CVE-2021 records published in June 2021
This page lists the 1,344 CVE-2021 records published in June 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 14 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 1319.7% of these records
- Listed in CISA KEV
- 141.0% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 322.4% of these records
- Exploit code
- 523.9% of these records
- Actionable vendor fix
- 1,14585.2% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in June 2021 have had from about 64 months to about 65 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-35973 | NETGEAR WAC104 authentication bypass | 9.8v3.1 | 3.1% | 2021-06-30 | Fix |
| CVE-2021-35971 | Veeam Backup and Replication deserialization of untrusted data | 9.8v3.1 | 1.2% | 2021-06-30 | Fix |
| CVE-2021-35970 | Vox Media Coral Talk incorrect comparison | 7.5v3.1 | 2.3% | 2021-06-30 | |
| CVE-2021-35959 | Plone has stored XSS in folder contents | 5.4v3.1 | 0.5% | 2021-06-30 | Fix |
| CVE-2021-35958 | Google TensorFlow path traversal | 9.1v3.1 | 1.9% | 2021-06-30 | Fix |
| CVE-2021-35956 | Akcp Sensorprobe2 embedded webserver stored cross-site scripting | 5.4v3.1 | 3.2% | 2021-06-30 | Exploit codeFix |
| CVE-2021-35474 | Apache Traffic Server dynamic stack buffer overflow in cachekey plugin | 9.8v3.1 | 2.7% | 2021-06-30 | Fix |
| CVE-2021-34385 | NVIDIA Jetson TX1 integer overflow | 6.3CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34384 | NVIDIA Jetson AGX Xavier series out-of-bounds write | 6.3CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34383 | NVIDIA Jetson AGX Xavier series out-of-bounds write | 6.4CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34382 | NVIDIA Jetson TX1 integer overflow | 6.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34381 | NVIDIA Jetson TX1 integer overflow | 6.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34380 | NVIDIA Jetson TX1 out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34379 | NVIDIA Jetson AGX Xavier series out-of-bounds write | 7.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34378 | NVIDIA Jetson AGX Xavier series memory corruption | 7.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34377 | NVIDIA Jetson AGX Xavier series memory corruption | 7.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34376 | NVIDIA Jetson AGX Xavier series memory corruption | 7.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34375 | NVIDIA Jetson AGX Xavier series out-of-bounds write | 7.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34374 | NVIDIA Jetson AGX Xavier series memory corruption | 7.7CNA v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-34373 | NVIDIA Jetson TX1 out-of-bounds write | 7.9CNA v3.1 | 0.3% | 2021-06-30 | Fix |
| CVE-2021-34075 | Artica Pandora FMS insufficiently protected credentials | 5.9v3.1 | 0.9% | 2021-06-30 | |
| CVE-2021-32736 | Improperly controlled modification of object prototype attributes in think-helper | 7.5CNA v3.1 | 1.0% | 2021-06-30 | Fix |
| CVE-2021-32567 | Apache Traffic Server reading HTTP/2 frames too many times | 7.5v3.1 | 2.4% | 2021-06-30 | Fix |
| CVE-2021-32566 | Apache Traffic Server specific sequence of HTTP/2 frames can cause ATS to crash | 7.5v3.1 | 2.5% | 2021-06-30 | Fix |
| CVE-2021-31721 | chevereto cross-site scripting | 6.1v3.1 | 0.9% | 2021-06-30 | |
| CVE-2021-30648 | Advanced Secure Gateway (ASG) and ProxySG improper authentication | 9.8NVD v3.1 | 1.4% | 2021-06-30 | Fix |
| CVE-2021-28993 | Plixer Scrutinizer SQL injection | 7.5v3.1 | 1.0% | 2021-06-30 | Fix |
| CVE-2021-28693 | Xen Arm boot module loader vulnerability | 5.5v3.1 | 0.3% | 2021-06-30 | Fix |
| CVE-2021-28692 | Xen improper privilege management | 7.1v3.1 | 0.3% | 2021-06-30 | Fix |
| CVE-2021-27903 | Craft CMS remote code injection | 9.8v3.1 | 2.8% | 2021-06-30 | Fix |
| CVE-2021-27902 | Craft CMS cross-site scripting | 6.1v3.1 | 1.0% | 2021-06-30 | Fix |
| CVE-2021-25951 | XML2Dict XML entity expansion | 7.5v3.1 | 1.2% | 2021-06-30 | |
| CVE-2021-25321 | Arpwatch: Local privilege escalation from runtime user to root | 7.8CNA v3.1 | 0.4% | 2021-06-30 | Fix |
| CVE-2021-22380 | Improper verification vulnerability in some Huawei phones | 9.1v3.1 | 0.6% | 2021-06-30 | Fix |
| CVE-2021-22376 | Logic bypass vulnerability in some Huawei phones | 8.4v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-22375 | Logic bypass vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-06-30 | Fix |
| CVE-2021-22374 | Out-of-bounds array access in the kernel of some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22373 | Logic bypass vulnerability in some Huawei phones | 9.1v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22372 | Logic bypass vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22371 | Allowing arbitrary capture of call stacks in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22370 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22369 | Memory leaks and out-of-bounds access vulnerabilities in some Huawei phones | 8.1v3.1 | 0.6% | 2021-06-30 | Fix |
| CVE-2021-22368 | Access control vulnerability in some Huawei phones | 7.5v3.1 | 0.6% | 2021-06-30 | Fix |
| CVE-2021-22367 | Logic bypass vulnerability in some Huawei devices | 9.8v3.1 | 0.8% | 2021-06-30 | Fix |
| CVE-2021-22354 | Driver type confusion vulnerability in some Huawei phones | 9.1v3.1 | 0.8% | 2021-06-30 | Fix |
| CVE-2021-22353 | UAF security vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22352 | Vulnerability of hijacking unverified providers in some Huawei phones | 7.8v3.1 | 0.5% | 2021-06-30 | Fix |
| CVE-2021-22351 | DoS vulnerability in some Huawei phones | 8.1v3.1 | 0.6% | 2021-06-30 | Fix |
| CVE-2021-22350 | UAF security vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22349 | DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-30 | Fix |
| CVE-2021-22348 | UAF security vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-06-30 | Fix |
| CVE-2021-22346 | Improper permission management vulnerability in some Huawei phones | 5.3v3.1 | 0.5% | 2021-06-30 | Fix |
| CVE-2021-22345 | Improper verification vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-06-30 | Fix |
| CVE-2021-22326 | Kernel space read/write vulnerability in some Huawei phones | 7.1v3.1 | 0.2% | 2021-06-30 | Fix |
| CVE-2021-22323 | Memory leaks and out-of-bounds access vulnerabilities in some Huawei phones | 9.8v3.1 | 0.9% | 2021-06-30 | Fix |
| CVE-2021-21676 | Missing permission check in Jenkins requests-plugin Plugin allows sending emails | 4.3v3.1 | 1.4% | 2021-06-30 | Fix |
| CVE-2021-21675 | CSRF vulnerabilities in Jenkins requests-plugin Plugin | 6.5v3.1 | 1.3% | 2021-06-30 | Fix |
| CVE-2021-21674 | Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests | 4.3v3.1 | 1.0% | 2021-06-30 | Fix |
| CVE-2021-21673 | Open redirect vulnerability in Jenkins CAS Plugin | 6.1v3.1 | 1.6% | 2021-06-30 | Fix |
| CVE-2021-21672 | XXE vulnerability in Jenkins Selenium HTML report Plugin | 4.3v3.1 | 42.5% | 2021-06-30 | Fix |
| CVE-2021-21671 | Session fixation vulnerability in Jenkins | 7.5v3.1 | 1.7% | 2021-06-30 | Fix |
| CVE-2021-21670 | Improper permission checks allow canceling queue items and aborting builds in Jenkins | 4.3v3.1 | 2.0% | 2021-06-30 | Fix |
| CVE-2021-20461 | IBM Cognos Analytics resource exposure | 4.3CNA v3.0 | 1.0% | 2021-06-30 | Fix |
| CVE-2021-20107 | SLOAN missing authentication | 5.4NVD v3.1 | 0.5% | 2021-06-30 | |
| CVE-2021-3630 | djvulibre out-of-bounds write | 5.5NVD v3.1 | 1.0% | 2021-06-30 | Fix |
| CVE-2021-35941 | Western Digital Wd My Book Live Duo missing authentication | 7.5v3.1 | 12.7% | 2021-06-29 | Fix |
| CVE-2021-34824 | Istio Gateway and DestinationRule credentialName field vulnerability | 8.8v3.1 | 2.0% | 2021-06-29 | Exploit codeFix |
| CVE-2021-34550 | torproject Tor out-of-bounds access | 7.5v3.1 | 1.6% | 2021-06-29 | Fix |
| CVE-2021-34549 | torproject Tor resource exhaustion | 7.5v3.1 | 1.6% | 2021-06-29 | Fix |
| CVE-2021-34548 | torproject Tor authentication bypass by spoofing | 7.5v3.1 | 2.7% | 2021-06-29 | Fix |
| CVE-2021-33503 | Python urllib3 denial of service | 7.5v3.1 | 3.3% | 2021-06-29 | Fix |
| CVE-2021-32992 | FATEK Automation WinProladder arbitrary code execution | 9.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-32990 | FATEK Automation WinProladder out-of-bounds read | 9.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-32988 | FATEK Automation WinProladder out-of-bounds write | 9.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-32721 | URL redirection to untrusted site (open redirect) in github.com/AndrewBurian/powermux | 4.7CNA v3.1 | 0.6% | 2021-06-29 | Fix |
| CVE-2021-32565 | Apache Traffic Server HTTP request smuggling, content length with invalid charters | 7.5v3.1 | 2.1% | 2021-06-29 | Fix |
| CVE-2021-31838 | Command injection through environment variable in MVISION EDR | 8.4CNA v3.1 | 2.1% | 2021-06-29 | Fix |
| CVE-2021-31531 | Zoho Manageengine Servicedesk Plus Msp server-side request forgery | 9.8v3.1 | 2.4% | 2021-06-29 | Fix |
| CVE-2021-31530 | Zoho Manageengine Servicedesk Plus Msp information disclosure | 7.5v3.1 | 2.8% | 2021-06-29 | Fix |
| CVE-2021-31516 | Vector 35 Binary Ninja use-after-free | 7.8v3.1 | 2.4% | 2021-06-29 | Fix |
| CVE-2021-31515 | Vector 35 Binary Ninja out-of-bounds read | 7.8v3.1 | 2.4% | 2021-06-29 | Fix |
| CVE-2021-31514 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31513 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31512 | OpenText Brava! Desktop out-of-bounds read | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31511 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31510 | OpenText Brava! Desktop out-of-bounds read | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31509 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31508 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31507 | OpenText Brava! Desktop stack-based buffer overflow | 7.8v3.1 | 1.8% | 2021-06-29 | |
| CVE-2021-31506 | OpenText Brava! Desktop out-of-bounds read | 3.3v3.1 | 1.4% | 2021-06-29 | |
| CVE-2021-31505 | Arlo Q Plus hard-coded credentials | 6.8v3.1 | 0.6% | 2021-06-29 | Fix |
| CVE-2021-31160 | Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data. | 7.5v3.1 | 3.5% | 2021-06-29 | Fix |
| CVE-2021-29485 | ratpack remote code execution vulnerability in Session Storage | 9.9CNA v3.1 | 2.0% | 2021-06-29 | Fix |
| CVE-2021-29481 | ratpack client side sessions should not allow unencrypted storage | 6.5CNA v3.1 | 0.5% | 2021-06-29 | Fix |
| CVE-2021-29480 | ratpack default client side session signing key is highly predictable | 4.4CNA v3.1 | 0.3% | 2021-06-29 | Fix |
| CVE-2021-29479 | ratpack cached redirect poisoning via X-Forwarded-Host header | 7.0CNA v3.1 | 0.9% | 2021-06-29 | Fix |
| CVE-2021-28830 | TIBCO Spotfire Windows Platform Artifact Search vulnerability | 8.8CNA v3.1 | 0.3% | 2021-06-29 | Fix |
| CVE-2021-28691 | Linux kernel Guest triggered use-after-free | 7.8v3.1 | 0.4% | 2021-06-29 | Fix |
| CVE-2021-28690 | Xen TSX Async Abort mitigation vulnerability | 6.5v3.1 | 1.0% | 2021-06-29 | Fix |
| CVE-2021-27577 | Apache Traffic Server incorrect handling of URL fragment leads to cache poisoning | 7.5v3.1 | 3.5% | 2021-06-29 | Fix |
| CVE-2021-23400 | nodemailer HTTP header injection | 8.8v3.1 | 1.4% | 2021-06-29 | Fix |
| CVE-2021-23275 | TIBCO Spotfire Windows Platform Installation vulnerability | 8.8CNA v3.1 | 0.2% | 2021-06-29 | Fix |
| CVE-2021-22545 | Google use-after-free in BinDiff | 7.5CNA v3.1 | 0.2% | 2021-06-29 | Fix |
| CVE-2021-22439 | AnyOffice Huawei deserialization of untrusted data | 8.1v3.1 | 0.8% | 2021-06-29 | Fix |
| CVE-2021-22341 | Huawei IPS Module There is a memory leak | 4.9v3.1 | 0.6% | 2021-06-29 | Fix |
| CVE-2021-22340 | ManageOne race condition | 4.1v3.1 | 0.1% | 2021-06-29 | Fix |
| CVE-2021-22338 | eCNS280 There is an XML external entity injection | 5.3v3.1 | 0.6% | 2021-06-29 | Fix |
| CVE-2021-22329 | S12700 unauthorized data modification | 4.9v3.1 | 0.5% | 2021-06-29 | Fix |
| CVE-2021-22119 | Resource exhaustion in Spring Security | 7.5v3.1 | 6.0% | 2021-06-29 | Exploit codeFix |
| CVE-2021-21871 | PowerISO DMG File Format handler functionality memory corruption | 7.8v3.1 | 0.9% | 2021-06-29 | |
| CVE-2021-20580 | IBM Planning Analytics cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2021-06-29 | Fix |
| CVE-2021-20490 | IBM Spectrum Protect Plus incorrect default permissions | 4.0CNA v3.0 | 0.2% | 2021-06-29 | Fix |
| CVE-2021-20477 | IBM Planning Analytics cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-29 | Fix |
| CVE-2021-20105 | AppNitro Machform open redirect | 6.1NVD v3.1 | 0.7% | 2021-06-29 | |
| CVE-2021-20104 | AppNitro Machform unrestricted file upload | 8.1NVD v3.1 | 2.2% | 2021-06-29 | |
| CVE-2021-20103 | AppNitro Machform cross-site scripting | 6.1NVD v3.1 | 0.7% | 2021-06-29 | |
| CVE-2021-20102 | AppNitro Machform cross-site request forgery | 8.8NVD v3.1 | 0.5% | 2021-06-29 | |
| CVE-2021-20101 | AppNitro Machform host header injection | 6.1NVD v3.1 | 0.7% | 2021-06-29 | |
| CVE-2021-20079 | Nessus privilege escalation | 6.7NVD v3.1 | 0.6% | 2021-06-29 | |
| CVE-2021-1134 | Cisco DNA Center ISE integration improper certificate validation | 7.4CNA v3.0 | 0.8% | 2021-06-29 | Fix |
| CVE-2021-35525 | Postsrsd denial of service | 5.3v3.1 | 1.6% | 2021-06-28 | Fix |
| CVE-2021-35523 | Securepoint OpenVPN-Client improper privilege management | 7.8v3.1 | 0.7% | 2021-06-28 | |
| CVE-2021-35514 | Code injection in Narou | 9.8v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-35456 | Online Pet Shop Web Application SQL injection | 9.8v3.1 | 2.1% | 2021-06-28 | |
| CVE-2021-35303 | zammad cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-28 | Fix |
| CVE-2021-35302 | zammad information disclosure | 5.3v3.1 | 1.2% | 2021-06-28 | Fix |
| CVE-2021-35301 | zammad information disclosure | 5.3v3.1 | 1.2% | 2021-06-28 | Fix |
| CVE-2021-35300 | zammad Text injection | 4.3v3.1 | 0.9% | 2021-06-28 | Fix |
| CVE-2021-35299 | zammad sensitive information in log files | 7.5v3.1 | 1.1% | 2021-06-28 | Fix |
| CVE-2021-35298 | zammad cross-site scripting | 6.1v3.1 | 1.5% | 2021-06-28 | Fix |
| CVE-2021-34254 | Umbraco-CMS open redirect | 6.1v3.1 | 0.7% | 2021-06-28 | Fix |
| CVE-2021-34187 | Chamilo SQL injection | 9.8v3.1 | 16.2% | 2021-06-28 | NucleiFix |
| CVE-2021-33515 | dovecot command injection | 4.8v3.1 | 2.8% | 2021-06-28 | Fix |
| CVE-2021-32723 | Regular expression denial of service (ReDoS) in Prism | 7.4CNA v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-32722 | Uncontrolled resource consumption in GlobalNewFiles | 6.5CNA v3.1 | 1.3% | 2021-06-28 | Fix |
| CVE-2021-32720 | Sylius order API information disclosure | 5.3CNA v3.1 | 0.9% | 2021-06-28 | Fix |
| CVE-2021-32719 | VMware RabbitMQ federation management plugin cross-site scripting | 3.1CNA v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-32718 | Improper neutralization of script-related HTML tags in a web page in RabbitMQ management UI | 3.1CNA v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-32496 | SICK Visionary-S CX inadequate encryption strength | 5.3v3.1 | 0.3% | 2021-06-28 | Fix |
| CVE-2021-31337 | SINAMICS Medium Voltage Products missing authentication | 9.8v3.1 | 1.7% | 2021-06-28 | |
| CVE-2021-29775 | IBM Business Automation Workflow cross-site scripting | 6.4CNA v3.0 | 0.9% | 2021-06-28 | Fix |
| CVE-2021-29751 | IBM Business Process Manager information disclosure | 3.1CNA v3.0 | 0.9% | 2021-06-28 | Fix |
| CVE-2021-29693 | IBM VIOS denial of service | 4.9CNA v3.0 | 0.6% | 2021-06-28 | Fix |
| CVE-2021-29157 | dovecot path traversal | 5.5NVD v3.1 | 0.5% | 2021-06-28 | Fix |
| CVE-2021-28623 | Adobe Premiere Elements privilege escalation | 6.2CNA v3.0 | 0.5% | 2021-06-28 | Fix |
| CVE-2021-28597 | Adobe Photoshop Elements privilege escalation vulnerability symbolic link | 6.2CNA v3.0 | 0.5% | 2021-06-28 | Fix |
| CVE-2021-28588 | Adobe RoboHelp Server folderId directory traversal remote code execution | 8.8CNA v3.1 | 6.2% | 2021-06-28 | Fix |
| CVE-2021-28587 | Adobe After Effects TIF file parsing out-of-bounds read information disclosure | 4.3CNA v3.0 | 2.1% | 2021-06-28 | Fix |
| CVE-2021-28586 | Adobe After Effects PDF file parsing out-of-bounds write could lead to remote code execution | 8.8CNA v3.0 | 3.1% | 2021-06-28 | Fix |
| CVE-2021-28585 | Adobe Magento improper input validation | 5.3CNA v3.1 | 1.6% | 2021-06-28 | Fix |
| CVE-2021-28584 | Adobe Magento Commerce path traversal vulnerability in child theme store creation | 5.4CNA v3.1 | 1.8% | 2021-06-28 | Fix |
| CVE-2021-28583 | Adobe Magento Commerce insecure storage of sensitive documentation | 7.5CNA v3.1 | 1.9% | 2021-06-28 | Fix |
| CVE-2021-28579 | Adobe Connect improper access control could lead to privilege escalation | 4.3CNA v3.1 | 1.1% | 2021-06-28 | Fix |
| CVE-2021-28576 | Adobe Animate out-of-bounds read vulnerability could lead to information exposure | 4.3CNA v3.1 | 3.6% | 2021-06-28 | Fix |
| CVE-2021-28575 | Adobe Animate out-of-bounds read vulnerability could lead to information exposure | 4.3CNA v3.1 | 3.8% | 2021-06-28 | Fix |
| CVE-2021-28574 | Adobe Animate out-of-bounds read vulnerability could lead to information exposure | 4.3CNA v3.1 | 3.8% | 2021-06-28 | Fix |
| CVE-2021-28573 | Adobe Animate out-of-bounds read vulnerability could lead to information exposure | 4.3CNA v3.1 | 4.1% | 2021-06-28 | Fix |
| CVE-2021-28570 | Adobe After Effects uncontrolled search path | 8.3CNA v3.1 | 2.3% | 2021-06-28 | Fix |
| CVE-2021-28563 | Adobe Magento unauthorized access to restricted resources | 6.5CNA v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-28562 | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 8.8CNA v3.1 | 5.1% | 2021-06-28 | Fix |
| CVE-2021-28556 | Adobe Magento Commerce DOM-based cross-site scripting could lead to arbitrary javascript execution | 6.9CNA v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-23399 | wincred arbitrary command injection | 9.8v3.1 | 1.3% | 2021-06-28 | |
| CVE-2021-21102 | Adobe Illustrator path traversal | 8.8CNA v3.1 | 3.9% | 2021-06-28 | Fix |
| CVE-2021-21101 | Adobe Illustrator out-of-bounds write | 8.8CNA v3.1 | 3.5% | 2021-06-28 | Fix |
| CVE-2021-21099 | Adobe InDesign out-of-bounds write | 8.8CNA v3.1 | 5.8% | 2021-06-28 | Fix |
| CVE-2021-21098 | Adobe InDesign out-of-bounds write | 8.8CNA v3.1 | 5.8% | 2021-06-28 | Fix |
| CVE-2021-21090 | Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution | 8.8CNA v3.1 | 5.4% | 2021-06-28 | Fix |
| CVE-2021-21084 | Adobe Experience Manager resource resolver factory stored cross-site scripting | 7.3CNA v3.1 | 1.8% | 2021-06-28 | Fix |
| CVE-2021-21083 | Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial of service | 7.5CNA v3.1 | 2.0% | 2021-06-28 | Fix |
| CVE-2021-20751 | EC-CUBE cross-site scripting | 6.1v3.1 | 1.1% | 2021-06-28 | Fix |
| CVE-2021-20750 | EC-CUBE cross-site scripting | 6.1v3.1 | 1.6% | 2021-06-28 | Fix |
| CVE-2021-20749 | nendeb 'Fudousan plugin' series cross-site scripting | 5.4v3.1 | 1.0% | 2021-06-28 | Fix |
| CVE-2021-20746 | Hector Cabrera WordPress Popular Posts cross-site scripting | 5.4v3.1 | 1.4% | 2021-06-28 | Fix |
| CVE-2021-20745 | Takuya Matsuyama Inkdrop OS command injection | 7.8v3.1 | 1.0% | 2021-06-28 | Fix |
| CVE-2021-20740 | Hitachi Virtual File Platform OS command injection | 8.8v3.1 | 3.1% | 2021-06-28 | Fix |
| CVE-2021-20574 | IBM Security Identity Manager Adapters LDAP injection | 7.5CNA v3.0 | 1.7% | 2021-06-28 | Fix |
| CVE-2021-20573 | IBM Security Identity Manager Adapters out-of-bounds write | 6.5CNA v3.0 | 1.5% | 2021-06-28 | Fix |
| CVE-2021-20572 | IBM Security Identity Manager Adapters out-of-bounds write | 6.5CNA v3.0 | 1.5% | 2021-06-28 | Fix |
| CVE-2021-20494 | IBM Security Identity Manager Adapters out-of-bounds write | 6.5CNA v3.0 | 1.1% | 2021-06-28 | Fix |
| CVE-2021-20413 | IBM Guardium Data Encryption information disclosure through error messages | 4.3CNA v3.0 | 0.8% | 2021-06-28 | Fix |
| CVE-2021-20100 | Nessus Agent local privilege escalation | 6.7NVD v3.1 | 0.5% | 2021-06-28 | |
| CVE-2021-20099 | Nessus Agent local privilege escalation | 6.7NVD v3.1 | 0.4% | 2021-06-28 | |
| CVE-2021-35513 | Cross-site scripting in Mermaid | 6.1v3.1 | 1.0% | 2021-06-27 | Fix |
| CVE-2021-35502 | MISP generic index table template vulnerability | 9.8v3.1 | 1.1% | 2021-06-25 | |
| CVE-2021-35501 | Pandora FMS cross-site scripting | 5.4v3.1 | 1.0% | 2021-06-25 | |
| CVE-2021-35475 | Sas Environment Manager cross-site scripting | 5.4v3.1 | 0.9% | 2021-06-25 | Exploit code |
| CVE-2021-35050 | User Credentials Stored in a Recoverable Format within Fidelis Network and Deception | 6.5CNA v3.1 | 1.0% | 2021-06-25 | Fix |
| CVE-2021-35049 | Command injection vulnerability in Fidelis Network and Deception | 9.9CNA v3.1 | 4.6% | 2021-06-25 | Fix |
| CVE-2021-35048 | Unauthenticated SQL injection vulnerability in Fidelis Network and Deception | 9.8CNA v3.1 | 1.3% | 2021-06-25 | Fix |
| CVE-2021-35047 | Privileged command injection vulnerability in Fidelis Network and Deception | 9.9CNA v3.1 | 1.6% | 2021-06-25 | Fix |
| CVE-2021-34427 | The Eclipse Foundation Eclipse BIRT improper input validation | 9.8v3.1 | 57.7% | 2021-06-25 | Reported exploitedNucleiExploit code |
| CVE-2021-34185 | mackron miniaudio buffer overflow | 7.8v3.1 | 0.7% | 2021-06-25 | |
| CVE-2021-34184 | mackron miniaudio double free | 9.8v3.1 | 1.1% | 2021-06-25 | |
| CVE-2021-34074 | Pandora FMS unrestricted file upload | 9.8v3.1 | 7.5% | 2021-06-25 | |
| CVE-2021-33895 | Etinet Backbox E4.09 improper authentication | 8.1v3.1 | 0.9% | 2021-06-25 | Fix |
| CVE-2021-33542 | Phoenix Contact: Automation Worx Software Suite affected by remote code execution (RCE) | 7.0v3.1 | 1.8% | 2021-06-25 | Fix |
| CVE-2021-33541 | Phoenix Contact: ILC1x Industrial controllers affected by denial of service | 7.5v3.1 | 1.5% | 2021-06-25 | |
| CVE-2021-33540 | Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices | 7.3v3.1 | 0.7% | 2021-06-25 | Fix |
| CVE-2021-33539 | Weidmueller: WLAN devices affected by authentication bypass | 7.2v3.1 | 1.1% | 2021-06-25 | Fix |
| CVE-2021-33538 | Weidmueller: WLAN devices affected by improper access control | 8.8v3.1 | 1.0% | 2021-06-25 | Fix |
| CVE-2021-33537 | Weidmueller: WLAN devices affected by remote code execution (RCE) | 8.8v3.1 | 1.6% | 2021-06-25 | Fix |
| CVE-2021-33536 | Weidmueller: WLAN devices affected by denial of service | 7.5v3.1 | 1.0% | 2021-06-25 | Fix |
| CVE-2021-33535 | Weidmueller: WLAN devices affected by exploitable format string | 8.8v3.1 | 1.6% | 2021-06-25 | Fix |
| CVE-2021-33534 | Weidmueller: WLAN devices affected by OS command injection | 7.2v3.1 | 2.1% | 2021-06-25 | Fix |
| CVE-2021-33533 | Weidmueller: WLAN devices affected by OS command injection | 8.8v3.1 | 1.7% | 2021-06-25 | Fix |
| CVE-2021-33532 | Weidmueller: WLAN devices affected by OS command injection | 8.8v3.1 | 1.7% | 2021-06-25 | Fix |
| CVE-2021-33531 | Weidmueller: WLAN devices affected by hard-coded credentials | 8.8v3.1 | 0.7% | 2021-06-25 | Fix |
| CVE-2021-33530 | Weidmueller: WLAN devices affected by OS command injection | 8.8v3.1 | 1.7% | 2021-06-25 | Fix |
| CVE-2021-33529 | Weidmueller: WLAN devices affected by hard-coded credentials | 7.5v3.1 | 0.9% | 2021-06-25 | Fix |
| CVE-2021-33528 | Weidmueller: WLAN devices affected by privilege escalation | 8.8v3.1 | 1.1% | 2021-06-25 | Fix |
| CVE-2021-32702 | auth0 nextjs-auth0 reflected XSS from the callback handler's error query parameter | 8.0CNA v3.1 | 1.4% | 2021-06-25 | Fix |
| CVE-2021-31615 | Bluetooth Core Specification race condition | 5.3v3.1 | 0.4% | 2021-06-25 | Fix |
| CVE-2021-29677 | IBM Security Verify Privilege Vault cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-25 | Fix |
| CVE-2021-29676 | IBM Security Verify Privilege Vault injection | 4.6CNA v3.0 | 0.8% | 2021-06-25 | Fix |
| CVE-2021-28958 | Zoho ManageEngine ADSelfService Plus OS command injection | 9.8v3.1 | 73.1% | 2021-06-25 | Fix |
| CVE-2021-27043 | Autodesk Advanced Steel out-of-bounds write | 7.8v3.1 | 0.9% | 2021-06-25 | Fix |
| CVE-2021-27042 | Autodesk Advanced Steel improper exception handling | 7.8v3.1 | 1.8% | 2021-06-25 | Fix |
| CVE-2021-27041 | Autodesk Advanced Steel out-of-bounds write | 7.8v3.1 | 1.7% | 2021-06-25 | Fix |
| CVE-2021-27040 | Autodesk Advanced Steel out-of-bounds read | 3.3v3.1 | 2.7% | 2021-06-25 | Fix |
| CVE-2021-25654 | Avaya Aura Device Services arbitrary code execution | 6.2CNA v3.1 | 0.8% | 2021-06-25 | Fix |
| CVE-2021-21005 | Race condition vulnerability in Phoenix Contact FL SWITCH SMCS series products | 7.5v3.1 | 0.7% | 2021-06-25 | |
| CVE-2021-21004 | Cross-site scripting vulnerability in Phoenix Contact FL SWITCH SMCS series products | 6.1NVD v3.1 | 0.6% | 2021-06-25 | |
| CVE-2021-21003 | Denial of service vulnerability in Phoenix Contact FL SWITCH SMCS series products | 5.3v3.1 | 0.9% | 2021-06-25 | |
| CVE-2021-21002 | Denial of service in Phoenix Contact FL COMSERVER UNI products | 7.5v3.1 | 1.0% | 2021-06-25 | Fix |
| CVE-2021-20583 | IBM Security Verify Privilege Vault improper input validation | 6.2CNA v3.0 | 0.9% | 2021-06-25 | Fix |
| CVE-2021-3314 | Oracle GlassFish Server cross-site scripting | 6.1v3.1 | 0.9% | 2021-06-25 | |
| CVE-2021-1073 | NVIDIA GeForce Experience login flow information disclosure | 8.3CNA v3.1 | 0.9% | 2021-06-25 | Fix |
| CVE-2021-35448 | Remotemouse Emote Interactive Studio improper privilege management | 7.8v3.1 | 1.0% | 2021-06-24 | Exploit code |
| CVE-2021-35041 | FISCO-BCOS packet decoding denial of service | 7.5v3.1 | 1.3% | 2021-06-24 | |
| CVE-2021-33604 | Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19 | 2.5CNA v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-33348 | Cross-site scripting in JFinal | 6.1v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-33346 | D-Link Dsl-2888a missing authentication | 9.8v3.1 | 1.2% | 2021-06-24 | |
| CVE-2021-33004 | WebAccess HMI Designer memory corruption | 7.8v3.1 | 1.0% | 2021-06-24 | Fix |
| CVE-2021-33002 | WebAccess HMI Designer out-of-bounds write | 7.8v3.1 | 1.0% | 2021-06-24 | Fix |
| CVE-2021-33000 | WebAccess HMI Designer heap-based buffer overflow | 7.8v3.1 | 1.0% | 2021-06-24 | Fix |
| CVE-2021-32823 | Potential denial of service in bindata | 3.7CNA v3.1 | 1.9% | 2021-06-24 | Fix |
| CVE-2021-32717 | shopware platform private files publicly accessible with Cloud Storage providers | 7.5CNA v3.1 | 1.5% | 2021-06-24 | Fix |
| CVE-2021-32716 | shopware platform internal hidden fields are visible on to many associations in admin API | 4.4CNA v3.1 | 1.1% | 2021-06-24 | Fix |
| CVE-2021-32713 | shopware authenticated stored XSS | 4.8CNA v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-32712 | shopware information leakage in Error handler | 5.3CNA v3.1 | 1.1% | 2021-06-24 | Fix |
| CVE-2021-32711 | shopware platform leak of information via Store-API | 9.1CNA v3.1 | 1.4% | 2021-06-24 | Fix |
| CVE-2021-32710 | Potential session hijacking in Shopware | 5.9CNA v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-32709 | shopware platform creation of order credits was not validated by acl in admin orders | 4.9CNA v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-32708 | Time-of-check time-of-use (TOCTOU) race condition in league/flysystem | 9.8CNA v3.1 | 3.5% | 2021-06-24 | Exploit codeFix |
| CVE-2021-32704 | Improper neutralization of special elements used in an SQL command (SQL injection) in dhis2-core | 8.5CNA v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-32493 | djvulibre heap-based buffer overflow | 7.8NVD v3.1 | 1.0% | 2021-06-24 | Fix |
| CVE-2021-32492 | djvulibre out-of-bounds read | 7.8NVD v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-32491 | djvulibre integer overflow | 7.8NVD v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-32490 | djvulibre out-of-bounds write | 7.8NVD v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-31649 | JFinal Java deserialization | 9.8v3.1 | 1.8% | 2021-06-24 | Fix |
| CVE-2021-31412 | Vaadin flow-server improper neutralization | 5.3CNA v3.1 | 1.3% | 2021-06-24 | Fix |
| CVE-2021-29968 | Mozilla Firefox out-of-bounds read | 8.1v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-29967 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 1.4% | 2021-06-24 | Fix |
| CVE-2021-29966 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.0% | 2021-06-24 | Fix |
| CVE-2021-29965 | Mozilla Firefox externally controlled resource reference | 5.3v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-29964 | Mozilla Thunderbird out-of-bounds read | 7.1v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-29963 | Mozilla Firefox insufficient verification of data authenticity | 4.3v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-29962 | Mozilla Firefox improper resource release | 4.3v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-29961 | Mozilla Firefox incorrect authorization | 4.3v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-29960 | Mozilla Firefox incorrect resource transfer | 4.3v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-29959 | Mozilla Firefox incorrect authorization | 4.3v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-29958 | Mozilla Firefox missing authorization | 4.3v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-29957 | Mozilla Thunderbird OpenPGP inline message handling vulnerability | 4.3v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-29956 | Mozilla Thunderbird cleartext storage of sensitive information | 4.3v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-29955 | Mozilla Firefox ESR injection | 5.3v3.1 | 1.5% | 2021-06-24 | Fix |
| CVE-2021-29954 | Mozilla Hubs Cloud cleartext storage of sensitive information | 9.8v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-29953 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-29952 | Mozilla Firefox race condition | 7.5v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-29951 | Mozilla Thunderbird improper privilege management | 6.5v3.1 | 1.9% | 2021-06-24 | Fix |
| CVE-2021-29950 | Mozilla Thunderbird cleartext storage of sensitive information | 7.5v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-29949 | Mozilla Thunderbird uncontrolled search path | 7.8v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-29948 | Mozilla Thunderbird race condition | 2.5v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-29947 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-29946 | Mozilla Firefox ESR integer overflow | 8.8v3.1 | 1.2% | 2021-06-24 | Fix |
| CVE-2021-29945 | Mozilla Firefox ESR incorrect calculation | 6.5v3.1 | 1.2% | 2021-06-24 | Fix |
| CVE-2021-29944 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-29777 | IBM Db2 inclusion of untrusted functionality | 5.3CNA v3.0 | 1.4% | 2021-06-24 | Fix |
| CVE-2021-29703 | IBM Db2 denial of service | 7.5CNA v3.0 | 1.7% | 2021-06-24 | Fix |
| CVE-2021-28800 | Command injection vulnerability in QTS | 8.1CNA v3.1 | 1.4% | 2021-06-24 | Fix |
| CVE-2021-27659 | Johnson Controls exacqVision Web Service cross-site scripting | 5.3CNA v3.1 | 1.2% | 2021-06-24 | Fix |
| CVE-2021-27658 | exacqVision Enterprise Manager CSS | 4.3CNA v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-26585 | HPE OneView Global Dashboard information disclosure | 5.5v3.1 | 0.2% | 2021-06-24 | Fix |
| CVE-2021-25923 | OpenEMR weak password requirements | 8.1v3.1 | 1.3% | 2021-06-24 | |
| CVE-2021-25656 | Avaya Aura Experience Portal XSS | 5.3CNA v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-25655 | URL redirection to untrusted site possible in Avaya Aura Experience Portal | 4.4CNA v3.1 | 0.4% | 2021-06-24 | Fix |
| CVE-2021-25653 | Avaya Aura Appliance Virtualization Platform Utilities privilege escalation | 8.0CNA v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-25652 | Avaya Aura Appliance Virtualization Platform Utilities sensitive information disclosure | 4.9CNA v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-25651 | Avaya Aura Utility Services privilege escalation | 8.0CNA v3.1 | 0.5% | 2021-06-24 | Fix |
| CVE-2021-25650 | Avaya Aura Utility Services privilege escalation | 7.7CNA v3.1 | 0.5% | 2021-06-24 | Fix |
| CVE-2021-25649 | Avaya Utility Services sensitive information disclosure | 4.9CNA v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-24002 | Mozilla Firefox ESR injection | 8.8v3.1 | 1.2% | 2021-06-24 | Fix |
| CVE-2021-24001 | Mozilla Firefox resource exposure | 4.3v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-24000 | Mozilla Firefox race condition | 3.1v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-23999 | Mozilla Firefox ESR improper privilege management | 8.8v3.1 | 1.3% | 2021-06-24 | Fix |
| CVE-2021-23998 | Mozilla Firefox ESR insufficient verification of data authenticity | 6.5v3.1 | 0.6% | 2021-06-24 | Fix |
| CVE-2021-23997 | Mozilla Firefox incorrect numeric conversion | 8.8v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-23996 | Mozilla Firefox spoofing | 6.5v3.1 | 0.7% | 2021-06-24 | Fix |
| CVE-2021-23995 | Mozilla Firefox ESR operation on a released resource | 8.8v3.1 | 1.2% | 2021-06-24 | Fix |
| CVE-2021-23994 | Mozilla Firefox ESR missing resource initialization | 8.8v3.1 | 1.8% | 2021-06-24 | Fix |
| CVE-2021-23993 | Mozilla Thunderbird improper signature verification | 6.5v3.1 | 0.4% | 2021-06-24 | Fix |
| CVE-2021-23992 | Mozilla Thunderbird improper signature verification | 4.3v3.1 | 0.5% | 2021-06-24 | Fix |
| CVE-2021-23991 | Mozilla Thunderbird OpenPGP key handling vulnerability | 6.8v3.1 | 1.0% | 2021-06-24 | Fix |
| CVE-2021-23398 | react-bootstrap-table cross-site scripting (XSS) | 6.1v3.1 | 1.3% | 2021-06-24 | |
| CVE-2021-21737 | ZXV10 B860H incorrect default permissions | 7.5v3.1 | 0.8% | 2021-06-24 | Fix |
| CVE-2021-21574 | Dell BIOSConnect stack-based buffer overflow | 7.2CNA v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-21573 | Dell BIOSConnect stack-based buffer overflow | 7.2CNA v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-21572 | Dell BIOSConnect heap-based buffer overflow | 7.2CNA v3.1 | 0.3% | 2021-06-24 | Fix |
| CVE-2021-21571 | Dell UEFI BIOS https stack improper certificate validation | 5.9CNA v3.1 | 0.5% | 2021-06-24 | Fix |
| CVE-2021-20579 | IBM Db2 information disclosure | 5.9CNA v3.0 | 1.1% | 2021-06-24 | Fix |
| CVE-2021-3500 | djvulibre out-of-bounds write | 7.8NVD v3.1 | 0.9% | 2021-06-24 | Fix |
| CVE-2021-35438 | phpipam cross-site scripting | 6.1v3.1 | 1.0% | 2021-06-23 | |
| CVE-2021-35210 | contao cross-site scripting in the system log | 6.1v3.1 | 0.7% | 2021-06-23 | Fix |
| CVE-2021-34071 | tsMuxer heap-based buffer overflow | 5.5v3.1 | 0.7% | 2021-06-23 | |
| CVE-2021-34070 | tsMuxer out-of-bounds read | 5.5v3.1 | 0.8% | 2021-06-23 | |
| CVE-2021-34069 | tsMuxer divide by zero | 5.5v3.1 | 0.8% | 2021-06-23 | |
| CVE-2021-34068 | tsMuxer heap-based buffer overflow | 5.5v3.1 | 0.8% | 2021-06-23 | |
| CVE-2021-34067 | tsMuxer heap-based buffer overflow | 5.5v3.1 | 0.8% | 2021-06-23 | |
| CVE-2021-33624 | Linux kernel type confusion | 4.7NVD v3.1 | 0.9% | 2021-06-23 | Exploit codeFix |
| CVE-2021-31586 | Accellion Kiteworks SQL injection | 8.8v3.1 | 44.1% | 2021-06-23 | |
| CVE-2021-31585 | Accellion Kiteworks SSH password generation privilege escalation | 6.7v3.1 | 0.9% | 2021-06-23 | |
| CVE-2021-29620 | reportportal XXE vulnerability on Launch import with externally-defined DTD file | 7.5CNA v3.1 | 2.2% | 2021-06-23 | Fix |
| CVE-2021-29087 | Synology DiskStation Manager (DSM) path traversal | 7.5CNA v3.1 | 1.4% | 2021-06-23 | Fix |
| CVE-2021-29086 | Synology DiskStation Manager (DSM) webapi component information disclosure | 5.3CNA v3.1 | 1.2% | 2021-06-23 | Fix |
| CVE-2021-29085 | Synology DiskStation Manager (DSM) improper neutralization | 8.6CNA v3.1 | 1.3% | 2021-06-23 | Fix |
| CVE-2021-29084 | Synology DiskStation Manager (DSM) improper neutralization | 7.5CNA v3.1 | 1.3% | 2021-06-23 | Fix |
| CVE-2021-28977 | GetSimpleCMS cross-site scripting | 4.8v3.1 | 0.5% | 2021-06-23 | |
| CVE-2021-28976 | GetSimpleCMS remote code execution | 7.2v3.1 | 7.5% | 2021-06-23 | Exploit code |
| CVE-2021-27649 | Synology DiskStation Manager (DSM) file transfer protocol component use-after-free | 9.8CNA v3.1 | 2.0% | 2021-06-23 | Fix |
| CVE-2021-21999 | VMware Tools uncontrolled search path | 7.8v3.1 | 1.5% | 2021-06-23 | Fix |
| CVE-2021-21998 | VMware Carbon Black App Control (AppC) improper authentication | 9.8v3.1 | 10.6% | 2021-06-23 | Fix |
| CVE-2021-21809 | Moodle command execution vulnerability exists in the default legacy spellchecker plugin | 9.1v3.1 | 24.2% | 2021-06-23 | MetasploitExploit codeFix |
| CVE-2021-20019 | SonicWall SonicOS information disclosure | 7.5v3.1 | 1.4% | 2021-06-23 | Fix |
| CVE-2021-2322 | Oracle OpenGrok XML injection | 8.8CNA v3.1 | 1.4% | 2021-06-23 | Fix |
| CVE-2021-35206 | Gitpod open redirect | 6.1v3.1 | 1.2% | 2021-06-22 | Fix |
| CVE-2021-35046 | IceHrm session fixation | 6.1v3.1 | 0.8% | 2021-06-22 | |
| CVE-2021-35045 | IceHrm cross-site scripting | 6.1v3.1 | 1.1% | 2021-06-22 | |
| CVE-2021-34428 | The Eclipse Foundation Eclipse Jetty insufficient session expiration | 2.9CNA v3.1 | 1.0% | 2021-06-22 | Fix |
| CVE-2021-34397 | NVIDIA Jetson TX2 series out-of-bounds write | 1.9CNA v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-34396 | NVIDIA Jetson TX2 series, TX2 NX denial of service | 3.0CNA v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-34395 | NVIDIA Jetson TX1 incorrect default permissions | 3.9CNA v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-34394 | NVIDIA Jetson TX2 series deserialization of untrusted data | 4.2CNA v3.1 | 0.3% | 2021-06-22 | Fix |
| CVE-2021-34393 | NVIDIA Jetson TX2 series deserialization of untrusted data | 4.2CNA v3.1 | 0.3% | 2021-06-22 | Fix |
| CVE-2021-34392 | NVIDIA Jetson TX1 integer overflow | 4.4CNA v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-34391 | NVIDIA Jetson TX1 integer overflow | 5.3CNA v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-34390 | NVIDIA Jetson TX1 integer overflow | 5.3CNA v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-34372 | NVIDIA Jetson TX2 series integer overflow | 8.2CNA v3.1 | 0.3% | 2021-06-22 | Fix |
| CVE-2021-34244 | IceHrm cross-site request forgery | 8.8v3.1 | 0.6% | 2021-06-22 | |
| CVE-2021-34243 | IceHrm cross-site scripting | 5.4v3.1 | 0.6% | 2021-06-22 | |
| CVE-2021-32701 | Incorrect authorization in ORY Oathkeeper | 7.5CNA v3.1 | 1.6% | 2021-06-22 | Fix |
| CVE-2021-32700 | ballerina-platform ballerina-lang supply chain attack via MiTM against users | 9.1CNA v3.1 | 0.6% | 2021-06-22 | Fix |
| CVE-2021-32699 | Asymmetric resource consumption (amplification) in Docker containers created by Wings | 6.5CNA v3.1 | 0.3% | 2021-06-22 | Fix |
| CVE-2021-32644 | ampache cross-site scripting in Random.php | 6.4CNA v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-22383 | Huawei eSE620X vESS eCNS280_TD V100R005C10 and out-of-bounds read | 4.9v3.1 | 0.6% | 2021-06-22 | Fix |
| CVE-2021-22382 | E3372 improper preservation of permissions | 6.5v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-22378 | eCNS280_TD There is a race condition | 5.3v3.1 | 0.4% | 2021-06-22 | Fix |
| CVE-2021-22377 | S12700 There is a command injection | 7.2v3.1 | 0.9% | 2021-06-22 | Fix |
| CVE-2021-22366 | eSE620X vESS There is an out-of-bounds read | 5.5v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-22365 | eSE620X vESS There is an out-of-bounds read | 3.3v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-22363 | eCNS280_TD There is a resource management error | 7.5v3.1 | 0.7% | 2021-06-22 | Fix |
| CVE-2021-22361 | eCNS280 There is an improper authorization | 7.8v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-22342 | Huawei IPS Module There is an information disclosure | 4.9v3.1 | 0.6% | 2021-06-22 | Fix |
| CVE-2021-20744 | EC-CUBE Category contents plugin cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-20743 | EC-CUBE Email newsletters management plugin cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-20742 | EC-CUBE Business form output plugin cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-20741 | Hitachi Application Server Help cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-20737 | WESEEK GROWI improper authentication | 6.5v3.1 | 1.1% | 2021-06-22 | Fix |
| CVE-2021-20736 | WESEEK GROWI NoSQL injection | 9.1v3.1 | 1.3% | 2021-06-22 | Fix |
| CVE-2021-20735 | ETUNA EC-CUBE plugins cross-site scripting | 6.1v3.1 | 1.1% | 2021-06-22 | Fix |
| CVE-2021-20734 | Collne Welcart e-Commerce cross-site scripting | 6.1v3.1 | 1.0% | 2021-06-22 | Fix |
| CVE-2021-20733 | あすけんダイエット (asken diet) improper authorization | 6.1v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-3044 | Cortex XSOAR: Unauthorized Usage of the REST API | 9.8CNA v3.1 | 1.4% | 2021-06-22 | Fix |
| CVE-2021-0608 | Android AppLaunchActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0607 | Android iaxxx-codec.c privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0606 | Android drm_syncobj.c use-after-free | 6.7v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-0605 | Android af_key.c out-of-bounds read | 4.4v3.1 | 0.2% | 2021-06-22 | Fix |
| CVE-2021-0572 | Android AccountManagerService.java insecure permissions | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0571 | Android incorrect authorization | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0570 | Android BugreportProgressService.java insecure permissions | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0569 | Android clickjacking | 5.0v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0568 | Android DevicePolicyManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0567 | Android RemoteViews.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0566 | Android TimeCheck.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0565 | Android AudioStream.cpp use-after-free | 7.0v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0564 | Android CryptoPlugin.cpp use-after-free | 6.4v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0563 | Android ih264e_fmt_conv.c out-of-bounds read | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0562 | Android motion_est.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0561 | Android stream_encoder.c out-of-bounds write | 5.5v3.1 | 0.5% | 2021-06-22 | Fix |
| CVE-2021-0559 | Android p_ol_wgh.cpp out-of-bounds read | 6.5v3.1 | 0.7% | 2021-06-22 | Fix |
| CVE-2021-0558 | Android pvmp3_framedecoder.cpp out-of-bounds read | 6.5v3.1 | 0.7% | 2021-06-22 | Fix |
| CVE-2021-0557 | Android ABuffer.cpp out-of-bounds write | 8.8v3.1 | 0.7% | 2021-06-22 | Fix |
| CVE-2021-0556 | Android fastcodemb.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0555 | Android protostream_objectsource.cc crash | 7.5v3.1 | 0.8% | 2021-06-22 | Fix |
| CVE-2021-0554 | Android missing authorization | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0553 | Android AppSwitchPreference.java privilege escalation | 7.3v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0552 | Android MediaOutputSlice.java insecure permissions | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0551 | Android MediaControlPanel.java denial of service | 6.5v3.1 | 0.6% | 2021-06-22 | Fix |
| CVE-2021-0550 | Android AnnotateActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0549 | Android BondStateMachine.java information disclosure | 4.4v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0548 | Android rw_i93.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0547 | Android NetInitiatedActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0546 | Android phNxpNciHal.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0545 | Android phNxpNciHal.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0544 | Android phNxpNciHal.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0543 | Android phNxpNciHal_ext.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0542 | Android missing authorization | 5.5v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0541 | Android phNxpNciHal_ext.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0540 | Android hal_wrapper.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0539 | Android MmsService.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0538 | Android EmergencyCallbackModeExitDialog.java privilege escalation | 7.3v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0537 | Android clickjacking | 7.3v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0536 | Android externally controlled resource reference | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0535 | Android ctrl_iface_unix.c memory corruption | 6.7v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-0534 | Android DeviceAdminReceiver.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-22 | Fix |
| CVE-2021-35196 | Theologeek Manuskript deserialization of untrusted data | 7.8v3.1 | 1.9% | 2021-06-21 | Fix |
| CVE-2021-35066 | ConnectWise Automate An XML external entity injection | 9.8v3.1 | 1.1% | 2021-06-21 | Fix |
| CVE-2021-34389 | NVIDIA Jetson TX2 series memory leak | 5.0CNA v3.1 | 0.3% | 2021-06-21 | Fix |
| CVE-2021-34388 | NVIDIA Jetson TX1 out-of-bounds write | 6.3CNA v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-34387 | NVIDIA Jetson TX1 incorrect default permissions | 6.3CNA v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-34386 | NVIDIA Jetson TX1 integer overflow | 6.3CNA v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-33572 | F-Secure Products denial of service (DoS) | 6.5v3.1 | 0.7% | 2021-06-21 | |
| CVE-2021-32698 | Blind server-side request forgery (SSRF) in eLabFTW | 6.8CNA v3.1 | 0.9% | 2021-06-21 | Fix |
| CVE-2021-32697 | Neos Form GET request handling improper input validation | 6.5CNA v3.1 | 1.1% | 2021-06-21 | Fix |
| CVE-2021-31769 | Myq-solution Myq Server OS command injection | 8.8v3.1 | 4.1% | 2021-06-21 | |
| CVE-2021-29337 | MSI Dragon Center privilege escalation | 7.8v3.1 | 0.8% | 2021-06-21 | Exploit code |
| CVE-2021-29063 | Mpmath resource exhaustion | 7.5v3.1 | 4.2% | 2021-06-21 | Fix |
| CVE-2021-29061 | ReDOS in Vfsjfilechooser2 | 7.5v3.1 | 2.3% | 2021-06-21 | Fix |
| CVE-2021-29060 | color-string regular expression denial of service (ReDOS) | 5.3v3.1 | 3.1% | 2021-06-21 | Fix |
| CVE-2021-29059 | Is-svg resource exhaustion | 7.5v3.1 | 2.8% | 2021-06-21 | Fix |
| CVE-2021-28833 | Increments Qiita qiita-markdown cross-site scripting | 6.1v3.1 | 0.7% | 2021-06-21 | Fix |
| CVE-2021-28684 | Powerarchiver XML external entity injection | 4.3v3.1 | 0.9% | 2021-06-21 | |
| CVE-2021-26461 | Apache NuttX malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds | 9.8v3.1 | 5.0% | 2021-06-21 | Fix |
| CVE-2021-24383 | WP Google Maps WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 2.5% | 2021-06-21 | Exploit codeFix |
| CVE-2021-24379 | Comments Like Dislike WordPress plugin Add Like/Dislike bypass | 5.3NVD v3.1 | 1.0% | 2021-06-21 | Fix |
| CVE-2021-24378 | Autoptimize WordPress plugin authenticated stored XSS via file upload | 4.8NVD v3.1 | 0.6% | 2021-06-21 | Fix |
| CVE-2021-24377 | Autoptimize WordPress plugin race condition leading to RCE | 8.1NVD v3.1 | 1.2% | 2021-06-21 | Fix |
| CVE-2021-24376 | Autoptimize WordPress plugin arbitrary file upload via import settings | 9.8NVD v3.1 | 3.7% | 2021-06-21 | Fix |
| CVE-2021-24374 | Jetpack WordPress plugin Carousel Module Non-Published Page/Post Attachment comment leak | 5.3NVD v3.1 | 1.5% | 2021-06-21 | Fix |
| CVE-2021-24373 | WP Hardening WordPress plugin reflected XSS via historyvalue | 6.1NVD v3.1 | 0.8% | 2021-06-21 | Fix |
| CVE-2021-24372 | WP Hardening WordPress plugin reflected XSS via URI | 6.1NVD v3.1 | 0.8% | 2021-06-21 | Fix |
| CVE-2021-24370 | Fancy Product Designer WordPress plugin unauthenticated arbitrary file upload and RCE | 9.8NVD v3.1 | 47.4% | 2021-06-21 | NucleiFix |
| CVE-2021-24369 | GetPaid WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-06-21 | Fix |
| CVE-2021-24367 | WP Config File Editor WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-06-21 | |
| CVE-2021-24366 | Admin Columns label setting stored cross-site scripting | 5.4NVD v3.1 | 1.0% | 2021-06-21 | Fix |
| CVE-2021-24364 | Jannah WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.0% | 2021-06-21 | NucleiFix |
| CVE-2021-24361 | GeoDirectory Location Manager WordPress plugin Multiple unauthenticated SQL Injections | 9.8NVD v3.1 | 1.8% | 2021-06-21 | Fix |
| CVE-2021-24339 | Pods WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.8% | 2021-06-21 | Fix |
| CVE-2021-24338 | Pods WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.8% | 2021-06-21 | Fix |
| CVE-2021-21422 | XSS vulnerability in mongo-express | 8.1CNA v3.1 | 1.6% | 2021-06-21 | Fix |
| CVE-2021-0533 | Android memory management driver memory corruption | 7.0v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0532 | Android memory management driver memory corruption | 7.0v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0531 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0530 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0529 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0528 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0527 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0526 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0525 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0523 | Android WifiScanModeActivity.java privilege escalation | 7.3v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0522 | Android connection_handler.cc out-of-bounds read | 7.5v3.1 | 1.4% | 2021-06-21 | Fix |
| CVE-2021-0521 | Android PackageManagerService information disclosure | 5.5v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0520 | Android MemoryFileSystem.cpp use-after-free | 7.0v3.1 | 0.2% | 2021-06-21 | Exploit codeFix |
| CVE-2021-0517 | Android ConnectivityService.java information disclosure | 7.5v3.1 | 0.8% | 2021-06-21 | Fix |
| CVE-2021-0516 | Android p2p_pd.c out-of-bounds read | 9.8v3.1 | 1.6% | 2021-06-21 | Exploit codeFix |
| CVE-2021-0513 | Android NotificationManagerService.java insecure permissions | 7.8v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-0512 | Android hid-input.c out-of-bounds write | 7.8v3.1 | 0.3% | 2021-06-21 | Fix |
| CVE-2021-0511 | Android dex2oat.cc privilege escalation | 7.8v3.1 | 0.2% | 2021-06-21 | Exploit codeFix |
| CVE-2021-0510 | Android CryptoPlugin.cpp out-of-bounds write | 7.8NVD v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-0509 | Android CryptoPlugin.cpp use-after-free | 7.0v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-0508 | Android DrmPlugin.cpp use-after-free | 7.0v3.1 | 0.2% | 2021-06-21 | Fix |
| CVE-2021-0507 | Android btif_rc.cc out-of-bounds write | 8.8v3.1 | 1.0% | 2021-06-21 | Fix |
| CVE-2021-0506 | Android ActivityPicker.java privilege escalation | 7.3v3.1 | 0.3% | 2021-06-21 | Fix |
| CVE-2021-0505 | Android the settings app privilege escalation | 7.8v3.1 | 0.1% | 2021-06-21 | Fix |
| CVE-2021-0504 | Android avrc_pars_ct.cc out-of-bounds read | 6.5v3.1 | 0.3% | 2021-06-21 | Fix |
| CVE-2021-0478 | Android StatusBarIconView.java insecure permissions | 7.8v3.1 | 0.3% | 2021-06-21 | Fix |
| CVE-2021-24368 | Quiz And Survey Master WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-06-20 | Fix |
| CVE-2021-34815 | Checksec Canopy cross-site scripting | 4.8v3.1 | 0.8% | 2021-06-18 | |
| CVE-2021-34812 | Synology Calendar php component hard-coded credentials | 5.8CNA v3.1 | 1.1% | 2021-06-18 | Fix |
| CVE-2021-34811 | Synology Download Station task management component server-side request forgery | 5.0CNA v3.1 | 0.8% | 2021-06-18 | Fix |
| CVE-2021-34810 | Synology Download Station cgi component improper privilege management | 9.9CNA v3.1 | 1.4% | 2021-06-18 | Fix |
| CVE-2021-34809 | Synology Download Station command improper neutralization | 9.9CNA v3.1 | 1.9% | 2021-06-18 | Fix |
| CVE-2021-34808 | Synology Media Server cgi component server-side request forgery | 5.8CNA v3.1 | 1.0% | 2021-06-18 | Fix |
| CVE-2021-34553 | Sonatype Nexus Repository Manager path traversal | 4.3v3.1 | 3.7% | 2021-06-18 | Fix |
| CVE-2021-33824 | Moxa Mgate MB3180 denial of service | 7.5v3.1 | 1.9% | 2021-06-18 | Fix |
| CVE-2021-33823 | Moxa Mgate MB3180 denial of service | 7.5v3.1 | 1.3% | 2021-06-18 | Fix |
| CVE-2021-33822 | SING4G 4GEE Router HH70VB denial of service | 7.5v3.1 | 1.9% | 2021-06-18 | Fix |
| CVE-2021-33820 | UI Camera G3 Flex denial of service | 7.5v3.1 | 1.9% | 2021-06-18 | Fix |
| CVE-2021-33818 | UI Camera G3 Flex denial of service | 7.5v3.1 | 1.9% | 2021-06-18 | Fix |
| CVE-2021-33577 | Cleo LexiCom AS2 message handling vulnerability | 5.3v3.1 | 0.6% | 2021-06-18 | |
| CVE-2021-33576 | Cleo Lexicom path traversal | 9.8v3.1 | 1.5% | 2021-06-18 | |
| CVE-2021-33347 | jpress cross-site scripting | 5.4v3.1 | 0.5% | 2021-06-18 | |
| CVE-2021-33186 | SerenityOS out-of-bounds write | 7.5v3.1 | 1.0% | 2021-06-18 | |
| CVE-2021-33185 | SerenityOS set_range test in TestBitmap buffer overflow | 7.5v3.1 | 1.0% | 2021-06-18 | |
| CVE-2021-32956 | Advantech WebAccess/SCADA open redirect | 6.1v3.1 | 0.7% | 2021-06-18 | Fix |
| CVE-2021-32954 | Advantech WebAccess/SCADA relative path traversal | 6.5v3.1 | 2.1% | 2021-06-18 | Fix |
| CVE-2021-32696 | ericnorris striptags passing in a non-string html argument can lead to unsanitized output | 3.7CNA v3.1 | 1.1% | 2021-06-18 | Fix |
| CVE-2021-32536 | MCU Technologies MCUsystem reflected XSS | 6.1v3.1 | 0.8% | 2021-06-18 | Fix |
| CVE-2021-31664 | RIOT-OS RIOT buffer overflow | 7.5v3.1 | 1.3% | 2021-06-18 | |
| CVE-2021-31663 | RIOT-OS RIOT buffer overflow | 7.5v3.1 | 1.6% | 2021-06-18 | |
| CVE-2021-31662 | RIOT-OS RIOT buffer overflow | 7.5v3.1 | 1.3% | 2021-06-18 | |
| CVE-2021-31661 | RIOT-OS RIOT buffer overflow | 7.5v3.1 | 1.3% | 2021-06-18 | |
| CVE-2021-31660 | RIOT-OS RIOT buffer overflow | 7.5v3.1 | 1.3% | 2021-06-18 | |
| CVE-2021-31272 | SerenityOS path traversal | 9.8v3.1 | 3.2% | 2021-06-18 | |
| CVE-2021-26835 | Zettlr cross-site scripting | 6.1v3.1 | 1.3% | 2021-06-18 | Fix |
| CVE-2021-26834 | Znote A cross-site scripting | 5.4v3.1 | 0.7% | 2021-06-18 | |
| CVE-2021-23846 | B426 credential disclosure | 8.8CNA v3.1 | 0.5% | 2021-06-18 | Fix |
| CVE-2021-23845 | B426 Web Configuration authentication bypass | 8.0CNA v3.1 | 0.8% | 2021-06-18 | Fix |
| CVE-2021-21997 | VMware Tools denial of service | 5.5v3.1 | 0.7% | 2021-06-18 | Fix |
| CVE-2021-21669 | XXE vulnerability in Jenkins Generic Webhook Trigger Plugin | 9.8v3.1 | 25.7% | 2021-06-18 | Fix |
| CVE-2021-21410 | contiki-ng out-of-bounds read in the 6LoWPAN implementation | 8.2CNA v3.1 | 1.2% | 2021-06-18 | Fix |
| CVE-2021-21282 | contiki-ng buffer overflow in RPL source routing header processing | 8.6CNA v3.1 | 1.0% | 2021-06-18 | Fix |
| CVE-2021-21281 | contiki-ng buffer overflow due to unvalidated TCP data offset | 7.0CNA v3.1 | 0.9% | 2021-06-18 | Fix |
| CVE-2021-21280 | contiki-ng out-of-bounds write when processing 6LoWPAN extension headers | 8.6CNA v3.1 | 1.1% | 2021-06-18 | Fix |
| CVE-2021-21279 | contiki-ng infinite loop in IPv6 neighbor solicitation processing | 7.5CNA v3.1 | 1.0% | 2021-06-18 | Fix |
| CVE-2021-21257 | contiki-ng out-of-bounds write in RPL-Classic and RPL-Lite | 8.2CNA v3.1 | 1.1% | 2021-06-18 | Fix |
| CVE-2021-3604 | Primion-Digitek Secure 8 SQL injection | 9.8v3.1 | 1.6% | 2021-06-18 | Fix |
| CVE-2021-34825 | Quassel-irc Quassel cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2021-06-17 | Fix |
| CVE-2021-33557 | MantisBT allows XSS in manage_custom_field_edit_page.php | 6.1v3.1 | 1.8% | 2021-06-17 | Fix |
| CVE-2021-32952 | Drawings SDK DGN file-reading procedure in the out-of-bounds write | 7.8v3.1 | 2.7% | 2021-06-17 | Fix |
| CVE-2021-32950 | Drawings SDK out-of-bounds read | 7.1v3.1 | 2.1% | 2021-06-17 | Fix |
| CVE-2021-32948 | Drawings SDK DWG file-reading procedure in the out-of-bounds write | 7.8v3.1 | 2.7% | 2021-06-17 | Fix |
| CVE-2021-32946 | Drawings SDK improper check for exceptional conditions | 7.8v3.1 | 2.8% | 2021-06-17 | Fix |
| CVE-2021-32944 | Drawings SDK DGN file-reading procedure in the use-after-free | 7.8v3.1 | 2.7% | 2021-06-17 | Fix |
| CVE-2021-32940 | Drawings SDK DWG file-recovering procedure in the out-of-bounds read | 7.1v3.1 | 2.1% | 2021-06-17 | Fix |
| CVE-2021-32938 | Drawings SDK out-of-bounds read | 7.1v3.1 | 1.4% | 2021-06-17 | Fix |
| CVE-2021-32936 | Drawings SDK DXF file-recovering procedure in the out-of-bounds write | 7.8v3.1 | 2.8% | 2021-06-17 | Fix |
| CVE-2021-32695 | Malicious Android app could access Shared Preferences of the Nextcloud Android client | 3.9CNA v3.1 | 0.9% | 2021-06-17 | Fix |
| CVE-2021-32694 | Malicious Android application can crash the Nextcloud Android client | 4.1CNA v3.1 | 1.0% | 2021-06-17 | Fix |
| CVE-2021-32693 | symfony authentication granted with multiple firewalls | 6.8CNA v3.1 | 1.4% | 2021-06-17 | Fix |
| CVE-2021-32681 | Improper escaping of HTML (cross-site scripting) in Wagtail StreamField blocks | 5.4CNA v3.1 | 1.1% | 2021-06-17 | Fix |
| CVE-2021-32582 | Connectwise Automate SQL injection | 7.5v3.1 | 1.1% | 2021-06-17 | Fix |
| CVE-2021-32575 | Improper network isolation in HashiCorp Nomad | 6.5v3.1 | 0.5% | 2021-06-17 | Fix |
| CVE-2021-32426 | TRENDnet Tw100-s4w1ca cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-17 | |
| CVE-2021-32424 | TRENDnet Tw100-s4w1ca cross-site request forgery | 8.8v3.1 | 0.4% | 2021-06-17 | |
| CVE-2021-32078 | Linux kernel out-of-bounds read | 7.1v3.1 | 0.6% | 2021-06-17 | Fix |
| CVE-2021-31818 | Octopus Deploy Octopus Server SQL injection | 4.3v3.1 | 0.6% | 2021-06-17 | Fix |
| CVE-2021-31521 | Trend Micro InterScan Web Security Virtual Appliance cross-site scripting | 5.4v3.1 | 1.4% | 2021-06-17 | Fix |
| CVE-2021-29706 | IBM AIX denial of service | 6.8CNA v3.0 | 0.2% | 2021-06-17 | Fix |
| CVE-2021-23396 | lutils prototype pollution | 9.8v3.1 | 1.0% | 2021-06-17 | |
| CVE-2021-21777 | EIP Stack Group Ethernet/IP UDP handler functionality information disclosure | 10.0v3.1 | 1.7% | 2021-06-17 | |
| CVE-2021-3603 | Inclusion of functionality from untrusted control sphere in PHPMailer/PHPMailer | 8.1v3.1 | 2.3% | 2021-06-17 | Fix |
| CVE-2021-0143 | Intel(R) Brand Verification Tool installer for the improper permissions | 7.8v3.1 | 0.2% | 2021-06-17 | Fix |
| CVE-2021-34813 | Matrix Olm out-of-bounds write | 9.8v3.1 | 4.3% | 2021-06-16 | Fix |
| CVE-2021-34803 | TeamViewer uncontrolled search path | 7.8v3.1 | 0.5% | 2021-06-16 | Fix |
| CVE-2021-34801 | Denial of service in Valine | 5.3v3.1 | 1.7% | 2021-06-16 | Fix |
| CVE-2021-34683 | Eic e-document system missing brute-force protection | 5.3v3.1 | 1.1% | 2021-06-16 | Fix |
| CVE-2021-34551 | Remote code execution vulnerability in PHPMailer running on Windows | 8.1v3.1 | 2.8% | 2021-06-16 | Fix |
| CVE-2021-34204 | D-Link Dir-2640-us insufficiently protected credentials | 6.8v3.1 | 1.1% | 2021-06-16 | |
| CVE-2021-34203 | D-Link Dir-2640-us insecure default initialization | 8.1v3.1 | 1.2% | 2021-06-16 | |
| CVE-2021-34202 | D-Link Dir-2640-us out-of-bounds write | 7.8v3.1 | 3.6% | 2021-06-16 | Fix |
| CVE-2021-34201 | D-Link Dir-2640-us out-of-bounds write | 7.1v3.1 | 0.5% | 2021-06-16 | |
| CVE-2021-33813 | XML external entity (XXE) injection in Jdom | 7.5v3.1 | 19.4% | 2021-06-16 | Fix |
| CVE-2021-32928 | Sentinel LDK Run-Time Environment incomplete cleanup | 9.8v3.1 | 1.3% | 2021-06-16 | Fix |
| CVE-2021-32691 | ApollosProject apollos-apps Auto-merging Person Records Compromised | 8.8CNA v3.1 | 1.5% | 2021-06-16 | Fix |
| CVE-2021-32690 | helm repository credentials passed to alternate domain | 6.8CNA v3.1 | 1.4% | 2021-06-16 | Fix |
| CVE-2021-32685 | Improper verification of cryptographic signature in tEnvoy | 9.8CNA v3.1 | 0.7% | 2021-06-16 | Fix |
| CVE-2021-32676 | Session fixation in Nextcloud Talk | 6.5CNA v3.1 | 1.0% | 2021-06-16 | Fix |
| CVE-2021-32659 | Matrix.org matrix-appservice-bridge room upgrade handling missing authentication | 6.5CNA v3.1 | 0.9% | 2021-06-16 | Fix |
| CVE-2021-32623 | Opencast vulnerable to billion laughs attack (XML bomb) | 8.1CNA v3.1 | 1.3% | 2021-06-16 | Fix |
| CVE-2021-32612 | I-doo Veryfitpro cleartext transmission of sensitive information | 8.1v3.1 | 1.1% | 2021-06-16 | |
| CVE-2021-32245 | Cross-site scripting in PageKit | 5.4v3.1 | 0.5% | 2021-06-16 | |
| CVE-2021-32244 | Moodle cross-site scripting (XSS) | 5.4v3.1 | 0.9% | 2021-06-16 | Fix |
| CVE-2021-32243 | fogproject unrestricted file upload | 8.8v3.1 | 1.1% | 2021-06-16 | |
| CVE-2021-32033 | Protectimus Slim Nfc 70 improper seeding | 4.6v3.1 | 0.5% | 2021-06-16 | |
| CVE-2021-31857 | Zoho ManageEngine Password Manager Pro browser extension vulnerability | 5.9v3.1 | 3.1% | 2021-06-16 | Fix |
| CVE-2021-31477 | GE Reason RPV311 hard-coded credentials | 7.3v3.1 | 2.6% | 2021-06-16 | Fix |
| CVE-2021-31476 | Foxit PhantomPDF type confusion | 7.8v3.1 | 8.8% | 2021-06-16 | Fix |
| CVE-2021-31159 | Zoho Manageengine Servicedesk Plus Msp information disclosure through error messages | 5.3v3.1 | 17.8% | 2021-06-16 | Exploit codeFix |
| CVE-2021-30468 | Apache CXF denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter | 7.5v3.1 | 7.0% | 2021-06-16 | Fix |
| CVE-2021-29702 | IBM Db2 denial of service | 7.5CNA v3.0 | 1.9% | 2021-06-16 | Fix |
| CVE-2021-28979 | Thalesgroup SafeNet KeySecure HTTP response splitting | 6.5v3.1 | 1.2% | 2021-06-16 | Fix |
| CVE-2021-28815 | Insecure storage of sensitive information in myQNAPcloud Link | 6.0CNA v3.1 | 1.7% | 2021-06-16 | Fix |
| CVE-2021-27610 | SAP NetWeaver AS ABAP and ABAP Platform improper authentication | 9.0CNA v3.0 | 1.3% | 2021-06-16 | Fix |
| CVE-2021-27489 | ZOLL Defibrillator Dashboard unrestricted file upload | 8.8v3.1 | 1.3% | 2021-06-16 | Fix |
| CVE-2021-27487 | ZOLL Defibrillator Dashboard cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2021-06-16 | Fix |
| CVE-2021-27485 | ZOLL Defibrillator Dashboard recoverable password storage | 7.5v3.1 | 1.2% | 2021-06-16 | Fix |
| CVE-2021-27483 | ZOLL Defibrillator Dashboard improper privilege management | 7.8v3.1 | 0.2% | 2021-06-16 | Fix |
| CVE-2021-27481 | ZOLL Defibrillator Dashboard hard-coded cryptographic key | 5.5v3.1 | 0.2% | 2021-06-16 | Fix |
| CVE-2021-27479 | ZOLL Defibrillator Dashboard cross-site scripting | 5.4v3.1 | 0.5% | 2021-06-16 | Fix |
| CVE-2021-22914 | Citrix Cloud Connector insecure storage of sensitive information | 7.5v3.1 | 1.1% | 2021-06-16 | Fix |
| CVE-2021-21668 | Stored XSS vulnerability in Jenkins Scriptler Plugin | 5.4v3.1 | 76.0% | 2021-06-16 | Fix |
| CVE-2021-21667 | Stored XSS vulnerability in Jenkins Scriptler Plugin | 5.4v3.1 | 75.7% | 2021-06-16 | Fix |
| CVE-2021-21441 | ((OTRS)) Community Edition ticket overview screens cross-site scripting | 7.5CNA v3.1 | 1.1% | 2021-06-16 | Fix |
| CVE-2021-20567 | IBM Resilient SOAR missing encryption | 4.4CNA v3.0 | 0.1% | 2021-06-16 | Fix |
| CVE-2021-20566 | IBM Resilient SOAR weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-06-16 | Fix |
| CVE-2021-20488 | IBM Security Identity Manager Windows Password Synch plug-in vulnerability | 7.5CNA v3.0 | 0.9% | 2021-06-16 | Fix |
| CVE-2021-20483 | IBM Security Identity Manager server-side request forgery | 5.3CNA v3.0 | 0.9% | 2021-06-16 | Fix |
| CVE-2021-20094 | Wibu-Systems CodeMeter A denial of service | 7.5NVD v3.1 | 4.7% | 2021-06-16 | Fix |
| CVE-2021-20093 | Wibu-Systems CodeMeter A buffer over-read | 9.1NVD v3.1 | 33.3% | 2021-06-16 | Fix |
| CVE-2021-3535 | Rapid7 Nexpose cross-site scripting | 4.3CNA v3.1 | 0.6% | 2021-06-16 | Fix |
| CVE-2021-1571 | Cisco Small Business 220 Series Smart Switches improper authentication | 7.2CNA v3.1 | 9.7% | 2021-06-16 | Fix |
| CVE-2021-1570 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 6.5CNA v3.1 | 0.8% | 2021-06-16 | Fix |
| CVE-2021-1569 | Cisco Jabber Desktop and Mobile client software vulnerabilities | 6.5CNA v3.1 | 0.8% | 2021-06-16 | Fix |
| CVE-2021-1568 | Cisco AnyConnect Secure Mobility Client for Windows denial of service | 5.5CNA v3.1 | 0.2% | 2021-06-16 | Fix |
| CVE-2021-1567 | Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL hijacking | 7.0CNA v3.1 | 0.2% | 2021-06-16 | Fix |
| CVE-2021-1566 | Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation vulnerability | 7.4CNA v3.1 | 0.7% | 2021-06-16 | Fix |
| CVE-2021-1543 | Cisco Small Business 220 Series Smart Switches improper authentication | 7.2CNA v3.1 | 9.3% | 2021-06-16 | Fix |
| CVE-2021-1542 | Cisco Small Business 220 Series Smart Switches improper authentication | 7.2CNA v3.1 | 1.4% | 2021-06-16 | Fix |
| CVE-2021-1541 | Cisco Small Business 220 Series Smart Switches improper authentication | 7.2CNA v3.1 | 8.8% | 2021-06-16 | Fix |
| CVE-2021-1524 | Cisco Meeting Server API denial of service | 4.3CNA v3.1 | 1.1% | 2021-06-16 | Fix |
| CVE-2021-1395 | Cisco Unified Intelligence Center reflected cross-site scripting | 4.7CNA v3.1 | 0.8% | 2021-06-16 | Fix |
| CVE-2021-34170 | Fromsoftware Dark Souls Iii arbitrary code execution | 9.8v3.1 | 3.2% | 2021-06-15 | |
| CVE-2021-34129 | LaikeTui path traversal | 8.1v3.1 | 1.7% | 2021-06-15 | |
| CVE-2021-34128 | LaikeTui unrestricted file upload | 8.8v3.1 | 1.5% | 2021-06-15 | |
| CVE-2021-33887 | Onepeloton TTR01 insufficient verification of data authenticity | 6.8v3.1 | 0.3% | 2021-06-15 | |
| CVE-2021-33622 | sylabs SingularityPRO improper check for exceptional conditions | 9.8v3.1 | 1.3% | 2021-06-15 | Fix |
| CVE-2021-32683 | wireapp wire-webapp XSS through createObjectURL | 8.8CNA v3.1 | 0.8% | 2021-06-15 | Fix |
| CVE-2021-31618 | Null pointer dereference on specially crafted HTTP/2 request | 7.5v3.1 | 51.2% | 2021-06-15 | Fix |
| CVE-2021-31502 | OpenText Brava! Desktop use-after-free | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31501 | OpenText Brava! Desktop out-of-bounds read | 3.3v3.1 | 1.1% | 2021-06-15 | |
| CVE-2021-31500 | OpenText Brava! Desktop untrusted pointer dereference | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31499 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31498 | OpenText Brava! Desktop out-of-bounds read | 3.3v3.1 | 1.1% | 2021-06-15 | |
| CVE-2021-31497 | OpenText Brava! Desktop use-after-free | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31496 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31495 | OpenText Brava! Desktop memory corruption | 7.8v3.1 | 1.6% | 2021-06-15 | |
| CVE-2021-31494 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31493 | OpenText Brava! Desktop memory corruption | 7.8v3.1 | 1.5% | 2021-06-15 | |
| CVE-2021-31492 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31491 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31490 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31489 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31488 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31487 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31486 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31485 | OpenText Brava! Desktop heap-based buffer overflow | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31484 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31483 | OpenText Brava! Desktop heap-based buffer overflow | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31482 | OpenText Brava! Desktop out-of-bounds write | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31481 | OpenText Brava! Desktop untrusted pointer dereference | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31480 | OpenText Brava! Desktop type confusion | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31479 | OpenText Brava! Desktop uninitialized pointer access | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-31478 | OpenText Brava! Desktop heap-based buffer overflow | 7.8v3.1 | 1.4% | 2021-06-15 | |
| CVE-2021-30553 | Google Chrome Network service use-after-free | 8.8v3.1 | 1.2% | 2021-06-15 | Fix |
| CVE-2021-30552 | Google Chrome extensions use-after-free | 8.8v3.1 | 1.0% | 2021-06-15 | Fix |
| CVE-2021-30551 | Google Chromium V8 type confusion | 8.8v3.1 | 64.7% | 2021-06-15 | KEVExploit codeKCVFix |
| CVE-2021-30550 | Google Chrome Accessibility use-after-free | 8.8v3.1 | 0.9% | 2021-06-15 | Fix |
| CVE-2021-30549 | Google Chrome Spell check use-after-free | 8.8v3.1 | 0.9% | 2021-06-15 | Fix |
| CVE-2021-30548 | Google Chrome Loader use-after-free | 8.8v3.1 | 1.2% | 2021-06-15 | Fix |
| CVE-2021-30547 | Google Chrome ANGLE out-of-bounds write | 8.8v3.1 | 3.6% | 2021-06-15 | Fix |
| CVE-2021-30546 | Google Chrome Autofill use-after-free | 8.8v3.1 | 1.1% | 2021-06-15 | Fix |
| CVE-2021-30545 | Google Chrome extensions use-after-free | 8.8v3.1 | 1.1% | 2021-06-15 | Fix |
| CVE-2021-30544 | Google Chrome BFCache use-after-free | 8.8v3.1 | 1.2% | 2021-06-15 | Fix |
| CVE-2021-28858 | TP-Link Tl-wpa4220 cleartext storage of sensitive information | 5.5v3.1 | 0.3% | 2021-06-15 | |
| CVE-2021-28857 | TP-Link Tl-wpa4220 insufficiently protected credentials | 7.5v3.1 | 1.3% | 2021-06-15 | |
| CVE-2021-27388 | SINAMICS Medium Voltage Products, Remote Access denial of service | 9.8v3.1 | 1.5% | 2021-06-15 | |
| CVE-2021-24037 | Facebook Hermes use-after-free | 9.8v3.1 | 1.8% | 2021-06-15 | Fix |
| CVE-2021-23395 | nedb prototype pollution | 5.3NVD v3.1 | 0.9% | 2021-06-15 | |
| CVE-2021-3595 | QEMU uninitialized pointer access | 3.8NVD v3.1 | 0.3% | 2021-06-15 | Fix |
| CVE-2021-3594 | QEMU uninitialized pointer access | 3.8NVD v3.1 | 0.3% | 2021-06-15 | Fix |
| CVE-2021-3593 | QEMU uninitialized pointer access | 3.8NVD v3.1 | 0.3% | 2021-06-15 | Fix |
| CVE-2021-3592 | QEMU uninitialized pointer access | 3.8NVD v3.1 | 0.3% | 2021-06-15 | Fix |
| CVE-2021-34693 | Linux kernel missing resource initialization | 5.5NVD v3.1 | 0.5% | 2021-06-14 | Fix |
| CVE-2021-32684 | ScandiPWA Create Magento App command handlers incorrect control flow | 6.2CNA v3.1 | 0.7% | 2021-06-14 | Fix |
| CVE-2021-32682 | Studio-42 elFinder multiple vulnerabilities leading to RCE | 9.8CNA v3.1 | 69.9% | 2021-06-14 | NucleiMetasploitExploit codeFix |
| CVE-2021-27887 | Stored XSS vulnerability in Ellipse APM | 5.4v3.1 | 0.5% | 2021-06-14 | Fix |
| CVE-2021-27196 | Hitachi Energy FOX615 TEGO1 Specially Crafted IEC 61850 Protocol Sequence vulnerability | 7.5v3.1 | 1.6% | 2021-06-14 | Fix |
| CVE-2021-26845 | Hitachi Energy eSOMS Hitachi ABB Power Grids information disclosure | 7.5v3.1 | 0.9% | 2021-06-14 | Fix |
| CVE-2021-24382 | Smart Slider 3 WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-06-14 | Fix |
| CVE-2021-24360 | Yes/No Chart WordPress plugin authenticated (contributor+) blind SQL injection | 6.5NVD v3.1 | 1.2% | 2021-06-14 | Fix |
| CVE-2021-24359 | The Plus Addons for Elementor Page Builder WordPress plugin arbitrary reset Pwd email Sending | 5.3NVD v3.1 | 1.1% | 2021-06-14 | Fix |
| CVE-2021-24358 | The Plus Addons for Elementor Page Builder WordPress plugin open redirect | 6.1NVD v3.1 | 2.3% | 2021-06-14 | NucleiFix |
| CVE-2021-24357 | FooGallery WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-06-14 | Fix |
| CVE-2021-24356 | WPDeveloper Simple 301 Redirects AJAX plugin activation missing authorization | 8.8NVD v3.1 | 2.6% | 2021-06-14 | Exploit codeFix |
| CVE-2021-24355 | Simple 301 Redirects by BetterLinks - Update and Retrieve Wildcard Value | 4.3NVD v3.1 | 0.7% | 2021-06-14 | Fix |
| CVE-2021-24354 | WPDeveloper Simple 301 Redirects AJAX plugin installer missing authorization | 8.8NVD v3.1 | 1.5% | 2021-06-14 | Fix |
| CVE-2021-24353 | Simple 301 Redirects by BetterLinks - Unauthenticated Redirect Import | 8.8NVD v3.1 | 1.1% | 2021-06-14 | Fix |
| CVE-2021-24352 | Simple 301 Redirects by BetterLinks - Unauthenticated Redirect Export | 8.8NVD v3.1 | 1.2% | 2021-06-14 | Fix |
| CVE-2021-24351 | The Plus Addons for Elementor WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.5% | 2021-06-14 | NucleiFix |
| CVE-2021-24350 | Visitors WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 1.3% | 2021-06-14 | |
| CVE-2021-24349 | Gallery From Files WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2021-06-14 | |
| CVE-2021-24348 | Side Menu WordPress plugin authenticated (admin+) SQL injection | 7.2NVD v3.1 | 1.6% | 2021-06-14 | Fix |
| CVE-2021-24347 | SP Project and Document Manager Authenticated Shell upload | 8.8NVD v3.1 | 54.1% | 2021-06-14 | NucleiMetasploitExploit codeFix |
| CVE-2021-24346 | Stock in and out WordPress plugin reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-06-14 | |
| CVE-2021-24345 | Sendit WP Newsletter WordPress plugin authenticated (admin+) SQL injection | 6.6NVD v3.1 | 1.3% | 2021-06-14 | |
| CVE-2021-24341 | Xllentech English Islamic Calendar WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.6% | 2021-06-14 | Fix |
| CVE-2021-21557 | Dell PowerEdge BIOS Intel 15G denial of service | 8.1CNA v3.1 | 0.3% | 2021-06-14 | Fix |
| CVE-2021-21556 | Dell PowerEdge BIOS Intel 15G stack-based buffer overflow | 6.1CNA v3.1 | 0.3% | 2021-06-14 | Fix |
| CVE-2021-21555 | Dell PowerEdge BIOS Intel 15G heap-based buffer overflow | 6.1CNA v3.1 | 0.3% | 2021-06-14 | Fix |
| CVE-2021-21554 | Dell PowerEdge BIOS Intel 15G heap-based buffer overflow | 6.1CNA v3.1 | 0.3% | 2021-06-14 | Fix |
| CVE-2021-21439 | ((OTRS)) Community Edition possible DoS attack using a special crafted URL in email body | 6.5CNA v3.1 | 0.9% | 2021-06-14 | Fix |
| CVE-2021-20027 | SonicWall SonicOS buffer overflow | 7.5v3.1 | 1.3% | 2021-06-14 | Fix |
| CVE-2021-0467 | Android Chromecast bootROM out-of-bounds write | 6.8v3.1 | 0.1% | 2021-06-14 | Fix |
| CVE-2021-0324 | Product: AndroidVersions: Android SoCAndroid ID: A-175402462 | 9.8v3.1 | 0.5% | 2021-06-14 | Fix |
| CVE-2021-23394 | studio-42/elfinder remote code execution (RCE) | 9.8v3.1 | 19.1% | 2021-06-13 | NucleiExploit codeFix |
| CVE-2021-34682 | Gov Imposto De Renda Da Pessoa Fisica 2021 man-in-the-middle | 3.7v3.1 | 0.7% | 2021-06-12 | |
| CVE-2021-32557 | apport process_report arbitrary file write | 5.2CNA v3.1 | 0.4% | 2021-06-12 | Fix |
| CVE-2021-32556 | apport get_modified_conffiles function command injection | 3.8CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32555 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32554 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32553 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32552 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32551 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32550 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32549 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32548 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-32547 | apport read_file function could follow maliciously constructed symbolic links | 7.3CNA v3.1 | 0.3% | 2021-06-12 | Fix |
| CVE-2021-31812 | Apache PDFBox A carefully crafted PDF file can trigger an infinite loop while loading the file | 5.5v3.1 | 3.1% | 2021-06-12 | Fix |
| CVE-2021-31811 | Apache PDFBox uncontrolled memory consumption | 5.5v3.1 | 3.4% | 2021-06-12 | Fix |
| CVE-2021-34679 | Thycotic Password Reset Server information disclosure | 7.5NVD v3.1 | 1.0% | 2021-06-11 | Fix |
| CVE-2021-34540 | Advantech WebAccess cross-site scripting | 6.1v3.1 | 0.9% | 2021-06-11 | Fix |
| CVE-2021-33205 | Western Digital EdgeRover privilege escalation | 8.8v3.1 | 1.0% | 2021-06-11 | Fix |
| CVE-2021-32932 | Advantech iView SQL injection | 7.5v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-32930 | iView missing authentication | 9.8v3.1 | 8.1% | 2021-06-11 | Fix |
| CVE-2021-29754 | IBM WebSphere Application Server privilege escalation | 4.2CNA v3.0 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-28814 | Improper access control vulnerability in Helpdesk | 8.8CNA v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-28805 | Inclusion of Sensitive Information in QSS | 7.8CNA v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-28801 | Out-of-bounds read vulnerability in QSS | 3.1CNA v3.1 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-28689 | Xen improper removal of sensitive information | 5.5v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-28687 | Xen missing resource initialization | 5.5v3.1 | 0.3% | 2021-06-11 | Fix |
| CVE-2021-28213 | TianoCore EDK II IpSecDxe driver vulnerability | 7.5v3.1 | 1.1% | 2021-06-11 | Fix |
| CVE-2021-28211 | TianoCore EDK II LzmaUefiDecompressGetInfo function heap-based buffer overflow | 6.7v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-28210 | TianoCore EDK II uncontrolled recursion | 7.8v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-27410 | Welch Allyn medical device management tools out-of-bounds write | 9.8v3.1 | 1.9% | 2021-06-11 | Fix |
| CVE-2021-27408 | Welch Allyn medical device management tools out-of-bounds read | 7.5v3.1 | 1.7% | 2021-06-11 | Fix |
| CVE-2021-27200 | WoWonder insufficient randomness | 9.8v3.1 | 3.4% | 2021-06-11 | |
| CVE-2021-26997 | E-Series SANtricity OS Controller Software 11.x information disclosure through error messages | 6.5v3.1 | 1.1% | 2021-06-11 | Fix |
| CVE-2021-26996 | E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks. | 7.5v3.1 | 1.4% | 2021-06-11 | Fix |
| CVE-2021-26995 | E-Series SANtricity OS Controller Software 11.x arbitrary code execution | 8.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-26993 | E-Series SANtricity OS Controller Software 11.x denial of service | 5.3v3.1 | 1.4% | 2021-06-11 | Fix |
| CVE-2021-26829 | OpenPLC ScadaBR cross-site scripting | 5.4v3.1 | 48.1% | 2021-06-11 | KEVFix |
| CVE-2021-26828 | OpenPLC ScadaBR unrestricted upload of file with dangerous type | 8.8v3.1 | 39.4% | 2021-06-11 | KEVEmerging ThreatsExploit code |
| CVE-2021-25684 | apport can be stalled by reading a FIFO | 8.8CNA v3.1 | 0.6% | 2021-06-11 | Fix |
| CVE-2021-25683 | apport improperly parses /proc/pid/stat | 8.8CNA v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-25682 | apport improperly parses /proc/pid/status | 8.8CNA v3.1 | 0.5% | 2021-06-11 | Fix |
| CVE-2021-25425 | Samsung Mobile Samsung Health improper exception handling | 5.3v3.1 | 0.8% | 2021-06-11 | Fix |
| CVE-2021-25424 | Samsung Mobile Tizen wearable devices Tizen bluetooth-frwk improper authentication | 8.8v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-25423 | Samsung Mobile Watch Active2 PlugIn excessive logging | 5.5v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25422 | Samsung Mobile Watch Active PlugIn excessive logging | 5.5v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25421 | Samsung Mobile Galaxy Watch3 PlugIn excessive logging | 5.5v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25420 | Samsung Mobile Galaxy Watch PlugIn excessive logging | 5.5v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25419 | Samsung Mobile Samsung Internet improper exception handling | 6.5v3.1 | 0.8% | 2021-06-11 | Fix |
| CVE-2021-25418 | Samsung Mobile Samsung Internet improper privilege management | 7.8v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25417 | Samsung Mobile Devices SDP SDK improper authorization | 7.5v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-25416 | Samsung Mobile Devices code injection | 6.5v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25415 | Samsung Mobile Devices code injection | 5.5v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25414 | Samsung Mobile Devices Samsung Contacts improper neutralization | 7.8v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25413 | Samsung Mobile Devices Samsung Contacts improper neutralization | 5.5v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25412 | Samsung Mobile Devices genericssoservice improper access control | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25411 | Samsung Mobile Devices code injection | 4.4v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25410 | Samsung Mobile Devices CallBGProvider improper access control | 7.1v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25409 | Samsung Mobile Devices improper exception handling | 2.4v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25408 | Samsung Mobile Devices NPU driver buffer overflow | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25407 | Samsung Mobile Devices NPU driver out-of-bounds write | 7.8v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25406 | Samsung Mobile Gear S Plugin information disclosure | 6.5v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-25405 | Samsung Mobile Samsung Notes ScreenOffActivity improper access control | 5.5v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25404 | Samsung Mobile SmartThings information disclosure | 3.3v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25403 | Samsung Mobile Samsung Account information disclosure | 3.3v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25402 | Samsung Mobile Samsung Notes information disclosure | 3.3v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25401 | Samsung Mobile Samsung Health improper input validation | 7.8v3.1 | 0.3% | 2021-06-11 | Fix |
| CVE-2021-25400 | Samsung Mobile Samsug Internet improper export of Android application components | 7.8v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25399 | Samsung Mobile Smart Manager improper authorization | 7.1v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25398 | Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts. | 3.3v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25397 | Samsung Mobile Devices TelephonyUI improper access control | 6.8CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25396 | Samsung Mobile Devices NPU firmware improper input validation | 6.7CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25395 | Samsung Mobile Devices race condition | 6.4CNA v3.1 | 0.4% | 2021-06-11 | KEVFix |
| CVE-2021-25394 | Samsung Mobile Devices race condition | 6.4CNA v3.1 | 0.4% | 2021-06-11 | KEVFix |
| CVE-2021-25393 | Samsung Mobile Devices SecSettings improper neutralization | 6.6CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25392 | Samsung Mobile Devices information disclosure | 4.0CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25391 | Samsung Mobile Devices improper export of Android application components | 4.0CNA v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25390 | Samsung Mobile Devices improper export of Android application components | 4.0CNA v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-25389 | Samsung Mobile Devices improper authentication | 2.3CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25388 | Samsung Mobile Devices improper export of Android application components | 7.1CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-25387 | Samsung Mobile Devices improper input validation | 9.0CNA v3.1 | 0.6% | 2021-06-11 | Fix |
| CVE-2021-25386 | Samsung Mobile Devices improper input validation | 9.0CNA v3.1 | 0.6% | 2021-06-11 | Fix |
| CVE-2021-25385 | Samsung Mobile Devices improper input validation | 9.0CNA v3.1 | 0.6% | 2021-06-11 | Fix |
| CVE-2021-25384 | Samsung Mobile Devices sdfffd_parse_chunk_PROP improper input validation | 9.0CNA v3.1 | 0.5% | 2021-06-11 | Fix |
| CVE-2021-25383 | Samsung Mobile Devices scmn_mfal_read in libsapeextractor library improper input validation | 9.0CNA v3.1 | 0.5% | 2021-06-11 | Fix |
| CVE-2021-24035 | Facebook WhatsApp Business relative path traversal | 9.1v3.1 | 1.1% | 2021-06-11 | Fix |
| CVE-2021-23393 | Flask-Unchained open redirect | 5.4v3.1 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-23230 | Gallagher Command Centre OPCUA interface SQL injection | 9.9CNA v3.1 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-23211 | Gallagher Command Centre Memory vulnerability cleartext storage of sensitive information | 6.0CNA v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-23205 | Gallagher Command Centre improper output encoding | 8.1CNA v3.1 | 0.9% | 2021-06-11 | Fix |
| CVE-2021-23204 | Gallagher Command Centre information disclosure | 8.1CNA v3.1 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-23182 | Gallagher Command Centre Memory vulnerability cleartext storage of sensitive information | 6.0CNA v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-23140 | Gallagher Command Centre improper authorization | 9.9CNA v3.1 | 0.9% | 2021-06-11 | Fix |
| CVE-2021-23136 | Gallagher Command Centre improper authorization | 6.5CNA v3.1 | 0.6% | 2021-06-11 | Fix |
| CVE-2021-22915 | Nextcloud Server missing brute-force protection | 9.8v3.1 | 1.7% | 2021-06-11 | Fix |
| CVE-2021-22913 | Nextcloud Deck information disclosure | 6.5v3.1 | 1.4% | 2021-06-11 | |
| CVE-2021-22912 | Nextcloud iOS app (it.twsweb.Nextcloud) information disclosure | 6.5v3.1 | 1.4% | 2021-06-11 | Fix |
| CVE-2021-22906 | Nextcloud End-to-End Encryption denial of service | 6.5v3.1 | 0.7% | 2021-06-11 | |
| CVE-2021-22905 | Nextcloud Android App (com.nextcloud.client) information disclosure | 6.5v3.1 | 1.4% | 2021-06-11 | Fix |
| CVE-2021-22904 | https://github.com/rails/rails Possible DoS vulnerability in action Controller Token Authentication | 7.5v3.1 | 4.8% | 2021-06-11 | Fix |
| CVE-2021-22903 | https://github.com/rails/rails possible open redirect vulnerability in Action Pack | 6.1v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22902 | https://github.com/rails/rails denial of service in Action Dispatch | 7.5v3.1 | 2.8% | 2021-06-11 | Fix |
| CVE-2021-22901 | https://github.com/curl/curl use-after-free | 8.1NVD v3.1 | 63.5% | 2021-06-11 | Fix |
| CVE-2021-22898 | https://github.com/curl/curl uninitialized memory use | 3.1NVD v3.1 | 4.5% | 2021-06-11 | Fix |
| CVE-2021-22897 | https://github.com/curl/curl session data exposure | 5.3NVD v3.1 | 4.3% | 2021-06-11 | Fix |
| CVE-2021-22896 | Nextcloud Mail missing authorization | 4.3v3.1 | 1.0% | 2021-06-11 | Fix |
| CVE-2021-22895 | Nextcloud Desktop Client improper certificate validation | 5.9v3.1 | 1.0% | 2021-06-11 | Fix |
| CVE-2021-22769 | Easergy T300 with firmware files accessible to external parties | 4.3v3.1 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-22768 | PowerLogic EGX100 and PowerLogic EGX300 improper input validation | 9.8v3.1 | 2.7% | 2021-06-11 | |
| CVE-2021-22767 | PowerLogic EGX100 and PowerLogic EGX300 improper input validation | 9.8v3.1 | 2.7% | 2021-06-11 | |
| CVE-2021-22766 | PowerLogic EGX100 and PowerLogic EGX300 improper input validation | 7.5v3.1 | 1.3% | 2021-06-11 | |
| CVE-2021-22765 | PowerLogic EGX100 and PowerLogic EGX300 improper input validation | 9.8v3.1 | 2.7% | 2021-06-11 | |
| CVE-2021-22764 | PowerLogic PM55xx improper authentication | 5.3v3.1 | 1.9% | 2021-06-11 | Fix |
| CVE-2021-22763 | PowerLogic PM55xx weak password recovery | 9.8v3.1 | 1.9% | 2021-06-11 | Fix |
| CVE-2021-22762 | IGSS Definition (Def.exe) path traversal | 7.8v3.1 | 1.4% | 2021-06-11 | Fix |
| CVE-2021-22761 | IGSS Definition (Def.exe) memory corruption | 7.8v3.1 | 0.7% | 2021-06-11 | Fix |
| CVE-2021-22760 | IGSS Definition (Def.exe) release of an invalid pointer | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22759 | IGSS Definition (Def.exe) use-after-free | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22758 | IGSS Definition (Def.exe) uninitialized pointer access | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22757 | IGSS Definition (Def.exe) out-of-bounds read | 7.8v3.1 | 1.3% | 2021-06-11 | Fix |
| CVE-2021-22756 | IGSS Definition (Def.exe) out-of-bounds read | 7.8v3.1 | 1.3% | 2021-06-11 | Fix |
| CVE-2021-22755 | IGSS Definition (Def.exe) out-of-bounds write | 7.8v3.1 | 1.3% | 2021-06-11 | Fix |
| CVE-2021-22754 | IGSS Definition (Def.exe) out-of-bounds write | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22753 | IGSS Definition (Def.exe) out-of-bounds read | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22752 | IGSS Definition (Def.exe) out-of-bounds write | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22751 | IGSS Definition (Def.exe) out-of-bounds write | 7.8v3.1 | 0.9% | 2021-06-11 | Fix |
| CVE-2021-22750 | IGSS Definition (Def.exe) out-of-bounds write | 7.8v3.1 | 1.2% | 2021-06-11 | Fix |
| CVE-2021-22749 | Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior information disclosure | 5.3v3.1 | 0.9% | 2021-06-11 | Fix |
| CVE-2021-22181 | GitLab denial of service | 7.7CNA v3.1 | 1.1% | 2021-06-11 | Fix |
| CVE-2021-22175 | GitLab server-side request forgery (SSRF) | 6.8CNA v3.1 | 53.4% | 2021-06-11 | KEVNucleiFix |
| CVE-2021-21833 | Accusoft ImageGear TIF IP_planar_raster_unpack functionality improper array index validation | 9.8v3.1 | 1.4% | 2021-06-11 | |
| CVE-2021-21824 | Accusoft ImageGear JPG Handle_JPEG420 functionality out-of-bounds write | 9.8v3.1 | 1.2% | 2021-06-11 | |
| CVE-2021-21808 | Accusoft ImageGear PNG png_palette_process functionality memory corruption | 8.8v3.1 | 1.0% | 2021-06-11 | |
| CVE-2021-21795 | Accusoft ImageGear PSD read_icc_icCurve_data functionality heap-based buffer overflow | 9.8v3.1 | 1.4% | 2021-06-11 | |
| CVE-2021-21382 | Unsafe loopback forwarding interface in Restund | 8.6CNA v3.1 | 1.5% | 2021-06-11 | Fix |
| CVE-2021-20591 | MELSEC iQ-R series CPU modules Mitsubishi Electric resource exhaustion | 7.5v3.1 | 1.5% | 2021-06-11 | |
| CVE-2021-20396 | IBM QRadar Analyst Workflow insecure storage of sensitive information | 4.0CNA v3.0 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-3256 | Kuaifancms argument injection | 6.5v3.1 | 0.9% | 2021-06-11 | |
| CVE-2021-3013 | OS command injection in Ripgrep | 9.8v3.1 | 1.9% | 2021-06-11 | Fix |
| CVE-2021-0498 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0497 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0496 | Android memory management driver memory corruption | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0495 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0494 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0493 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0492 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0491 | Android memory management driver privilege escalation | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0490 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0489 | Android memory management driver out-of-bounds write | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0487 | Android CalendarDebugActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0485 | Android PipBoundsAlgorithm.java privilege escalation | 7.8v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-0484 | Android IMediaPlayer.cpp uninitialized memory use | 5.5v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0482 | Android MediaCodec.cpp memory corruption | 7.0v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0481 | Android EditUserPhotoController.java privilege escalation | 7.8v3.1 | 0.8% | 2021-06-11 | Fix |
| CVE-2021-0480 | Android SnoozeHelper.java information disclosure | 5.5v3.1 | 0.4% | 2021-06-11 | Fix |
| CVE-2021-0477 | Android ScreenshotNotificationsController.java insecure permissions | 7.8v3.1 | 0.1% | 2021-06-11 | Fix |
| CVE-2021-0476 | Android btif_av.cc use-after-free | 7.0v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-0475 | Android use-after-free | 8.8v3.1 | 1.0% | 2021-06-11 | Fix |
| CVE-2021-0474 | Android avrc_api.cc out-of-bounds write | 9.8NVD v3.1 | 3.4% | 2021-06-11 | Exploit codeFix |
| CVE-2021-0473 | Android rw_t3t.cc double free | 8.8v3.1 | 0.5% | 2021-06-11 | Fix |
| CVE-2021-0472 | Android LockTaskController.java privilege escalation | 7.8NVD v3.1 | 0.2% | 2021-06-11 | Fix |
| CVE-2021-0466 | Android ClientModeImpl.java information disclosure | 7.5v3.1 | 1.4% | 2021-06-11 | Exploit codeFix |
| CVE-2021-34557 | xscreensaver buffer overflow | 4.6v3.1 | 0.5% | 2021-06-10 | Fix |
| CVE-2021-34555 | Trusteddomain OpenDMARC null pointer dereference | 7.5v3.1 | 2.7% | 2021-06-10 | Fix |
| CVE-2021-34547 | Paessler PRTG Network Monitor cross-site request forgery | 4.3v3.1 | 0.5% | 2021-06-10 | |
| CVE-2021-34546 | NetSetMan improper authentication | 6.8v3.1 | 0.7% | 2021-06-10 | |
| CVE-2021-34539 | Cubecoders Amp code execution | 7.2v3.1 | 1.2% | 2021-06-10 | |
| CVE-2021-34363 | The Fuck arbitrary file deletion via path traversal | 9.1v3.1 | 1.8% | 2021-06-10 | Fix |
| CVE-2021-33031 | Labcup missing authorization | 3.1v3.1 | 0.7% | 2021-06-10 | Fix |
| CVE-2021-31998 | Inn: %post calls user owned file allowing local privilege escalation to root | 6.8CNA v3.1 | 0.3% | 2021-06-10 | Fix |
| CVE-2021-31997 | openSUSE Python-postorius A symlink following | 6.8CNA v3.1 | 0.3% | 2021-06-10 | |
| CVE-2021-31929 | Annexcloud Loyalty Experience Platform incorrect permission assignment | 4.3v3.1 | 0.5% | 2021-06-10 | |
| CVE-2021-31928 | Annexcloud Loyalty Experience Platform privilege escalation | 8.8v3.1 | 1.2% | 2021-06-10 | |
| CVE-2021-31927 | Annexcloud Loyalty Experience Platform insecure direct object reference | 4.3v3.1 | 0.5% | 2021-06-10 | |
| CVE-2021-31840 | DLL preload vulnerability in McAfee Agent for Windows | 7.3CNA v3.1 | 0.3% | 2021-06-10 | Fix |
| CVE-2021-31839 | Incorrect permissions on McAfee Agent for Windows event folder | 4.8CNA v3.1 | 0.2% | 2021-06-10 | Fix |
| CVE-2021-31659 | TP-Link Tl-sg2005 cross-site request forgery | 8.8v3.1 | 0.6% | 2021-06-10 | |
| CVE-2021-31658 | TP-Link Tl-sg2005 improper array index validation | 8.1v3.1 | 1.0% | 2021-06-10 | |
| CVE-2021-31538 | Lancom-systems Lcos Fx path traversal | 7.5v3.1 | 1.5% | 2021-06-10 | |
| CVE-2021-30641 | Apache HTTP Server unexpected URL matching with MergeSlashes OFF | 5.3v3.1 | 52.3% | 2021-06-10 | Exploit codeFix |
| CVE-2021-27347 | Long Range ZIP use-after-free | 5.5v3.1 | 0.7% | 2021-06-10 | Fix |
| CVE-2021-27345 | Long Range ZIP ucompthread in stream.c in Irzip null pointer dereference | 5.5v3.1 | 0.7% | 2021-06-10 | Fix |
| CVE-2021-26691 | Apache HTTP Server mod_session response handling heap overflow | 9.8v3.1 | 68.1% | 2021-06-10 | Exploit codeFix |
| CVE-2021-26690 | Apache HTTP Server mod_session null pointer dereference | 7.5NVD v3.1 | 65.3% | 2021-06-10 | Exploit codeFix |
| CVE-2021-26199 | JerryScript use-after-free | 6.5v3.1 | 0.9% | 2021-06-10 | |
| CVE-2021-26198 | JerryScript BigInt dereferencing vulnerability | 6.5v3.1 | 0.9% | 2021-06-10 | |
| CVE-2021-26197 | JerryScript improper check for exceptional conditions | 6.5v3.1 | 0.9% | 2021-06-10 | |
| CVE-2021-26195 | JerryScript out-of-bounds write | 8.8v3.1 | 1.1% | 2021-06-10 | |
| CVE-2021-26194 | JerryScript use-after-free | 6.5v3.1 | 0.9% | 2021-06-10 | |
| CVE-2021-25949 | Prototype pollution vulnerability in 'set-getter' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution. | 9.8v3.1 | 3.3% | 2021-06-10 | Fix |
| CVE-2021-25948 | expand-hash prototype pollution | 9.8v3.1 | 3.3% | 2021-06-10 | |
| CVE-2021-25322 | Python-hyperkitty A symlink following | 6.8CNA v3.1 | 0.4% | 2021-06-10 | Fix |
| CVE-2021-23024 | BIG-IQ remote command execution | 7.2v3.1 | 5.3% | 2021-06-10 | Fix |
| CVE-2021-23023 | Edge Client uncontrolled search path | 7.8v3.1 | 0.3% | 2021-06-10 | Fix |
| CVE-2021-23022 | Edge Client incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-06-10 | Fix |
| CVE-2021-21736 | ZXHN HS562 incorrect default permissions | 7.2v3.1 | 0.9% | 2021-06-10 | Fix |
| CVE-2021-21735 | ZXHN H168N improper preservation of permissions | 6.5v3.1 | 0.9% | 2021-06-10 | Exploit codeFix |
| CVE-2021-21666 | Cross-site scripting in Jenkins Kiuwan Plugin | 6.1v3.1 | 1.2% | 2021-06-10 | Fix |
| CVE-2021-21665 | CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials | 8.8v3.1 | 0.7% | 2021-06-10 | Fix |
| CVE-2021-21664 | Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials | 6.5v3.1 | 1.0% | 2021-06-10 | Fix |
| CVE-2021-21663 | Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials | 4.3v3.1 | 1.0% | 2021-06-10 | Fix |
| CVE-2021-21662 | Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs | 4.3v3.1 | 0.9% | 2021-06-10 | Fix |
| CVE-2021-21661 | Missing authorization in Jenkins Kubernetes CLI Plugin | 4.3v3.1 | 1.6% | 2021-06-10 | Fix |
| CVE-2021-20329 | Specific cstrings input may not be properly validated in the Go Driver | 6.8CNA v3.1 | 0.9% | 2021-06-10 | Fix |
| CVE-2021-20293 | RESTEasy cross-site scripting | 6.1v3.1 | 0.9% | 2021-06-10 | Fix |
| CVE-2021-20081 | ManageEngine ServiceDesk Plus incomplete denylist | 7.2NVD v3.1 | 52.4% | 2021-06-10 | Emerging Threats |
| CVE-2021-3588 | BlueZ memory contents disclosure in cli_feat_read_cb | 3.3NVD v3.1 | 0.5% | 2021-06-10 | Fix |
| CVE-2021-3041 | Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-06-10 | Fix |
| CVE-2021-3040 | Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution | 6.7CNA v3.1 | 1.3% | 2021-06-10 | Fix |
| CVE-2021-3039 | Prisma Cloud Compute: User role authorization secret for console leaked through log file export | 3.8CNA v3.1 | 0.5% | 2021-06-10 | Fix |
| CVE-2021-34370 | Accela Civic Platform cross-site scripting | 6.1v3.1 | 10.0% | 2021-06-09 | NucleiExploit code |
| CVE-2021-34369 | Accela Civic Platform information disclosure | 6.5v3.1 | 8.2% | 2021-06-09 | Exploit code |
| CVE-2021-34364 | Refined-github cross-site scripting | 6.1v3.1 | 0.7% | 2021-06-09 | Fix |
| CVE-2021-33894 | Progress MOVEit Transfer SQL injection | 8.8v3.1 | 1.1% | 2021-06-09 | Fix |
| CVE-2021-33842 | Circutor SGE-PLC1000 improper authentication | 8.8v3.1 | 0.4% | 2021-06-09 | |
| CVE-2021-33841 | Circutor SGE-PLC1000 OS command injection | 9.8v3.1 | 2.2% | 2021-06-09 | |
| CVE-2021-33833 | Intel Connection Manager out-of-bounds write | 9.8v3.1 | 2.6% | 2021-06-09 | Fix |
| CVE-2021-33829 | CKEditor ckeditor4 vulnerable to cross-site scripting | 6.1v3.1 | 3.2% | 2021-06-09 | NucleiFix |
| CVE-2021-33669 | SAP Mobile SDK Certificate Provider insecure temporary file | 7.8CNA v3.0 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-33668 | SAP InfraBox injection | 5.3CNA v3.0 | 1.1% | 2021-06-09 | |
| CVE-2021-33666 | SAP Commerce Cloud cross-site scripting | 4.7CNA v3.0 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-33665 | SAP NetWeaver Application Server ABAP cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-33664 | SAP NetWeaver Application Server ABAP cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-33663 | SAP NetWeaver AS ABAP SMTP client vulnerability | 5.8CNA v3.0 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-33662 | SAP Business One installation information disclosure | 6.7CNA v3.0 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-33661 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-33660 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-33659 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-33393 | IPFire backup script vulnerability | 8.8v3.1 | 58.7% | 2021-06-09 | MetasploitExploit code |
| CVE-2021-33359 | Sensepost go-witness files accessible to external parties | 7.5v3.1 | 1.3% | 2021-06-09 | Fix |
| CVE-2021-33358 | Raspap OS command injection | 8.8v3.1 | 2.7% | 2021-06-09 | |
| CVE-2021-33357 | Raspap OS command injection | 9.8v3.1 | 17.9% | 2021-06-09 | Nuclei |
| CVE-2021-33356 | Raspap Multiple privilege escalation | 8.8v3.1 | 5.3% | 2021-06-09 | |
| CVE-2021-32942 | AVEVA InTouch cleartext storage of sensitive information in memory | 5.5v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-32677 | Cross-site request forgery (CSRF) in FastAPI | 8.2CNA v3.1 | 0.7% | 2021-06-09 | Fix |
| CVE-2021-31837 | Out-of-bounds write vulnerability in McAfee GetSusp | 8.8CNA v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-31832 | Cross-site scripting vulnerability in DLP Endpoint for Windows | 5.2CNA v3.1 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-30133 | Cloverdx A cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-29995 | Cloverdx Server console cross-site request forgery | 8.8v3.1 | 4.2% | 2021-06-09 | Exploit codeFix |
| CVE-2021-29049 | Liferay DXP vulnerable to cross-site scripting (XSS) via the currentURL parameter | 6.1v3.1 | 0.7% | 2021-06-09 | Fix |
| CVE-2021-28169 | Jetty Utility Servlets ConcatServlet Double Decoding information disclosure | 5.3CNA v3.1 | 78.5% | 2021-06-09 | NucleiFix |
| CVE-2021-27643 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27642 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27641 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27640 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27639 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27638 | SAP 3D Visual Enterprise Viewer improper input validation | 4.3CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27637 | SAP Enable Now information disclosure | 5.9CNA v3.0 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-27635 | SAP NetWeaver AS for JAVA XML external entity injection | 9.0CNA v3.0 | 1.6% | 2021-06-09 | Fix |
| CVE-2021-27634 | SAP NetWeaver AS for ABAP (RFC Gateway) out-of-bounds write | 7.5CNA v3.0 | 1.3% | 2021-06-09 | Fix |
| CVE-2021-27633 | SAP NetWeaver AS for ABAP (RFC Gateway) out-of-bounds write | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27632 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) null pointer dereference | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27631 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) null pointer dereference | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27630 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) null pointer dereference | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27629 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) out-of-bounds read | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27628 | SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher) out-of-bounds write | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27627 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-27626 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-27625 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-27624 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-27623 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 0.9% | 2021-06-09 | Fix |
| CVE-2021-27622 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-27621 | SAP Netweaver Application Server For Java UserAdmin application information disclosure | 5.5CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27620 | SAP Internet Graphics Service out-of-bounds write | 5.9CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-27615 | SAP Manufacturing Execution cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-27607 | SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher) null pointer dereference | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27606 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) out-of-bounds read | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-27597 | SAP NetWeaver AS for ABAP (RFC Gateway) out-of-bounds read | 7.5CNA v3.0 | 1.5% | 2021-06-09 | Fix |
| CVE-2021-26314 | AMD Speculative execution with Floating-Point Value injection | 5.5v3.1 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-26313 | AMD Speculative Code Store Bypass | 5.5v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-23854 | Bosch CPP Firmware reflected XSS in page parameter | 8.3CNA v3.1 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-23853 | Bosch CPP Firmware improper input validation of HTTP headers | 8.3CNA v3.1 | 0.9% | 2021-06-09 | Fix |
| CVE-2021-23852 | Bosch CPP Firmware denial of service (DoS) due to invalid web parameter | 4.9CNA v3.1 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-23848 | Bosch CPP Firmware reflected XSS in URL handler | 8.3CNA v3.1 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-23847 | Bosch CPP Firmware Unauthenticated Information Extraction vulnerability | 9.8CNA v3.1 | 1.4% | 2021-06-09 | Fix |
| CVE-2021-21490 | SAP NetWeaver AS for ABAP (Web Survey) cross-site scripting | 6.1CNA v3.0 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-21473 | SAP NetWeaver AS ABAP and ABAP Platform (SRM_RFC_SUBMIT_REPORT) missing authorization | 6.3CNA v3.0 | 1.2% | 2021-06-09 | Fix |
| CVE-2021-20732 | ATOM tech ATOM improper certificate validation | 5.9v3.1 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-20731 | Buffalo WSR-1166DHP3 and WSR-1166DHP4 OS command injection | 8.8v3.1 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-20730 | Buffalo Wsr-1166dhp3 Firmware improper access control | 4.3v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-20728 | NTT Resonant goo blog App improper access control | 5.3v3.1 | 1.0% | 2021-06-09 | Fix |
| CVE-2021-3196 | Hitachi ID Bravura Security Fabric improper signature verification | 8.8v3.1 | 1.0% | 2021-06-09 | Fix |
| CVE-2021-1937 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-06-09 | Fix |
| CVE-2021-1900 | Qualcomm Snapdragon use-after-free in Display | 8.4CNA v3.1 | 0.1% | 2021-06-09 | Fix |
| CVE-2021-0134 | Intel(R) Security Library API for the improper input validation | 4.9v3.1 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-0133 | Intel(R) Security Library key exchange without authentication | 8.1v3.1 | 0.9% | 2021-06-09 | Fix |
| CVE-2021-0132 | Intel(R) Security Library API for the missing resource release | 4.9v3.1 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-0131 | Intel(R) Security Library API for the weak random number generator | 6.5v3.1 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-0129 | BlueZ improper access control | 5.7v3.1 | 0.8% | 2021-06-09 | Fix |
| CVE-2021-0113 | Intel(R) Server Board M10JNP2SB BMC firmware out-of-bounds write | 6.5v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-0112 | Intel Unite(R) Client unquoted search path | 7.3v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-0108 | Intel Unite(R) Client uncontrolled search path | 7.3v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-0106 | Intel(R) Optane(TM) DC Persistent Memory incorrect default permissions | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0105 | Intel(R) ProSet/Wireless WiFi drivers some insecure inherited permissions | 7.3v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-0104 | Intel(R) Rapid Storage Technology software installer for the uncontrolled search path | 7.8v3.1 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-0102 | Intel Unite(R) Client insecure inherited permissions | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0101 | Intel(R) Server Board M10JNP2SB BMC firmware buffer overflow | 8.8v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-0100 | Intel(R) SSD Data Center Tool installer for the incorrect default permissions | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0098 | Intel Unite(R) Client improper access control | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0097 | Intel(R) Server Board M10JNP2SB BMC firmware path traversal | 6.5v3.1 | 0.5% | 2021-06-09 | Fix |
| CVE-2021-0095 | Intel(R) Processors firmware for some improper initialization | 4.4NVD v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0094 | Intel(R) DSA link following | 7.8v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-0090 | Intel(R) DSA uncontrolled search path | 7.3v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-0089 | Intel(R) Processors some response discrepancy | 6.5v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-0086 | Intel(R) Brand Verification Tool floating-point operations for some response discrepancy | 6.5v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-0077 | Intel(R) VTune(TM) Profiler installer for the insecure inherited permissions | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0074 | Intel(R) Computing Improvement Program software installer for the improper permissions | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0073 | Intel(R) DSA insufficient control flow management | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0070 | Intel(R) Server Board M10JNP2SB BMC firmware improper input validation | 8.8v3.1 | 0.4% | 2021-06-09 | Fix |
| CVE-2021-0067 | Intel(R) NUCs system firmware for some improper access control | 6.7v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0058 | Intel(R) NUC M15 Laptop Kit Driver Pack software incorrect default permissions | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0057 | Intel(R) NUC M15 Laptop Kit Driver Pack software uncontrolled search path | 7.8v3.1 | 0.3% | 2021-06-09 | Fix |
| CVE-2021-0056 | Intel(R) NUC M15 Laptop Kit Driver Pack software incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0055 | Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0054 | Intel(R) NUCs privilege escalation | 6.7v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0052 | Intel(R) Computing Improvement Program improper privilege management | 7.8v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0051 | Intel(R) SPS improper input validation | 4.4v3.1 | 0.2% | 2021-06-09 | Fix |
| CVE-2021-0001 | Intel(R) IPP timing side channel | 4.7v3.1 | 0.2% | 2021-06-09 | Fix |