CVE-2021 records published in June 2021
Page two of two: records 1,001 to 1,344 of the 1,344 published in June 2021, newest first. The first page carries the figures for June 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-34280 | Polaris Office uninitialized pointer access | 7.8v3.1 | 1.3% | 2021-06-08 | |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform remote code execution | 7.5CNA v3.1 | 59.4% | 2021-06-08 | KEVEmerging ThreatsFix |
| CVE-2021-33741 | Microsoft Edge (Chromium-based) elevation of privilege | 8.2CNA v3.1 | 2.7% | 2021-06-08 | Fix |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core library privilege escalation | 8.4CNA v3.1 | 6.6% | 2021-06-08 | KEVExploit codeKCVFix |
| CVE-2021-33712 | Siemens Mendix SAML Module insufficient verification of data authenticity | 8.8v3.1 | 0.6% | 2021-06-08 | Fix |
| CVE-2021-33571 | Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks | 7.5v3.1 | 5.2% | 2021-06-08 | Fix |
| CVE-2021-33560 | GnuPG Libgcrypt observable discrepancy | 7.5NVD v3.1 | 2.4% | 2021-06-08 | Fix |
| CVE-2021-33203 | Path traversal in Django | 4.9v3.1 | 2.7% | 2021-06-08 | Fix |
| CVE-2021-33190 | Apache APISIX Dashboard bypass network access control | 5.3v3.1 | 2.7% | 2021-06-08 | Fix |
| CVE-2021-33176 | vernemq deserialization of untrusted data | 7.5v3.1 | 1.1% | 2021-06-08 | Fix |
| CVE-2021-33175 | EMQ X Broker deserialization of untrusted data | 7.5v3.1 | 1.1% | 2021-06-08 | Fix |
| CVE-2021-32674 | zopefoundation Zope remote code execution via traversal in TAL expressions | 8.8CNA v3.1 | 1.6% | 2021-06-08 | Fix |
| CVE-2021-32673 | reg-viz reg-suit remote command execution in reg-keygen-git-hash-plugin | 8.8CNA v3.1 | 1.9% | 2021-06-08 | Fix |
| CVE-2021-32658 | Nextcloud security-advisories sensitive data may not be removed from storage on account removal | 4.7CNA v3.1 | 0.3% | 2021-06-08 | Fix |
| CVE-2021-32106 | Cross-site scripting in ICEcoder | 5.4v3.1 | 0.9% | 2021-06-08 | Fix |
| CVE-2021-32015 | Nuvoton NPCT75X missing authorization | 6.0v3.1 | 0.2% | 2021-06-08 | Fix |
| CVE-2021-31985 | Microsoft Defender remote code execution | 7.8CNA v3.1 | 7.8% | 2021-06-08 | Fix |
| CVE-2021-31983 | Microsoft Paint 3D remote code execution | 7.8CNA v3.1 | 2.1% | 2021-06-08 | Fix |
| CVE-2021-31980 | Microsoft Intune management extension remote code execution | 8.1CNA v3.1 | 2.5% | 2021-06-08 | Fix |
| CVE-2021-31978 | Microsoft Defender denial of service | 5.5CNA v3.1 | 1.2% | 2021-06-08 | Fix |
| CVE-2021-31977 | Microsoft Windows Hyper-V denial of service | 8.6CNA v3.1 | 3.2% | 2021-06-08 | Fix |
| CVE-2021-31976 | Microsoft Windows server for NFS information disclosure | 7.5CNA v3.1 | 3.7% | 2021-06-08 | Fix |
| CVE-2021-31975 | Microsoft Windows server for NFS information disclosure | 7.5CNA v3.1 | 3.7% | 2021-06-08 | Fix |
| CVE-2021-31974 | Microsoft Windows server for NFS denial of service | 7.5CNA v3.1 | 6.7% | 2021-06-08 | Fix |
| CVE-2021-31973 | Microsoft Windows GPSVC elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-06-08 | Fix |
| CVE-2021-31972 | Microsoft Event Tracing for Windows information disclosure | 5.5CNA v3.1 | 0.8% | 2021-06-08 | Fix |
| CVE-2021-31971 | Microsoft Windows HTML Platforms security feature bypass | 6.8CNA v3.1 | 2.1% | 2021-06-08 | Fix |
| CVE-2021-31970 | Microsoft Windows TCP/IP driver security feature bypass | 5.5CNA v3.1 | 0.9% | 2021-06-08 | Fix |
| CVE-2021-31969 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.8CNA v3.1 | 1.2% | 2021-06-08 | Fix |
| CVE-2021-31968 | Microsoft Windows Remote Desktop services denial of service | 7.5CNA v3.1 | 3.2% | 2021-06-08 | Fix |
| CVE-2021-31967 | Microsoft VP9 Video Extensions remote code execution | 7.8CNA v3.1 | 2.5% | 2021-06-08 | Fix |
| CVE-2021-31966 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 4.6% | 2021-06-08 | Fix |
| CVE-2021-31965 | Microsoft SharePoint server information disclosure | 5.7CNA v3.1 | 4.5% | 2021-06-08 | Fix |
| CVE-2021-31964 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.5% | 2021-06-08 | Fix |
| CVE-2021-31963 | Microsoft SharePoint server remote code execution | 7.1CNA v3.1 | 2.1% | 2021-06-08 | Fix |
| CVE-2021-31962 | Microsoft Windows kerberos AppContainer security feature bypass | 9.4CNA v3.1 | 3.8% | 2021-06-08 | Fix |
| CVE-2021-31960 | Microsoft Windows Bind Filter driver information disclosure | 5.5CNA v3.1 | 0.8% | 2021-06-08 | Fix |
| CVE-2021-31959 | Microsoft Windows scripting Engine memory corruption | 6.4CNA v3.1 | 9.2% | 2021-06-08 | Fix |
| CVE-2021-31958 | Microsoft Windows NTLM elevation of privilege | 7.5CNA v3.1 | 2.6% | 2021-06-08 | Fix |
| CVE-2021-31957 | ASP.NET Core denial of service | 5.9CNA v3.1 | 5.1% | 2021-06-08 | Fix |
| CVE-2021-31956 | Microsoft Windows NTFS privilege escalation | 7.8CNA v3.1 | 22.3% | 2021-06-08 | KEVExploit codeKCVFix |
| CVE-2021-31955 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 81.1% | 2021-06-08 | KEVExploit codeKCVFix |
| CVE-2021-31954 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-06-08 | Fix |
| CVE-2021-31953 | Microsoft Windows Filter Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-06-08 | Fix |
| CVE-2021-31952 | Microsoft Windows Kernel-Mode driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-06-08 | Fix |
| CVE-2021-31951 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-06-08 | Fix |
| CVE-2021-31950 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 4.6% | 2021-06-08 | Exploit codeFix |
| CVE-2021-31949 | Microsoft Outlook remote code execution | 7.3CNA v3.1 | 2.6% | 2021-06-08 | Fix |
| CVE-2021-31948 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.3% | 2021-06-08 | Fix |
| CVE-2021-31946 | Microsoft Paint 3D remote code execution | 7.8CNA v3.1 | 2.9% | 2021-06-08 | Fix |
| CVE-2021-31945 | Microsoft Paint 3D remote code execution | 7.8CNA v3.1 | 2.3% | 2021-06-08 | Fix |
| CVE-2021-31944 | Microsoft 3D Viewer information disclosure | 5.0CNA v3.1 | 2.8% | 2021-06-08 | Fix |
| CVE-2021-31943 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 2.4% | 2021-06-08 | Fix |
| CVE-2021-31942 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 2.2% | 2021-06-08 | Fix |
| CVE-2021-31941 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 2.9% | 2021-06-08 | Fix |
| CVE-2021-31940 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 2.3% | 2021-06-08 | Fix |
| CVE-2021-31939 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 13.3% | 2021-06-08 | Fix |
| CVE-2021-31938 | Microsoft VsCode Kubernetes Tools extension elevation of privilege | 7.3CNA v3.1 | 2.0% | 2021-06-08 | Fix |
| CVE-2021-31807 | squid-cache squid integer overflow | 6.5v3.1 | 16.0% | 2021-06-08 | Exploit codeFix |
| CVE-2021-31738 | Adiscon Loganalyzer cross-site scripting | 6.1v3.1 | 0.9% | 2021-06-08 | |
| CVE-2021-31343 | Siemens Solid Edge out-of-bounds write | 8.8v3.1 | 2.5% | 2021-06-08 | Fix |
| CVE-2021-31342 | Siemens Solid Edge out-of-bounds write | 8.8v3.1 | 2.5% | 2021-06-08 | Fix |
| CVE-2021-31340 | Siemens SIMATIC RF166C resource exhaustion | 7.5v3.1 | 1.0% | 2021-06-08 | Fix |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider privilege escalation | 5.2CNA v3.1 | 2.6% | 2021-06-08 | KEVKCVFix |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider privilege escalation | 5.2CNA v3.1 | 3.0% | 2021-06-08 | KEVKCVFix |
| CVE-2021-30357 | SSL Network Extender Client information disclosure through error messages | 5.3NVD v3.1 | 22.8% | 2021-06-08 | Exploit codeFix |
| CVE-2021-28811 | Roon Server OS command injection | 7.2NVD v3.1 | 1.5% | 2021-06-08 | Fix |
| CVE-2021-28810 | Roon Server authentication bypass by spoofing | 7.5NVD v3.1 | 1.0% | 2021-06-08 | Fix |
| CVE-2021-28293 | Seceon Aisiem weak password recovery | 9.8v3.1 | 1.6% | 2021-06-08 | Fix |
| CVE-2021-27399 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2021-06-08 | Fix |
| CVE-2021-27390 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.9% | 2021-06-08 | Fix |
| CVE-2021-27387 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2021-06-08 | Fix |
| CVE-2021-26945 | OpenEXR An integer overflow | 5.5NVD v3.1 | 0.7% | 2021-06-08 | Fix |
| CVE-2021-26474 | Unauthenticated server SIDE request forgery IN Vembu PRODUCTS | 8.8v3.1 | 0.7% | 2021-06-08 | |
| CVE-2021-26473 | Unauthenticated arbitrary file upload and command execution in Vembu products | 9.8v3.1 | 1.8% | 2021-06-08 | |
| CVE-2021-26472 | Unauthenticated remote command execution with SYSTEM privileges in Vembu products | 9.8v3.1 | 2.5% | 2021-06-08 | |
| CVE-2021-26471 | Unauthenticated remote command execution in Vembu products | 9.8v3.1 | 2.3% | 2021-06-08 | |
| CVE-2021-26420 | Microsoft SharePoint server remote code execution | 7.1CNA v3.1 | 3.0% | 2021-06-08 | Fix |
| CVE-2021-26414 | Microsoft Windows DCOM server security feature bypass | 4.8CNA v3.1 | 49.8% | 2021-06-08 | Fix |
| CVE-2021-26260 | OpenEXR DwaCompressor integer overflow | 5.5NVD v3.1 | 1.1% | 2021-06-08 | Fix |
| CVE-2021-23392 | locutus regular expression denial of service (ReDoS) | 7.5v3.1 | 1.9% | 2021-06-08 | Fix |
| CVE-2021-23215 | OpenEXR DwaCompressor integer overflow | 5.5NVD v3.1 | 1.1% | 2021-06-08 | Fix |
| CVE-2021-23169 | OpenEXR copyIntoFrameBuffer function buffer overflow | 8.8NVD v3.1 | 2.3% | 2021-06-08 | Fix |
| CVE-2021-22550 | Google Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer | 6.5CNA v3.1 | 0.1% | 2021-06-08 | |
| CVE-2021-22549 | Google Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall | 6.5CNA v3.1 | 0.1% | 2021-06-08 | |
| CVE-2021-22548 | Google Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall | 6.5CNA v3.1 | 0.1% | 2021-06-08 | |
| CVE-2021-22221 | GitLab insufficient session expiration | 6.5CNA v3.1 | 0.8% | 2021-06-08 | Fix |
| CVE-2021-22220 | GitLab cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-06-08 | Fix |
| CVE-2021-22219 | GitLab sensitive information in log files | 4.4CNA v3.1 | 0.9% | 2021-06-08 | Fix |
| CVE-2021-22218 | GitLab improper certificate validation | 2.6CNA v3.1 | 0.5% | 2021-06-08 | Fix |
| CVE-2021-22217 | GitLab all versions denial of service | 6.5CNA v3.1 | 1.8% | 2021-06-08 | Fix |
| CVE-2021-22216 | GitLab all versions denial of service | 6.5CNA v3.1 | 1.0% | 2021-06-08 | Fix |
| CVE-2021-22215 | GitLab An information disclosure | 7.5CNA v3.1 | 0.8% | 2021-06-08 | Fix |
| CVE-2021-22214 | GitLab server-side request forgery | 6.8CNA v3.1 | 27.8% | 2021-06-08 | NucleiExploit codeFix |
| CVE-2021-22213 | GitLab information disclosure | 8.8CNA v3.1 | 1.7% | 2021-06-08 | Fix |
| CVE-2021-22212 | ntpsec weak cryptographic algorithm | 4.0CNA v3.1 | 0.5% | 2021-06-08 | Fix |
| CVE-2021-22116 | RabbitMQ improper input validation | 7.5v3.1 | 1.4% | 2021-06-08 | Fix |
| CVE-2021-21559 | Dell NetWorker improper certificate validation | 7.1CNA v3.1 | 0.2% | 2021-06-08 | Fix |
| CVE-2021-21558 | Dell NetWorker sensitive information in log files | 8.2CNA v3.1 | 0.3% | 2021-06-08 | Fix |
| CVE-2021-3564 | Linux kernel flaw double free | 5.5NVD v3.1 | 0.5% | 2021-06-08 | Fix |
| CVE-2021-1675 | Microsoft Windows Print Spooler remote code execution | 7.8CNA v3.1 | 85.3% | 2021-06-08 | KEVMetasploitExploit codeFix |
| CVE-2021-33904 | Accela Civic Platform cross-site scripting | 6.1v3.1 | 10.1% | 2021-06-07 | NucleiExploit code |
| CVE-2021-33896 | Dino path traversal | 5.3v3.1 | 1.8% | 2021-06-07 | Fix |
| CVE-2021-32671 | flarum core XSS vulnerability with translator | 10.0CNA v3.1 | 39.7% | 2021-06-07 | Fix |
| CVE-2021-32670 | Reflected cross-site scripting issue in Datasette | 7.2CNA v3.1 | 1.0% | 2021-06-07 | Fix |
| CVE-2021-30543 | Google Chrome Tab Strip use-after-free | 8.8v3.1 | 0.8% | 2021-06-07 | Fix |
| CVE-2021-30542 | Google Chrome Tab Strip use-after-free | 8.8v3.1 | 0.8% | 2021-06-07 | Fix |
| CVE-2021-30540 | Google Chrome payments incorrect security UI | 6.5v3.1 | 1.4% | 2021-06-07 | Fix |
| CVE-2021-30539 | Google Chrome content security policy insufficient policy enforcement | 5.4v3.1 | 1.3% | 2021-06-07 | Fix |
| CVE-2021-30538 | Google Chrome content security policy insufficient policy enforcement | 4.3v3.1 | 15.7% | 2021-06-07 | Fix |
| CVE-2021-30537 | Google Chrome cookies insufficient policy enforcement | 4.3v3.1 | 1.1% | 2021-06-07 | Fix |
| CVE-2021-30536 | Google Chrome V8 out-of-bounds read | 8.1v3.1 | 1.2% | 2021-06-07 | Fix |
| CVE-2021-30535 | Google Chrome ICU double free | 8.8v3.1 | 1.1% | 2021-06-07 | Fix |
| CVE-2021-30534 | Google Chrome iFrameSandbox insufficient policy enforcement | 6.5v3.1 | 1.2% | 2021-06-07 | Fix |
| CVE-2021-30533 | Google Chromium PopupBlocker security bypass | 6.5v3.1 | 16.6% | 2021-06-07 | KEVFix |
| CVE-2021-30532 | Google Chrome Content Security Policy insufficient policy enforcement | 4.3v3.1 | 1.2% | 2021-06-07 | Fix |
| CVE-2021-30531 | Google Chrome Content Security Policy insufficient policy enforcement | 6.5v3.1 | 1.7% | 2021-06-07 | Fix |
| CVE-2021-30530 | Google Chrome WebAudio out-of-bounds access | 8.8v3.1 | 1.2% | 2021-06-07 | Fix |
| CVE-2021-30529 | Google Chrome Bookmarks use-after-free | 8.8v3.1 | 1.0% | 2021-06-07 | Fix |
| CVE-2021-30528 | Google Chrome WebAuthentication use-after-free | 8.8v3.1 | 1.3% | 2021-06-07 | Fix |
| CVE-2021-30527 | Google Chrome WebUI use-after-free | 8.8v3.1 | 1.0% | 2021-06-07 | Fix |
| CVE-2021-30526 | Google Chrome TabStrip out-of-bounds write | 8.8v3.1 | 1.0% | 2021-06-07 | Fix |
| CVE-2021-30525 | Google Chrome TabGroups use-after-free | 8.8v3.1 | 0.9% | 2021-06-07 | Fix |
| CVE-2021-30524 | Google Chrome TabStrip use-after-free | 8.8v3.1 | 1.0% | 2021-06-07 | Fix |
| CVE-2021-30523 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 1.1% | 2021-06-07 | Fix |
| CVE-2021-30522 | Google Chrome WebAudio use-after-free | 8.8v3.1 | 1.4% | 2021-06-07 | Fix |
| CVE-2021-30521 | Google Chrome Autofill heap-based buffer overflow | 8.8v3.1 | 1.3% | 2021-06-07 | Fix |
| CVE-2021-29621 | Observable response discrepancy in Flask-AppBuilder | 5.3CNA v3.1 | 3.4% | 2021-06-07 | Fix |
| CVE-2021-29504 | Improper certificate validation in WP-CLI framework | 9.1CNA v3.1 | 1.3% | 2021-06-07 | Fix |
| CVE-2021-29099 | There is a SQL injection vulnerability in ArcGIS Server | 5.3CNA v3.0 | 0.6% | 2021-06-07 | Fix |
| CVE-2021-28382 | Zoho Manageengine Key Manager Plus cross-site scripting | 5.4v3.1 | 1.2% | 2021-06-07 | Fix |
| CVE-2021-26080 | Atlassian Jira Server cross-site scripting | 6.1v3.1 | 1.3% | 2021-06-07 | Fix |
| CVE-2021-26079 | Atlassian Jira Server cross-site scripting | 6.1v3.1 | 1.2% | 2021-06-07 | Fix |
| CVE-2021-26078 | Atlassian Jira Server cross-site scripting | 6.1v3.1 | 4.0% | 2021-06-07 | Exploit codeFix |
| CVE-2021-24344 | Easy Preloader WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.5% | 2021-06-07 | |
| CVE-2021-24343 | iFlyChat WordPress Chat plugin Admin+ stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-06-07 | Fix |
| CVE-2021-24342 | JNews WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.0% | 2021-06-07 | NucleiFix |
| CVE-2021-24340 | WP Statistics WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 29.8% | 2021-06-07 | NucleiFix |
| CVE-2021-24337 | Video Embed WordPress plugin authenticated (subscriber+) SQL injection | 8.8NVD v3.1 | 1.6% | 2021-06-07 | |
| CVE-2021-24336 | FlightLog WordPress plugin authenticated (editor+) SQL injection | 7.2NVD v3.1 | 1.5% | 2021-06-07 | |
| CVE-2021-23391 | calipso arbitrary file write via Archive Extraction (Zip Slip) | 7.1v3.1 | 0.4% | 2021-06-07 | |
| CVE-2021-22222 | The Wireshark Foundation Wireshark DVB-S2-BB dissector infinite loop | 7.5CNA v3.1 | 1.9% | 2021-06-07 | Fix |
| CVE-2021-20699 | Sharp Display Solutions UN462A buffer overflow | 9.8v3.1 | 1.7% | 2021-06-07 | |
| CVE-2021-20698 | Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, | 9.8v3.1 | 1.5% | 2021-06-07 | |
| CVE-2021-20517 | IBM WebSphere Application Server ND path traversal | 6.4CNA v3.0 | 1.9% | 2021-06-07 | Fix |
| CVE-2021-20259 | foreman exposure of sensitive information to an unauthorized actor in foreman_fog_proxmox | 7.8v3.1 | 0.3% | 2021-06-07 | Fix |
| CVE-2021-3277 | Nagios XI unrestricted file upload | 7.2v3.1 | 59.0% | 2021-06-07 | |
| CVE-2021-33898 | Invoice Ninja deserialization of untrusted data | 8.1v3.1 | 1.8% | 2021-06-06 | |
| CVE-2021-33881 | NXP Mifare Ultralight C incorrect authorization | 4.2v3.1 | 0.4% | 2021-06-06 | Fix |
| CVE-2021-33880 | Observable timing discrepancy in aaugustin Websockets library | 5.9v3.1 | 2.3% | 2021-06-06 | Fix |
| CVE-2021-33879 | Tencent Gameloop download without integrity check | 8.1v3.1 | 1.0% | 2021-06-06 | Exploit code |
| CVE-2021-32198 | EmTec Zoc denial of service | 9.8v3.1 | 1.2% | 2021-06-06 | Fix |
| CVE-2021-31701 | Mintty improper exception handling | 7.5v3.1 | 0.9% | 2021-06-06 | Fix |
| CVE-2021-33840 | Luca insufficient verification of data authenticity | 7.5v3.1 | 0.9% | 2021-06-04 | Fix |
| CVE-2021-33839 | Luca information disclosure | 7.5v3.1 | 2.8% | 2021-06-04 | Fix |
| CVE-2021-33838 | Luca observable discrepancy | 7.5v3.1 | 2.8% | 2021-06-04 | Fix |
| CVE-2021-33054 | Inverse SOGo improper signature verification | 7.5v3.1 | 1.0% | 2021-06-04 | Fix |
| CVE-2021-32641 | auth0 lock reflected XSS when using flashMessages | 8.1CNA v3.1 | 1.5% | 2021-06-04 | Fix |
| CVE-2021-31252 | Chiyu-tech Bf-630 An open redirect | 6.1v3.1 | 28.6% | 2021-06-04 | Fix |
| CVE-2021-31251 | Chiyu-tech Bf-430 telnet server authentication bypass | 9.8v3.1 | 35.7% | 2021-06-04 | Exploit codeFix |
| CVE-2021-31250 | Chiyu-tech Bf-450m cross-site scripting | 5.4v3.1 | 79.6% | 2021-06-04 | NucleiEmerging ThreatsFix |
| CVE-2021-31249 | Chiyu-tech Bf-450m CRLF injection | 6.5v3.1 | 18.0% | 2021-06-04 | NucleiFix |
| CVE-2021-30520 | Google Chrome Tab Strip use-after-free | 8.8v3.1 | 0.9% | 2021-06-04 | Fix |
| CVE-2021-30519 | Google Chrome Payments use-after-free | 8.8v3.1 | 0.9% | 2021-06-04 | Fix |
| CVE-2021-30518 | Google Chrome Reader Mode heap-based buffer overflow | 8.8v3.1 | 1.3% | 2021-06-04 | Fix |
| CVE-2021-30517 | Google Chrome V8 type confusion | 8.8v3.1 | 2.5% | 2021-06-04 | Fix |
| CVE-2021-30516 | Google Chrome History heap-based buffer overflow | 8.8v3.1 | 1.3% | 2021-06-04 | Fix |
| CVE-2021-30515 | Google Chrome File API use-after-free | 8.8v3.1 | 1.2% | 2021-06-04 | Fix |
| CVE-2021-30514 | Google Chrome Autofill use-after-free | 8.8v3.1 | 1.1% | 2021-06-04 | Fix |
| CVE-2021-30513 | Google Chrome V8 type confusion | 8.8v3.1 | 2.0% | 2021-06-04 | Fix |
| CVE-2021-30512 | Google Chrome Notifications use-after-free | 8.8v3.1 | 1.2% | 2021-06-04 | Fix |
| CVE-2021-30511 | Google Chrome Tab Groups out-of-bounds read | 8.1v3.1 | 0.9% | 2021-06-04 | Fix |
| CVE-2021-30510 | Google Chrome Aura use-after-free | 8.8v3.1 | 1.2% | 2021-06-04 | Fix |
| CVE-2021-30509 | Google Chrome Tab Strip out-of-bounds write | 8.8v3.1 | 0.8% | 2021-06-04 | Fix |
| CVE-2021-30508 | Google Chrome Media Feeds heap-based buffer overflow | 8.8v3.1 | 1.0% | 2021-06-04 | Fix |
| CVE-2021-30507 | Google Chrome Offline inappropriate implementation | 8.8v3.1 | 1.2% | 2021-06-04 | Fix |
| CVE-2021-30506 | Google Chrome Web App Installs incorrect security UI | 8.8v3.1 | 0.8% | 2021-06-04 | Fix |
| CVE-2021-30475 | Aomedia buffer overflow | 9.8v3.1 | 2.2% | 2021-06-04 | Fix |
| CVE-2021-29500 | fxbin bubble-fireworks missing validation of JWT signature | 7.5CNA v3.1 | 0.6% | 2021-06-04 | Fix |
| CVE-2021-28091 | Entr'ouvert Lasso improper signature verification | 7.5v3.1 | 1.3% | 2021-06-04 | Fix |
| CVE-2021-27657 | Metasys improper privilege management | 8.8CNA v3.1 | 1.2% | 2021-06-04 | Fix |
| CVE-2021-26994 | Clustered Data ONTAP denial of service | 6.5v3.1 | 0.8% | 2021-06-04 | Fix |
| CVE-2021-26928 | NIC BIRD missing authentication | 6.8v3.1 | 1.0% | 2021-06-04 | |
| CVE-2021-22516 | Secure API Manager (SAPIM) Micro Focus sensitive information in log files | 7.5v3.1 | 1.0% | 2021-06-04 | |
| CVE-2021-3565 | tpm2-tools improper initialization | 5.9NVD v3.1 | 1.3% | 2021-06-04 | Fix |
| CVE-2021-3491 | Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass | 8.8NVD v3.1 | 0.6% | 2021-06-04 | Fix |
| CVE-2021-3490 | Linux kernel eBPF bitwise ops ALU32 bounds tracking | 7.8NVD v3.1 | 27.4% | 2021-06-04 | Exploit codeFix |
| CVE-2021-3489 | Linux kernel eBPF RINGBUF map oversized allocation | 7.8NVD v3.1 | 0.6% | 2021-06-04 | Fix |
| CVE-2021-1564 | Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery Protocol and LLDP memory leak | 6.5CNA v3.1 | 0.4% | 2021-06-04 | Fix |
| CVE-2021-1563 | Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery Protocol and LLDP memory leak | 6.5CNA v3.1 | 0.4% | 2021-06-04 | Fix |
| CVE-2021-1544 | Cisco Webex Meetings client Software Logging information disclosure | 5.5CNA v3.1 | 0.2% | 2021-06-04 | Fix |
| CVE-2021-1540 | Cisco Asr 5000 Series Software authorization bypass | 8.1CNA v3.1 | 1.1% | 2021-06-04 | Fix |
| CVE-2021-1539 | Cisco Asr 5000 Series Software authorization bypass | 8.1CNA v3.1 | 1.1% | 2021-06-04 | Fix |
| CVE-2021-1538 | Cisco Common Services Platform Collector command injection | 4.7CNA v3.1 | 1.8% | 2021-06-04 | Fix |
| CVE-2021-1537 | Cisco ThousandEyes Recorder information disclosure | 6.2CNA v3.1 | 0.2% | 2021-06-04 | Fix |
| CVE-2021-1536 | Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL injection | 4.8CNA v3.1 | 0.3% | 2021-06-04 | Fix |
| CVE-2021-1528 | Cisco SD-WAN software privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-06-04 | Fix |
| CVE-2021-1527 | Cisco Webex Player memory corruption | 5.3CNA v3.1 | 0.6% | 2021-06-04 | Fix |
| CVE-2021-1526 | Cisco Webex Player memory corruption | 7.8CNA v3.1 | 1.0% | 2021-06-04 | Fix |
| CVE-2021-1525 | Cisco Webex Meetings and Webex Meetings Server File Redirect vulnerability | 4.7CNA v3.1 | 0.8% | 2021-06-04 | Fix |
| CVE-2021-1517 | Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass vulnerability | 5.0CNA v3.1 | 0.8% | 2021-06-04 | Fix |
| CVE-2021-1503 | Cisco Webex Network Recording Player and Webex Player memory corruption | 7.8CNA v3.1 | 1.0% | 2021-06-04 | Fix |
| CVE-2021-1502 | Cisco Webex Network Recording Player and Webex Player memory corruption | 7.8CNA v3.1 | 1.1% | 2021-06-04 | Fix |
| CVE-2021-33815 | FFmpeg improper array index validation | 8.8v3.1 | 1.4% | 2021-06-03 | Fix |
| CVE-2021-33806 | Bdew Bdlib deserialization of untrusted data | 9.8v3.1 | 3.0% | 2021-06-03 | |
| CVE-2021-32926 | Micro800, MicroLogix 1400 man-in-the-middle | 7.5v3.1 | 3.0% | 2021-06-03 | |
| CVE-2021-32923 | HashiCorp Vault invalid session token expiration | 7.4v3.1 | 1.4% | 2021-06-03 | Fix |
| CVE-2021-32666 | wireapp wire-ios asset DoS | 6.5CNA v3.1 | 0.9% | 2021-06-03 | Fix |
| CVE-2021-32665 | wireapp wire-ios verified groups not reliable | 8.8CNA v3.1 | 0.5% | 2021-06-03 | Fix |
| CVE-2021-32662 | backstage TechDocs mkdocs.yml path traversal | 6.5CNA v3.1 | 1.3% | 2021-06-03 | Fix |
| CVE-2021-32661 | backstage TechDocs object element script injection | 6.8CNA v3.1 | 1.2% | 2021-06-03 | Fix |
| CVE-2021-32660 | backstage TechDocs content sanitization bypass | 6.8CNA v3.1 | 1.3% | 2021-06-03 | Fix |
| CVE-2021-32460 | Trend Micro Maxmium Security (Consumer) incorrect permission assignment | 7.8v3.1 | 0.3% | 2021-06-03 | Fix |
| CVE-2021-31831 | Incorrect access to deleted scripts vulnerability in McAfee DBSec | 4.9CNA v3.1 | 0.6% | 2021-06-03 | Fix |
| CVE-2021-31830 | Cross-site scripting (XSS) vulnerability in McAfee DBSec | 5.9CNA v3.1 | 0.5% | 2021-06-03 | Fix |
| CVE-2021-28848 | Mintty resource exhaustion | 7.5v3.1 | 1.6% | 2021-06-03 | |
| CVE-2021-28847 | Mobatek MobaXterm denial of service | 7.5v3.1 | 1.4% | 2021-06-03 | Fix |
| CVE-2021-28812 | Command injection vulnerability in Video Station | 8.8CNA v3.1 | 1.6% | 2021-06-03 | Fix |
| CVE-2021-28807 | Post-authentication reflected XSS vulnerability in Q'center | 7.7CNA v3.1 | 1.4% | 2021-06-03 | Fix |
| CVE-2021-28806 | DOM-based XSS vulnerability in QTS and QuTS hero | 5.7CNA v3.1 | 0.5% | 2021-06-03 | Fix |
| CVE-2021-26584 | HPE OneView for VMware vCenter with Operations Manager and Log Insight cross-site scripting | 6.1v3.1 | 0.8% | 2021-06-03 | Fix |
| CVE-2021-25947 | Prototype pollution in nestie | 9.8v3.1 | 3.0% | 2021-06-03 | Fix |
| CVE-2021-24023 | Fortinet FortiAI FortiAI v1.4.0 improper input validation | 7.8CNA v3.1 | 0.8% | 2021-06-03 | Fix |
| CVE-2021-22337 | Information leak vulnerability in some Huawei phones | 5.3v3.1 | 0.7% | 2021-06-03 | Fix |
| CVE-2021-22336 | DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-03 | Fix |
| CVE-2021-22335 | Heap overflow vulnerability in some Huawei phones | 7.8v3.1 | 0.2% | 2021-06-03 | Fix |
| CVE-2021-22334 | Malicious Wi-Fi construction vulnerability in some Huawei phones | 7.4v3.1 | 0.2% | 2021-06-03 | Fix |
| CVE-2021-22333 | Integer overflow vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2021-06-03 | Fix |
| CVE-2021-22325 | Video streaming vulnerability in some Huawei phones | 5.3v3.1 | 0.4% | 2021-06-03 | Fix |
| CVE-2021-22324 | There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. | 7.5v3.1 | 0.7% | 2021-06-03 | Fix |
| CVE-2021-22322 | Logic bypass vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-06-03 | Fix |
| CVE-2021-22317 | Configuration defect in some Huawei products | 7.5v3.1 | 0.7% | 2021-06-03 | Fix |
| CVE-2021-22316 | Huawei EMUI There is a missing authentication | 6.8v3.1 | 0.2% | 2021-06-03 | Fix |
| CVE-2021-22313 | EMUI there is a defect in the underlying logic of some functions | 7.5v3.1 | 0.7% | 2021-06-03 | Fix |
| CVE-2021-22308 | EMUI information leakage due to screenshots taken without notifications | 3.3v3.1 | 0.2% | 2021-06-03 | Fix |
| CVE-2021-22130 | Fortinet FortiProxy A stack-based buffer overflow | 6.7CNA v3.1 | 1.1% | 2021-06-03 | Fix |
| CVE-2021-20380 | IBM Qradar Advisor information disclosure | 5.3CNA v3.0 | 1.4% | 2021-06-03 | Fix |
| CVE-2021-3569 | libtpms buffer overflow | 5.5NVD v3.1 | 0.3% | 2021-06-03 | Fix |
| CVE-2021-3469 | foreman incorrect authorization | 5.4v3.1 | 0.3% | 2021-06-03 | |
| CVE-2021-32625 | Redis vulnerability in STRALGO LCS on 32-bit systems | 7.5CNA v3.1 | 4.1% | 2021-06-02 | Fix |
| CVE-2021-31921 | istio missing authorization | 9.8v3.1 | 1.5% | 2021-06-02 | Fix |
| CVE-2021-31855 | KDE messagelib cleartext storage of sensitive information | 6.5v3.1 | 0.6% | 2021-06-02 | Fix |
| CVE-2021-30474 | Aomedia use-after-free | 9.8v3.1 | 1.9% | 2021-06-02 | Fix |
| CVE-2021-29670 | IBM Engineering Test Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-29668 | IBM Engineering Test Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-29091 | Synology Photo Station path traversal | 7.7CNA v3.1 | 1.1% | 2021-06-02 | Fix |
| CVE-2021-29090 | Synology Photo Station SQL command improper neutralization | 7.2CNA v3.1 | 1.7% | 2021-06-02 | Fix |
| CVE-2021-29089 | Synology Photo Station SQL command improper neutralization | 9.8CNA v3.1 | 1.9% | 2021-06-02 | Fix |
| CVE-2021-28678 | Insufficient verification of data authenticity in Pillow | 5.5v3.1 | 0.7% | 2021-06-02 | Fix |
| CVE-2021-28677 | Uncontrolled resource consumption in Pillow | 7.5v3.1 | 2.3% | 2021-06-02 | Fix |
| CVE-2021-28676 | Potential infinite loop in Pillow | 7.5v3.1 | 2.5% | 2021-06-02 | Fix |
| CVE-2021-28675 | Pillow denial of service | 5.5v3.1 | 1.0% | 2021-06-02 | Fix |
| CVE-2021-26707 | Prototype pollution in Merge-deep | 9.8v3.1 | 1.9% | 2021-06-02 | Fix |
| CVE-2021-25288 | Pillow out-of-bounds read | 9.1v3.1 | 2.4% | 2021-06-02 | Fix |
| CVE-2021-25287 | Out-of-bounds read in Pillow | 9.1v3.1 | 2.9% | 2021-06-02 | Fix |
| CVE-2021-24012 | Fortinet FortiOS improper certificate validation | 6.5CNA v3.1 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-23896 | Cleartext transmission of sensitive information in McAfee DBSec | 3.2CNA v3.1 | 0.2% | 2021-06-02 | Fix |
| CVE-2021-23895 | Authorized deserialization of untrusted data in McAfee DBSec | 9.0CNA v3.1 | 1.9% | 2021-06-02 | Fix |
| CVE-2021-23894 | Unauthorized deserialization of untrusted data in McAfee DBSec | 9.6CNA v3.1 | 2.2% | 2021-06-02 | Fix |
| CVE-2021-20371 | IBM Rational Collaborative Lifecycle Management information disclosure through error messages | 4.3CNA v3.0 | 1.2% | 2021-06-02 | Fix |
| CVE-2021-20348 | IBM Rational Rhapsody Model Manager server-side request forgery | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-20347 | IBM Rational DOORS Next Generation server-side request forgery | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-20346 | IBM Rational Collaborative Lifecycle Management server-side request forgery | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-20345 | IBM Rational Rhapsody Model Manager server-side request forgery | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-20343 | IBM Engineering Test Management server-side request forgery | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-20338 | IBM Engineering Test Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-3546 | QEMU out-of-bounds write | 8.2NVD v3.1 | 0.5% | 2021-06-02 | Fix |
| CVE-2021-3545 | QEMU uninitialized resource use | 6.5NVD v3.1 | 0.4% | 2021-06-02 | Fix |
| CVE-2021-3544 | QEMU vhost-user GPU device memory leak | 6.5NVD v3.1 | 0.4% | 2021-06-02 | Fix |
| CVE-2021-3538 | satori/go.uuid weak random number generator | 9.8NVD v3.1 | 2.3% | 2021-06-02 | Fix |
| CVE-2021-3530 | binutils uncontrolled recursion | 7.5NVD v3.1 | 2.4% | 2021-06-02 | Fix |
| CVE-2021-3529 | noobaa-core cross-site scripting | 7.1v3.1 | 0.7% | 2021-06-02 | Fix |
| CVE-2021-3522 | GStreamer out-of-bounds read | 5.5NVD v3.1 | 5.4% | 2021-06-02 | Fix |
| CVE-2021-3520 | lz4 integer overflow | 9.8NVD v3.1 | 3.4% | 2021-06-02 | Fix |
| CVE-2021-3499 | openshift/ovn-kubernetes improper input validation | 5.6v3.1 | 0.8% | 2021-06-02 | Fix |
| CVE-2021-3468 | avahi client_work function infinite loop | 5.5NVD v3.1 | 0.4% | 2021-06-02 | Fix |
| CVE-2021-33184 | Synology Download Station task management component server-side request forgery | 7.7CNA v3.1 | 1.0% | 2021-06-01 | Fix |
| CVE-2021-33183 | Synology Docker path traversal | 7.9CNA v3.1 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-33182 | Synology DiskStation Manager (DSM) path traversal | 5.0CNA v3.1 | 1.1% | 2021-06-01 | Fix |
| CVE-2021-33181 | Synology Video Station webapi component server-side request forgery | 6.6CNA v3.1 | 1.0% | 2021-06-01 | Fix |
| CVE-2021-33180 | Synology Media Server SQL command improper neutralization | 7.3CNA v3.1 | 1.0% | 2021-06-01 | Fix |
| CVE-2021-32924 | invisioncommunity IPS Community Suite code injection | 8.8v3.1 | 19.9% | 2021-06-01 | Fix |
| CVE-2021-32657 | Nextcloud security-advisories malicious user could break user administration page | 4.3CNA v3.1 | 1.8% | 2021-06-01 | Fix |
| CVE-2021-32656 | Nextcloud security-advisories trusted servers exchange can be triggered by attacker | 8.6CNA v3.1 | 1.8% | 2021-06-01 | Fix |
| CVE-2021-32655 | Nextcloud security-advisories files Drop public link can be added as federated share | 3.5CNA v3.1 | 1.0% | 2021-06-01 | Fix |
| CVE-2021-32654 | Nextcloud security-advisories attacker can obtain write access to any federated share/public link | 8.1CNA v3.1 | 1.8% | 2021-06-01 | Fix |
| CVE-2021-32653 | Nextcloud security-advisories default settings leak federated cloud ID to lookup server of all users | 2.7CNA v3.1 | 1.2% | 2021-06-01 | Fix |
| CVE-2021-32652 | Nextcloud security-advisories missing permission check on email metadata retrieval | 8.8CNA v3.1 | 1.1% | 2021-06-01 | Fix |
| CVE-2021-32651 | LDAP injection via OneDev may leak some LDAP directory information | 3.1CNA v3.1 | 1.1% | 2021-06-01 | |
| CVE-2021-32647 | Post-authentication remote code execution (RCE) in emissary:emissary | 8.0CNA v3.1 | 2.9% | 2021-06-01 | Fix |
| CVE-2021-32027 | PostgreSQL integer overflow | 8.8NVD v3.1 | 2.0% | 2021-06-01 | Fix |
| CVE-2021-31684 | Out-of-bounds read in json-smart | 7.5v3.1 | 2.3% | 2021-06-01 | Fix |
| CVE-2021-31643 | Chiyu-tech Biosense An cross-site scripting | 5.4v3.1 | 88.5% | 2021-06-01 | Emerging ThreatsFix |
| CVE-2021-31642 | Chiyu-tech Biosense A denial of service | 6.5v3.1 | 43.7% | 2021-06-01 | Emerging ThreatsExploit codeFix |
| CVE-2021-31641 | Chiyu-tech Bfminiw unauthenticated cross-site scripting | 6.1v3.1 | 5.1% | 2021-06-01 | Fix |
| CVE-2021-30181 | Apache Dubbo RCE on customers via script route poisoning (Nashorn script injection) | 9.8v3.1 | 61.5% | 2021-06-01 | Exploit codeFix |
| CVE-2021-30180 | Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling) | 9.8v3.1 | 60.4% | 2021-06-01 | Exploit codeFix |
| CVE-2021-30179 | Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter | 9.8v3.1 | 4.1% | 2021-06-01 | Fix |
| CVE-2021-29740 | IBM Spectrum Scale format string | 8.4CNA v3.0 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-29665 | IBM Security Verify Access out-of-bounds write | 9.0CNA v3.0 | 1.1% | 2021-06-01 | Fix |
| CVE-2021-29092 | Synology Photo Station file management component unrestricted file upload | 8.8CNA v3.1 | 1.7% | 2021-06-01 | Fix |
| CVE-2021-29088 | Synology DiskStation Manager (DSM) path traversal | 7.8CNA v3.1 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-27828 | IN4VELOCITY IN4SUITE Erp SQL injection | 9.1v3.1 | 20.3% | 2021-06-01 | Exploit codeFix |
| CVE-2021-26111 | Fortinet FortiSwitch A memory leak | 6.5CNA v3.1 | 0.4% | 2021-06-01 | Fix |
| CVE-2021-25932 | OpenNMS cross-site scripting | 5.4v3.1 | 0.9% | 2021-06-01 | |
| CVE-2021-25641 | Dubbo Zookeeper does not check serialization id | 9.8v3.1 | 21.1% | 2021-06-01 | Exploit codeFix |
| CVE-2021-25640 | Apache Dubbo open redirect or SSRF vulnerability usage of parseURL | 6.1v3.1 | 2.1% | 2021-06-01 | Fix |
| CVE-2021-24335 | Car Repair Services WordPress theme unauthenticated reflected XSS and XFS | 6.1NVD v3.1 | 3.9% | 2021-06-01 | NucleiFix |
| CVE-2021-24334 | Instant Images WordPress plugin authenticated stored XSS and XFS | 5.4NVD v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-24333 | Content Copy Protection and Prevent Image Save WordPress plugin CSRF to stored cross-site scripting | 6.5NVD v3.1 | 0.8% | 2021-06-01 | |
| CVE-2021-24331 | Smooth Scroll Page Up/Down Buttons WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-24330 | Funnel Builder by CartFlows WordPress plugin stored XSS | 4.8NVD v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-24329 | WP Super Cache WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 4.5% | 2021-06-01 | Fix |
| CVE-2021-24328 | WP Login Security and History WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.2NVD v3.1 | 0.6% | 2021-06-01 | |
| CVE-2021-24322 | Database Backup for WordPress plugin authenticated persistent cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-24321 | Bello WordPress theme unauthenticated blind SQL injection | 9.8NVD v3.1 | 66.6% | 2021-06-01 | Fix |
| CVE-2021-24320 | Bello WordPress theme unauthenticated reflected XSS and XFS | 6.1NVD v3.1 | 10.8% | 2021-06-01 | NucleiFix |
| CVE-2021-24319 | Bello WordPress theme authenticated cross-site scripting (XSS) and XFS | 5.4NVD v3.1 | 1.7% | 2021-06-01 | Fix |
| CVE-2021-24318 | Listeo WordPress theme Multiple authenticated IDOR | 6.5NVD v3.1 | 1.0% | 2021-06-01 | Fix |
| CVE-2021-24317 | Listeo WordPress theme Multiple XSS and XFS | 6.1NVD v3.1 | 0.9% | 2021-06-01 | Fix |
| CVE-2021-24316 | Mediumish WordPress theme unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 6.4% | 2021-06-01 | NucleiFix |
| CVE-2021-24313 | WP Prayer WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-24312 | WP Super Cache WordPress plugin authenticated remote code execution | 7.2NVD v3.1 | 2.0% | 2021-06-01 | Fix |
| CVE-2021-24311 | External Media WordPress plugin authenticated arbitrary file upload | 8.8NVD v3.1 | 1.8% | 2021-06-01 | Fix |
| CVE-2021-24310 | Photo Gallery WordPress plugin authenticated stored cross-site scripting via Gallery Title | 4.8NVD v3.1 | 1.1% | 2021-06-01 | Fix |
| CVE-2021-24309 | Weekly Schedule WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-23388 | forms regular expression denial of service (ReDoS) | 5.3v3.1 | 1.7% | 2021-06-01 | Fix |
| CVE-2021-23021 | NGINX Controller incorrect permission assignment | 5.5v3.1 | 0.2% | 2021-06-01 | Fix |
| CVE-2021-23020 | NGINX Controller insufficient randomness | 5.5v3.1 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-23019 | NGINX Controller information disclosure | 7.8v3.1 | 0.2% | 2021-06-01 | Fix |
| CVE-2021-23018 | NGINX Controller cleartext transmission of sensitive information | 7.4v3.1 | 0.5% | 2021-06-01 | Fix |
| CVE-2021-23017 | Nginx Web Server, Nginx Plus off-by-one error | 7.7NVD v3.1 | 53.5% | 2021-06-01 | Exploit codeKCVFix |
| CVE-2021-22123 | Fortinet FortiWeb An OS command injection | 7.6CNA v3.1 | 84.4% | 2021-06-01 | Emerging ThreatsExploit codeKCVFix |
| CVE-2021-20585 | IBM Security Verify Access information disclosure | 5.3CNA v3.0 | 1.0% | 2021-06-01 | |
| CVE-2021-20576 | IBM Security Verify Access crash | 7.5CNA v3.0 | 2.5% | 2021-06-01 | Fix |
| CVE-2021-20575 | IBM Security Verify Access insecure storage of sensitive information | 4.0CNA v3.0 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-20306 | Business-central incorrect authorization | 4.3v3.1 | 0.7% | 2021-06-01 | Fix |
| CVE-2021-3543 | Nitro Enclaves flaw null pointer dereference | 6.7NVD v3.1 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-3516 | libxml2 use-after-free | 7.8NVD v3.1 | 2.0% | 2021-06-01 | Fix |
| CVE-2021-3515 | pglogical shell injection | 6.7NVD v3.1 | 0.5% | 2021-06-01 | Fix |
| CVE-2021-3495 | Access control flaw in Kiali | 8.8v3.1 | 1.0% | 2021-06-01 | Fix |
| CVE-2021-3425 | broker sensitive information in log files | 4.4NVD v3.1 | 0.3% | 2021-06-01 | Fix |
| CVE-2021-3424 | Keycloak is vulnerable to IDN homograph attack | 5.3v3.1 | 0.8% | 2021-06-01 | Fix |
| CVE-2021-3412 | 3scale missing brute-force protection | 7.3v3.1 | 0.8% | 2021-06-01 |