CVE-2021 records published in May 2021
This page lists the 1,050 CVE-2021 records published in May 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 19 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 11611.0% of these records
- Listed in CISA KEV
- 191.8% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 494.7% of these records
- Exploit code
- 474.5% of these records
- Actionable vendor fix
- 93388.9% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in May 2021 have had from about 65 months to about 66 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-33790 | Techreborn Reborncore deserialization of untrusted data | 9.8v3.1 | 2.8% | 2021-05-31 | |
| CVE-2021-33564 | Dragonfly contains remote code execution | 9.8v3.1 | 72.2% | 2021-05-29 | NucleiExploit codeFix |
| CVE-2021-31703 | Frontiersoftware Ichris unrestricted file upload | 9.8v3.1 | 1.2% | 2021-05-29 | |
| CVE-2021-31702 | Frontiersoftware Ichris denial of service | 7.5v3.1 | 1.2% | 2021-05-29 | |
| CVE-2021-30461 | Voipmonitor web UI remote code execution | 9.8v3.1 | 36.6% | 2021-05-29 | NucleiExploit code |
| CVE-2021-33623 | Uncontrolled resource consumption in Trim-newlines | 7.5v3.1 | 2.9% | 2021-05-28 | Fix |
| CVE-2021-33620 | squid-cache squid denial of service | 6.5v3.1 | 79.6% | 2021-05-28 | Fix |
| CVE-2021-33591 | Naver Comic Viewer active debug code | 8.8v3.1 | 1.6% | 2021-05-28 | Fix |
| CVE-2021-33587 | Denial of service in css-what | 7.5v3.1 | 2.3% | 2021-05-28 | Fix |
| CVE-2021-32646 | Dav-Git Dav-Cogs escalation of permissions in roomer | 5.3CNA v3.1 | 0.7% | 2021-05-28 | Fix |
| CVE-2021-32642 | radsecproxy missing input validation in dynamic discovery example scripts | 7.0CNA v3.1 | 1.3% | 2021-05-28 | Fix |
| CVE-2021-32637 | authelia authentication bypassed with malformed request URI | 10.0CNA v3.1 | 1.9% | 2021-05-28 | Fix |
| CVE-2021-32635 | sylabs singularity action commands against Library URIs Ignore Configured Remote endpoint | 6.3CNA v3.1 | 1.4% | 2021-05-28 | Fix |
| CVE-2021-32621 | xwiki-platform script injection without script or programming rights through Gadget titles | 8.8CNA v3.1 | 2.1% | 2021-05-28 | Fix |
| CVE-2021-32620 | xwiki-platform users registered with email verification can self re-activate their disabled accounts | 8.8CNA v3.1 | 1.1% | 2021-05-28 | Fix |
| CVE-2021-32619 | denoland deno static imports inside dynamically imported modules do not adhere to permission checks | 9.8CNA v3.1 | 1.1% | 2021-05-28 | Fix |
| CVE-2021-32616 | Improper neutralization of script-related HTML tags in a web page (basic XSS) in 1CDN | 8.1CNA v3.1 | 0.7% | 2021-05-28 | Fix |
| CVE-2021-32543 | SysJust CTS Web broken authentication | 5.4v3.1 | 0.8% | 2021-05-28 | Fix |
| CVE-2021-32542 | SysJust CTS Web reflected XSS | 6.1v3.1 | 0.7% | 2021-05-28 | Fix |
| CVE-2021-32541 | SysJust CTS Web broken access control | 5.3CNA v3.1 | 1.5% | 2021-05-28 | Fix |
| CVE-2021-32540 | Hundred Plus 101EIP stored XSS-2 | 5.4CNA v3.1 | 0.5% | 2021-05-28 | Fix |
| CVE-2021-32539 | Hundred Plus 101EIP stored XSS-1 | 5.4CNA v3.1 | 0.6% | 2021-05-28 | Fix |
| CVE-2021-29629 | FreeBSD denial of service | 7.5v3.1 | 1.2% | 2021-05-28 | Fix |
| CVE-2021-29628 | FreeBSD incorrect authorization | 7.5v3.1 | 1.2% | 2021-05-28 | Fix |
| CVE-2021-29507 | dlt-daemon could crash if there is special character in dlt.conf | 5.7CNA v3.1 | 0.7% | 2021-05-28 | Fix |
| CVE-2021-29505 | XStream is vulnerable to a remote command execution attack | 7.5CNA v3.1 | 77.2% | 2021-05-28 | NucleiExploit codeFix |
| CVE-2021-29492 | envoyproxy envoy bypass of path matching rules using escaped slash characters | 8.1CNA v3.1 | 66.2% | 2021-05-28 | Fix |
| CVE-2021-27032 | Autodesk Licensing Installer incorrect default permissions | 7.8v3.1 | 0.2% | 2021-05-28 | Fix |
| CVE-2021-22519 | SiteScope arbitrary code execution | 9.8v3.1 | 2.0% | 2021-05-28 | |
| CVE-2021-21734 | ZTE PON MDU devices cleartext storage of sensitive information | 6.5v3.1 | 0.5% | 2021-05-28 | Fix |
| CVE-2021-20292 | kernel use-after-free | 6.7NVD v3.1 | 0.9% | 2021-05-28 | Fix |
| CVE-2021-20278 | Kiali authentication bypass | 6.5v3.1 | 0.8% | 2021-05-28 | Fix |
| CVE-2021-20267 | OpenStack Neutron has Insufficient Verification of IPv6 addresses | 7.1NVD v3.1 | 1.0% | 2021-05-28 | Fix |
| CVE-2021-20240 | gdk-pixbuf integer underflow | 8.8NVD v3.1 | 2.3% | 2021-05-28 | Fix |
| CVE-2021-20239 | kernel untrusted pointer dereference | 3.3NVD v3.1 | 0.3% | 2021-05-28 | Fix |
| CVE-2021-20237 | zeromq An resource exhaustion | 7.5NVD v3.1 | 1.7% | 2021-05-28 | Fix |
| CVE-2021-20236 | zeromq buffer overflow | 9.8NVD v3.1 | 1.6% | 2021-05-28 | Fix |
| CVE-2021-20201 | spice denial of service | 5.3NVD v3.1 | 2.7% | 2021-05-28 | Fix |
| CVE-2021-20195 | Keycloak Self stored cross-site scripting | 9.6v3.1 | 1.2% | 2021-05-28 | Fix |
| CVE-2021-3514 | 389-ds-base null pointer dereference | 6.5v3.1 | 1.2% | 2021-05-28 | Fix |
| CVE-2021-33590 | Labapart Gattlib out-of-bounds read | 9.8v3.1 | 1.5% | 2021-05-27 | |
| CVE-2021-33586 | Inspircd incorrect permission assignment | 4.3v3.1 | 0.9% | 2021-05-27 | Fix |
| CVE-2021-33558 | boa information disclosure | 7.5v3.1 | 12.3% | 2021-05-27 | NucleiExploit codeFix |
| CVE-2021-33408 | Abinitio Control Center local file inclusion | 6.5v3.1 | 0.7% | 2021-05-27 | Fix |
| CVE-2021-33394 | CubeCart session fixation | 5.4v3.1 | 0.7% | 2021-05-27 | |
| CVE-2021-33200 | Linux kernel out-of-bounds write | 7.8v3.1 | 0.4% | 2021-05-27 | Fix |
| CVE-2021-32645 | Open redirect in tenancy | 4.3CNA v3.0 | 1.0% | 2021-05-27 | Fix |
| CVE-2021-32643 | http4s StaticFile.fromUrl can leak presence of a directory | 5.8CNA v3.1 | 1.4% | 2021-05-27 | Fix |
| CVE-2021-32459 | Trend Micro Home Network Security hard-coded credentials | 6.5v3.1 | 1.0% | 2021-05-27 | Fix |
| CVE-2021-32458 | Trend Micro Home Network Security out-of-bounds write | 7.8v3.1 | 0.4% | 2021-05-27 | Fix |
| CVE-2021-31920 | istio incorrectly resolved name or reference | 6.5v3.1 | 1.2% | 2021-05-27 | Fix |
| CVE-2021-31808 | squid-cache squid integer overflow | 6.5v3.1 | 5.5% | 2021-05-27 | Fix |
| CVE-2021-31806 | squid-cache squid denial of service | 6.5v3.1 | 95.8% | 2021-05-27 | Exploit codeFix |
| CVE-2021-31535 | X.Org libX11 buffer overflow | 9.8v3.1 | 10.6% | 2021-05-27 | Fix |
| CVE-2021-31525 | Go golang.org/x/net/HTTP/httpguts vulnerable to uncontrolled recursion | 5.9v3.1 | 3.7% | 2021-05-27 | Fix |
| CVE-2021-31155 | Umask permissions bypass in pleaser | 7.8v3.1 | 0.4% | 2021-05-27 | Fix |
| CVE-2021-31154 | Pleaseedit permissions bypass in pleaser | 7.8v3.1 | 0.5% | 2021-05-27 | Fix |
| CVE-2021-31153 | Please file exposure in pleaser | 3.3v3.1 | 0.4% | 2021-05-27 | Fix |
| CVE-2021-30501 | upx denial of service | 5.5NVD v3.1 | 1.0% | 2021-05-27 | Fix |
| CVE-2021-30500 | upx null pointer dereference | 7.8NVD v3.1 | 1.2% | 2021-05-27 | Fix |
| CVE-2021-30499 | libcaca buffer overflow | 7.8NVD v3.1 | 1.2% | 2021-05-27 | Fix |
| CVE-2021-30465 | Linux Foundation runc race condition | 8.5v3.1 | 10.2% | 2021-05-27 | Fix |
| CVE-2021-28662 | squid-cache squid denial of service | 6.5v3.1 | 71.9% | 2021-05-27 | Fix |
| CVE-2021-28652 | squid-cache squid memory leak | 4.9v3.1 | 4.3% | 2021-05-27 | Fix |
| CVE-2021-28651 | squid-cache squid memory leak | 7.5v3.1 | 7.5% | 2021-05-27 | Fix |
| CVE-2021-27852 | Checkbox Survey deserialization of untrusted data | 9.8v3.1 | 30.3% | 2021-05-27 | KEVFix |
| CVE-2021-27496 | Datakit Software libraries embedded in Luxion KeyShot software untrusted pointer dereference | 7.8v3.1 | 2.0% | 2021-05-27 | Fix |
| CVE-2021-27494 | Datakit Software libraries embedded in Luxion KeyShot software stack-based buffer overflow | 7.8v3.1 | 2.2% | 2021-05-27 | Fix |
| CVE-2021-27492 | Datakit Software libraries embedded in Luxion KeyShot software XML external entity injection | 5.5v3.1 | 1.7% | 2021-05-27 | Fix |
| CVE-2021-27490 | Datakit Software libraries embedded in Luxion KeyShot software out-of-bounds read | 7.8v3.1 | 2.0% | 2021-05-27 | Fix |
| CVE-2021-27488 | Datakit Software libraries embedded in Luxion KeyShot software out-of-bounds write | 7.8v3.1 | 2.0% | 2021-05-27 | Fix |
| CVE-2021-22911 | Rocket.Chat server special element injection | 9.8v3.1 | 95.2% | 2021-05-27 | NucleiExploit code |
| CVE-2021-22909 | EdgeMAX EdgeRouter man-in-the-middle | 7.5v3.1 | 1.3% | 2021-05-27 | Fix |
| CVE-2021-22908 | Pulse Connect Secure Windows File Resource Profiles in buffer overflow | 8.8v3.1 | 69.4% | 2021-05-27 | Fix |
| CVE-2021-22907 | Citrix Workspace App An improper access control | 7.8v3.1 | 0.2% | 2021-05-27 | Fix |
| CVE-2021-22900 | Ivanti Pulse Connect Secure unrestricted file upload | 7.2v3.1 | 14.1% | 2021-05-27 | KEVFix |
| CVE-2021-22899 | Ivanti Pulse Connect Secure command injection | 8.8v3.1 | 22.9% | 2021-05-27 | KEVFix |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite buffer overflow | 8.8v3.1 | 41.3% | 2021-05-27 | KEVFix |
| CVE-2021-22892 | Rocket.Chat server An information disclosure | 7.5v3.1 | 1.9% | 2021-05-27 | |
| CVE-2021-22891 | Citrix ShareFile Storage Zones Controller missing authorization | 9.8v3.1 | 1.1% | 2021-05-27 | Fix |
| CVE-2021-22885 | https://github.com/rails/rails information disclosure through error messages | 7.5v3.1 | 4.2% | 2021-05-27 | Fix |
| CVE-2021-22411 | Huawei NGFW Module some out-of-bounds write | 6.5v3.1 | 0.6% | 2021-05-27 | Fix |
| CVE-2021-22364 | HUAWEI Mate 30 versions denial of service | 5.5v3.1 | 0.2% | 2021-05-27 | Fix |
| CVE-2021-22362 | Huawei CloudEngine 12800 some out-of-bounds write | 5.3v3.1 | 0.7% | 2021-05-27 | Fix |
| CVE-2021-22360 | USG9500 verisions V500R001C60SPC500 resource management error | 4.9v3.1 | 0.6% | 2021-05-27 | Fix |
| CVE-2021-22359 | S5700 verisions V200R005C00SPC500 denial of service | 7.5v3.1 | 0.7% | 2021-05-27 | Fix |
| CVE-2021-22358 | FusionCompute There is an improper input validation | 4.3v3.1 | 0.5% | 2021-05-27 | Fix |
| CVE-2021-22118 | Improper privilege management in Spring Framework | 7.8v3.1 | 0.4% | 2021-05-27 | Fix |
| CVE-2021-20727 | Hendrik Erz Zettlr cross-site scripting | 6.1v3.1 | 1.0% | 2021-05-27 | Fix |
| CVE-2021-20026 | SonicWall NSM On-Prem OS command injection | 8.8v3.1 | 11.6% | 2021-05-27 | Fix |
| CVE-2021-3509 | ceph-dashboard cross-site scripting | 6.1v3.1 | 1.7% | 2021-05-27 | Fix |
| CVE-2021-33506 | 8X8 jitsi-meet incorrect default permissions | 7.5v3.1 | 1.2% | 2021-05-26 | |
| CVE-2021-33470 | PHPGurukul COVID19 Testing Management System SQL injection | 9.8v3.1 | 2.3% | 2021-05-26 | |
| CVE-2021-33469 | PHPGurukul COVID19 Testing Management System cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-26 | |
| CVE-2021-33194 | Go golang.org/x/net/html infinite loop | 7.5v3.1 | 7.3% | 2021-05-26 | Fix |
| CVE-2021-33038 | Exposure of sensitive information to an unauthorized actor in HyperKitty | 7.5v3.1 | 1.9% | 2021-05-26 | Fix |
| CVE-2021-32614 | dmg2img out-of-bounds read | 7.1NVD v3.1 | 0.9% | 2021-05-26 | |
| CVE-2021-32457 | Trend Micro Home Network Security out-of-bounds write | 7.8v3.1 | 0.4% | 2021-05-26 | Fix |
| CVE-2021-31924 | Yubico pam-u2f improper authentication | 6.8v3.1 | 0.3% | 2021-05-26 | Fix |
| CVE-2021-30498 | libcaca out-of-bounds write | 7.8NVD v3.1 | 1.3% | 2021-05-26 | Fix |
| CVE-2021-30472 | podofo stack-based buffer overflow | 7.8NVD v3.1 | 0.8% | 2021-05-26 | |
| CVE-2021-30471 | podofo uncontrolled recursion | 5.5NVD v3.1 | 0.7% | 2021-05-26 | Fix |
| CVE-2021-30470 | podofo uncontrolled recursion | 5.5NVD v3.1 | 0.7% | 2021-05-26 | Fix |
| CVE-2021-30469 | podofo use-after-free | 5.5NVD v3.1 | 0.7% | 2021-05-26 | |
| CVE-2021-29253 | RSA Archer insufficiently protected credentials | 5.5v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-29252 | RSA Archer cross-site scripting | 5.4v3.1 | 0.8% | 2021-05-26 | Fix |
| CVE-2021-28170 | Improper input validation in Jakarta Expression Language | 5.3v3.1 | 2.1% | 2021-05-26 | Fix |
| CVE-2021-27676 | Cross-site scripting in Centreon | 5.4v3.1 | 0.6% | 2021-05-26 | Fix |
| CVE-2021-26034 | Joomla! CMS core CSRF in data download endpoints | 6.5v3.1 | 0.5% | 2021-05-26 | Fix |
| CVE-2021-26033 | Joomla! CMS core CSRF in AJAX reordering endpoint | 6.5v3.1 | 0.5% | 2021-05-26 | Fix |
| CVE-2021-26032 | Joomla! CMS core Adding HTML to the executable block list of MediaHelper::canUpload | 6.1v3.1 | 0.8% | 2021-05-26 | Fix |
| CVE-2021-25945 | Prototype pollution vulnerability in js-extend | 9.8v3.1 | 3.0% | 2021-05-26 | |
| CVE-2021-25643 | Couchbase Server cleartext transmission of sensitive information | 4.9v3.1 | 0.5% | 2021-05-26 | Fix |
| CVE-2021-25217 | ISC DHCP lease file parsing buffer overflow | 7.4CNA v3.1 | 6.1% | 2021-05-26 | Fix |
| CVE-2021-22747 | Triconex Model 3009 MP installed on Tricon improper check for exceptional conditions | 3.9v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22746 | Triconex Model 3009 MP installed on Tricon improper check for exceptional conditions | 3.9v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22745 | Triconex Model 3009 MP installed on Tricon improper check for exceptional conditions | 3.9v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22744 | Triconex Model 3009 MP installed on Tricon improper check for exceptional conditions | 3.9v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22743 | Triconex TCM 4351B installed on Tricon improper check for exceptional conditions | 3.9v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22742 | Triconex Model 3009 MP installed on Tricon improper check for exceptional conditions | 3.9v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22741 | ClearSCADA weak password hash | 6.7v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22740 | homeLYnk and spaceLYnk information disclosure | 6.5v3.1 | 0.8% | 2021-05-26 | Fix |
| CVE-2021-22739 | homeLYnk and spaceLYnk information disclosure | 5.9v3.1 | 0.8% | 2021-05-26 | Fix |
| CVE-2021-22738 | homeLYnk and spaceLYnk weak cryptographic algorithm | 9.8v3.1 | 0.6% | 2021-05-26 | Fix |
| CVE-2021-22737 | homeLYnk and spaceLYnk insufficiently protected credentials | 9.8v3.1 | 1.0% | 2021-05-26 | Fix |
| CVE-2021-22736 | homeLYnk and spaceLYnk path traversal | 7.5v3.1 | 1.1% | 2021-05-26 | Fix |
| CVE-2021-22735 | homeLYnk and spaceLYnk improper signature verification | 7.2v3.1 | 1.0% | 2021-05-26 | Fix |
| CVE-2021-22734 | homeLYnk and spaceLYnk improper signature verification | 7.2v3.1 | 1.0% | 2021-05-26 | Fix |
| CVE-2021-22733 | homeLYnk and spaceLYnk improper privilege management | 7.8v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22732 | homeLYnk and spaceLYnk improper privilege management | 7.8v3.1 | 0.3% | 2021-05-26 | Fix |
| CVE-2021-22731 | Modicon Managed Switch MCSESM* and MCSESP* weak password recovery | 9.8v3.1 | 1.4% | 2021-05-26 | Fix |
| CVE-2021-22705 | Harmony HMI Products Configured by Vijeo Designer or EcoStruxure Machine Expert memory corruption | 7.8v3.1 | 0.2% | 2021-05-26 | Fix |
| CVE-2021-22699 | Modicon M241/M251 logic controllers firmware improper input validation | 7.5v3.1 | 1.0% | 2021-05-26 | Fix |
| CVE-2021-22543 | Improper memory handling in Linux KVM | 7.8NVD v3.1 | 0.7% | 2021-05-26 | Fix |
| CVE-2021-22160 | Apache Pulsar authentication with JWT allows use of “none”-algorithm | 9.8v3.1 | 52.9% | 2021-05-26 | Fix |
| CVE-2021-21986 | VMware vCenter Server and VMware Cloud Foundation missing authentication | 9.8v3.1 | 12.9% | 2021-05-26 | Fix |
| CVE-2021-21985 | VMware vCenter Server improper input validation | 9.8NVD v3.1 | 100.0% | 2021-05-26 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-20492 | IBM WebSphere Application Server XML external entity injection | 6.5CNA v3.0 | 2.1% | 2021-05-26 | Fix |
| CVE-2021-20487 | IBM Power 9 Systems improper signature verification | 8.0CNA v3.0 | 0.7% | 2021-05-26 | Fix |
| CVE-2021-20486 | IBM Cloud Pak for Data information disclosure | 5.3CNA v3.0 | 0.9% | 2021-05-26 | Fix |
| CVE-2021-20297 | NetworkManager crash | 5.5v3.1 | 0.3% | 2021-05-26 | Fix |
| CVE-2021-20196 | QEMU floppy disk emulator null pointer dereference | 6.5NVD v3.1 | 0.5% | 2021-05-26 | Fix |
| CVE-2021-20191 | Insertion of sensitive information into log file in Ansible | 5.5v3.1 | 0.3% | 2021-05-26 | Fix |
| CVE-2021-20178 | Insertion of sensitive information into log file in Ansible | 5.5v3.1 | 0.3% | 2021-05-26 | Fix |
| CVE-2021-20177 | kernel out-of-bounds read | 4.4NVD v3.1 | 0.3% | 2021-05-26 | Fix |
| CVE-2021-3561 | fig2dev read_objects parser vulnerability | 7.1NVD v3.1 | 1.2% | 2021-05-26 | Fix |
| CVE-2021-3549 | GNU binutils objdump AVR section loader vulnerability | 7.1NVD v3.1 | 1.0% | 2021-05-26 | Fix |
| CVE-2021-3548 | dmg2img out-of-bounds read | 7.1NVD v3.1 | 0.9% | 2021-05-26 | |
| CVE-2021-3527 | QEMU resource exhaustion | 5.5NVD v3.1 | 0.4% | 2021-05-26 | Fix |
| CVE-2021-3486 | GLPI cross-site scripting | 6.1NVD v3.1 | 1.4% | 2021-05-26 | |
| CVE-2021-33575 | Remote code execution in Ruby-jss | 9.8v3.1 | 2.6% | 2021-05-25 | Fix |
| CVE-2021-33574 | GNU glibc use-after-free | 9.8NVD v3.1 | 3.5% | 2021-05-25 | Fix |
| CVE-2021-33570 | Postbird cross-site scripting | 5.4v3.1 | 3.6% | 2021-05-25 | Exploit code |
| CVE-2021-33425 | openwrt cross-site scripting | 5.4v3.1 | 0.5% | 2021-05-25 | |
| CVE-2021-32640 | websockets ws ReDoS in Sec-Websocket-Protocol header | 5.3CNA v3.1 | 2.8% | 2021-05-25 | Fix |
| CVE-2021-32638 | GitHub CodeQL Action command-line token option information disclosure | 4.4CNA v3.1 | 0.4% | 2021-05-25 | |
| CVE-2021-30195 | CODESYS PLCWinNT out-of-bounds read | 7.5v3.1 | 7.2% | 2021-05-25 | Fix |
| CVE-2021-30194 | CODESYS V2 Web Server out-of-bounds read | 9.1v3.1 | 1.2% | 2021-05-25 | Fix |
| CVE-2021-30193 | CODESYS V2 Web Server out-of-bounds write | 9.8v3.1 | 1.2% | 2021-05-25 | Fix |
| CVE-2021-30192 | CODESYS V2 Web Server improperly implemented security check | 9.8v3.1 | 1.2% | 2021-05-25 | Fix |
| CVE-2021-30191 | CODESYS V2 Web Server buffer overflow | 7.5v3.1 | 1.0% | 2021-05-25 | Fix |
| CVE-2021-30190 | CODESYS V2 Web Server missing authentication | 9.8v3.1 | 1.4% | 2021-05-25 | Fix |
| CVE-2021-30189 | CODESYS V2 Web Server out-of-bounds write | 9.8v3.1 | 1.3% | 2021-05-25 | Fix |
| CVE-2021-30188 | CODESYS V2 Runtime System Sp out-of-bounds write | 9.8v3.1 | 1.3% | 2021-05-25 | Fix |
| CVE-2021-30187 | CODESYS Runtime Toolkit OS command injection | 5.3v3.1 | 0.3% | 2021-05-25 | Fix |
| CVE-2021-30186 | CODESYS PLCWinNT out-of-bounds write | 7.5v3.1 | 7.4% | 2021-05-25 | Fix |
| CVE-2021-29708 | IBM Spectrum Scale GUI pod container information disclosure | 6.7CNA v3.0 | 0.3% | 2021-05-25 | Fix |
| CVE-2021-29695 | IBM 8335-GTB path traversal | 4.9CNA v3.0 | 2.3% | 2021-05-25 | Fix |
| CVE-2021-29211 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.6% | 2021-05-25 | Fix |
| CVE-2021-29210 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.5% | 2021-05-25 | Fix |
| CVE-2021-29209 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.5% | 2021-05-25 | Fix |
| CVE-2021-29208 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.5% | 2021-05-25 | Fix |
| CVE-2021-29207 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-25 | Fix |
| CVE-2021-29206 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-25 | Fix |
| CVE-2021-29205 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-25 | Fix |
| CVE-2021-29204 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-25 | Fix |
| CVE-2021-29202 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers buffer overflow | 6.7v3.1 | 0.3% | 2021-05-25 | Fix |
| CVE-2021-29201 | HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-25 | Fix |
| CVE-2021-27823 | Mediateknet Netwave System information disclosure | 7.5v3.1 | 1.1% | 2021-05-25 | |
| CVE-2021-27821 | openwrt luci cross-site scripting | 6.1v3.1 | 0.6% | 2021-05-25 | |
| CVE-2021-27562 | Arm Trusted Firmware out-of-bounds write | 5.5v3.1 | 3.1% | 2021-05-25 | KEVFix |
| CVE-2021-25946 | Prototype pollution in nconf-toml | 9.8v3.1 | 3.3% | 2021-05-25 | |
| CVE-2021-25944 | deep-defaults vulnerable to prototype pollution | 9.8v3.1 | 3.0% | 2021-05-25 | |
| CVE-2021-25935 | OpenNMS cross-site scripting | 5.4v3.1 | 0.9% | 2021-05-25 | |
| CVE-2021-25934 | OpenNMS Horizon vulnerable to XSS | 5.4v3.1 | 1.0% | 2021-05-25 | |
| CVE-2021-23937 | Apache Wicket DNS proxy and possible amplification attack | 7.5v3.1 | 4.3% | 2021-05-25 | Fix |
| CVE-2021-21660 | XSS vulnerability in Jenkins Markdown Formatter Plugin | 5.4v3.1 | 1.1% | 2021-05-25 | Fix |
| CVE-2021-21659 | XXE vulnerability in Jenkins URLTrigger Plugin | 8.1v3.1 | 66.8% | 2021-05-25 | Fix |
| CVE-2021-21658 | XML external entity vulnerability in Jenkins Nuget Plugin | 9.1v3.1 | 1.5% | 2021-05-25 | Fix |
| CVE-2021-21657 | XXE vulnerability in Jenkins Filesystem Trigger Plugin | 8.8v3.1 | 1.6% | 2021-05-25 | Fix |
| CVE-2021-20209 | Privoxy show-status CGI handler memory leak | 7.5NVD v3.1 | 1.9% | 2021-05-25 | Fix |
| CVE-2021-20096 | OpenOversight cross-site request forgery | 8.1NVD v3.1 | 0.6% | 2021-05-25 | |
| CVE-2021-3320 | zephyrproject-rtos Zephyr type confusion in 802154 ACK Frames Handling | 5.9CNA v3.1 | 0.8% | 2021-05-25 | |
| CVE-2021-33563 | Improper rate limiting in Koel | 7.5v3.1 | 0.8% | 2021-05-24 | Fix |
| CVE-2021-33562 | Cross-site scripting in Shopizer | 4.8v3.1 | 2.9% | 2021-05-24 | Exploit codeFix |
| CVE-2021-33561 | Cross-site scripting in Shopizer | 4.8v3.1 | 2.9% | 2021-05-24 | Exploit codeFix |
| CVE-2021-33525 | EyesOfNetwork OS command injection | 8.8v3.1 | 7.7% | 2021-05-24 | Fix |
| CVE-2021-33516 | An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected servic | 8.1v3.1 | 1.1% | 2021-05-24 | Fix |
| CVE-2021-33502 | ReDoS in Normalize-url | 7.5v3.1 | 1.7% | 2021-05-24 | Fix |
| CVE-2021-33497 | Path traversal in Dutchcoders Transfer.sh | 9.1v3.1 | 2.0% | 2021-05-24 | Fix |
| CVE-2021-33496 | Cross-site scripting in Dutchcoders Transfer.sh | 6.1v3.1 | 1.0% | 2021-05-24 | Fix |
| CVE-2021-32629 | bytecodealliance wasmtime memory access due to code generation flaw in Cranelift module | 7.2CNA v3.1 | 0.5% | 2021-05-24 | Fix |
| CVE-2021-32624 | keystonejs keystone-5 private field data leak | 7.5CNA v3.1 | 0.9% | 2021-05-24 | Fix |
| CVE-2021-32075 | Re-logic Terraria deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-05-24 | Fix |
| CVE-2021-30108 | Server-side request forgery in Feehi CMS | 9.1v3.1 | 1.1% | 2021-05-24 | |
| CVE-2021-30083 | Webfairy Mediat cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-24 | |
| CVE-2021-30082 | Gris Cms cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-24 | |
| CVE-2021-30081 | emlog navbar.php SQL injection | 8.8v3.1 | 1.0% | 2021-05-24 | |
| CVE-2021-29300 | Command injection in @Ronomon/Opened | 9.8v3.1 | 4.5% | 2021-05-24 | Fix |
| CVE-2021-29256 | Arm Mali GPU Kernel driver use-after-free | 8.8v3.1 | 3.0% | 2021-05-24 | KEVFix |
| CVE-2021-25938 | ArangoDB cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-24 | |
| CVE-2021-24332 | Autoptimize WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-05-24 | Fix |
| CVE-2021-24308 | LifterLMS WordPress plugin authenticated stored XSS in Edit Profile | 5.4NVD v3.1 | 3.2% | 2021-05-24 | Exploit codeFix |
| CVE-2021-24307 | All in One SEO Pack WordPress plugin admin RCE via unserialize | 8.8NVD v3.1 | 53.3% | 2021-05-24 | Exploit codeFix |
| CVE-2021-24306 | Ultimate Member WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-24 | Fix |
| CVE-2021-24305 | Target First Plugin unauthenticated stored XSS via Licence Key | 6.1NVD v3.1 | 1.2% | 2021-05-24 | Fix |
| CVE-2021-24302 | Hana Flv Player WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-24 | |
| CVE-2021-24301 | Hotjar Connecticator WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-24 | |
| CVE-2021-24300 | PickPlugins Product Slider for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 10.6% | 2021-05-24 | NucleiExploit codeFix |
| CVE-2021-24298 | Simple Giveaways WordPress plugin unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 3.5% | 2021-05-24 | NucleiFix |
| CVE-2021-24297 | Goto WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-05-24 | Fix |
| CVE-2021-24296 | WP Customer Reviews WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-05-24 | Fix |
| CVE-2021-24294 | DSGVO All in one for WP WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 1.2% | 2021-05-24 | Fix |
| CVE-2021-23387 | trailing-slash open redirect | 6.1v3.1 | 1.2% | 2021-05-24 | Fix |
| CVE-2021-21989 | VMware Workstation Pro / Player (Workstation), VMware Horizon Client out-of-bounds read | 6.5v3.1 | 0.5% | 2021-05-24 | Fix |
| CVE-2021-21988 | VMware Workstation Pro / Player (Workstation), VMware Horizon Client out-of-bounds read | 6.5v3.1 | 0.5% | 2021-05-24 | Fix |
| CVE-2021-21987 | VMware Workstation Pro / Player (Workstation), VMware Horizon Client out-of-bounds read | 6.5v3.1 | 0.6% | 2021-05-24 | Fix |
| CVE-2021-21001 | WAGO: PFC200 Access to files outside the home directory | 6.5NVD v3.1 | 1.1% | 2021-05-24 | Fix |
| CVE-2021-21000 | WAGO: PFC200 denial of service due to the number of connections to the runtime | 7.5v3.1 | 1.0% | 2021-05-24 | Fix |
| CVE-2021-20726 | Overwolf The Installer of Overwolf untrusted search path | 7.8v3.1 | 0.3% | 2021-05-24 | Fix |
| CVE-2021-20725 | PHP Factory [Calendar01] free edition admin page reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-24 | Fix |
| CVE-2021-20724 | PHP Factory [Telop01] free edition admin page reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-24 | Fix |
| CVE-2021-20723 | PHP Factory [MailForm01] free edition reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-24 | Fix |
| CVE-2021-20722 | Fujitsu ScanSnap Manager installer uncontrolled search path | 7.8NVD v3.1 | 0.4% | 2021-05-24 | Fix |
| CVE-2021-20713 | QualitySoft QND Advance/Premium/Standard privilege escalation | 7.8v3.1 | 0.2% | 2021-05-24 | Fix |
| CVE-2021-20557 | IBM Security Guardium OS command injection | 7.2CNA v3.0 | 2.7% | 2021-05-24 | Fix |
| CVE-2021-20428 | IBM Security Guardium information disclosure through error messages | 5.3CNA v3.0 | 1.3% | 2021-05-24 | Fix |
| CVE-2021-20426 | IBM Security Guardium hard-coded credentials | 5.9CNA v3.0 | 1.0% | 2021-05-24 | Fix |
| CVE-2021-20419 | IBM Security Guardium weak cryptographic algorithm | 6.8CNA v3.0 | 0.7% | 2021-05-24 | Fix |
| CVE-2021-20389 | IBM Security Guardium insufficiently protected credentials | 5.1CNA v3.0 | 0.2% | 2021-05-24 | Fix |
| CVE-2021-20386 | IBM Security Guardium cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-05-24 | Fix |
| CVE-2021-20385 | IBM Security Guardium arbitrary command execution | 8.4CNA v3.0 | 2.1% | 2021-05-24 | Fix |
| CVE-2021-3559 | libvirt virConnectListAllNodeDevices API denial of service | 6.5v3.1 | 1.0% | 2021-05-24 | Fix |
| CVE-2021-3485 | Improper input validation in Bitdefender Endpoint Security Tools for Linux | 6.4CNA v3.1 | 0.9% | 2021-05-24 | Fix |
| CVE-2021-1560 | Cisco DNA Spaces Connector command injection | 6.5CNA v3.1 | 2.7% | 2021-05-22 | Fix |
| CVE-2021-1559 | Cisco DNA Spaces Connector command injection | 6.5CNA v3.1 | 2.7% | 2021-05-22 | Fix |
| CVE-2021-1558 | Cisco DNA Spaces Connector privilege escalation | 6.0CNA v3.1 | 0.3% | 2021-05-22 | Fix |
| CVE-2021-1557 | Cisco DNA Spaces Connector privilege escalation | 6.0CNA v3.1 | 0.3% | 2021-05-22 | Fix |
| CVE-2021-1555 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.7% | 2021-05-22 | Fix |
| CVE-2021-1554 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.6% | 2021-05-22 | Fix |
| CVE-2021-1553 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.7% | 2021-05-22 | Fix |
| CVE-2021-1552 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.7% | 2021-05-22 | Fix |
| CVE-2021-1551 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.7% | 2021-05-22 | Fix |
| CVE-2021-1550 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.7% | 2021-05-22 | Fix |
| CVE-2021-1549 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.7% | 2021-05-22 | Fix |
| CVE-2021-1548 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.6% | 2021-05-22 | Fix |
| CVE-2021-1547 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points command injection | 4.7CNA v3.1 | 1.6% | 2021-05-22 | Fix |
| CVE-2021-1531 | Cisco Modeling Labs Web UI command injection | 8.8CNA v3.1 | 30.5% | 2021-05-22 | Fix |
| CVE-2021-1487 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager command injection | 8.8CNA v3.1 | 2.1% | 2021-05-22 | Fix |
| CVE-2021-1358 | Cisco Finesse open redirect | 4.7CNA v3.1 | 0.8% | 2021-05-22 | Fix |
| CVE-2021-1306 | Cisco ADE-OS local file inclusion | 4.4CNA v3.1 | 0.2% | 2021-05-22 | Fix |
| CVE-2021-1254 | Cisco Finesse cross-site scripting | 4.8CNA v3.1 | 0.7% | 2021-05-22 | Fix |
| CVE-2021-33514 | NETGEAR MS510TXUP OS command injection | 9.8v3.1 | 8.8% | 2021-05-21 | Fix |
| CVE-2021-33513 | Cross-site scripting in Plone | 5.4v3.1 | 0.7% | 2021-05-21 | Fix |
| CVE-2021-33512 | Cross-site scripting in Plone | 5.4v3.1 | 0.7% | 2021-05-21 | Fix |
| CVE-2021-33511 | Server-side request forgery in Plone | 7.5v3.1 | 1.2% | 2021-05-21 | Fix |
| CVE-2021-33510 | Server-side request forgery in Plone | 4.3v3.1 | 1.0% | 2021-05-21 | Fix |
| CVE-2021-33509 | Incorrect permission assignment for critical resource in Plone | 9.9v3.1 | 2.0% | 2021-05-21 | Fix |
| CVE-2021-33508 | Cross-site scripting in Plone | 5.4v3.1 | 0.6% | 2021-05-21 | Fix |
| CVE-2021-33507 | Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone | 6.1v3.1 | 0.7% | 2021-05-21 | Fix |
| CVE-2021-33500 | PuTTY denial of service | 7.5v3.1 | 2.0% | 2021-05-21 | Fix |
| CVE-2021-32634 | Deserialization of untrusted data in Emissary | 7.2CNA v3.1 | 1.3% | 2021-05-21 | Fix |
| CVE-2021-32633 | zopefoundation Zope remote code execution via traversal in TAL expressions | 6.8CNA v3.1 | 1.9% | 2021-05-21 | Fix |
| CVE-2021-32032 | Trusted Firmware-M memory leak | 7.5v3.1 | 1.8% | 2021-05-21 | |
| CVE-2021-31475 | SolarWinds Orion Job Scheduler incorrect permission assignment | 8.8v3.1 | 6.5% | 2021-05-21 | Fix |
| CVE-2021-31474 | SolarWinds Network Performance Monitor deserialization of untrusted data | 9.8v3.1 | 94.4% | 2021-05-21 | Emerging ThreatsFix |
| CVE-2021-31473 | Foxit Reader out-of-bounds write | 7.8v3.1 | 7.7% | 2021-05-21 | Fix |
| CVE-2021-31440 | Linux Kernel incorrect calculation | 7.0v3.1 | 1.8% | 2021-05-21 | Fix |
| CVE-2021-31439 | Synology DiskStation Manager heap-based buffer overflow | 8.8v3.1 | 2.3% | 2021-05-21 | Fix |
| CVE-2021-29681 | IBM InfoSphere Information Server information disclosure | 3.1CNA v3.0 | 0.9% | 2021-05-21 | Fix |
| CVE-2021-29415 | Nordicsemi NRF52840 observable discrepancy | 5.5v3.1 | 0.3% | 2021-05-21 | |
| CVE-2021-29414 | STM32L412C8 injection | 6.1v3.1 | 0.3% | 2021-05-21 | |
| CVE-2021-28798 | Relative path traversal vulnerability in QTS and QuTS hero | 8.8CNA v3.1 | 0.9% | 2021-05-21 | Fix |
| CVE-2021-27811 | Qibosoft code injection | 7.2v3.1 | 1.2% | 2021-05-21 | |
| CVE-2021-21552 | Dell Wyse Windows Embedded (WES) incorrect authorization | 5.2CNA v3.1 | 1.0% | 2021-05-21 | Fix |
| CVE-2021-21549 | Dell XtremIO cross-site request forgery | 8.8CNA v3.1 | 0.4% | 2021-05-21 | Fix |
| CVE-2021-33477 | rxvt-unicode improper exception handling | 8.8v3.1 | 4.1% | 2021-05-20 | Fix |
| CVE-2021-32632 | pajbot CSRF allowing modification of commands, modules, banphrases through hidden iFrames | 2.4CNA v3.1 | 0.6% | 2021-05-20 | Fix |
| CVE-2021-32630 | Admidio Documents and Files upload feature vulnerability | 9.6CNA v3.1 | 1.6% | 2021-05-20 | Fix |
| CVE-2021-29692 | IBM Security Identity Manager man-in-the-middle | 3.1CNA v3.0 | 1.0% | 2021-05-20 | Fix |
| CVE-2021-29691 | IBM Security Identity Manager hard-coded credentials | 5.9CNA v3.0 | 0.9% | 2021-05-20 | Fix |
| CVE-2021-29688 | IBM Security Identity Manager information disclosure through error messages | 5.3CNA v3.0 | 2.0% | 2021-05-20 | Fix |
| CVE-2021-29687 | IBM Security Identity Manager observable discrepancy | 3.7CNA v3.0 | 1.3% | 2021-05-20 | Fix |
| CVE-2021-29686 | IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to. IBM X-Force ID: 200015 | 5.4CNA v3.0 | 0.8% | 2021-05-20 | Fix |
| CVE-2021-29683 | IBM Security Identity Manager cleartext storage of sensitive information | 5.3CNA v3.0 | 0.5% | 2021-05-20 | Fix |
| CVE-2021-29682 | IBM Security Identity Manager information disclosure through error messages | 5.3CNA v3.0 | 1.3% | 2021-05-20 | Fix |
| CVE-2021-29659 | ownCloud Server improper access control | 6.5v3.1 | 1.3% | 2021-05-20 | Fix |
| CVE-2021-29258 | envoyproxy envoy reachable assertion | 7.5v3.1 | 1.7% | 2021-05-20 | Fix |
| CVE-2021-28906 | CESNET libyang unchecked return value | 7.5v3.1 | 1.6% | 2021-05-20 | Fix |
| CVE-2021-28905 | CESNET libyang reachable assertion | 7.5v3.1 | 1.4% | 2021-05-20 | Fix |
| CVE-2021-28904 | CESNET libyang unchecked return value | 7.5v3.1 | 1.4% | 2021-05-20 | Fix |
| CVE-2021-28903 | CESNET libyang stack-based buffer overflow | 7.5v3.1 | 2.4% | 2021-05-20 | Fix |
| CVE-2021-28902 | CESNET libyang unchecked return value | 7.5v3.1 | 1.6% | 2021-05-20 | Fix |
| CVE-2021-28683 | envoyproxy envoy null pointer dereference | 7.5v3.1 | 1.7% | 2021-05-20 | Fix |
| CVE-2021-28682 | envoyproxy envoy integer overflow | 7.5v3.1 | 2.0% | 2021-05-20 | Fix |
| CVE-2021-28112 | Draeger X-dock Firmware active debug code | 8.8v3.1 | 1.9% | 2021-05-20 | Fix |
| CVE-2021-28111 | Draeger X-dock Firmware hard-coded credentials | 8.8v3.1 | 3.1% | 2021-05-20 | Fix |
| CVE-2021-27956 | Zoho ManageEngine ADSelfService Plus cross-site scripting | 6.1v3.1 | 1.6% | 2021-05-20 | Fix |
| CVE-2021-27467 | Emerson Rosemount X-STREAM Gas Analyzer clickjacking | 6.1v3.1 | 0.7% | 2021-05-20 | Fix |
| CVE-2021-27465 | Emerson Rosemount X-STREAM Gas Analyzer cross-site scripting | 6.1v3.1 | 0.6% | 2021-05-20 | Fix |
| CVE-2021-27463 | Emerson Rosemount X-STREAM Gas Analyzer session cookie handling information disclosure | 5.3v3.1 | 0.9% | 2021-05-20 | Fix |
| CVE-2021-27461 | Emerson Rosemount X-STREAM Gas Analyzer path traversal | 7.5v3.1 | 1.4% | 2021-05-20 | Fix |
| CVE-2021-27459 | Emerson Rosemount X-STREAM Gas Analyzer unrestricted file upload | 9.8v3.1 | 1.8% | 2021-05-20 | Fix |
| CVE-2021-27457 | Emerson Rosemount X-STREAM Gas Analyzer inadequate encryption strength | 7.5v3.1 | 0.5% | 2021-05-20 | Fix |
| CVE-2021-27434 | OPC UA Products Built with the .NET Framework uncontrolled recursion | 7.5v3.1 | 1.7% | 2021-05-20 | Fix |
| CVE-2021-27432 | OPC Foundation OPC UA .NET Standard and OPC UA .NET Legacy uncontrolled recursion | 7.5v3.1 | 2.0% | 2021-05-20 | Fix |
| CVE-2021-25933 | Cross-site scripting in OpenNMS Horizon | 4.8v3.1 | 1.0% | 2021-05-20 | Fix |
| CVE-2021-25931 | Cross-site request forgery in OpenNMS Horizon | 8.8v3.1 | 0.7% | 2021-05-20 | Fix |
| CVE-2021-25930 | Cross-site request forgery in OpenNMS Horizon | 4.3v3.1 | 0.6% | 2021-05-20 | Fix |
| CVE-2021-25929 | Cross-site scripting in OpenNMS Horizon | 4.8v3.1 | 1.0% | 2021-05-20 | Fix |
| CVE-2021-23386 | dns-packet Remote Memory Exposure | 6.5NVD v3.1 | 1.4% | 2021-05-20 | Fix |
| CVE-2021-22409 | ManageOne some versions denial of service | 5.3v3.1 | 0.5% | 2021-05-20 | Fix |
| CVE-2021-22339 | ManageOne some versions denial of service | 6.5v3.1 | 0.3% | 2021-05-20 | Fix |
| CVE-2021-20721 | kujirahand KonaWiki2 unrestricted file upload | 9.8v3.1 | 1.5% | 2021-05-20 | Fix |
| CVE-2021-20720 | kujirahand KonaWiki2 SQL injection | 9.8v3.1 | 1.3% | 2021-05-20 | Fix |
| CVE-2021-20719 | NIPPON ANTENNA RFNTPS OS command injection | 6.8v3.1 | 0.4% | 2021-05-20 | Fix |
| CVE-2021-20718 | zmartzone mod_auth_openidc denial of service | 7.5v3.1 | 3.4% | 2021-05-20 | Fix |
| CVE-2021-3536 | Cross-site scripting in Wildfly | 4.8v3.1 | 0.5% | 2021-05-20 | Fix |
| CVE-2021-3480 | slapi-nis null pointer dereference | 7.5NVD v3.1 | 1.7% | 2021-05-20 | Fix |
| CVE-2021-3438 | Certain HP LaserJet products and Samsung product printers, see Security Bulletin buffer overflow | 7.8v3.1 | 2.9% | 2021-05-20 | Exploit codeFix |
| CVE-2021-3426 | python information disclosure | 5.7NVD v3.1 | 1.9% | 2021-05-20 | Fix |
| CVE-2021-3313 | Plone XSS in User Fullname Property and file upload | 5.4v3.1 | 1.0% | 2021-05-20 | Fix |
| CVE-2021-33204 | Pgxn pg_partman arbitrary code execution | 9.8v3.1 | 2.2% | 2021-05-19 | Fix |
| CVE-2021-31930 | Concerto-signage Concerto web interface stored cross-site scripting | 6.1v3.1 | 0.9% | 2021-05-19 | |
| CVE-2021-31158 | Couchbase Server incorrect authorization | 6.5v3.1 | 0.7% | 2021-05-19 | Fix |
| CVE-2021-29625 | vrana adminer XSS in doc_link | 7.5CNA v3.1 | 9.6% | 2021-05-19 | NucleiFix |
| CVE-2021-29624 | Lack of protection against cookie tossing attacks in fastify-csrf | 6.5CNA v3.1 | 0.8% | 2021-05-19 | Fix |
| CVE-2021-29622 | prometheus arbitrary redirects under /new endpoint | 6.5CNA v3.1 | 19.6% | 2021-05-19 | NucleiFix |
| CVE-2021-29503 | hedgedoc improper neutralization of Script-Related HTML Tags in Notes | 8.1CNA v3.1 | 1.0% | 2021-05-19 | Fix |
| CVE-2021-27925 | Couchbase Server race condition | 4.4v3.1 | 0.5% | 2021-05-19 | Fix |
| CVE-2021-27924 | Couchbase Server cleartext transmission of sensitive information | 5.9v3.1 | 0.5% | 2021-05-19 | Fix |
| CVE-2021-25644 | Couchbase Server cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2021-05-19 | Fix |
| CVE-2021-21733 | ZTE ZXCDN management system information disclosure | 4.9v3.1 | 0.8% | 2021-05-19 | Fix |
| CVE-2021-21732 | ZTE Axon 11 5G proc file system permissions improper access control | 7.5v3.1 | 1.0% | 2021-05-19 | Fix |
| CVE-2021-20589 | GOT2000 series buffer access with incorrect length | 7.5v3.1 | 1.5% | 2021-05-19 | Fix |
| CVE-2021-20529 | IBM Control Center information disclosure | 5.3CNA v3.0 | 0.9% | 2021-05-19 | Fix |
| CVE-2021-20528 | IBM Control Center cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-05-19 | Fix |
| CVE-2021-20374 | IBM Maximo Asset Management cross-site scripting | 6.5CNA v3.0 | 0.5% | 2021-05-19 | Fix |
| CVE-2021-3517 | libxml2 nokogiri contains libxml out-of-bounds write | 8.6NVD v3.1 | 17.0% | 2021-05-19 | Fix |
| CVE-2021-3445 | libdnf improper signature verification | 7.5v3.1 | 1.1% | 2021-05-19 | Fix |
| CVE-2021-3421 | RPM improper signature verification | 5.5v3.1 | 0.7% | 2021-05-19 | Fix |
| CVE-2021-32305 | websvn OS command injection | 9.8v3.1 | 86.7% | 2021-05-18 | Reported exploitedNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-32238 | Psyonix Rocket League out-of-bounds write | 7.8v3.1 | 2.1% | 2021-05-18 | |
| CVE-2021-31827 | Progress MOVEit Transfer SQL injection | 8.8v3.1 | 1.2% | 2021-05-18 | Fix |
| CVE-2021-31324 | Control Web Panel Webpanel OS command injection | 9.8v3.1 | 34.1% | 2021-05-18 | Nuclei |
| CVE-2021-31323 | Telegram out-of-bounds write | 5.5v3.1 | 1.3% | 2021-05-18 | |
| CVE-2021-31322 | Telegram out-of-bounds write | 5.5v3.1 | 1.4% | 2021-05-18 | Fix |
| CVE-2021-31321 | Telegram out-of-bounds write | 7.1v3.1 | 1.1% | 2021-05-18 | Fix |
| CVE-2021-31320 | Telegram out-of-bounds write | 7.1v3.1 | 1.2% | 2021-05-18 | Fix |
| CVE-2021-31319 | Telegram integer overflow | 5.5v3.1 | 1.3% | 2021-05-18 | Fix |
| CVE-2021-31318 | Telegram type confusion | 5.5v3.1 | 1.3% | 2021-05-18 | Fix |
| CVE-2021-31317 | Telegram type confusion | 5.5v3.1 | 1.3% | 2021-05-18 | Fix |
| CVE-2021-31316 | Control Web Panel Webpanel SQL injection | 9.8v3.1 | 13.0% | 2021-05-18 | Nuclei |
| CVE-2021-31315 | Telegram out-of-bounds write | 5.5v3.1 | 1.3% | 2021-05-18 | Fix |
| CVE-2021-30145 | mpv m3u playlist parser format string | 7.8v3.1 | 2.4% | 2021-05-18 | Fix |
| CVE-2021-22117 | RabbitMQ code injection | 7.8v3.1 | 0.6% | 2021-05-18 | Fix |
| CVE-2021-3531 | Red Hat Ceph Storage RGW request handling denial of service | 5.3v3.1 | 2.4% | 2021-05-18 | Fix |
| CVE-2021-3518 | Nokogiri Implements libxml2 version vulnerable to use-after-free | 8.8NVD v3.1 | 21.9% | 2021-05-18 | Fix |
| CVE-2021-3423 | Privilege escalation in Bitdefender GravityZone Business Security | 7.8CNA v3.1 | 0.2% | 2021-05-18 | Fix |
| CVE-2021-3200 | openSUSE libsolv buffer overflow | 3.3v3.1 | 1.3% | 2021-05-18 | Fix |
| CVE-2021-33041 | Cross-site scripting in Vmd | 6.1v3.1 | 1.2% | 2021-05-17 | |
| CVE-2021-32622 | Improper file handling in matrix-react-sdk | 4.2CNA v3.1 | 0.4% | 2021-05-17 | Fix |
| CVE-2021-32618 | Flask-Middleware flask-security open redirect | 3.1CNA v3.1 | 2.8% | 2021-05-17 | NucleiFix |
| CVE-2021-32617 | Denial of service in Exiv2 | 4.7CNA v3.1 | 1.2% | 2021-05-17 | Fix |
| CVE-2021-32456 | SITEL CAP/PRX cleartext transmission of sensitive information | 6.5v3.1 | 0.3% | 2021-05-17 | |
| CVE-2021-32455 | SITEL CAP/PRX vulnerable to a denial of service attack | 6.5v3.1 | 0.4% | 2021-05-17 | Fix |
| CVE-2021-32454 | SITEL CAP/PRX hard-coded credentials | 8.8NVD v3.1 | 0.4% | 2021-05-17 | Fix |
| CVE-2021-32453 | SITEL CAP/PRX information exposure | 3.3NVD v3.1 | 0.2% | 2021-05-17 | |
| CVE-2021-32403 | Intelbras Rf 301K Firmware cross-site request forgery | 8.8v3.1 | 2.5% | 2021-05-17 | Exploit code |
| CVE-2021-32402 | Intelbras Rf 301K Firmware cross-site request forgery | 8.8v3.1 | 0.5% | 2021-05-17 | |
| CVE-2021-31728 | Malwarefox Anti-Malware code execution | 7.8NVD v3.1 | 3.4% | 2021-05-17 | |
| CVE-2021-31727 | Malwarefox Anti-Malware privilege escalation | 7.8v3.1 | 0.4% | 2021-05-17 | |
| CVE-2021-29747 | IBM InfoSphere Information Server authentication mechanism information disclosure | 5.9CNA v3.0 | 1.9% | 2021-05-17 | Fix |
| CVE-2021-29053 | Liferay Portal Multiple SQL injection | 8.8v3.1 | 1.2% | 2021-05-17 | Fix |
| CVE-2021-29052 | Liferay Portal incorrect default permissions | 4.3v3.1 | 0.8% | 2021-05-17 | Fix |
| CVE-2021-29051 | Liferay portal and Liferay DXP vulnerable to cross-site scripting (XSS) in Asset Publisher App | 6.1v3.1 | 0.7% | 2021-05-17 | Fix |
| CVE-2021-29048 | Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Layout Admin page | 6.1v3.1 | 0.9% | 2021-05-17 | Fix |
| CVE-2021-29046 | Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) via Asset module parameter | 6.1v3.1 | 0.9% | 2021-05-17 | Fix |
| CVE-2021-29045 | Liferay Portal and Liferay DXP vulnerable to cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-17 | Fix |
| CVE-2021-29044 | Liferay portal and Liferay DXP vulnerable to cross-site scripting | 6.1v3.1 | 0.7% | 2021-05-17 | Fix |
| CVE-2021-29043 | Liferay portal and Liferay DXP may Reveal S3 Store's Proxy Password | 5.9v3.1 | 0.7% | 2021-05-17 | Fix |
| CVE-2021-29024 | InvoicePlane files accessible to external parties | 7.5v3.1 | 1.6% | 2021-05-17 | |
| CVE-2021-29023 | InvoicePlane missing brute-force protection | 5.3v3.1 | 1.1% | 2021-05-17 | |
| CVE-2021-27734 | Belden Hirschmann HiOS improper authentication | 9.8v3.1 | 1.3% | 2021-05-17 | Fix |
| CVE-2021-27342 | D-Link Dir-842e observable discrepancy | 5.9v3.1 | 4.6% | 2021-05-17 | Exploit codeFix |
| CVE-2021-25264 | Sophos Intercept X for MacOS arbitrary code execution | 6.7v3.1 | 0.3% | 2021-05-17 | Fix |
| CVE-2021-24327 | SEO Redirection WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-05-17 | Fix |
| CVE-2021-24326 | All 404 Redirect to Homepage WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-17 | Fix |
| CVE-2021-24325 | 404 SEO Redirection WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-05-17 | Fix |
| CVE-2021-24324 | 404 SEO Redirection WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.5NVD v3.1 | 0.6% | 2021-05-17 | Fix |
| CVE-2021-24323 | Woocommerce WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.7% | 2021-05-17 | Fix |
| CVE-2021-24315 | GiveWP Stripe checkout and email settings stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-05-17 | Fix |
| CVE-2021-24314 | Goto WordPress theme unauthenticated blind SQL injection | 9.8NVD v3.1 | 2.0% | 2021-05-17 | Fix |
| CVE-2021-24299 | ReDi Restaurant Reservations WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 5.5% | 2021-05-17 | Exploit codeFix |
| CVE-2021-24295 | Time-based blind SQL injection in Spam protection, AntiSpam, FireWall by CleanTalk | 7.5NVD v3.1 | 4.7% | 2021-05-17 | NucleiFix |
| CVE-2021-24292 | wedevs Happy Addons for Elementor Card widget stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-05-17 | Fix |
| CVE-2021-24290 | Store Locator Plus WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-05-17 | Fix |
| CVE-2021-24289 | Store Locator Plus WordPress plugin authenticated privilege escalation | 8.8NVD v3.1 | 1.1% | 2021-05-17 | Fix |
| CVE-2021-24288 | AcyMailing WordPress plugin unauthenticated open redirect | 6.1NVD v3.1 | 1.9% | 2021-05-17 | NucleiFix |
| CVE-2021-23384 | koa-remove-trailing-slashes open redirect | 5.4v3.1 | 0.8% | 2021-05-17 | Fix |
| CVE-2021-3524 | Red Hat Ceph Storage RadosGW CORS header handling HTTP header injection | 6.5v3.1 | 1.6% | 2021-05-17 | Fix |
| CVE-2021-3483 | Linux Kernel use-after-free | 7.8NVD v3.1 | 0.4% | 2021-05-17 | Fix |
| CVE-2021-29047 | Liferay Portal and Liferay DXP fails to Invalidate CAPTCHA Answers after Use | 7.5v3.1 | 1.1% | 2021-05-16 | Fix |
| CVE-2021-29041 | Liferay DXP vulnerable to denial of service (DoS) in the Multi-Factor Authentication module | 6.5v3.1 | 1.1% | 2021-05-16 | Fix |
| CVE-2021-29040 | Liferay portal and Liferay DXP Reveals Data via Overly Verbose Error messages | 5.3v3.1 | 1.1% | 2021-05-16 | Fix |
| CVE-2021-29039 | Liferay Portal vulnerable to cross-site scripting (XSS) via Categories Admin page | 6.1v3.1 | 0.8% | 2021-05-16 | Fix |
| CVE-2021-22668 | Delta Industrial Automation CNCSoft ScreenEditor out-of-bounds read | 9.8v3.1 | 1.8% | 2021-05-16 | Fix |
| CVE-2021-32073 | DedeCMS cross-site request forgery | 8.8v3.1 | 1.2% | 2021-05-15 | |
| CVE-2021-33034 | Linux kernel use-after-free | 7.8v3.1 | 0.8% | 2021-05-14 | Exploit codeFix |
| CVE-2021-33033 | Linux kernel use-after-free | 7.8v3.1 | 0.6% | 2021-05-14 | Fix |
| CVE-2021-32820 | Insecure template handling in Express-handlebars | 8.6NVD v3.1 | 15.7% | 2021-05-14 | NucleiFix |
| CVE-2021-32819 | Remote code execution in Squirrelly | 8.8NVD v3.1 | 58.3% | 2021-05-14 | NucleiExploit codeFix |
| CVE-2021-32818 | Remote code execution and reflected cross-site scripting in haml-coffee | 5.4NVD v3.1 | 0.7% | 2021-05-14 | |
| CVE-2021-32817 | Insecure template handling in express-hbs | 6.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-32816 | Regular expression denial of service in ProtonMail | 7.5NVD v3.1 | 1.0% | 2021-05-14 | Fix |
| CVE-2021-32613 | Radare2 use-after-free | 5.5NVD v3.1 | 1.2% | 2021-05-14 | Fix |
| CVE-2021-32054 | Fire.ly Spark incorrectly resolved name or reference | 6.1v3.1 | 1.0% | 2021-05-14 | |
| CVE-2021-32051 | Hexagon Intergraph G!nius SQL injection | 7.5v3.1 | 2.2% | 2021-05-14 | Fix |
| CVE-2021-31922 | Pulse Secure Virtual Traffic Manager HTTP request smuggling | 7.5v3.1 | 1.0% | 2021-05-14 | |
| CVE-2021-30183 | Octopus Server multiple versions cleartext storage of sensitive information | 7.5v3.1 | 0.9% | 2021-05-14 | |
| CVE-2021-29619 | tensorflow segfault in `tf.raw_ops.SparseCountSparseOutput` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29618 | tensorflow crash in `tf.transpose` with complex inputs | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29617 | tensorflow crash in `tf.strings.substr` due to `CHECK`-fail | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29616 | tensorflow null dereference in Grappler's `TrySimplify` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29615 | tensorflow stack overflow in `ParseAttrValue` with nested tensors | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29614 | tensorflow interpreter crash from `tf.io.decode_raw` | 7.1CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29613 | tensorflow incomplete validation in `tf.raw_ops.CTCLoss` | 6.3CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29612 | tensorflow heap buffer overflow in `BandedTriangularSolve` | 3.6CNA v3.1 | 0.3% | 2021-05-14 | Fix |
| CVE-2021-29611 | tensorflow incomplete validation in `SparseReshape` | 3.6CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29610 | tensorflow invalid validation in `QuantizeAndDequantizeV2` | 3.6CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29609 | tensorflow incomplete validation in `SparseAdd` | 5.3CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29608 | tensorflow heap OOB and null pointer dereference in `RaggedTensorToTensor` | 5.3CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29607 | tensorflow incomplete validation in `SparseSparseMinimum` | 5.3CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29606 | tensorflow heap OOB read in TFLite | 7.1CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29605 | tensorflow integer overflow in TFLite memory allocation | 7.1CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29604 | tensorflow division by zero in TFLite's implementation of hashtable lookup | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29603 | tensorflow heap OOB write in TFLite | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29602 | tensorflow division by zero in TFLite's implementation of `DepthwiseConv` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29601 | tensorflow integer overflow in TFLite concatentation | 6.3CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29600 | tensorflow division by zero in TFLite's implementation of `OneHot` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29599 | tensorflow division by zero in TFLite's implementation of `Split` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29598 | tensorflow division by zero in TFLite's implementation of `SVDF` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29597 | tensorflow division by zero in TFLite's implementation of `SpaceToBatchNd` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29596 | tensorflow division by zero in TFLite's implementation of `EmbeddingLookup` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29595 | tensorflow division by zero in TFLite's implementation of `DepthToSpace` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29594 | tensorflow division by zero in TFLite's convolution code | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29593 | tensorflow division by zero in TFLite's implementation of `BatchToSpaceNd` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29592 | tensorflow null pointer dereference in TFLite's `Reshape` operator | 4.4CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29591 | tensorflow stack overflow due to looping TFLite subgraph | 7.3CNA v3.1 | 0.3% | 2021-05-14 | Fix |
| CVE-2021-29590 | tensorflow heap OOB read in TFLite's implementation of `Minimum` or `Maximum` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29589 | tensorflow division by zero in TFLite's implementation of `GatherNd` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29588 | tensorflow division by zero in TFLite's implementation of `TransposeConv` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29587 | tensorflow division by zero in TFLite's implementation of `SpaceToDepth` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29586 | tensorflow division by zero in optimized pooling implementations in TFLite | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29585 | tensorflow division by zero in padding computation in TFLite | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29584 | tensorflow CHECK-fail due to integer overflow | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29583 | tensorflow heap buffer overflow and undefined behavior in `FusedBatchNorm` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29582 | tensorflow heap OOB read in `tf.raw_ops.Dequantize` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29581 | Google TensorFlow CTCBeamSearchDecoder operation vulnerability | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29580 | tensorflow undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29579 | tensorflow heap buffer overflow in `MaxPoolGrad` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29578 | tensorflow heap buffer overflow in `FractionalAvgPoolGrad` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29577 | tensorflow heap buffer overflow in `AvgPool3DGrad` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29576 | tensorflow heap buffer overflow in `MaxPool3DGradGrad` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29575 | tensorflow overflow/denial of service in `tf.raw_ops.ReverseSequence` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29574 | tensorflow undefined behavior in `MaxPool3DGradGrad` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29573 | Google TensorFlow MaxPoolGradWithArgmax operation divide by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29572 | tensorflow reference binding to nullptr in `SdcaOptimizer` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29571 | tensorflow memory corruption in `DrawBoundingBoxesV2` | 4.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29570 | tensorflow heap out-of-bounds read in `MaxPoolGradWithArgmax` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29569 | tensorflow heap out-of-bounds read in `RequantizationRange` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29568 | tensorflow reference binding to null in `ParameterizedTruncatedNormal` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29567 | Google TensorFlow SparseDenseCwiseMul operation reachable assertion | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29566 | tensorflow heap OOB access in `Dilation2DBackpropInput` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29565 | tensorflow null pointer dereference in `SparseFillEmptyRows` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29564 | tensorflow null pointer dereference in `EditDistance` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29563 | tensorflow CHECK-fail in `tf.raw_ops.RFFT` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29562 | tensorflow CHECK-fail in `tf.raw_ops.IRFFT` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29561 | Google TensorFlow LoadAndRemapMatrix operation reachable assertion | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29560 | tensorflow heap buffer overflow in `RaggedTensorToTensor` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29559 | tensorflow heap OOB access in unicode ops | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29558 | tensorflow heap buffer overflow in `SparseSplit` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29557 | Google TensorFlow SparseMatMul operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29556 | Google TensorFlow Reverse operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29555 | Google TensorFlow FusedBatchNorm operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29554 | Google TensorFlow DenseCountSparseOutput operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29553 | tensorflow heap OOB in `QuantizeAndDequantizeV3` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29552 | Google TensorFlow UnsortedSegmentJoin operation reachable assertion | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29551 | tensorflow OOB read in `MatrixTriangularSolve` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29550 | Google TensorFlow FractionalAvgPool operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29549 | Google TensorFlow QuantizedAdd operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29548 | Google TensorFlow QuantizedBatchNormWithGlobalNormalization operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29547 | tensorflow heap out-of-bounds in `QuantizedBatchNormWithGlobalNormalization` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29546 | Google TensorFlow QuantizedBiasAdd operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29545 | tensorflow heap buffer overflow in `SparseTensorToCSRSparseMatrix` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29544 | Google TensorFlow QuantizeAndDequantizeV4Grad operation vulnerability | 2.5CNA v3.1 | 0.3% | 2021-05-14 | Fix |
| CVE-2021-29543 | Google TensorFlow CTCGreedyDecoder operation reachable assertion | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29542 | tensorflow heap buffer overflow in `StringNGrams` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29541 | tensorflow null pointer dereference in `StringNGrams` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29540 | tensorflow heap buffer overflow in `Conv2DBackpropFilter` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29539 | tensorflow segfault in tf.raw_ops.ImmutableConst | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29538 | tensorflow division by zero in `Conv2DBackpropFilter` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29537 | tensorflow heap buffer overflow in `QuantizedResizeBilinear` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29536 | tensorflow heap buffer overflow in `QuantizedReshape` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29535 | tensorflow heap buffer overflow in `QuantizedMul` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29534 | Google TensorFlow SparseConcat operation vulnerability | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29533 | Google TensorFlow DrawBoundingBoxes operation reachable assertion | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29532 | tensorflow heap out-of-bounds read in `RaggedCross` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29531 | tensorflow CHECK-fail in tf.raw_ops.EncodePng | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29530 | tensorflow invalid validation in `SparseMatrixSparseCholesky` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29529 | tensorflow heap buffer overflow caused by rounding | 2.5CNA v3.1 | 0.3% | 2021-05-14 | Fix |
| CVE-2021-29528 | Google TensorFlow QuantizedMul operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29527 | Google TensorFlow QuantizedConv2D operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29526 | Google TensorFlow Conv2D operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29525 | Google TensorFlow Conv2DBackpropInput operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29524 | Google TensorFlow Conv2DBackpropFilter operation division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29523 | Google TensorFlow AddManySparseToTensorsMap operation vulnerability | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29522 | Google TensorFlow Conv3DBackprop operations division by zero | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29521 | Google TensorFlow SparseCountSparseOutput operation incorrect buffer size calculation | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29520 | tensorflow heap buffer overflow in `Conv3DBackprop*` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29519 | tensorflow CHECK-fail in SparseCross due to type confusion | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29518 | tensorflow session operations in eager mode lead to null pointer dereferences | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29517 | tensorflow division by zero in `Conv3D` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29516 | tensorflow null pointer dereference via invalid Ragged Tensors | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29515 | tensorflow reference binding to null pointer in `MatrixDiag*` ops | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29514 | tensorflow heap out-of-bounds write in `RaggedBinCount` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29513 | tensorflow type confusion during tensor casts lead to dereferencing null pointers | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-29512 | tensorflow heap buffer overflow in `RaggedBinCount` | 2.5CNA v3.1 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-27737 | Apache Traffic Server denial of service | 7.5v3.1 | 3.8% | 2021-05-14 | Fix |
| CVE-2021-25943 | 101 prototype pollution in 101 | 9.8v3.1 | 3.3% | 2021-05-14 | |
| CVE-2021-25941 | Prototype pollution in deep-override | 9.8v3.1 | 3.3% | 2021-05-14 | Fix |
| CVE-2021-24291 | Photo Gallery WordPress plugin Multiple reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 14.5% | 2021-05-14 | NucleiFix |
| CVE-2021-24287 | Select All Categories and Taxonomies WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 10.4% | 2021-05-14 | NucleiExploit codeFix |
| CVE-2021-24286 | Redirect 404 to Parent WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 12.7% | 2021-05-14 | NucleiExploit codeFix |
| CVE-2021-24285 | Car Seller - Auto Classifieds Script WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 14.7% | 2021-05-14 | Nuclei |
| CVE-2021-24284 | Kaswara Modern VC Addons WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 42.1% | 2021-05-14 | Nuclei |
| CVE-2021-24283 | Accordion WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-14 | Fix |
| CVE-2021-24282 | Redirection for Contact Form 7 WordPress plugin Unprotected AJAX actions | 6.3NVD v3.1 | 0.7% | 2021-05-14 | Fix |
| CVE-2021-24281 | Redirection for Contact Form 7 WordPress plugin authenticated arbitrary post deletion | 4.3NVD v3.1 | 0.7% | 2021-05-14 | Fix |
| CVE-2021-24280 | Redirection for Contact Form 7 WordPress plugin authenticated PHP object injection | 8.8NVD v3.1 | 2.0% | 2021-05-14 | Fix |
| CVE-2021-24279 | Redirection for Contact Form 7 WordPress plugin authenticated arbitrary plugin installation | 6.5NVD v3.1 | 0.8% | 2021-05-14 | Fix |
| CVE-2021-24278 | Redirection for Contact Form 7 WordPress plugin unauthenticated arbitrary nonce Generation | 7.5NVD v3.1 | 7.4% | 2021-05-14 | NucleiFix |
| CVE-2021-24277 | RSS for Yandex Turbo WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-14 | Fix |
| CVE-2021-24195 | wp-buy Login as User or Customer AJAX plugin installer improper authorization | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24194 | wp-buy Login Protection AJAX plugin installer improper authorization | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24193 | wp-buy Visitor Traffic Real Time Statistics AJAX plugin installer improper authorization | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24192 | Tree Sitemap WordPress plugin arbitrary plugin Installation/Activation via low privilege user | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24191 | wp-buy WP Maintenance Mode and Site Under Construction AJAX plugin installer improper authorization | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24190 | wp-buy WooCommerce Conditional Marketing Mailer AJAX plugin installer improper authorization | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24189 | wp-buy Captchinoo, Google recaptcha for admin login page improper authorization | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-24188 | WP Content Copy Protection and No Right Click plugin installation handler vulnerability | 8.8NVD v3.1 | 1.3% | 2021-05-14 | Fix |
| CVE-2021-22866 | GitHub Enterprise Server GitHub App authorization flow UI misrepresentation | 8.8v3.1 | 1.0% | 2021-05-14 | Fix |
| CVE-2021-20565 | IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236. | 4.6CNA v3.0 | 0.8% | 2021-05-14 | Fix |
| CVE-2021-20564 | IBM Cloud Pak for Security cleartext transmission of sensitive information | 5.9CNA v3.0 | 0.9% | 2021-05-14 | Fix |
| CVE-2021-20429 | IBM QRadar SIEM incorrect authorization | 3.7CNA v3.0 | 0.8% | 2021-05-14 | Fix |
| CVE-2021-20393 | IBM QRadar SIEM information disclosure through error messages | 5.3CNA v3.0 | 1.4% | 2021-05-14 | Fix |
| CVE-2021-20392 | IBM QRadar SIEM cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-05-14 | Fix |
| CVE-2021-20391 | IBM QRadar SIEM insecure storage of sensitive information | 4.0CNA v3.0 | 0.2% | 2021-05-14 | Fix |
| CVE-2021-3537 | Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing | 5.9NVD v3.1 | 3.6% | 2021-05-14 | Fix |
| CVE-2021-3402 | libyara An integer overflow | 9.1NVD v3.1 | 2.2% | 2021-05-14 | Fix |
| CVE-2021-33026 | Deserialization of untrusted data in Flask-caching | 9.8v3.1 | 7.3% | 2021-05-13 | Exploit code |
| CVE-2021-32925 | Chamilo XML external entity injection | 6.5v3.1 | 1.7% | 2021-05-13 | |
| CVE-2021-32921 | Prosody race condition | 5.9v3.1 | 1.6% | 2021-05-13 | Fix |
| CVE-2021-32920 | Prosody TLS renegotiation handling denial of service | 7.5v3.1 | 2.3% | 2021-05-13 | Fix |
| CVE-2021-32919 | Prosody improper certificate validation | 7.5v3.1 | 1.4% | 2021-05-13 | Fix |
| CVE-2021-32918 | Prosody denial of service | 7.5v3.1 | 2.1% | 2021-05-13 | Fix |
| CVE-2021-32917 | Prosody missing authorization | 5.3v3.1 | 2.2% | 2021-05-13 | Fix |
| CVE-2021-32615 | Piwigo SQL injection | 9.8v3.1 | 2.1% | 2021-05-13 | |
| CVE-2021-31876 | Bitcoin incorrect authorization | 6.5v3.1 | 1.6% | 2021-05-13 | Fix |
| CVE-2021-31215 | SchedMD Slurm remote code execution | 8.8v3.1 | 2.9% | 2021-05-13 | Fix |
| CVE-2021-29623 | Uninitialized variable bug in Exiv2 | 3.6CNA v3.1 | 1.1% | 2021-05-13 | Fix |
| CVE-2021-29510 | Pydantic datetime and date field validation infinite loop | 3.3CNA v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-29506 | graphhopper navigate endpoint is vulnerable to regex injection that may lead to denial of service | 6.5CNA v3.1 | 1.4% | 2021-05-13 | Fix |
| CVE-2021-28799 | QNAP NAS improper authorization | 10.0CNA v3.1 | 78.3% | 2021-05-13 | KEVNucleiFix |
| CVE-2021-27413 | Omron CX-One stack-based buffer overflow | 7.8v3.1 | 10.0% | 2021-05-13 | Fix |
| CVE-2021-26311 | AMD Secure Encrypted Virtualization | 7.2v3.1 | 1.7% | 2021-05-13 | Fix |
| CVE-2021-25694 | Teradici Pcoip Graphics Agent uncontrolled search path | 7.8v3.1 | 0.3% | 2021-05-13 | Fix |
| CVE-2021-25693 | Teradici Pcoip Agent multiple versions denial of service | 7.5v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-23910 | Mercedes-benz Hermes out-of-bounds write | 9.8v3.1 | 1.7% | 2021-05-13 | |
| CVE-2021-23909 | Mercedes-benz Hermes out-of-bounds write | 9.8v3.1 | 2.4% | 2021-05-13 | |
| CVE-2021-23908 | Mercedes-benz Headunit NTG6 Mercedes-benz User Experience type confusion | 9.8v3.1 | 2.4% | 2021-05-13 | |
| CVE-2021-23907 | Mercedes-benz Headunit NTG6 Mercedes-benz User Experience remote code execution | 9.8v3.1 | 2.4% | 2021-05-13 | |
| CVE-2021-23906 | Mercedes-benz User Experience remote code execution | 6.8v3.1 | 0.8% | 2021-05-13 | |
| CVE-2021-22155 | BlackBerry Workspaces Server SAML Authentication component authentication bypass | 8.8v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-22154 | BlackBerry Unified Endpoint Management Management console component information disclosure | 5.3v3.1 | 0.8% | 2021-05-13 | Fix |
| CVE-2021-22153 | BlackBerry Unified Endpoint Management Management console component remote code execution | 7.3v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-22152 | BlackBerry Unified Endpoint Management Management console component denial of service | 5.5v3.1 | 0.2% | 2021-05-13 | Fix |
| CVE-2021-22140 | Elastic App Search XML external entity injection | 7.5v3.1 | 1.3% | 2021-05-13 | Fix |
| CVE-2021-22139 | Elastic Kibana denial of service | 6.5v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-22138 | Elasticsearch improper certificate validation | 3.7v3.1 | 0.5% | 2021-05-13 | Fix |
| CVE-2021-22137 | Exposure of sensitive information to an unauthorized actor in Elasticsearch | 5.3v3.1 | 1.1% | 2021-05-13 | Fix |
| CVE-2021-22136 | Elastic Kibana insufficient session expiration | 3.5v3.1 | 0.3% | 2021-05-13 | Fix |
| CVE-2021-22135 | API information disclosure flaw in Elasticsearch | 5.3v3.1 | 1.2% | 2021-05-13 | Fix |
| CVE-2021-21424 | symfony prevent user enumeration using Guard or the new Authenticator-based Security | 5.3CNA v3.1 | 1.6% | 2021-05-13 | Exploit codeFix |
| CVE-2021-20999 | Weidmueller: Accidentally open network port in u-controls and IoT-Gateways | 9.8v3.1 | 0.9% | 2021-05-13 | Fix |
| CVE-2021-20998 | WAGO: Managed Switches: Unauthorized creation of user accounts | 9.8v3.1 | 1.1% | 2021-05-13 | Fix |
| CVE-2021-20997 | WAGO: Managed Switches: Unauthorized access to password hashes | 7.5v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-20996 | WAGO: Managed Switches: Unsecure Cookie settings | 5.3v3.1 | 0.8% | 2021-05-13 | Fix |
| CVE-2021-20995 | WAGO: Managed Switches: Storage of user credentials in a cookie | 7.5v3.1 | 0.5% | 2021-05-13 | Fix |
| CVE-2021-20994 | WAGO: Managed Switches: Reflected cross-site scripting | 6.1NVD v3.1 | 0.6% | 2021-05-13 | Fix |
| CVE-2021-20993 | WAGO: Managed Switches: Exposure of sensitive information through directory listing | 5.3v3.1 | 0.8% | 2021-05-13 | Fix |
| CVE-2021-20988 | Hilscher rcX RTOS: Wrong handling of the UDP checksum | 7.5v3.1 | 1.0% | 2021-05-13 | Fix |
| CVE-2021-20535 | IBM Jazz Reporting Service server-side request forgery | 6.5CNA v3.0 | 0.5% | 2021-05-13 | Fix |
| CVE-2021-20331 | MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener | 4.2CNA v3.1 | 0.6% | 2021-05-13 | Fix |
| CVE-2021-20250 | JBoss EJB client information disclosure | 4.3v3.1 | 0.7% | 2021-05-13 | Fix |
| CVE-2021-20221 | QEMU out-of-bounds read | 6.0NVD v3.1 | 0.3% | 2021-05-13 | Fix |
| CVE-2021-20181 | QEMU the race condition | 7.5NVD v3.1 | 0.3% | 2021-05-13 | Fix |
| CVE-2021-20025 | SonicWall Email Security Virtual Appliance hard-coded credentials | 7.8v3.1 | 0.4% | 2021-05-13 | Fix |
| CVE-2021-3528 | NooBaa insufficiently protected credentials | 8.8v3.1 | 0.9% | 2021-05-13 | Fix |
| CVE-2021-32611 | Antisip Exosip2 eXcall_api.c null pointer dereference | 7.5v3.1 | 1.1% | 2021-05-12 | |
| CVE-2021-32608 | Smartstore forum post view vulnerability | 9.8v3.1 | 33.4% | 2021-05-12 | |
| CVE-2021-32607 | Smartstore private messages view vulnerability | 9.8v3.1 | 33.4% | 2021-05-12 | |
| CVE-2021-32572 | Specotech WebViewer path traversal | 7.5v3.1 | 1.7% | 2021-05-12 | |
| CVE-2021-31519 | Trend Micro HouseCall for Home Networks incorrect default permissions | 7.3v3.1 | 0.3% | 2021-05-12 | Fix |
| CVE-2021-31341 | Mendix Database Replication Module information disclosure through error messages | 4.3v3.1 | 0.7% | 2021-05-12 | Fix |
| CVE-2021-31339 | Siemens Mendix Excel Importer Module information disclosure through error messages | 4.3v3.1 | 0.8% | 2021-05-12 | Fix |
| CVE-2021-30214 | eng KNOWAGE server-side template injection | 5.4v3.1 | 23.8% | 2021-05-12 | |
| CVE-2021-30213 | eng KNOWAGE cross-site scripting | 6.1v3.1 | 2.7% | 2021-05-12 | Nuclei |
| CVE-2021-30212 | eng KNOWAGE cross-site scripting | 5.4v3.1 | 0.6% | 2021-05-12 | |
| CVE-2021-30211 | eng KNOWAGE cross-site scripting | 5.4v3.1 | 0.5% | 2021-05-12 | |
| CVE-2021-29511 | Memory over-allocation in evm crate | 6.5CNA v3.1 | 1.3% | 2021-05-12 | Fix |
| CVE-2021-28649 | Trend Micro HouseCall for Home Networks incorrect default permissions | 7.3v3.1 | 0.3% | 2021-05-12 | Fix |
| CVE-2021-27398 | Siemens Tecnomatix Plant Simulation stack-based buffer overflow | 7.8v3.1 | 1.5% | 2021-05-12 | Fix |
| CVE-2021-27397 | Siemens Tecnomatix Plant Simulation memory corruption | 7.8v3.1 | 1.4% | 2021-05-12 | Fix |
| CVE-2021-27396 | Siemens Tecnomatix Plant Simulation stack-based buffer overflow | 7.8v3.1 | 1.5% | 2021-05-12 | Fix |
| CVE-2021-27386 | Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) memory leak | 7.5v3.1 | 1.8% | 2021-05-12 | Fix |
| CVE-2021-27385 | Siemens SIMATIC HMI Panels resource exhaustion | 7.5v3.1 | 2.6% | 2021-05-12 | Fix |
| CVE-2021-27384 | Siemens SIMATIC HMI Panels out-of-bounds access | 9.8v3.1 | 2.6% | 2021-05-12 | Fix |
| CVE-2021-27383 | Siemens SIMATIC HMI Panels resource exhaustion | 7.5v3.1 | 1.8% | 2021-05-12 | Fix |
| CVE-2021-25662 | A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. | 7.5v3.1 | 1.6% | 2021-05-12 | Fix |
| CVE-2021-25661 | Siemens SIMATIC HMI Comfort Panels out-of-bounds access | 7.5v3.1 | 1.1% | 2021-05-12 | Fix |
| CVE-2021-25660 | Siemens SIMATIC HMI Comfort Panels out-of-bounds access | 7.5v3.1 | 1.0% | 2021-05-12 | Fix |
| CVE-2021-23892 | McAfee Endpoint Security (ENS) link following | 8.2CNA v3.1 | 0.2% | 2021-05-12 | Fix |
| CVE-2021-23891 | Privilege escalation vulnerability in McAfee Total Protection (MTP) | 7.8CNA v3.1 | 0.3% | 2021-05-12 | Fix |
| CVE-2021-23872 | Privilege escalation vulnerability in McAfee Total Protection (MTP) | 7.8CNA v3.1 | 0.4% | 2021-05-12 | Fix |
| CVE-2021-23135 | Argo CD leaked secret data into error messages and logs on invalid edits via UI | 5.5NVD v3.1 | 0.2% | 2021-05-12 | Fix |
| CVE-2021-23134 | Linux Kernel llcp_sock_bind/connect use-after-free | 7.8CNA v3.1 | 0.4% | 2021-05-12 | Fix |
| CVE-2021-20277 | samba out-of-bounds read | 7.5NVD v3.1 | 4.3% | 2021-05-12 | Fix |
| CVE-2021-20202 | Temporary Directory Hijacking vulnerability in Keycloak | 7.3v3.1 | 0.3% | 2021-05-12 | Fix |
| CVE-2021-3457 | smart_proxy_shellhooks incorrect authorization | 6.1NVD v3.1 | 0.2% | 2021-05-12 | |
| CVE-2021-32606 | Linux kernel use-after-free | 7.8v3.1 | 0.4% | 2021-05-11 | Fix |
| CVE-2021-32605 | Zzzcms Zzzphp OS command injection | 9.8v3.1 | 3.8% | 2021-05-11 | Fix |
| CVE-2021-32604 | SolarWinds Serv-U share URL XSS | 5.4v3.1 | 1.7% | 2021-05-11 | Fix |
| CVE-2021-32573 | express-cart cross-site scripting | 4.8v3.1 | 0.5% | 2021-05-11 | Fix |
| CVE-2021-32563 | Xfce thunar improper control of dynamic code | 9.8v3.1 | 3.1% | 2021-05-11 | Fix |
| CVE-2021-32561 | OctoPrint API Error messages vulnerable to XSS | 6.1v3.1 | 1.2% | 2021-05-11 | Fix |
| CVE-2021-32560 | OctoPrint Incorrect Access Control | 6.5v3.1 | 1.5% | 2021-05-11 | Fix |
| CVE-2021-32544 | Intelligent global technology Ltd, igt+ DOM-based cross-site scripting | 5.4CNA v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-32089 | Zebra FX9500 unrestricted file upload | 9.8v3.1 | 1.6% | 2021-05-11 | Fix |
| CVE-2021-31936 | Microsoft Accessibility Insights For Web information disclosure | 7.4CNA v3.1 | 3.3% | 2021-05-11 | Fix |
| CVE-2021-31915 | JetBrains TeamCity OS command injection | 9.8v3.1 | 3.2% | 2021-05-11 | Fix |
| CVE-2021-31914 | JetBrains TeamCity arbitrary code execution | 9.8v3.1 | 2.3% | 2021-05-11 | Fix |
| CVE-2021-31913 | JetBrains TeamCity improper integrity check validation | 7.5v3.1 | 0.7% | 2021-05-11 | Fix |
| CVE-2021-31912 | JetBrains TeamCity weak password recovery | 8.8v3.1 | 1.2% | 2021-05-11 | Fix |
| CVE-2021-31911 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.7% | 2021-05-11 | Fix |
| CVE-2021-31910 | JetBrains TeamCity server-side request forgery | 7.5v3.1 | 1.3% | 2021-05-11 | Fix |
| CVE-2021-31909 | JetBrains TeamCity argument injection | 9.8v3.1 | 3.2% | 2021-05-11 | Fix |
| CVE-2021-31908 | JetBrains TeamCity cross-site scripting | 5.4v3.1 | 0.5% | 2021-05-11 | Fix |
| CVE-2021-31907 | JetBrains TeamCity incorrect permission assignment | 5.3v3.1 | 0.9% | 2021-05-11 | Fix |
| CVE-2021-31906 | JetBrains TeamCity audit logging vulnerability | 2.7v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-31905 | JetBrains YouTrack information disclosure | 7.5v3.1 | 1.9% | 2021-05-11 | Fix |
| CVE-2021-31904 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.7% | 2021-05-11 | Fix |
| CVE-2021-31903 | JetBrains YouTrack cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-31902 | JetBrains YouTrack incorrect permission assignment | 7.5v3.1 | 1.2% | 2021-05-11 | Fix |
| CVE-2021-31901 | JetBrains Hub two-factor authentication for the All Users group improper authentication | 7.5v3.1 | 0.9% | 2021-05-11 | Fix |
| CVE-2021-31900 | In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host. | 5.3v3.1 | 0.7% | 2021-05-11 | Fix |
| CVE-2021-31899 | JetBrains Code With Me read-only mode enforcement vulnerability | 8.8v3.1 | 1.3% | 2021-05-11 | Fix |
| CVE-2021-31898 | JetBrains WebStorm cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-31897 | JetBrains WebStorm code execution | 9.8v3.1 | 1.5% | 2021-05-11 | Fix |
| CVE-2021-31537 | Sisinformatik Sis-rewe GO cross-site scripting | 6.1v3.1 | 7.8% | 2021-05-11 | NucleiFix |
| CVE-2021-31214 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.9% | 2021-05-11 | Fix |
| CVE-2021-31213 | Microsoft Visual Studio Code Remote Containers Extension Remote code execution | 7.8CNA v3.1 | 52.8% | 2021-05-11 | Fix |
| CVE-2021-31211 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.5% | 2021-05-11 | Fix |
| CVE-2021-31209 | Microsoft Exchange Server spoofing | 6.5CNA v3.1 | 2.6% | 2021-05-11 | Fix |
| CVE-2021-31208 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-31207 | Microsoft Exchange Server security feature bypass | 6.6CNA v3.1 | 99.8% | 2021-05-11 | KEVMetasploitEmerging ThreatsSnortExploit codeKCVFix |
| CVE-2021-31205 | Microsoft Windows SMB client security feature bypass | 6.5CNA v3.1 | 2.9% | 2021-05-11 | Fix |
| CVE-2021-31204 | Microsoft .NET and Visual Studio elevation of privilege | 7.3CNA v3.1 | 1.2% | 2021-05-11 | Fix |
| CVE-2021-31200 | Microsoft common_utils.py common Utilities remote code execution | 7.2CNA v3.1 | 2.5% | 2021-05-11 | Fix |
| CVE-2021-31198 | Microsoft Exchange Server remote code execution | 7.8CNA v3.1 | 4.9% | 2021-05-11 | Fix |
| CVE-2021-31195 | Microsoft Exchange Server remote code execution | 6.5CNA v3.1 | 73.7% | 2021-05-11 | NucleiFix |
| CVE-2021-31194 | Microsoft Windows OLE Automation remote code execution | 8.8CNA v3.1 | 2.4% | 2021-05-11 | Fix |
| CVE-2021-31193 | Microsoft Windows SSDP service elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-05-11 | Fix |
| CVE-2021-31192 | Microsoft Windows Media Foundation Core remote code execution | 7.8CNA v3.1 | 2.3% | 2021-05-11 | Fix |
| CVE-2021-31191 | Microsoft Windows Projected File System FS Filter driver information disclosure | 5.5CNA v3.1 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-31190 | Microsoft Windows Container Isolation FS Filter driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-31188 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 1.4% | 2021-05-11 | Fix |
| CVE-2021-31187 | Microsoft Windows WalletService elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-05-11 | Fix |
| CVE-2021-31186 | Microsoft Windows Remote Desktop Protocol (RDP) information disclosure | 7.4CNA v3.1 | 3.0% | 2021-05-11 | Fix |
| CVE-2021-31185 | Microsoft Windows Desktop Bridge denial of service | 5.5CNA v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-31184 | Microsoft Windows Infrared Data Association (IrDA) information disclosure | 5.5CNA v3.1 | 1.6% | 2021-05-11 | Exploit codeFix |
| CVE-2021-31182 | Microsoft Bluetooth driver spoofing | 7.1CNA v3.1 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-31181 | Microsoft SharePoint remote code execution | 8.8CNA v3.1 | 28.8% | 2021-05-11 | MetasploitExploit codeFix |
| CVE-2021-31180 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 2.3% | 2021-05-11 | Fix |
| CVE-2021-31179 | Microsoft Office remote code execution | 7.8CNA v3.1 | 13.5% | 2021-05-11 | Fix |
| CVE-2021-31178 | Microsoft Office information disclosure | 5.5CNA v3.1 | 16.0% | 2021-05-11 | Fix |
| CVE-2021-31177 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.1% | 2021-05-11 | Fix |
| CVE-2021-31176 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.0% | 2021-05-11 | Fix |
| CVE-2021-31175 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.2% | 2021-05-11 | Fix |
| CVE-2021-31174 | Microsoft Excel information disclosure | 5.5CNA v3.1 | 2.9% | 2021-05-11 | Fix |
| CVE-2021-31173 | Microsoft SharePoint server information disclosure | 5.3CNA v3.1 | 2.1% | 2021-05-11 | Fix |
| CVE-2021-31172 | Microsoft SharePoint server spoofing | 7.1CNA v3.1 | 1.8% | 2021-05-11 | Fix |
| CVE-2021-31171 | Microsoft SharePoint information disclosure | 4.1CNA v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-31170 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-05-11 | Fix |
| CVE-2021-31169 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-05-11 | Fix |
| CVE-2021-31168 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-05-11 | Fix |
| CVE-2021-31167 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-05-11 | Fix |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack remote code execution | 9.8CNA v3.1 | 99.9% | 2021-05-11 | KEVEmerging ThreatsSnortExploit codeFix |
| CVE-2021-31165 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-05-11 | Fix |
| CVE-2021-30504 | JetBrains IntelliJ IDEA denial of service | 7.5v3.1 | 2.3% | 2021-05-11 | Fix |
| CVE-2021-30482 | JetBrains Upsource improper preservation of permissions | 7.5v3.1 | 0.9% | 2021-05-11 | Fix |
| CVE-2021-30174 | RiyaLab Co., Ltd. CloudISO stored XSS | 5.4CNA v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-30006 | JetBrains IntelliJ IDEA XML external entity injection | 7.5v3.1 | 1.1% | 2021-05-11 | Fix |
| CVE-2021-30005 | JetBrains PyCharm insufficient verification of data authenticity | 7.8v3.1 | 0.9% | 2021-05-11 | Exploit codeFix |
| CVE-2021-29509 | Keepalive Connections causing denial of service in puma | 7.5CNA v3.1 | 1.6% | 2021-05-11 | Fix |
| CVE-2021-29508 | Insecure deserialization in Wire | 9.1CNA v3.1 | 1.6% | 2021-05-11 | |
| CVE-2021-29471 | Denial of service in Matrix Synapse | 3.7CNA v3.1 | 1.6% | 2021-05-11 | Fix |
| CVE-2021-29263 | JetBrains IntelliJ IDEA code execution | 7.8v3.1 | 0.5% | 2021-05-11 | Fix |
| CVE-2021-28479 | Microsoft Windows CSC service information disclosure | 5.5CNA v3.1 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-28478 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.6% | 2021-05-11 | Fix |
| CVE-2021-28476 | Microsoft Windows Hyper-V remote code execution | 9.9CNA v3.1 | 38.6% | 2021-05-11 | Exploit codeFix |
| CVE-2021-28474 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 50.8% | 2021-05-11 | Emerging ThreatsFix |
| CVE-2021-28465 | Microsoft Web Media Extensions remote code execution | 7.8CNA v3.1 | 3.7% | 2021-05-11 | Fix |
| CVE-2021-28461 | Microsoft Dynamics Finance and Operations cross-site scripting | 6.1CNA v3.1 | 1.3% | 2021-05-11 | Fix |
| CVE-2021-28455 | Microsoft Jet Red Database Engine and Access Connectivity Engine remote code execution | 8.8CNA v3.1 | 2.1% | 2021-05-11 | Fix |
| CVE-2021-27733 | JetBrains YouTrack cross-site scripting | 5.4v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-27619 | SAP Commerce (Backoffice Search) information disclosure | 6.5CNA v3.0 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-27618 | SAP Process Integration (Integration Builder Framework) unrestricted file upload | 4.9CNA v3.0 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-27617 | SAP Process Integration (Integration Builder Framework) denial of service | 4.9CNA v3.0 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-27616 | SAP Business One information disclosure | 7.8CNA v3.0 | 0.3% | 2021-05-11 | Fix |
| CVE-2021-27614 | SAP Business One injection | 7.3CNA v3.0 | 0.3% | 2021-05-11 | Fix |
| CVE-2021-27613 | SAP Business One (Cookbooks) information disclosure | 7.8CNA v3.0 | 0.3% | 2021-05-11 | Fix |
| CVE-2021-27612 | SAP GUI open redirect | 3.4CNA v3.0 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-27611 | SAP NetWeaver AS ABAP code injection | 8.2CNA v3.0 | 0.3% | 2021-05-11 | Fix |
| CVE-2021-27068 | Visual Studio remote code execution | 8.8CNA v3.1 | 53.6% | 2021-05-11 | Fix |
| CVE-2021-26422 | Skype for Business and Lync remote code execution | 7.2CNA v3.1 | 2.2% | 2021-05-11 | Fix |
| CVE-2021-26421 | Microsoft Skype for Business and Lync spoofing | 6.5CNA v3.1 | 1.4% | 2021-05-11 | Fix |
| CVE-2021-26419 | Microsoft Internet Explorer 11 scripting Engine memory corruption | 7.5CNA v3.1 | 22.8% | 2021-05-11 | Fix |
| CVE-2021-26418 | Microsoft SharePoint server spoofing | 4.6CNA v3.1 | 1.2% | 2021-05-11 | Fix |
| CVE-2021-26310 | JetBrains TeamCity denial of service | 7.5v3.1 | 1.5% | 2021-05-11 | Fix |
| CVE-2021-26309 | JetBrains TeamCity information disclosure | 3.3v3.1 | 0.2% | 2021-05-11 | Fix |
| CVE-2021-21990 | VMware Workspace ONE UEM console cross-site scripting | 6.1v3.1 | 0.8% | 2021-05-11 | Fix |
| CVE-2021-21656 | XML external entity (XXE) attacks in Jenkins Xcode Integration Plugin | 7.1v3.1 | 1.5% | 2021-05-11 | Fix |
| CVE-2021-21655 | Cross-site request forgery in Jenkins P4 Plugin | 7.1v3.1 | 0.5% | 2021-05-11 | Fix |
| CVE-2021-21654 | Missing authorization in Jenkins P4 Plugin | 4.3v3.1 | 1.3% | 2021-05-11 | Fix |
| CVE-2021-21653 | Missing authorization in Jenkins xray-connector | 4.3v3.1 | 0.9% | 2021-05-11 | Fix |
| CVE-2021-21652 | CSRF vulnerability in Jenkins Xray Test Management For Jira plugin allows capturing credentials | 7.1v3.1 | 0.6% | 2021-05-11 | Fix |
| CVE-2021-21651 | Missing authorization in Jenkins S3 Publisher Plugin | 4.3v3.1 | 0.7% | 2021-05-11 | Fix |
| CVE-2021-21650 | Missing authorization in Jenkins S3 Publisher Plugin | 4.3v3.1 | 0.7% | 2021-05-11 | Fix |
| CVE-2021-21649 | Cross-site scripting in Jenkins Dashboard View Plugin | 5.4v3.1 | 72.7% | 2021-05-11 | Fix |
| CVE-2021-21648 | Cross-site request forgery in Jenkins Credentials Plugin | 6.1v3.1 | 11.3% | 2021-05-11 | Fix |
| CVE-2021-20313 | ImageMagick information disclosure | 7.5NVD v3.1 | 1.8% | 2021-05-11 | Fix |
| CVE-2021-20312 | ImageMagick integer overflow | 7.5NVD v3.1 | 2.4% | 2021-05-11 | Fix |
| CVE-2021-20311 | ImageMagick divide by zero | 7.5NVD v3.1 | 1.3% | 2021-05-11 | Fix |
| CVE-2021-20310 | ImageMagick divide by zero | 7.5NVD v3.1 | 1.3% | 2021-05-11 | Fix |
| CVE-2021-20309 | ImagemMagick divide by zero | 7.5NVD v3.1 | 2.3% | 2021-05-11 | Fix |
| CVE-2021-3504 | hivex out-of-bounds read | 5.4NVD v3.1 | 1.9% | 2021-05-11 | Fix |
| CVE-2021-3315 | JetBrains TeamCity cross-site scripting | 5.4v3.1 | 0.5% | 2021-05-11 | Fix |
| CVE-2021-32489 | Yubico Yubihsm-shell integer overflow | 4.4v3.1 | 0.9% | 2021-05-10 | |
| CVE-2021-32471 | MIT Universal Turing Machine Marvin Minsky improper input validation | 7.8v3.1 | 0.8% | 2021-05-10 | Exploit code |
| CVE-2021-32399 | Linux kernel race condition | 7.0v3.1 | 0.7% | 2021-05-10 | Exploit codeFix |
| CVE-2021-32056 | Cyrus IMAP incorrect permission assignment | 4.3v3.1 | 1.7% | 2021-05-10 | Fix |
| CVE-2021-32053 | Uncontrolled resource consumption in JPA Server in Hapi Fhir | 5.3v3.1 | 1.6% | 2021-05-10 | Fix |
| CVE-2021-31520 | Trend Micro IM Security weak session token authentication bypass | 8.1v3.1 | 3.9% | 2021-05-10 | Fix |
| CVE-2021-29502 | Remote code execution in the WarnSystem module of Laggrons-Dumb-Cogs | 7.3CNA v3.1 | 0.8% | 2021-05-10 | Fix |
| CVE-2021-29501 | Dav-Git Dav-Cogs remote code execution in ticketer | 8.1CNA v3.1 | 0.9% | 2021-05-10 | Fix |
| CVE-2021-29022 | InvoicePlane unrestricted file upload | 5.3v3.1 | 1.1% | 2021-05-10 | |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) out-of-bounds write | 8.8v3.1 | 5.4% | 2021-05-10 | KEVExploit codeFix |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) use-after-free | 8.8v3.1 | 12.1% | 2021-05-10 | KEVExploit codeFix |
| CVE-2021-26583 | iLO Amplifier Pack remote code execution | 9.8v3.1 | 4.4% | 2021-05-10 | Fix |
| CVE-2021-26077 | Improper authentication in Atlassian Connect Spring Boot | 8.8NVD v3.1 | 1.0% | 2021-05-10 | Fix |
| CVE-2021-25849 | Moxa Vport 06ec-2v26m userdisk/vport_lldpd integer underflow | 7.5v3.1 | 1.1% | 2021-05-10 | Fix |
| CVE-2021-25848 | Moxa Vport 06ec-2v26m out-of-bounds read | 9.1v3.1 | 1.2% | 2021-05-10 | Fix |
| CVE-2021-25847 | Moxa Vport 06ec-2v26m out-of-bounds read | 9.1v3.1 | 1.2% | 2021-05-10 | Fix |
| CVE-2021-25846 | Moxa Vport 06ec-2v26m userdisk/vport_lldpd improper input validation | 7.5v3.1 | 1.1% | 2021-05-10 | Fix |
| CVE-2021-25845 | Moxa Vport 06ec-2v26m userdisk/vport_lldpd improper input validation | 7.5v3.1 | 1.0% | 2021-05-10 | Fix |
| CVE-2021-25645 | Couchbase Server cleartext storage of sensitive information | 4.4v3.1 | 0.2% | 2021-05-10 | Fix |
| CVE-2021-24011 | Fortinet FortiNAC privilege escalation | 6.3CNA v3.1 | 0.8% | 2021-05-10 | Fix |
| CVE-2021-23016 | BIG-IP APM virtual server access restrictions vulnerability | 5.3v3.1 | 0.8% | 2021-05-10 | Fix |
| CVE-2021-23015 | BIG-IP incorrect authorization | 7.2v3.1 | 1.3% | 2021-05-10 | Fix |
| CVE-2021-23014 | BIG-IP ASM and Advanced WAF missing authorization | 8.8v3.1 | 0.8% | 2021-05-10 | Fix |
| CVE-2021-23013 | F5 BIG-IP Traffic Management Microkernel vulnerability | 7.5v3.1 | 0.9% | 2021-05-10 | Fix |
| CVE-2021-23012 | BIG-IP OS command injection | 8.2v3.1 | 0.3% | 2021-05-10 | Fix |
| CVE-2021-23011 | BIG-IP resource exhaustion | 7.5v3.1 | 1.0% | 2021-05-10 | Fix |
| CVE-2021-23010 | BIG-IP ASM and Advanced WAF bd process vulnerability | 7.5v3.1 | 1.0% | 2021-05-10 | Fix |
| CVE-2021-23009 | BIG-IP infinite loop | 7.5v3.1 | 1.0% | 2021-05-10 | Fix |
| CVE-2021-23008 | BIG-IP APM improper authentication | 9.8v3.1 | 1.3% | 2021-05-10 | Fix |
| CVE-2021-22672 | Delta Electronics CNCSoft ScreenEditor out-of-bounds write | 7.8v3.1 | 9.7% | 2021-05-10 | Fix |
| CVE-2021-21822 | Foxit Reader JavaScript engine use-after-free | 8.8v3.1 | 1.8% | 2021-05-10 | Fix |
| CVE-2021-21430 | OpenAPITools OpenAPI Generator generated Java and Scala client code vulnerability | 6.2CNA v3.1 | 0.4% | 2021-05-10 | Fix |
| CVE-2021-21428 | OpenAPITools OpenAPI Generator online code generator vulnerability | 9.3CNA v3.1 | 0.4% | 2021-05-10 | Fix |
| CVE-2021-20717 | EC-CUBE cross-site scripting | 6.1NVD v3.1 | 2.3% | 2021-05-10 | Fix |
| CVE-2021-20577 | IBM Cloud Pak for Security cross-site scripting | 4.3CNA v3.0 | 0.6% | 2021-05-10 | Fix |
| CVE-2021-20559 | IBM Control Desk cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-05-10 | Fix |
| CVE-2021-20538 | IBM Cloud Pak for Security incorrect authorization | 4.8CNA v3.0 | 0.7% | 2021-05-10 | Fix |
| CVE-2021-3003 | Agenziaentrate Desktop Telematico cleartext transmission of sensitive information | 5.3v3.1 | 0.8% | 2021-05-10 | Fix |
| CVE-2021-32470 | Craft CMS cross-site scripting | 6.1v3.1 | 0.7% | 2021-05-07 | Fix |
| CVE-2021-32104 | openemr SQL injection | 8.8v3.1 | 1.2% | 2021-05-07 | Fix |
| CVE-2021-32103 | openemr interface/usergroup/usergroup_admin.php stored cross-site scripting | 4.8v3.1 | 0.7% | 2021-05-07 | Fix |
| CVE-2021-32102 | openemr SQL injection | 8.8v3.1 | 1.2% | 2021-05-07 | Fix |
| CVE-2021-32101 | openemr incorrect permission assignment | 8.2v3.1 | 1.2% | 2021-05-07 | Fix |
| CVE-2021-32100 | Artica Pandora FMS remote file inclusion | 6.5v3.1 | 2.6% | 2021-05-07 | Fix |
| CVE-2021-32099 | Artica Pandora FMS pandora_console component SQL injection | 9.8v3.1 | 12.7% | 2021-05-07 | Exploit codeFix |
| CVE-2021-32098 | Artica Pandora FMS deserialization of untrusted data | 9.8v3.1 | 2.5% | 2021-05-07 | Fix |
| CVE-2021-32096 | NSA emissary cross-site request forgery | 8.8v3.1 | 0.6% | 2021-05-07 | |
| CVE-2021-32095 | NSA emissary missing authorization | 8.1v3.1 | 0.9% | 2021-05-07 | |
| CVE-2021-32094 | NSA emissary unrestricted file upload | 8.8v3.1 | 1.2% | 2021-05-07 | |
| CVE-2021-32093 | NSA emissary missing authorization | 6.5v3.1 | 1.0% | 2021-05-07 | |
| CVE-2021-32092 | NSA emissary DocumentAction component of U.S cross-site scripting | 6.1v3.1 | 1.0% | 2021-05-07 | |
| CVE-2021-32091 | Cross-site scripting in LocalStack | 6.1v3.1 | 0.8% | 2021-05-07 | Fix |
| CVE-2021-32090 | Command injection in LocalStack | 9.8v3.1 | 2.1% | 2021-05-07 | Fix |
| CVE-2021-32074 | HashiCorp Vault-action vault GitHub action did not correctly mask multi-line secrets in output | 7.5v3.1 | 1.9% | 2021-05-07 | Fix |
| CVE-2021-31758 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 6.6% | 2021-05-07 | |
| CVE-2021-31757 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 3.3% | 2021-05-07 | |
| CVE-2021-31756 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 2.9% | 2021-05-07 | |
| CVE-2021-31755 | Tenda AC11 Router stack buffer overflow | 9.8v3.1 | 86.9% | 2021-05-07 | KEVNucleiEmerging Threats |
| CVE-2021-31472 | Foxit Reader out-of-bounds write | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31471 | Foxit Reader out-of-bounds read | 5.5v3.1 | 2.1% | 2021-05-07 | Fix |
| CVE-2021-31470 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31469 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.1% | 2021-05-07 | Fix |
| CVE-2021-31468 | Foxit Reader out-of-bounds read | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31467 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31466 | Foxit Reader out-of-bounds read | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31465 | Foxit Reader out-of-bounds write | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31464 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31463 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31462 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31461 | Foxit Reader type confusion | 7.8v3.1 | 4.3% | 2021-05-07 | Fix |
| CVE-2021-31460 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31459 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31458 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31457 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31456 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31455 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31454 | Foxit Reader heap-based buffer overflow | 7.8v3.1 | 2.5% | 2021-05-07 | Fix |
| CVE-2021-31453 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31452 | Foxit Reader out-of-bounds write | 7.8v3.1 | 2.9% | 2021-05-07 | Fix |
| CVE-2021-31451 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31450 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31449 | Foxit Reader double free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31448 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31447 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31446 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.7% | 2021-05-07 | Fix |
| CVE-2021-31445 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31444 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31443 | Foxit Reader out-of-bounds read | 3.3v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-31442 | Foxit Reader out-of-bounds write | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-31441 | Foxit Reader use-after-free | 7.8v3.1 | 2.8% | 2021-05-07 | Fix |
| CVE-2021-30173 | Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system local file inclusion | 6.5CNA v3.1 | 1.2% | 2021-05-07 | Fix |
| CVE-2021-30172 | Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system reflected XSS | 5.4v3.1 | 0.6% | 2021-05-07 | Fix |
| CVE-2021-30171 | Jun-He Technology Ltd. ERP POS stored XSS-2 | 5.4v3.1 | 0.6% | 2021-05-07 | Fix |
| CVE-2021-30170 | Jun-He Technology Ltd. ERP POS stored XSS-1 | 5.4v3.1 | 0.6% | 2021-05-07 | Fix |
| CVE-2021-29499 | Predictable SIF UUID Identifiers | 7.5CNA v3.1 | 1.0% | 2021-05-07 | Fix |
| CVE-2021-29495 | Nim stdlib httpClient does not validate peer certificates by default | 5.9CNA v3.1 | 0.5% | 2021-05-07 | Fix |
| CVE-2021-29488 | sabnzbd creation of files outside the Download Folder through malicious PAR2 files | 4.3CNA v3.1 | 0.9% | 2021-05-07 | Fix |
| CVE-2021-27574 | Remotemouse Emote Remote Mouse cleartext transmission of sensitive information | 8.1v3.1 | 1.1% | 2021-05-07 | |
| CVE-2021-27573 | Remotemouse Emote Remote Mouse missing authorization | 9.8v3.1 | 3.6% | 2021-05-07 | |
| CVE-2021-27572 | Remotemouse Emote Remote Mouse authentication bypass by replay | 8.1v3.1 | 3.2% | 2021-05-07 | |
| CVE-2021-27571 | Remotemouse Emote Remote Mouse missing authentication | 5.3v3.1 | 1.1% | 2021-05-07 | |
| CVE-2021-27570 | Remotemouse Emote Remote Mouse missing authentication | 5.3v3.1 | 1.4% | 2021-05-07 | |
| CVE-2021-27569 | Remotemouse Emote Remote Mouse missing authentication | 5.3v3.1 | 0.6% | 2021-05-07 | |
| CVE-2021-27437 | WISE-PaaS/RMM hard-coded credentials | 9.1v3.1 | 1.2% | 2021-05-07 | |
| CVE-2021-26123 | Livinglogic XIST4C cross-site scripting | 6.1v3.1 | 0.7% | 2021-05-07 | |
| CVE-2021-26122 | Livinglogic XIST4C cross-site scripting | 6.1v3.1 | 0.7% | 2021-05-07 | |
| CVE-2021-22679 | SimpleLink Wi-Fi integer overflow | 9.8v3.1 | 1.8% | 2021-05-07 | Fix |
| CVE-2021-22677 | SimpleLink Wi-Fi An integer overflow | 7.8v3.1 | 0.3% | 2021-05-07 | Fix |
| CVE-2021-22675 | SimpleLink Wi-Fi integer overflow | 7.2v3.1 | 1.4% | 2021-05-07 | Fix |
| CVE-2021-22673 | SimpleLink Wi-Fi stack-based buffer overflow | 8.0v3.1 | 1.2% | 2021-05-07 | Fix |
| CVE-2021-22671 | SimpleLink Wi-Fi integer overflow | 9.8v3.1 | 1.8% | 2021-05-07 | Fix |
| CVE-2021-21984 | VMware vRealize Business for Cloud missing authorization | 9.8v3.1 | 2.0% | 2021-05-07 | Fix |
| CVE-2021-21419 | Eventlet WebSocket frame handling denial of service | 5.3CNA v3.1 | 1.8% | 2021-05-07 | Fix |
| CVE-2021-3502 | avahi reachable assertion | 5.5NVD v3.1 | 0.4% | 2021-05-07 | Fix |
| CVE-2021-1927 | Qualcomm Snapdragon use-after-free in DSP services | 8.4CNA v3.1 | 0.2% | 2021-05-07 | Fix |
| CVE-2021-1925 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-05-07 | Fix |
| CVE-2021-1915 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 7.8CNA v3.1 | 0.2% | 2021-05-07 | Fix |
| CVE-2021-1910 | Qualcomm Snapdragon double free in Video | 7.3CNA v3.1 | 0.6% | 2021-05-07 | Fix |
| CVE-2021-1906 | Qualcomm Multiple Chipsets detection of error condition without action | 6.2CNA v3.1 | 0.5% | 2021-05-07 | KEVFix |
| CVE-2021-1905 | Qualcomm Multiple Chipsets use-after-free | 8.4CNA v3.1 | 1.5% | 2021-05-07 | KEVFix |
| CVE-2021-1895 | Qualcomm Snapdragon integer overflow to buffer overflow in Boot | 6.8CNA v3.1 | 0.2% | 2021-05-07 | Fix |
| CVE-2021-1891 | Qualcomm Snapdragon use-after-free in Audio | 8.4CNA v3.1 | 0.2% | 2021-05-07 | Fix |
| CVE-2021-32077 | Veritystream Msow Solutions missing brute-force protection | 7.5v3.1 | 1.2% | 2021-05-06 | Fix |
| CVE-2021-32062 | OSGeo MapServer path traversal | 5.3v3.1 | 1.5% | 2021-05-06 | Fix |
| CVE-2021-32052 | Header injection possible in Django | 6.1v3.1 | 3.2% | 2021-05-06 | Fix |
| CVE-2021-32030 | ASUS Routers improper authentication | 9.8v3.1 | 99.4% | 2021-05-06 | KEVNucleiEmerging Threats |
| CVE-2021-31918 | tripleo-ansible information disclosure | 7.5v3.1 | 1.0% | 2021-05-06 | Fix |
| CVE-2021-31916 | kernel out-of-bounds write | 6.7NVD v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-31829 | Linux kernel incorrect authorization | 5.5v3.1 | 0.3% | 2021-05-06 | Fix |
| CVE-2021-31828 | Amazon Open Distro An server-side request forgery | 7.1v3.1 | 0.9% | 2021-05-06 | Fix |
| CVE-2021-31793 | Nightowlsp Wdb-20 missing authentication | 7.5v3.1 | 1.3% | 2021-05-06 | |
| CVE-2021-31737 | emlog unrestricted file upload | 9.8v3.1 | 3.9% | 2021-05-06 | |
| CVE-2021-31616 | Shapeshift Keepkey out-of-bounds write | 8.8v3.1 | 2.5% | 2021-05-06 | Fix |
| CVE-2021-31532 | NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigne | 6.8v3.1 | 0.5% | 2021-05-06 | |
| CVE-2021-31409 | Regular expression denial of service in EmailValidator class in V7 compatibility module in Vaadin 8 | 7.5CNA v3.1 | 1.7% | 2021-05-06 | Fix |
| CVE-2021-31245 | Openmptcprouter improper authentication | 5.9v3.1 | 2.1% | 2021-05-06 | |
| CVE-2021-30473 | Aomedia release of an invalid pointer | 9.8v3.1 | 2.1% | 2021-05-06 | Fix |
| CVE-2021-29921 | Python ipaddress library vulnerability | 9.8NVD v3.1 | 6.9% | 2021-05-06 | Fix |
| CVE-2021-29493 | Kennnyshiwa-cogs vulnerable to remote code execution in Tickets module | 6.5CNA v3.1 | 0.9% | 2021-05-06 | Fix |
| CVE-2021-29490 | jellyfin Unauthenticated GET requests through Remote Image endpoints | 5.8CNA v3.1 | 69.9% | 2021-05-06 | NucleiFix |
| CVE-2021-29203 | HPE Edgeline Infrastructure Management Software missing authentication | 9.8v3.1 | 68.3% | 2021-05-06 | NucleiFix |
| CVE-2021-28665 | Stormshield Network Security memory leak | 7.5v3.1 | 1.0% | 2021-05-06 | |
| CVE-2021-28152 | Hongdian H8922 improper authentication | 9.8v3.1 | 5.2% | 2021-05-06 | Fix |
| CVE-2021-28151 | Hongdian H8922 OS command injection | 8.8v3.1 | 27.9% | 2021-05-06 | NucleiFix |
| CVE-2021-28150 | Hongdian H8922 forced browsing | 5.5v3.1 | 2.8% | 2021-05-06 | NucleiFix |
| CVE-2021-28149 | Hongdian H8922 path traversal | 6.5v3.1 | 15.9% | 2021-05-06 | NucleiFix |
| CVE-2021-28128 | Weak password recovery mechanism for forgotten password in Strapi | 8.1v3.1 | 1.3% | 2021-05-06 | Fix |
| CVE-2021-27941 | CoolKit Technology Ewelink insufficiently protected credentials | 4.6v3.1 | 0.2% | 2021-05-06 | |
| CVE-2021-27216 | Exim delete_pid_file race condition | 6.3v3.1 | 1.0% | 2021-05-06 | Fix |
| CVE-2021-26543 | Command injection in Git-parse | 8.8v3.1 | 2.5% | 2021-05-06 | Fix |
| CVE-2021-24254 | College Publisher Import WordPress plugin arbitrary file upload to RCE | 7.2NVD v3.1 | 1.8% | 2021-05-06 | |
| CVE-2021-24253 | Classyfrieds WordPress plugin authenticated arbitrary file upload to RCE | 8.8NVD v3.1 | 1.9% | 2021-05-06 | |
| CVE-2021-24252 | Event Banner WordPress plugin arbitrary file upload to RCE | 7.2NVD v3.1 | 1.7% | 2021-05-06 | |
| CVE-2021-24251 | Business Directory WordPress plugin arbitrary Payment History update | 4.3NVD v3.1 | 0.5% | 2021-05-06 | Fix |
| CVE-2021-24250 | Business Directory WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-05-06 | Fix |
| CVE-2021-24249 | Business Directory WordPress plugin arbitrary Listing export | 6.5NVD v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-24248 | Business Directory WordPress plugin authenticated PHP4 upload to RCE | 7.2NVD v3.1 | 1.6% | 2021-05-06 | Fix |
| CVE-2021-24247 | Contact Form Check Tester WordPress plugin broken access control to cross-site scripting (XSS) | 5.4NVD v3.1 | 4.7% | 2021-05-06 | Exploit code |
| CVE-2021-24246 | WorkScout Core WordPress plugin authenticated stored XSS and XFS | 5.4NVD v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-24245 | Stop Spammers WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 5.7% | 2021-05-06 | NucleiExploit codeFix |
| CVE-2021-24244 | WPBakery Page Builder Clipboard WordPress plugin Unauthorised arbitrary License options update | 6.5NVD v3.1 | 0.9% | 2021-05-06 | Fix |
| CVE-2021-24243 | WPBakery Page Builder Clipboard WordPress plugin Subscriber+ stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-24236 | Imagements WordPress plugin unauthenticated arbitrary file upload to RCE | 9.8NVD v3.1 | 7.3% | 2021-05-06 | Nuclei |
| CVE-2021-24214 | OpenID Connect Generic Client reflected cross-site scripting (XSS) via Login Error | 6.1NVD v3.1 | 1.6% | 2021-05-06 | NucleiFix |
| CVE-2021-24179 | Business Directory WordPress plugin arbitrary file upload to RCE | 8.8NVD v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-24178 | Business Directory WordPress plugin arbitrary Add/Edit/Delete form field to stored XSS | 8.8NVD v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-22211 | GitLab incorrect authorization | 3.1CNA v3.1 | 0.6% | 2021-05-06 | Fix |
| CVE-2021-22210 | GitLab resource exhaustion | 5.3CNA v3.1 | 1.2% | 2021-05-06 | Fix |
| CVE-2021-22209 | GitLab incorrect authorization | 7.5CNA v3.1 | 0.9% | 2021-05-06 | Fix |
| CVE-2021-22208 | GitLab improper permissions | 4.3CNA v3.1 | 0.8% | 2021-05-06 | Fix |
| CVE-2021-22206 | GitLab cleartext storage of sensitive information | 6.8CNA v3.1 | 1.0% | 2021-05-06 | Fix |
| CVE-2021-21550 | Dell PowerScale OneFS OS command injection | 6.0CNA v3.1 | 0.3% | 2021-05-06 | Fix |
| CVE-2021-21527 | Dell PowerScale OneFS OS command injection | 6.0CNA v3.1 | 0.3% | 2021-05-06 | Fix |
| CVE-2021-21505 | Dell EMC Integrated System for Microsoft Azure Stack Hub default credentials | 8.0CNA v3.1 | 2.4% | 2021-05-06 | Fix |
| CVE-2021-20204 | getdata lib memory corruption | 9.8NVD v3.1 | 2.1% | 2021-05-06 | Fix |
| CVE-2021-3507 | QEMU floppy disk emulator heap-based buffer overflow | 6.1NVD v3.1 | 0.5% | 2021-05-06 | Fix |
| CVE-2021-1535 | Cisco SD-WAN vManage information disclosure | 5.3CNA v3.1 | 1.2% | 2021-05-06 | Fix |
| CVE-2021-1532 | Cisco TelePresence Collaboration Endpoint and RoomOS software arbitrary file read | 6.5CNA v3.1 | 1.4% | 2021-05-06 | Fix |
| CVE-2021-1530 | Cisco BroadWorks Messaging Server XML external entity injection | 5.4CNA v3.1 | 1.1% | 2021-05-06 | Fix |
| CVE-2021-1521 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery protocol denial of service | 6.5CNA v3.1 | 0.4% | 2021-05-06 | Fix |
| CVE-2021-1520 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers local privilege escalation | 6.7CNA v3.1 | 0.3% | 2021-05-06 | Fix |
| CVE-2021-1519 | Cisco AnyConnect Secure Mobility Client Profile Modification vulnerability | 4.7CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1516 | Cisco AsyncOS web-based management interface information disclosure | 4.3CNA v3.1 | 1.0% | 2021-05-06 | Fix |
| CVE-2021-1515 | Cisco SD-WAN vManage information disclosure | 4.3CNA v3.1 | 0.4% | 2021-05-06 | Fix |
| CVE-2021-1514 | Cisco SD-WAN software privilege escalation | 4.4CNA v3.0 | 0.3% | 2021-05-06 | Fix |
| CVE-2021-1513 | Cisco SD-WAN software vDaemon denial of service | 7.5CNA v3.1 | 1.5% | 2021-05-06 | Fix |
| CVE-2021-1512 | Cisco SD-WAN software arbitrary File Corruption vulnerability | 4.4CNA v3.0 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1511 | Cisco SD-WAN vEdge software buffer overflow | 7.5CNA v3.1 | 1.0% | 2021-05-06 | Fix |
| CVE-2021-1510 | Cisco SD-WAN vEdge software buffer overflow | 7.5CNA v3.1 | 1.2% | 2021-05-06 | Fix |
| CVE-2021-1509 | Cisco SD-WAN vEdge software buffer overflow | 7.5CNA v3.1 | 1.2% | 2021-05-06 | Fix |
| CVE-2021-1508 | Cisco SD-WAN vManage improper input validation | 9.8CNA v3.1 | 1.6% | 2021-05-06 | Fix |
| CVE-2021-1507 | Cisco SD-WAN vManage API stored cross-site scripting | 6.4CNA v3.1 | 0.6% | 2021-05-06 | Fix |
| CVE-2021-1506 | Cisco SD-WAN vManage Software improper input validation | 9.8CNA v3.1 | 1.8% | 2021-05-06 | Fix |
| CVE-2021-1505 | Cisco SD-WAN vManage Software improper input validation | 9.8CNA v3.1 | 1.6% | 2021-05-06 | Fix |
| CVE-2021-1499 | Cisco HyperFlex HX Data Platform file upload | 5.3CNA v3.1 | 80.4% | 2021-05-06 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform command injection | 9.8CNA v3.1 | 100.0% | 2021-05-06 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine command injection | 9.8CNA v3.1 | 99.9% | 2021-05-06 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-1496 | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking vulnerabilities | 7.0CNA v3.1 | 0.5% | 2021-05-06 | Fix |
| CVE-2021-1490 | Cisco Web Security Appliance cross-site scripting | 4.7CNA v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-1486 | Cisco SD-WAN vManage HTTP Authentication User Enumeration vulnerability | 5.3CNA v3.1 | 1.2% | 2021-05-06 | Fix |
| CVE-2021-1478 | Cisco Unified Communications Manager denial of service | 5.3CNA v3.1 | 1.0% | 2021-05-06 | Fix |
| CVE-2021-1468 | Cisco SD-WAN vManage Software improper input validation | 9.8CNA v3.1 | 2.0% | 2021-05-06 | Fix |
| CVE-2021-1447 | Cisco Content Security Management Appliance privilege escalation | 6.7CNA v3.1 | 0.3% | 2021-05-06 | Fix |
| CVE-2021-1438 | Cisco Wide Area Application Services software information disclosure | 5.5CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1430 | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking vulnerabilities | 7.0CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1429 | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking vulnerabilities | 7.0CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1428 | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking vulnerabilities | 7.0CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1427 | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking vulnerabilities | 7.0CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1426 | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking vulnerabilities | 7.0CNA v3.1 | 0.2% | 2021-05-06 | Fix |
| CVE-2021-1421 | Cisco Enterprise NFV Infrastructure Software command injection | 7.8CNA v3.1 | 0.7% | 2021-05-06 | Fix |
| CVE-2021-1401 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points vulnerabilities | 8.8CNA v3.1 | 2.0% | 2021-05-06 | Fix |
| CVE-2021-1400 | Cisco Small Business 100, 300, and 500 Series Wireless Access Points vulnerabilities | 8.8CNA v3.1 | 1.3% | 2021-05-06 | Fix |
| CVE-2021-1397 | Cisco Integrated Management Controller open redirect | 4.7CNA v3.1 | 0.8% | 2021-05-06 | Fix |
| CVE-2021-1365 | Cisco Unified Communications Manager IM and Presence Service SQL injection | 7.1CNA v3.1 | 1.1% | 2021-05-06 | Fix |
| CVE-2021-1363 | Cisco Unified Communications Manager IM and Presence Service SQL injection | 7.1CNA v3.1 | 1.1% | 2021-05-06 | Fix |
| CVE-2021-1284 | Cisco SD-WAN vManage software authentication bypass | 8.8CNA v3.1 | 0.4% | 2021-05-06 | Fix |
| CVE-2021-1275 | Cisco SD-WAN vManage Software improper input validation | 9.8CNA v3.1 | 2.1% | 2021-05-06 | Fix |
| CVE-2021-32055 | Neomutt out-of-bounds read | 9.1v3.1 | 2.6% | 2021-05-05 | Fix |
| CVE-2021-31800 | Path traversal in Impacket | 9.8v3.1 | 19.3% | 2021-05-05 | Exploit codeFix |
| CVE-2021-31542 | Path traversal in Django | 7.5v3.1 | 5.3% | 2021-05-05 | Fix |
| CVE-2021-31518 | Trend Micro Home Network Security denial of service | 7.5v3.1 | 1.1% | 2021-05-05 | Fix |
| CVE-2021-31517 | Trend Micro Home Network Security denial of service | 7.5v3.1 | 1.1% | 2021-05-05 | Fix |
| CVE-2021-31411 | Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19 | 6.3CNA v3.1 | 0.2% | 2021-05-05 | Fix |
| CVE-2021-29489 | highcharts options structure open to XSS if passed unfiltered | 7.6CNA v3.1 | 0.9% | 2021-05-05 | Fix |
| CVE-2021-29250 | Btcpay Server cross-site scripting | 5.4v3.1 | 0.5% | 2021-05-05 | Fix |
| CVE-2021-29248 | Btcpay Server missing encryption | 5.3v3.1 | 0.8% | 2021-05-05 | Fix |
| CVE-2021-29247 | Btcpay Server incorrect permission assignment | 5.3v3.1 | 1.2% | 2021-05-05 | Fix |
| CVE-2021-29246 | Btcpay Server path traversal | 6.7v3.1 | 1.5% | 2021-05-05 | Fix |
| CVE-2021-29245 | Btcpay Server weak random number generator | 5.3v3.1 | 0.9% | 2021-05-05 | Fix |
| CVE-2021-29101 | ArcGIS GeoEvent Server has a directory traversal security | 8.6CNA v3.0 | 2.3% | 2021-05-05 | |
| CVE-2021-29100 | ArcGIS Earth has a File Parsing directory traversal | 7.8CNA v3.0 | 1.1% | 2021-05-05 | Fix |
| CVE-2021-25319 | openSUSE Factory packaging of virtualbox incorrect default permissions | 7.8CNA v3.1 | 0.3% | 2021-05-05 | Fix |