.3% | 2021-04-05 | NucleiExploit codeFix |
| CVE-2021-24168 | Easy Contact Form Pro WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-04-05 | Fix |
| CVE-2021-24167 | Web-Stat WordPress plugin API key disclosure | 7.5NVD v3.1 | 1.4% | 2021-04-05 | Fix |
| CVE-2021-24166 | Ninja Forms WordPress plugin CSRF to OAuth service Disconnection | 5.4NVD v3.1 | 0.5% | 2021-04-05 | Fix |
| CVE-2021-24165 | Ninja Forms WordPress plugin Administrator open redirect | 6.1NVD v3.1 | 1.6% | 2021-04-05 | NucleiFix |
| CVE-2021-24164 | Ninja Forms WordPress plugin authenticated OAuth Connection key disclosure | 4.3NVD v3.1 | 0.9% | 2021-04-05 | Fix |
| CVE-2021-24163 | Ninja Forms WordPress plugin SendWP plugin installation and client Secret key disclosure | 8.8NVD v3.1 | 1.4% | 2021-04-05 | Fix |
| CVE-2021-24162 | Responsive Menu WordPress plugin CSRF to settings update | 8.8NVD v3.1 | 0.8% | 2021-04-05 | Fix |
| CVE-2021-24161 | Responsive Menu WordPress plugin CSRF to arbitrary file upload | 8.8NVD v3.1 | 1.2% | 2021-04-05 | Fix |
| CVE-2021-24160 | Responsive Menu - authenticated arbitrary file upload | 8.8NVD v3.1 | 8.2% | 2021-04-05 | Fix |
| CVE-2021-24159 | Contact Form 7 Style WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8NVD v3.1 | 0.6% | 2021-04-05 | |
| CVE-2021-24158 | Orbit Fox by ThemeIsle WordPress plugin authenticated privilege escalation | 6.5NVD v3.1 | 0.9% | 2021-04-05 | Fix |
| CVE-2021-24157 | Orbit Fox by ThemeIsle WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24156 | Testimonial Rotator WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-04-05 | |
| CVE-2021-24155 | Backup Guard WordPress plugin authenticated arbitrary file upload | 7.2NVD v3.1 | 84.1% | 2021-04-05 | NucleiMetasploitExploit codeFix |
| CVE-2021-24154 | Theme Editor WordPress plugin authenticated arbitrary file download | 4.9NVD v3.1 | 1.1% | 2021-04-05 | Fix |
| CVE-2021-24153 | Yoast SEO WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 1.1% | 2021-04-05 | Fix |
| CVE-2021-24152 | Popup Builder WordPress plugin authenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.7% | 2021-04-05 | Fix |
| CVE-2021-24150 | Like Button Rating WordPress plugin unauthenticated Full-read SSRF | 7.5NVD v3.1 | 4.3% | 2021-04-05 | NucleiFix |
| CVE-2021-20308 | htmldoc integer overflow | 9.8NVD v3.1 | 2.5% | 2021-04-05 | Fix |
| CVE-2021-20307 | libpano13 panoFileOutputNamesCreate format string | 9.8NVD v3.1 | 1.9% | 2021-04-05 | Fix |
| CVE-2021-20305 | nettle weak cryptographic algorithm | 8.1NVD v3.1 | 1.7% | 2021-04-05 | Fix |
| CVE-2021-30127 | TerraMaster F2-210 UPnP configuration vulnerability | 7.3v3.1 | 0.9% | 2021-04-03 | |
| CVE-2021-30126 | Lightmeter ControlCenter settings endpoint vulnerability | 6.5v3.1 | 0.7% | 2021-04-02 | Fix |
| CVE-2021-30125 | Jamf cross-site scripting | 6.1v3.1 | 0.6% | 2021-04-02 | Fix |
| CVE-2021-30074 | Docsify vulnerable to cross-site scripting due to mishandled encoding | 6.1v3.1 | 0.8% | 2021-04-02 | Fix |
| CVE-2021-30072 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.4% | 2021-04-02 | Fix |
| CVE-2021-30004 | w1.fi wpa_supplicant improper input validation | 5.3v3.1 | 1.7% | 2021-04-02 | Fix |
| CVE-2021-30003 | Nokia G-120w-f cross-site scripting | 4.8v3.1 | 0.6% | 2021-04-02 | |
| CVE-2021-30002 | Linux kernel memory leak | 6.2v3.1 | 0.4% | 2021-04-02 | Fix |
| CVE-2021-30000 | Latrix SQL injection | 9.8v3.1 | 2.1% | 2021-04-02 | |
| CVE-2021-29661 | Softing OPC Toolbox cross-site scripting | 5.4v3.1 | 0.6% | 2021-04-02 | |
| CVE-2021-29660 | Softing OPC Toolbox en/cfg_setpwd.html in Softing AG cross-site request forgery | 8.8v3.1 | 0.6% | 2021-04-02 | |
| CVE-2021-29652 | Pomerium_signature is not verified in middleware in github.com/pomerium/pomerium | 6.1v3.1 | 0.7% | 2021-04-02 | Fix |
| CVE-2021-29651 | pomerium JWT leak via open redirect in Programmatic access | 6.1v3.1 | 0.7% | 2021-04-02 | Fix |
| CVE-2021-29012 | Dmasoftlab Dma RADIUS Manager improper authentication | 9.8v3.1 | 3.2% | 2021-04-02 | KCV |
| CVE-2021-29011 | Dmasoftlab Dma RADIUS Manager cross-site scripting | 6.1v3.1 | 1.4% | 2021-04-02 | KCV |
| CVE-2021-28941 | Magpierss server-side request forgery | 5.3v3.1 | 1.1% | 2021-04-02 | |
| CVE-2021-28940 | Magpierss arbitrary command execution | 9.8v3.1 | 3.3% | 2021-04-02 | |
| CVE-2021-28124 | Cohesity Dataplatform man-in-the-middle | 5.9v3.1 | 1.0% | 2021-04-02 | |
| CVE-2021-28123 | Cohesity Dataplatform insecure default initialization | 9.8v3.1 | 1.4% | 2021-04-02 | |
| CVE-2021-28113 | Okta Access Gateway cookieDomain and relayDomain parameters command injection | 6.7v3.1 | 22.3% | 2021-04-02 | Fix |
| CVE-2021-27973 | Piwigo SQL injection | 7.2v3.1 | 11.0% | 2021-04-02 | Exploit code |
| CVE-2021-25894 | Magnolia CMS cross-site scripting | 6.1v3.1 | 1.1% | 2021-04-02 | |
| CVE-2021-25893 | Magnolia CMS cross-site scripting | 5.4v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-22865 | GitHub Enterprise Server REST API improper access control | 6.5v3.1 | 1.3% | 2021-04-02 | Fix |
| CVE-2021-22696 | Apache CXF OAuth 2 authorization service vulnerable to DDos attacks | 7.5v3.1 | 6.6% | 2021-04-02 | Fix |
| CVE-2021-22203 | GitLab arbitrary file read | 7.5CNA v3.1 | 1.4% | 2021-04-02 | Fix |
| CVE-2021-22202 | GitLab cross-site request forgery | 2.4CNA v3.1 | 0.5% | 2021-04-02 | Fix |
| CVE-2021-22201 | GitLab project import vulnerability | 9.6CNA v3.1 | 3.1% | 2021-04-02 | Exploit codeFix |
| CVE-2021-22200 | GitLab project fork vulnerability | 5.9CNA v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-22198 | GitLab incident metric images vulnerability | 4.3CNA v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-22197 | GitLab infinite loop | 3.5CNA v3.1 | 0.8% | 2021-04-02 | Fix |
| CVE-2021-22196 | GitLab cross-site scripting | 6.3CNA v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-21533 | Dell Wyse Management Suite denial of service | 4.3CNA v3.1 | 0.8% | 2021-04-02 | Fix |
| CVE-2021-21532 | Dell Wyse Proprietary OS (ThinOS) configuration weakness | 5.0CNA v3.1 | 0.2% | 2021-04-02 | Fix |
| CVE-2021-21529 | DellEMC System Update denial of service | 3.8CNA v3.1 | 0.2% | 2021-04-02 | Fix |
| CVE-2021-21400 | wireapp wire-webapp entering code in App Lock modal sends input to conversation | 7.1CNA v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-3374 | Rstudio Shiny Server path traversal | 5.3v3.1 | 14.3% | 2021-04-02 | NucleiFix |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit cross-site scripting (XSS) | 6.1v3.1 | 7.1% | 2021-04-02 | KEVEmerging ThreatsFix |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit remote code execution | 9.8v3.1 | 7.0% | 2021-04-02 | KEVFix |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit remote code execution | 9.8v3.1 | 7.7% | 2021-04-02 | KEVFix |
| CVE-2021-1844 | Apple macOS out-of-bounds write | 8.8v3.1 | 2.4% | 2021-04-02 | Fix |
| CVE-2021-1818 | Apple macOS logic flaw | 9.8v3.1 | 2.9% | 2021-04-02 | Fix |
| CVE-2021-1806 | Apple macOS race condition | 7.0v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1805 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-1803 | Apple macOS iCloud document permissions vulnerability | 3.3v3.1 | 0.6% | 2021-04-02 | Fix |
| CVE-2021-1802 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2021-04-02 | Fix |
| CVE-2021-1801 | Apple iOS and iPadOS iframe sandboxing vulnerability | 6.5v3.1 | 1.5% | 2021-04-02 | Fix |
| CVE-2021-1800 | Apple Xcode on-demand resources vulnerability | 5.5v3.1 | 0.6% | 2021-04-02 | Fix |
| CVE-2021-1799 | Apple Safari port validation vulnerability | 6.5v3.1 | 1.8% | 2021-04-02 | Fix |
| CVE-2021-1797 | Apple macOS arbitrary file read | 5.5v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1796 | Apple iOS and iPadOS out-of-bounds write | 9.8v3.1 | 2.0% | 2021-04-02 | Fix |
| CVE-2021-1795 | Apple iOS and iPadOS out-of-bounds write | 9.8v3.1 | 2.1% | 2021-04-02 | Fix |
| CVE-2021-1794 | Apple iOS and iPadOS out-of-bounds read | 9.8v3.1 | 2.1% | 2021-04-02 | Fix |
| CVE-2021-1793 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1792 | Apple macOS out-of-bounds read | 8.8v3.1 | 1.9% | 2021-04-02 | Fix |
| CVE-2021-1791 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.2% | 2021-04-02 | Fix |
| CVE-2021-1790 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1789 | Apple Multiple Products type confusion | 8.8v3.1 | 14.5% | 2021-04-02 | KEVKCVFix |
| CVE-2021-1788 | Apple macOS use-after-free | 8.8v3.1 | 1.7% | 2021-04-02 | Fix |
| CVE-2021-1787 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1786 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1785 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1783 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1782 | Apple Multiple Products race condition | 7.0v3.1 | 2.2% | 2021-04-02 | KEVExploit codeFix |
| CVE-2021-1781 | Apple macOS information disclosure | 5.5v3.1 | 0.7% | 2021-04-02 | Fix |
| CVE-2021-1780 | Apple iOS and iPadOS improper initialization | 4.4v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1779 | Apple macOS kext loading was addressed logic flaw | 7.8v3.1 | 1.2% | 2021-04-02 | Fix |
| CVE-2021-1778 | Apple macOS curl out-of-bounds read | 5.5v3.1 | 0.8% | 2021-04-02 | Fix |
| CVE-2021-1777 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1776 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-1775 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1774 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1773 | Apple macOS logic flaw | 5.5v3.1 | 0.8% | 2021-04-02 | Fix |
| CVE-2021-1772 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.7% | 2021-04-02 | Fix |
| CVE-2021-1771 | Apple macOS iMessage group state management vulnerability | 3.3v3.1 | 0.5% | 2021-04-02 | Fix |
| CVE-2021-1769 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1768 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1767 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1766 | Apple macOS denial of service | 5.5v3.1 | 0.8% | 2021-04-02 | Fix |
| CVE-2021-1765 | Apple macOS iframe sandboxing vulnerability | 6.5v3.1 | 1.4% | 2021-04-02 | Fix |
| CVE-2021-1764 | Apple macOS use-after-free | 7.5v3.1 | 2.0% | 2021-04-02 | Fix |
| CVE-2021-1763 | Apple macOS buffer overflow | 7.8v3.1 | 1.3% | 2021-04-02 | Fix |
| CVE-2021-1761 | Apple macOS denial of service | 7.5v3.1 | 2.1% | 2021-04-02 | Fix |
| CVE-2021-1760 | Apple macOS out-of-bounds write | 5.5v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1759 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.3% | 2021-04-02 | Fix |
| CVE-2021-1758 | Apple macOS out-of-bounds read | 7.8v3.1 | 2.6% | 2021-04-02 | Fix |
| CVE-2021-1757 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1756 | Apple iOS and iPadOS lock screen information disclosure | 2.4v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1755 | Apple macOS missing authorization | 2.4v3.1 | 0.3% | 2021-04-02 | Fix |
| CVE-2021-1754 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1753 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1751 | Apple macOS logic flaw | 7.8v3.1 | 0.4% | 2021-04-02 | Fix |
| CVE-2021-1750 | Apple macOS improper privilege management | 7.8v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-1748 | Apple watchOS code execution | 8.8NVD v3.1 | 2.7% | 2021-04-02 | Fix |
| CVE-2021-1747 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1746 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-1745 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-1744 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.2% | 2021-04-02 | Fix |
| CVE-2021-1743 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.1% | 2021-04-02 | Fix |
| CVE-2021-1742 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1741 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.0% | 2021-04-02 | Fix |
| CVE-2021-1738 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1737 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-1736 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.9% | 2021-04-02 | Fix |
| CVE-2021-29942 | Out-of-bounds write in Reorder | 7.3v3.1 | 0.9% | 2021-04-01 | Fix |
| CVE-2021-29941 | Out-of-bounds write in Reorder | 7.3v3.1 | 0.9% | 2021-04-01 | Fix |
| CVE-2021-29940 | Double free in Through | 9.8v3.1 | 1.3% | 2021-04-01 | |
| CVE-2021-29939 | Out-of-bounds write in Stackvector | 7.3v3.1 | 1.0% | 2021-04-01 | Fix |
| CVE-2021-29938 | Double free in Slice-deque | 7.5v3.1 | 1.1% | 2021-04-01 | |
| CVE-2021-29937 | Telemetry uninitialized resource use | 9.8v3.1 | 1.4% | 2021-04-01 | Fix |
| CVE-2021-29936 | Adtensor uninitialized resource use | 9.8v3.1 | 1.3% | 2021-04-01 | |
| CVE-2021-29935 | Rocket use-after-free | 7.3v3.1 | 1.0% | 2021-04-01 | Fix |
| CVE-2021-29934 | Uu Od out-of-bounds read in uu_od | 7.3v3.1 | 0.9% | 2021-04-01 | Fix |
| CVE-2021-29933 | INSERT Many double free in insert_many | 7.5v3.1 | 1.1% | 2021-04-01 | |
| CVE-2021-29932 | parse-duration uncontrolled resource consumption in parse_duration | 7.5v3.1 | 1.0% | 2021-04-01 | Fix |
| CVE-2021-29931 | Out-of-bounds write in Arenavec | 7.5v3.1 | 1.0% | 2021-04-01 | Fix |
| CVE-2021-29930 | Out-of-bounds write in Arenavec | 7.5v3.1 | 1.1% | 2021-04-01 | |
| CVE-2021-29929 | Endian Trait double free in endian_trait | 7.5v3.1 | 1.1% | 2021-04-01 | |
| CVE-2021-29421 | Improper restriction of XML external entity reference in Pikepdf | 7.5v3.1 | 1.7% | 2021-04-01 | Fix |
| CVE-2021-29251 | BTCPay Server user registration policy vulnerability | 6.5v3.1 | 0.8% | 2021-04-01 | Fix |
| CVE-2021-29083 | Synology DiskStation Manager (DSM) OS command in SYNO.Core.Network.PPPoE improper neutralization | 7.2CNA v3.1 | 2.6% | 2021-04-01 | Fix |
| CVE-2021-28970 | FireEye Ex 3500 SQL injection | 6.5v3.1 | 1.3% | 2021-04-01 | |
| CVE-2021-28969 | FireEye Ex 3500 SQL injection | 6.5v3.1 | 1.3% | 2021-04-01 | |
| CVE-2021-28918 | Improper parsing of octal bytes in Netmask | 9.1v3.1 | 16.4% | 2021-04-01 | NucleiFix |
| CVE-2021-28546 | Adobe Acrobat Reader DC missing support for integrity check | 6.5CNA v3.1 | 1.4% | 2021-04-01 | Fix |
| CVE-2021-28545 | Adobe Acrobat Reader DC missing support for integrity check | 8.1CNA v3.1 | 2.3% | 2021-04-01 | Fix |
| CVE-2021-28165 | Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources | 7.5CNA v3.1 | 53.9% | 2021-04-01 | Fix |
| CVE-2021-28164 | Authorization before Parsing and Canonicalization in Jetty | 5.3CNA v3.1 | 82.4% | 2021-04-01 | NucleiMetasploitExploit codeFix |
| CVE-2021-28163 | The Eclipse Foundation Eclipse Jetty information disclosure | 2.7CNA v3.1 | 4.2% | 2021-04-01 | Fix |
| CVE-2021-28047 | Devolutions Remote Desktop Manager Administrative Reports cross-site scripting | 5.4v3.1 | 1.1% | 2021-04-01 | Fix |
| CVE-2021-27653 | Pegasystems Pega Infinity information disclosure | 6.6CNA v3.1 | 1.1% | 2021-04-01 | Fix |
| CVE-2021-26718 | Kaspersky Internet Security incorrect authorization | 5.5NVD v3.1 | 0.2% | 2021-04-01 | |
| CVE-2021-26581 | HPE Superdome Flex Server denial of service | 6.5v3.1 | 0.8% | 2021-04-01 | Fix |
| CVE-2021-26580 | iLO Amplifier Pack cross-site scripting | 6.1v3.1 | 0.6% | 2021-04-01 | Fix |
| CVE-2021-26072 | Atlassian Confluence Server server-side request forgery | 4.3v3.1 | 41.2% | 2021-04-01 | NucleiEmerging ThreatsFix |
| CVE-2021-26071 | Atlassian Jira Server cross-site request forgery | 3.5v3.1 | 0.5% | 2021-04-01 | Fix |
| CVE-2021-25924 | gocd cross-site request forgery | 8.8v3.1 | 0.8% | 2021-04-01 | |
| CVE-2021-23925 | Devolutions Server cross-site scripting | 6.1v3.1 | 0.6% | 2021-04-01 | Fix |
| CVE-2021-23924 | Devolutions Server sensitive information in log files | 7.5v3.1 | 1.0% | 2021-04-01 | Fix |
| CVE-2021-23923 | Devolutions Server improper authentication | 8.1v3.1 | 0.8% | 2021-04-01 | Fix |
| CVE-2021-23922 | Devolutions Remote Desktop Manager cross-site scripting | 5.4v3.1 | 1.1% | 2021-04-01 | Fix |
| CVE-2021-23921 | Devolutions Server missing authorization | 9.1v3.1 | 1.0% | 2021-04-01 | Fix |
| CVE-2021-22890 | https://github.com/curl/curl man-in-the-middle | 3.7NVD v3.1 | 3.1% | 2021-04-01 | Fix |
| CVE-2021-22876 | https://github.com/curl/curl personal information exposure | 5.3NVD v3.1 | 5.3% | 2021-04-01 | Fix |
| CVE-2021-22195 | gitlab-vscode-extension client side code execution | 8.6CNA v3.1 | 1.1% | 2021-04-01 | Fix |
| CVE-2021-22177 | GitLab Potential denial of service | 4.3CNA v3.1 | 1.2% | 2021-04-01 | Fix |
| CVE-2021-21982 | VMware Carbon Black Cloud Workload appliance improper authentication | 9.1v3.1 | 1.4% | 2021-04-01 | Fix |
| CVE-2021-21421 | creharmony node-etsy-client ApiKey secret could be revelated on network issue | 8.1CNA v3.1 | 1.1% | 2021-04-01 | Fix |
| CVE-2021-21420 | Vulnerability in Stripe for Visual Studio Code | 7.5CNA v3.1 | 0.6% | 2021-04-01 | Fix |
| CVE-2021-21416 | ubernostrum django-registration potential sensitive information disclosed in error reports | 3.7CNA v3.1 | 0.4% | 2021-04-01 | Fix |
| CVE-2021-20296 | OpenEXR null pointer dereference | 5.3NVD v3.1 | 1.7% | 2021-04-01 | Fix |
| CVE-2021-20291 | Improper locking in github.com/containers/Storage | 6.5NVD v3.1 | 1.6% | 2021-04-01 | Fix |
| CVE-2021-20235 | zeromq buffer overflow | 8.1NVD v3.1 | 43.9% | 2021-04-01 | Fix |
| CVE-2021-20234 | zeromq An resource exhaustion | 6.5NVD v3.1 | 1.1% | 2021-04-01 | Fix |
| CVE-2021-20078 | Manage Engine OpManager path traversal | 9.1NVD v3.1 | 60.4% | 2021-04-01 | |
| CVE-2021-3447 | ansible sensitive information in log files | 5.5v3.1 | 0.3% | 2021-04-01 | Fix |
| CVE-2021-3393 | PostgreSQL An information disclosure | 4.3NVD v3.1 | 1.2% | 2021-04-01 | Fix |