CVE-2021 records published in July 2021
This page lists the 1,276 CVE-2021 records published in July 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 16 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 14311.2% of these records
- Listed in CISA KEV
- 161.3% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 423.3% of these records
- Exploit code
- 383.0% of these records
- Actionable vendor fix
- 1,05182.4% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in July 2021 have had from about 63 months to about 64 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-37760 | Graylog sensitive information in log files | 9.8v3.1 | 1.3% | 2021-07-31 | Fix |
| CVE-2021-37759 | Graylog sensitive information in log files | 9.8v3.1 | 1.3% | 2021-07-31 | Fix |
| CVE-2021-33617 | Zoho ManageEngine Password Manager Pro login response handler vulnerability | 5.3v3.1 | 2.1% | 2021-07-31 | Fix |
| CVE-2021-37746 | Claws-mail open redirect | 6.1v3.1 | 1.2% | 2021-07-30 | Fix |
| CVE-2021-37743 | MISP cross-site scripting | 5.4v3.1 | 0.7% | 2021-07-30 | |
| CVE-2021-37742 | MISP cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-30 | |
| CVE-2021-37606 | Meow Hash observable discrepancy | 5.3v3.1 | 0.7% | 2021-07-30 | |
| CVE-2021-37601 | Prosody information disclosure | 7.5v3.1 | 2.3% | 2021-07-30 | Fix |
| CVE-2021-37596 | Telegram Web K Alpha cross-site scripting | 6.1v3.1 | 0.6% | 2021-07-30 | |
| CVE-2021-37595 | FreeRDP improper input validation | 9.8v3.1 | 1.5% | 2021-07-30 | |
| CVE-2021-37594 | FreeRDP improper input validation | 9.8v3.1 | 1.4% | 2021-07-30 | |
| CVE-2021-37593 | PEEL Shopping SQL injection | 9.1v3.1 | 5.2% | 2021-07-30 | Exploit code |
| CVE-2021-37588 | Jhu charm weak cryptographic algorithm | 5.9v3.1 | 0.9% | 2021-07-30 | |
| CVE-2021-37587 | Jhu charm weak cryptographic algorithm | 6.5v3.1 | 0.8% | 2021-07-30 | Fix |
| CVE-2021-37144 | CSZ CMS incorrectly resolved name or reference | 9.1v3.1 | 1.3% | 2021-07-30 | |
| CVE-2021-36983 | Replaysorcery link following | 7.8v3.1 | 0.5% | 2021-07-30 | Fix |
| CVE-2021-36766 | Concrete CMS deserialization of untrusted data | 7.2v3.1 | 3.7% | 2021-07-30 | |
| CVE-2021-36754 | PowerDNS Authoritative Server crash | 7.5v3.1 | 64.9% | 2021-07-30 | NucleiFix |
| CVE-2021-36624 | Phone Shop Sales Management System SQL injection | 9.8v3.1 | 3.4% | 2021-07-30 | |
| CVE-2021-36621 | Online Covid Vaccination Scheduler System SQL injection | 8.1v3.1 | 2.1% | 2021-07-30 | |
| CVE-2021-36605 | engineercms cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-30 | |
| CVE-2021-36386 | fetchmail missing resource initialization | 7.5v3.1 | 2.6% | 2021-07-30 | Fix |
| CVE-2021-36004 | Adobe InDesign CoolType out-of-bounds write vulnerability could lead to arbitrary stack manipulation | 8.8CNA v3.1 | 2.2% | 2021-07-30 | Fix |
| CVE-2021-35479 | Nagios Log Server cross-site scripting | 5.4v3.1 | 13.2% | 2021-07-30 | Fix |
| CVE-2021-35478 | Nagios Log Server cross-site scripting | 5.4v3.1 | 76.6% | 2021-07-30 | Fix |
| CVE-2021-35472 | lemonldap-ng Lemonldap missing brute-force protection | 8.8v3.1 | 1.7% | 2021-07-30 | Fix |
| CVE-2021-35458 | Online Pet Shop We App SQL injection | 9.8v3.1 | 2.4% | 2021-07-30 | |
| CVE-2021-35193 | Pattersondental Eaglesoft improper certificate validation | 7.5v3.1 | 1.2% | 2021-07-30 | Fix |
| CVE-2021-34802 | Improper privilege management in Neo4j Graph Database | 8.8v3.1 | 1.0% | 2021-07-30 | Fix |
| CVE-2021-34630 | Reflected XSS in GTranslate Pro and GTranslate Enterprise | 6.1v3.1 | 1.6% | 2021-07-30 | NucleiFix |
| CVE-2021-34629 | SendGrid authorization bypass | 4.3v3.1 | 0.7% | 2021-07-30 | |
| CVE-2021-34166 | Simple Food Website Sourcecodester SQL injection | 9.8v3.1 | 2.9% | 2021-07-30 | |
| CVE-2021-34165 | Basic Shopping Cart Sourcecodester SQL injection | 9.8v3.1 | 2.8% | 2021-07-30 | |
| CVE-2021-32807 | zopefoundation AccessControl remote code execution via unsafe classes in otherwise permitted modules | 4.4CNA v3.1 | 2.0% | 2021-07-30 | Fix |
| CVE-2021-32610 | Directory traversal in Archive_Tar | 7.1v3.1 | 73.4% | 2021-07-30 | Fix |
| CVE-2021-32558 | Digium Certified Asterisk crash | 7.5v3.1 | 9.1% | 2021-07-30 | Fix |
| CVE-2021-31878 | Digium asterisk reachable assertion | 6.5v3.1 | 2.4% | 2021-07-30 | Fix |
| CVE-2021-31799 | Arbitrary code execution in Rdoc | 7.0v3.1 | 1.5% | 2021-07-30 | Fix |
| CVE-2021-30483 | Directory traversal in isomorphic-git | 5.3v3.1 | 2.2% | 2021-07-30 | Fix |
| CVE-2021-30124 | Vscode-phpmd arbitrary code execution | 9.8v3.1 | 3.0% | 2021-07-30 | |
| CVE-2021-29781 | IBM Partner Engagement Manager deserialization of untrusted data | 9.8CNA v3.0 | 2.9% | 2021-07-30 | Fix |
| CVE-2021-29736 | IBM WebSphere Application Server privilege escalation | 5.0CNA v3.0 | 1.1% | 2021-07-30 | Fix |
| CVE-2021-29298 | Emerson Proficy Machine Edition Emerson GE Automation improper input validation | 5.3v3.1 | 0.8% | 2021-07-30 | |
| CVE-2021-29297 | Emerson Proficy Machine Edition Emerson GE Automation buffer overflow | 5.3v3.1 | 0.8% | 2021-07-30 | |
| CVE-2021-28966 | ruby-lang Ruby tempfile on Windows path traversal | 7.5v3.1 | 57.1% | 2021-07-30 | Fix |
| CVE-2021-28674 | SolarWinds Orion Platform insufficient randomness | 5.4v3.1 | 0.9% | 2021-07-30 | Fix |
| CVE-2021-28095 | Open-xchange Documents inadequate encryption strength | 4.8v3.1 | 0.9% | 2021-07-30 | |
| CVE-2021-28094 | Open-xchange Documents inadequate encryption strength | 6.5v3.1 | 1.1% | 2021-07-30 | |
| CVE-2021-28093 | Open-xchange Documents inadequate encryption strength | 6.5v3.1 | 1.1% | 2021-07-30 | |
| CVE-2021-27495 | Ypsomed mylife Cloud, mylife Mobile Application insufficiently protected credentials | 7.1v3.1 | 0.8% | 2021-07-30 | Fix |
| CVE-2021-27491 | Ypsomed mylife Cloud, mylife Mobile Application insufficiently protected credentials | 7.5v3.1 | 1.1% | 2021-07-30 | Fix |
| CVE-2021-25200 | Learning-Management-System SourceCodester Learning Management System v arbitrary file upload | 9.8v3.1 | 1.9% | 2021-07-30 | |
| CVE-2021-22521 | ZENworks Configuration Management incorrect authorization | 6.7v3.1 | 0.2% | 2021-07-30 | |
| CVE-2021-20789 | Japan Total System GroupSession open redirect | 6.1v3.1 | 0.9% | 2021-07-30 | Fix |
| CVE-2021-20788 | Japan Total System GroupSession server-side request forgery | 4.3v3.1 | 0.9% | 2021-07-30 | Fix |
| CVE-2021-20787 | Japan Total System GroupSession cross-site scripting | 4.8v3.1 | 0.6% | 2021-07-30 | Fix |
| CVE-2021-20786 | Japan Total System GroupSession cross-site request forgery | 4.3v3.1 | 0.5% | 2021-07-30 | Fix |
| CVE-2021-20785 | Japan Total System GroupSession cross-site scripting | 4.8v3.1 | 0.6% | 2021-07-30 | Fix |
| CVE-2021-20783 | SoftBank Optical BB unit E-WMTA2.3 cross-site request forgery | 8.8v3.1 | 0.6% | 2021-07-30 | Fix |
| CVE-2021-20114 | TCExam forced browsing | 7.5NVD v3.1 | 6.0% | 2021-07-30 | Nuclei |
| CVE-2021-20113 | TCExam An information disclosure | 5.3NVD v3.1 | 1.3% | 2021-07-30 | |
| CVE-2021-20112 | TCExam stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-07-30 | |
| CVE-2021-20111 | TCExam stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-07-30 | |
| CVE-2021-3636 | Openshift improper certificate validation | 4.6v3.1 | 0.3% | 2021-07-30 | Fix |
| CVE-2021-37578 | Apache jUDDI remote code execution via RMI | 9.8v3.1 | 4.1% | 2021-07-29 | Fix |
| CVE-2021-36742 | Trend Micro Multiple Products improper input validation | 7.8v3.1 | 1.5% | 2021-07-29 | KEVFix |
| CVE-2021-36741 | Trend Micro Multiple Products improper input validation | 8.8v3.1 | 5.0% | 2021-07-29 | KEVFix |
| CVE-2021-25273 | Sophos UTM cross-site scripting | 4.8v3.1 | 0.8% | 2021-07-29 | Fix |
| CVE-2021-23418 | Glances XML external entity (XXE) injection | 9.8v3.1 | 1.6% | 2021-07-29 | Fix |
| CVE-2021-21546 | Dell NetWorker sensitive information in log files | 7.8CNA v3.1 | 0.2% | 2021-07-29 | Fix |
| CVE-2021-21538 | Integrated Dell Remote Access Controller (iDRAC) improper authentication | 9.6CNA v3.1 | 1.7% | 2021-07-29 | Fix |
| CVE-2021-20505 | The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to | 4.4CNA v3.0 | 0.5% | 2021-07-29 | Fix |
| CVE-2021-37600 | kernel util-linux An integer overflow | 5.5NVD v3.1 | 0.7% | 2021-07-28 | Fix |
| CVE-2021-32001 | K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token | 6.5CNA v3.1 | 0.3% | 2021-07-28 | |
| CVE-2021-32000 | SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up: Dangerous file system operations | 3.2CNA v3.1 | 0.3% | 2021-07-28 | Fix |
| CVE-2021-23417 | deepmergefn prototype pollution | 9.8v3.1 | 1.1% | 2021-07-28 | |
| CVE-2021-23416 | curly-bracket-parser cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2021-07-28 | |
| CVE-2021-23415 | elFinder.AspNet directory traversal | 7.5v3.1 | 1.7% | 2021-07-28 | Fix |
| CVE-2021-23414 | video.js cross-site scripting (XSS) | 6.1v3.1 | 2.5% | 2021-07-28 | Fix |
| CVE-2021-34432 | The Eclipse Foundation Eclipse Mosquitto crash | 7.5v3.1 | 1.2% | 2021-07-27 | Fix |
| CVE-2021-32796 | Misinterpretation of malicious XML input in xmldom | 6.5CNA v3.1 | 1.4% | 2021-07-27 | Fix |
| CVE-2021-32788 | Post creator of a whisper post can be revealed to non-staff users in Discourse | 4.3CNA v3.1 | 0.9% | 2021-07-27 | Fix |
| CVE-2021-32748 | Nextcloud security-advisories WOPI API not protected by credentials/IP check | 4.3CNA v3.1 | 1.0% | 2021-07-27 | Fix |
| CVE-2021-20562 | IBM Sterling B2B Integrator cross-site scripting | 5.4CNA v3.0 | 0.9% | 2021-07-27 | Fix |
| CVE-2021-20399 | IBM QRadar SIEM XML external entity injection | 7.1CNA v3.0 | 1.8% | 2021-07-27 | Fix |
| CVE-2021-37576 | Linux kernel out-of-bounds write | 7.8v3.1 | 0.6% | 2021-07-26 | Fix |
| CVE-2021-37555 | Trixie TX9 Automatic Food Dispenser hard-coded credentials | 9.8v3.1 | 1.4% | 2021-07-26 | |
| CVE-2021-37534 | MISP cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-26 | |
| CVE-2021-37478 | Naviwebs Navigate CMS SQL injection | 9.8v3.1 | 2.2% | 2021-07-26 | |
| CVE-2021-37477 | Naviwebs Navigate CMS SQL injection | 9.8v3.1 | 2.2% | 2021-07-26 | |
| CVE-2021-37476 | Naviwebs Navigate CMS SQL injection | 9.8v3.1 | 2.2% | 2021-07-26 | |
| CVE-2021-37475 | Naviwebs Navigate CMS SQL injection | 9.8v3.1 | 2.5% | 2021-07-26 | |
| CVE-2021-37473 | Naviwebs Navigate CMS SQL injection | 9.8v3.1 | 2.2% | 2021-07-26 | |
| CVE-2021-37394 | RPCMS user registration API vulnerability | 8.8v3.1 | 1.2% | 2021-07-26 | |
| CVE-2021-37393 | Rpcms cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-26 | |
| CVE-2021-37392 | Rpcms cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-26 | |
| CVE-2021-36563 | Checkmk cross-site scripting | 5.4v3.1 | 1.7% | 2021-07-26 | Exploit codeKCVFix |
| CVE-2021-36092 | ((OTRS)) Community Edition XSS attack using special link in email | 6.5CNA v3.1 | 0.7% | 2021-07-26 | Fix |
| CVE-2021-36091 | ((OTRS)) Community Edition unautorized access to the calendar appointments | 3.5CNA v3.1 | 0.7% | 2021-07-26 | Fix |
| CVE-2021-35030 | Zyxel GS1900-8 firmware cross-site scripting | 3.5CNA v3.1 | 0.3% | 2021-07-26 | Fix |
| CVE-2021-33900 | Apache Directory Studio StartTLS and SASL confidentiality protection bypass | 7.5v3.1 | 0.8% | 2021-07-26 | Fix |
| CVE-2021-33629 | openEuler Isula-build crash | 7.5NVD v3.1 | 1.0% | 2021-07-26 | Fix |
| CVE-2021-32795 | Denial of service via Steam chat in ArchiSteamFarm | 6.5CNA v3.1 | 1.7% | 2021-07-26 | Fix |
| CVE-2021-32794 | JustArchiNET ArchiSteamFarm accidental removal of IPCPassword | 6.8CNA v3.1 | 1.0% | 2021-07-26 | Fix |
| CVE-2021-32792 | XSS vulnerability when using OIDCPreservePost On in mod_auth_openidc | 3.1CNA v3.1 | 1.5% | 2021-07-26 | Fix |
| CVE-2021-32791 | Hard-coded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc | 5.9CNA v3.1 | 1.5% | 2021-07-26 | Fix |
| CVE-2021-32790 | woocommerce blind SQL injection possible via Authenticated Web-hook Search API endpoint | 4.9CNA v3.1 | 1.3% | 2021-07-26 | Fix |
| CVE-2021-32789 | Automattic WooCommerce Blocks Store API SQL injection | 7.5CNA v3.1 | 17.2% | 2021-07-26 | NucleiExploit codeFix |
| CVE-2021-32631 | nimble-platform common JSON Web Tokens not properly verified | 6.5CNA v3.1 | 1.1% | 2021-07-26 | |
| CVE-2021-31292 | exiv2 CrwMap::encode0x1810 integer overflow | 7.5v3.1 | 2.6% | 2021-07-26 | Fix |
| CVE-2021-29784 | IBM i2 Analyze information disclosure through error messages | 4.3CNA v3.0 | 1.0% | 2021-07-26 | Fix |
| CVE-2021-29770 | IBM i2 Analyze unauthorized access | 4.1CNA v3.0 | 0.6% | 2021-07-26 | Fix |
| CVE-2021-29769 | IBM i2 Analyze cleartext transmission of sensitive information | 3.1CNA v3.0 | 0.5% | 2021-07-26 | Fix |
| CVE-2021-29767 | IBM i2 Analyst's Notebook Premium information disclosure through error messages | 5.3CNA v3.0 | 1.3% | 2021-07-26 | Fix |
| CVE-2021-29766 | IBM i2 Analyze information disclosure through error messages | 5.3CNA v3.0 | 1.3% | 2021-07-26 | Fix |
| CVE-2021-26824 | Dm Fingertool authentication bypass by replay | 7.1v3.1 | 0.4% | 2021-07-26 | |
| CVE-2021-25804 | VideoLAN VLC media player "Open" in avi.c null pointer dereference | 7.5v3.1 | 1.8% | 2021-07-26 | Exploit codeFix |
| CVE-2021-25803 | VideoLAN VLC media player vlc_input_attachment_New component buffer overflow | 7.1v3.1 | 0.7% | 2021-07-26 | Fix |
| CVE-2021-25802 | VideoLAN VLC media player AVI_ExtractSubtitle component buffer overflow | 7.1v3.1 | 0.7% | 2021-07-26 | Fix |
| CVE-2021-25801 | VideoLAN VLC media player __Parse_indx component buffer overflow | 7.1v3.1 | 1.5% | 2021-07-26 | Fix |
| CVE-2021-22144 | Denial of service in Elasticsearch | 6.5v3.1 | 2.2% | 2021-07-26 | Fix |
| CVE-2021-21443 | OTRS bulk action screen information disclosure | 3.5CNA v3.1 | 0.8% | 2021-07-26 | Fix |
| CVE-2021-21442 | XSS vulnerability in Time Accounting | 4.5CNA v3.1 | 0.6% | 2021-07-26 | Fix |
| CVE-2021-21440 | ((OTRS)) Community Edition support Bundle includes S/Mime and PGP keys | 5.2CNA v3.1 | 0.8% | 2021-07-26 | Fix |
| CVE-2021-20560 | IBM Sterling Connect:Direct Browser User Interface clickjacking | 5.4CNA v3.0 | 0.6% | 2021-07-26 | Fix |
| CVE-2021-20431 | IBM i2 Analyst's Notebook Premium insufficient session expiration | 4.3CNA v3.0 | 0.9% | 2021-07-26 | Fix |
| CVE-2021-20430 | IBM i2 Analyze information disclosure through error messages | 5.3CNA v3.0 | 1.3% | 2021-07-26 | Fix |
| CVE-2021-20337 | IBM QRadar SIEM weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-07-26 | Fix |
| CVE-2021-3664 | Open redirect in unshiftio/url-parse | 5.3v3.1 | 1.8% | 2021-07-26 | Fix |
| CVE-2021-37470 | Nchsoftware Webdictate cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37469 | Nch Webdictate path traversal | 6.5v3.1 | 1.2% | 2021-07-25 | |
| CVE-2021-37468 | Nch Reflect Customer Relationship Management cleartext storage of sensitive information | 3.3v3.1 | 0.2% | 2021-07-25 | |
| CVE-2021-37467 | Nchsoftware Quorum cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37466 | Nchsoftware Quorum cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37465 | Nchsoftware Quorum cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37464 | Nchsoftware Quorum cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37463 | Nchsoftware Quorum cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37462 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37461 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37460 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37459 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37458 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37457 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37456 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37455 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37454 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37453 | Nchsoftware Axon Pbx cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37452 | Nch Quorum cleartext storage of sensitive information | 5.5v3.1 | 0.3% | 2021-07-25 | |
| CVE-2021-37451 | Nchsoftware Ivm Attendant cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37450 | Nchsoftware Ivm Attendant cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-25 | |
| CVE-2021-37449 | Nchsoftware Ivm Attendant cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-25 | |
| CVE-2021-37448 | Nchsoftware Ivm Attendant cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-25 | |
| CVE-2021-37447 | Nchsoftware Quorum path traversal | 8.1v3.1 | 1.6% | 2021-07-25 | |
| CVE-2021-37446 | Nchsoftware Quorum path traversal | 4.3v3.1 | 1.2% | 2021-07-25 | |
| CVE-2021-37445 | Nchsoftware Quorum path traversal | 6.5v3.1 | 1.4% | 2021-07-25 | |
| CVE-2021-37444 | Nchsoftware Ivm Attendant path traversal | 8.8v3.1 | 1.9% | 2021-07-25 | |
| CVE-2021-37443 | Nchsoftware Ivm Attendant path traversal | 8.1v3.1 | 1.2% | 2021-07-25 | |
| CVE-2021-37442 | Nchsoftware Ivm Attendant path traversal | 6.5v3.1 | 1.2% | 2021-07-25 | |
| CVE-2021-37441 | Nch Axon Pbx path traversal | 8.8v3.1 | 1.5% | 2021-07-25 | |
| CVE-2021-37440 | Nch Axon Pbx path traversal | 6.5v3.1 | 1.2% | 2021-07-25 | |
| CVE-2021-37439 | Nch Flexiserver path traversal | 6.5v3.1 | 1.2% | 2021-07-25 | |
| CVE-2021-23413 | jszip denial of service (DoS) | 5.3v3.1 | 3.3% | 2021-07-25 | Fix |
| CVE-2021-3663 | Improper restriction of excessive authentication attempts in firefly-iii/firefly-iii | 7.5v3.1 | 0.7% | 2021-07-25 | Fix |
| CVE-2021-37436 | Amazon Echo Dot information disclosure | 4.2v3.1 | 0.3% | 2021-07-24 | |
| CVE-2021-32783 | Authorization bypass in Contour | 8.5CNA v3.1 | 1.2% | 2021-07-23 | Fix |
| CVE-2021-32686 | Denial of service in PJSIP | 5.9CNA v3.1 | 2.1% | 2021-07-23 | Fix |
| CVE-2021-26799 | Omeka admin/files/edit cross-site scripting | 6.1v3.1 | 1.0% | 2021-07-23 | |
| CVE-2021-25809 | UCMS information disclosure through error messages | 5.3v3.1 | 0.9% | 2021-07-23 | |
| CVE-2021-25808 | Bludit backup/plugin.php code injection | 7.8v3.1 | 1.2% | 2021-07-23 | |
| CVE-2021-25791 | Online Doctor Appointment System PHP Full Source Code Multiple stored cross-site scripting | 5.4v3.1 | 2.5% | 2021-07-23 | Exploit code |
| CVE-2021-25790 | House Rental And Property Listing PHP Multiple stored cross-site scripting | 5.4NVD v3.1 | 0.9% | 2021-07-23 | |
| CVE-2021-25208 | Travel Management System SourceCodester arbitrary file upload | 9.8v3.1 | 1.9% | 2021-07-23 | |
| CVE-2021-25207 | E-Commerce Website SourceCodester arbitrary file upload | 9.8v3.1 | 1.9% | 2021-07-23 | |
| CVE-2021-25206 | Responsive Ordering System SourceCodester arbitrary file upload | 9.8v3.1 | 1.9% | 2021-07-23 | |
| CVE-2021-25204 | E-Commerce Website SourceCodester cross-site scripting | 5.4v3.1 | 0.7% | 2021-07-23 | |
| CVE-2021-25203 | Victor Cms arbitrary file upload | 9.8v3.1 | 1.9% | 2021-07-23 | |
| CVE-2021-25201 | Learning-Management-System Learning Management System v SQL injection | 7.5v3.1 | 1.5% | 2021-07-23 | |
| CVE-2021-24036 | Facebook folly heap-based buffer overflow | 9.8v3.1 | 3.3% | 2021-07-23 | Fix |
| CVE-2021-23412 | gitlogplus command injection | 9.8v3.1 | 4.0% | 2021-07-23 | |
| CVE-2021-20333 | MongoDB Server server log entry spoofing via newline injection | 5.3CNA v3.1 | 1.3% | 2021-07-23 | Fix |
| CVE-2021-3169 | jumpserver injection | 9.8v3.1 | 2.8% | 2021-07-23 | |
| CVE-2021-3159 | Landray Ekp /sys/attachment/uploaderServlet component stored cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-23 | |
| CVE-2021-37403 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-22 | |
| CVE-2021-37402 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-22 | |
| CVE-2021-36934 | Microsoft Windows SAM local privilege escalation | 7.8CNA v3.1 | 67.3% | 2021-07-22 | KEVExploit codeFix |
| CVE-2021-36222 | MIT Kerberos 5 null pointer dereference | 7.5NVD v3.1 | 10.5% | 2021-07-22 | Fix |
| CVE-2021-35942 | GNU glibc integer overflow | 9.1NVD v3.1 | 2.8% | 2021-07-22 | Fix |
| CVE-2021-35522 | IDEMIA Ma Vp Md Thrift command handlers buffer overflow | 9.8v3.1 | 3.7% | 2021-07-22 | Fix |
| CVE-2021-35521 | IDEMIA Morphowave Compact Md Thrift command handlers path traversal | 5.9v3.1 | 1.4% | 2021-07-22 | Fix |
| CVE-2021-35520 | IDEMIA Morphowave Compact Mdpi-m Thrift command handlers buffer overflow | 6.2v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-35464 | ForgeRock Access Management (AM) Core Server remote code execution | 9.8v3.1 | 100.0% | 2021-07-22 | KEVNucleiMetasploitEmerging ThreatsExploit code |
| CVE-2021-35063 | Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." | 7.5v3.1 | 2.0% | 2021-07-22 | Fix |
| CVE-2021-34700 | Cisco SD-WAN vManage software information disclosure | 5.5CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-34431 | The Eclipse Foundation Eclipse Mosquitto memory leak | 6.5v3.1 | 1.1% | 2021-07-22 | Fix |
| CVE-2021-34268 | STM32CUBE Middleware denial of service | 4.6v3.1 | 0.4% | 2021-07-22 | |
| CVE-2021-34267 | STM32CUBE Middleware denial of service | 4.6v3.1 | 0.4% | 2021-07-22 | |
| CVE-2021-34262 | STM32CUBE Middleware buffer overflow | 6.8v3.1 | 0.5% | 2021-07-22 | |
| CVE-2021-34261 | STM32CUBE Middleware denial of service | 4.6v3.1 | 0.4% | 2021-07-22 | |
| CVE-2021-34260 | STM32CUBE Middleware buffer overflow | 6.8v3.1 | 0.5% | 2021-07-22 | |
| CVE-2021-34259 | STM32CUBE Middleware buffer overflow | 6.8v3.1 | 0.5% | 2021-07-22 | |
| CVE-2021-33478 | Cisco IP Phone 8800 Firmware arbitrary code execution | 6.8v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-33032 | Eq-3 Homematic CCU2 Firmware WebUI component of the eQ-3 remote code execution | 10.0v3.1 | 52.2% | 2021-07-22 | Fix |
| CVE-2021-32786 | zmartzone mod_auth_openidc open redirect in oidc_validate_redirect_url | 4.7CNA v3.1 | 2.4% | 2021-07-22 | Fix |
| CVE-2021-32785 | zmartzone mod_auth_openidc format string bug in the Redis cache implementation | 5.3CNA v3.1 | 2.7% | 2021-07-22 | Fix |
| CVE-2021-31581 | Akkadian Provisioning Manager Engine (PME) Shell Escape via vi editor interface | 4.4NVD v3.1 | 1.2% | 2021-07-22 | NucleiKCV |
| CVE-2021-31580 | Akkadian Provisioning Manager Engine (PME) Shell Escape via exec command | 9.8NVD v3.1 | 3.0% | 2021-07-22 | KCV |
| CVE-2021-31579 | Akkadian Provisioning Manager Engine (PME) hard-coded credentials | 9.8NVD v3.1 | 1.3% | 2021-07-22 | KCV |
| CVE-2021-30486 | Sysaid SQL injection | 8.8v3.1 | 1.0% | 2021-07-22 | |
| CVE-2021-30110 | Greyware Domain Time Ii arbitrary code execution | 7.5v3.1 | 2.0% | 2021-07-22 | Fix |
| CVE-2021-30049 | Sysaid cross-site scripting | 6.1v3.1 | 2.5% | 2021-07-22 | Nuclei |
| CVE-2021-29657 | Linux kernel time-of-check time-of-use race condition | 7.4v3.1 | 0.4% | 2021-07-22 | Fix |
| CVE-2021-29149 | A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xx | 6.2v3.1 | 0.2% | 2021-07-22 | Fix |
| CVE-2021-29148 | Aruba CX 6200F Switch Series cross-site scripting | 6.1v3.1 | 0.6% | 2021-07-22 | Fix |
| CVE-2021-29143 | Aruba CX 6200F Switch Series OS command injection | 7.2v3.1 | 2.6% | 2021-07-22 | Fix |
| CVE-2021-28131 | Impala logs contain secrets | 7.5v3.1 | 3.3% | 2021-07-22 | Fix |
| CVE-2021-27332 | Casap Automated Enrollment System SourceCodester cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-22 | |
| CVE-2021-26765 | PHPGurukul Student Record System SQL injection | 9.8v3.1 | 2.9% | 2021-07-22 | Fix |
| CVE-2021-26764 | PHPGurukul Student Record System SQL injection | 8.8v3.1 | 2.5% | 2021-07-22 | Fix |
| CVE-2021-26762 | PHPGurukul Student Record System SQL injection | 8.8v3.1 | 2.3% | 2021-07-22 | Fix |
| CVE-2021-26699 | Open-xchange Appsuite server-side request forgery | 5.4v3.1 | 2.0% | 2021-07-22 | |
| CVE-2021-26698 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 1.4% | 2021-07-22 | |
| CVE-2021-26232 | Simple College Website SourceCodester SQL injection | 9.8v3.1 | 2.7% | 2021-07-22 | |
| CVE-2021-26231 | Fantastic Blog Cms SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-26230 | Casap Automated Enrollment System SourceCodester cross-site scripting | 6.1v3.1 | 0.9% | 2021-07-22 | |
| CVE-2021-26229 | Casap Automated Enrollment System SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-26228 | Casap Automated Enrollment System SourceCodester SQL injection | 9.8v3.1 | 1.7% | 2021-07-22 | |
| CVE-2021-26227 | Casap Automated Enrollment System SourceCodester cross-site scripting | 6.1v3.1 | 0.9% | 2021-07-22 | |
| CVE-2021-26226 | Casap Automated Enrollment System SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-26224 | Fantastic Blog SourceCodester Fantastic-Blog-CMS V cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-22 | |
| CVE-2021-26223 | Casap Automated Enrollment System SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-25213 | Travel Management System SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-25212 | Alumni Management System SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-25211 | Online Ordering System SourceCodester Ordering System v arbitrary file upload | 9.8v3.1 | 1.9% | 2021-07-22 | |
| CVE-2021-25210 | Alumni Management System SourceCodester arbitrary file upload | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-25209 | Theme Park Ticketing System SourceCodester SQL injection | 9.8v3.1 | 1.3% | 2021-07-22 | |
| CVE-2021-25205 | E-Commerce Website SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-25202 | Sales and Inventory System SourceCodester SQL injection | 9.8v3.1 | 1.5% | 2021-07-22 | |
| CVE-2021-25197 | Content Management System SourceCodester cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-22 | |
| CVE-2021-22523 | Verastream Host Integrator Micro Focus XML external entity injection | 7.6v3.1 | 0.8% | 2021-07-22 | |
| CVE-2021-22522 | Verastream Host Integrator Micro Focus reflected cross-site scripting | 7.1v3.1 | 0.6% | 2021-07-22 | |
| CVE-2021-22001 | Cloud Foundry UAA server information disclosure | 7.5v3.1 | 1.0% | 2021-07-22 | Fix |
| CVE-2021-20596 | MELSEC-F Series FX3U-ENET null pointer dereference | 7.5v3.1 | 2.2% | 2021-07-22 | Fix |
| CVE-2021-3619 | Rapid7 Velociraptor Notebooks Authenticated persistent XSS | 3.5CNA v3.1 | 0.6% | 2021-07-22 | |
| CVE-2021-3540 | Ivanti MobileIron Core clish Restricted Shell Escape via argument injection | 7.2NVD v3.1 | 3.3% | 2021-07-22 | |
| CVE-2021-3198 | Ivanti MobileIron Core clish Restricted Shell Escape via OS command injection | 7.2NVD v3.1 | 3.3% | 2021-07-22 | |
| CVE-2021-1618 | Cisco Intersight Virtual Appliance web-based management interface path traversal | 6.5CNA v3.1 | 2.7% | 2021-07-22 | Fix |
| CVE-2021-1617 | Cisco Intersight Virtual Appliance web-based management interface path traversal | 6.5CNA v3.1 | 1.5% | 2021-07-22 | Fix |
| CVE-2021-1614 | Cisco SD-WAN software information disclosure | 5.3CNA v3.1 | 1.2% | 2021-07-22 | Fix |
| CVE-2021-1601 | Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding vulnerabilities | 8.3CNA v3.1 | 0.4% | 2021-07-22 | Fix |
| CVE-2021-1600 | Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding vulnerabilities | 8.3CNA v3.1 | 0.4% | 2021-07-22 | Fix |
| CVE-2021-1599 | Cisco Unified Customer Voice Portal cross-site scripting | 5.4CNA v3.1 | 0.8% | 2021-07-22 | Fix |
| CVE-2021-1518 | Cisco Firepower Device Manager On-box Software remote code execution | 6.3CNA v3.1 | 1.9% | 2021-07-22 | Fix |
| CVE-2021-1096 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-1095 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.4% | 2021-07-22 | Fix |
| CVE-2021-1094 | NVIDIA GPU Display Driver out-of-bounds read | 6.1CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-1093 | NVIDIA GPU Display Driver improper resource release | 6.2CNA v3.1 | 0.4% | 2021-07-22 | Fix |
| CVE-2021-1092 | NVIDIA GPU Display Driver link following | 7.1CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-1091 | NVIDIA GPU Display Driver link following | 7.1CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-1090 | NVIDIA GPU Display Driver buffer overflow | 7.1CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-1089 | NVIDIA GPU Display Driver uncontrolled search path | 7.8CNA v3.1 | 0.3% | 2021-07-22 | Fix |
| CVE-2021-37220 | Artifex MuPDF out-of-bounds write | 5.5v3.1 | 1.3% | 2021-07-21 | Fix |
| CVE-2021-37159 | Linux kernel double free | 6.4NVD v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-37155 | wolfSSL OCSP response validation vulnerability | 9.8v3.1 | 1.5% | 2021-07-21 | Fix |
| CVE-2021-35482 | Barco Mirrorop Windows Sender remote code execution | 7.8v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-34816 | etherpad plugin management argument injection | 7.2v3.1 | 2.2% | 2021-07-21 | Fix |
| CVE-2021-34619 | Cross-site request forgery in WooCommerce Stock Manager WordPress plugin | 8.8v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-32776 | Combodo iTop no CSRF form token cleanup on Windows servers | 6.8CNA v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-32775 | Combodo iTop any user can see any fields (including mailbox password) with GroupBy Dashlet | 7.7CNA v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-32761 | redis integer overflow issues with *BIT commands on 32-bit systems | 7.5CNA v3.1 | 30.1% | 2021-07-21 | Fix |
| CVE-2021-32756 | ManageIQ MiqExpression module code injection | 8.8CNA v3.1 | 1.5% | 2021-07-21 | |
| CVE-2021-32745 | CollaboraOnline online reflected cross-site-scripting | 7.3CNA v3.1 | 0.6% | 2021-07-21 | Fix |
| CVE-2021-32744 | CollaboraOnline online unauthenticated attacker could gain access to currently open files | 9.8CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-25701 | PCoIP Software Client denial of service | 5.5v3.1 | 0.2% | 2021-07-21 | Fix |
| CVE-2021-25699 | PCoIP Standard Agent untrusted search path | 7.8v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-25698 | PCoIP Standard Agent untrusted search path | 7.8v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-25695 | PCoIP Agent exposed IOCTL without access control | 7.8v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-23411 | anchorme cross-site scripting (XSS) | 6.1v3.1 | 1.2% | 2021-07-21 | |
| CVE-2021-23409 | github.com/pires/go-proxyproto denial of service (DoS) | 7.5v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-23408 | com.graphhopper:graphhopper-web-bundle prototype pollution | 4.3v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-22784 | C-Bus Toolkit missing authentication | 5.7v3.1 | 12.1% | 2021-07-21 | Fix |
| CVE-2021-22777 | SoSafe Configurable deserialization of untrusted data | 7.8v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-22774 | EVlink City weak password hash | 7.5v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-22773 | EVlink City unverified password change | 6.5v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-22772 | Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier) missing authentication | 9.8v3.1 | 1.5% | 2021-07-21 | Fix |
| CVE-2021-22771 | Easergy T300 with firmware CSV injection | 7.3v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-22770 | Easergy T300 with firmware information disclosure | 6.5v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-22730 | EVlink City hard-coded credentials | 9.8v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-22729 | EVlink City hard-coded password | 9.8v3.1 | 1.8% | 2021-07-21 | Fix |
| CVE-2021-22728 | EVlink City information disclosure | 6.5v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-22727 | EVlink City insufficient entropy | 9.8v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-22726 | EVlink City server-side request forgery | 8.1v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-22723 | EVlink City cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-22722 | EVlink City cross-site scripting | 5.4v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-22721 | EVlink City information disclosure | 5.3v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-22708 | EVlink City improper signature verification | 7.2v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-22707 | EVlink City hard-coded credentials | 9.8v3.1 | 64.6% | 2021-07-21 | NucleiFix |
| CVE-2021-22706 | EVlink City cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-22146 | Elasticsearch anonymous user authentication vulnerability | 7.5v3.1 | 35.8% | 2021-07-21 | Exploit codeFix |
| CVE-2021-22145 | Generation of error message containing sensitive information in Elasticsearch | 6.5v3.1 | 76.2% | 2021-07-21 | NucleiMetasploitExploit codeFix |
| CVE-2021-21407 | Combodo iTop portal: The CSRF token isn't validated | 8.0CNA v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-21406 | Combodo iTop command injection vulnerability in the Setup Wizard | 5.8CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-20106 | Nessus Agent privilege escalation | 6.5NVD v3.1 | 1.3% | 2021-07-21 | |
| CVE-2021-2463 | Oracle Commerce Platform Dynamo Application Framework component takeover | 9.8CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2462 | Oracle Commerce Service Center unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-2460 | Oracle Application Express Data Reporter vulnerability | 5.4CNA v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-2458 | Oracle Identity Manager Identity console component unauthorized data access | 7.6CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2457 | Oracle Identity Manager Request Management & Workflow component information disclosure | 5.3CNA v3.1 | 1.2% | 2021-07-21 | Fix |
| CVE-2021-2456 | Oracle Business Intelligence Enterprise Edition Analytics Web General component takeover | 9.8CNA v3.1 | 81.4% | 2021-07-21 | Exploit codeFix |
| CVE-2021-2455 | Oracle PeopleSoft Enterprise HCM Shared Components Person Search component unauthorized data access | 6.5CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2454 | Oracle VM VirtualBox Core component takeover | 7.0CNA v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-2453 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2452 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2451 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2450 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2449 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2448 | Oracle Financial Services Crime and Compliance Investigation Hub unauthorized data modification | 3.7CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-2447 | Oracle Secure Global Desktop Server component takeover | 9.9CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2446 | Oracle Secure Global Desktop client component takeover | 9.6CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2445 | Oracle Hyperion Infrastructure Technology Lifecycle Management component unauthorized data access | 5.7CNA v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-2444 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2021-07-21 | Fix |
| CVE-2021-2443 | Oracle VM VirtualBox Core component unauthorized data modification | 7.3CNA v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-2442 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.4% | 2021-07-21 | Fix |
| CVE-2021-2441 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2440 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2439 | Oracle Hyperion BI+ UI and Visualization component information disclosure | 4.3CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2438 | Oracle Database denial of service | 4.3CNA v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-2437 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2436 | Oracle E-Business Suite Common Applications unauthorized data access | 8.2CNA v3.1 | 1.2% | 2021-07-21 | Fix |
| CVE-2021-2435 | Oracle Essbase Analytic Provider Services JAPI component unauthorized data access | 8.1CNA v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-2434 | Oracle Web Applications Desktop Integrator application service component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2433 | Oracle Essbase Analytic Provider Services Web services component denial of service | 7.5CNA v3.1 | 1.8% | 2021-07-21 | Fix |
| CVE-2021-2432 | Oracle Java SE JNDI component denial of service | 3.7CNA v3.1 | 3.7% | 2021-07-21 | Fix |
| CVE-2021-2431 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2430 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-2429 | Oracle MySQL Server InnoDB component denial of service | 5.9CNA v3.1 | 41.5% | 2021-07-21 | Fix |
| CVE-2021-2428 | Oracle Coherence Core component takeover | 8.1CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2427 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.0% | 2021-07-21 | Fix |
| CVE-2021-2426 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-07-21 | Fix |
| CVE-2021-2425 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-07-21 | Fix |
| CVE-2021-2424 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 2.1% | 2021-07-21 | Fix |
| CVE-2021-2423 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-2422 | Oracle MySQL Server PS component denial of service | 4.9CNA v3.1 | 2.4% | 2021-07-21 | Fix |
| CVE-2021-2421 | Oracle PeopleSoft Enterprise CS Campus Community unauthorized data access | 6.5CNA v3.1 | 1.5% | 2021-07-21 | Fix |
| CVE-2021-2420 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2419 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2418 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2417 | Oracle MySQL Server GIS component unauthorized data modification | 6.0CNA v3.1 | 2.0% | 2021-07-21 | Fix |
| CVE-2021-2415 | Oracle E-Business Suite Time and Labor Timecard component unauthorized data access | 8.1CNA v3.1 | 1.5% | 2021-07-21 | Fix |
| CVE-2021-2412 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-07-21 | Fix |
| CVE-2021-2411 | Oracle MySQL Cluster JS module component denial of service | 3.7CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2410 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-07-21 | Fix |
| CVE-2021-2409 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2408 | Oracle PeopleSoft Enterprise PT PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2407 | Oracle PeopleSoft Enterprise PeopleTools portal component information disclosure | 5.3CNA v3.1 | 1.2% | 2021-07-21 | Fix |
| CVE-2021-2406 | Oracle E-Business Suite Collaborative Planning User interface component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2405 | Oracle E-Business Suite Engineering Change Management component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2404 | Oracle PeopleSoft Enterprise HCM Candidate Gateway unauthorized data modification | 6.5CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2403 | Oracle WebLogic Server Core component information disclosure | 5.3CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2402 | Oracle MySQL Server Locking component denial of service | 4.9CNA v3.1 | 2.1% | 2021-07-21 | Fix |
| CVE-2021-2401 | Oracle BI Publisher E-Business Suite - XDO component information disclosure | 5.3CNA v3.1 | 84.8% | 2021-07-21 | Fix |
| CVE-2021-2400 | Oracle BI Publisher E-Business Suite - XDO component unauthorized data access | 7.5CNA v3.1 | 83.3% | 2021-07-21 | Fix |
| CVE-2021-2399 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2398 | Oracle E-Business Suite Advanced Outbound Telephony unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2397 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2396 | Oracle BI Publisher E-Business Suite - XDO component takeover | 8.8CNA v3.1 | 35.7% | 2021-07-21 | Fix |
| CVE-2021-2395 | Oracle Hospitality Reporting and Analytics iCare, Configuration component unauthorized data access | 8.1CNA v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-2394 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 76.6% | 2021-07-21 | Exploit codeFix |
| CVE-2021-2393 | Oracle E-Business Suite E-Records E-signatures component unauthorized data access | 8.1CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2392 | Oracle BI Publisher BI Publisher Security component takeover | 8.8CNA v3.1 | 3.1% | 2021-07-21 | Fix |
| CVE-2021-2391 | Oracle BI Publisher Scheduler component takeover | 8.8CNA v3.1 | 34.7% | 2021-07-21 | Fix |
| CVE-2021-2390 | Oracle MySQL Server InnoDB component denial of service | 5.9CNA v3.1 | 4.3% | 2021-07-21 | Fix |
| CVE-2021-2389 | Oracle MySQL Server InnoDB component denial of service | 5.9CNA v3.1 | 8.1% | 2021-07-21 | Fix |
| CVE-2021-2388 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component takeover | 7.5CNA v3.1 | 4.0% | 2021-07-21 | Fix |
| CVE-2021-2387 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2386 | Oracle Primavera P6 Enterprise Project Portfolio Management information disclosure | 4.3CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2385 | Oracle MySQL Server Replication component unauthorized data modification | 5.0CNA v3.1 | 1.9% | 2021-07-21 | Fix |
| CVE-2021-2384 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.2% | 2021-07-21 | Fix |
| CVE-2021-2383 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 3.0% | 2021-07-21 | Fix |
| CVE-2021-2382 | Oracle WebLogic Server Security component takeover | 9.8CNA v3.1 | 1.8% | 2021-07-21 | Fix |
| CVE-2021-2381 | Oracle Solaris Kernel component unauthorized data modification | 3.9CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-2380 | Oracle E-Business Suite Applications Framework unauthorized data access | 7.6CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2378 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 1.8% | 2021-07-21 | Fix |
| CVE-2021-2377 | Oracle PeopleSoft Enterprise PeopleTools SQR component information disclosure | 4.3CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2376 | Oracle WebLogic Server Web services component denial of service | 7.5CNA v3.1 | 1.8% | 2021-07-21 | Fix |
| CVE-2021-2375 | Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data modification | 6.1CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2374 | Oracle MySQL Server InnoDB component unauthorized data access | 4.1CNA v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-2373 | Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-2372 | Oracle MySQL Server InnoDB component denial of service | 4.4CNA v3.1 | 3.0% | 2021-07-21 | Fix |
| CVE-2021-2371 | Oracle Coherence Core component denial of service | 7.5CNA v3.1 | 1.2% | 2021-07-21 | Fix |
| CVE-2021-2370 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 2.5% | 2021-07-21 | Fix |
| CVE-2021-2369 | Oracle Java SE, Oracle GraalVM Enterprise Edition library component unauthorized data modification | 4.3CNA v3.1 | 3.4% | 2021-07-21 | Fix |
| CVE-2021-2368 | Oracle Siebel CRM Siebel Core - Server Infrastructure component unauthorized data access | 5.9CNA v3.1 | 1.5% | 2021-07-21 | Fix |
| CVE-2021-2367 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.6% | 2021-07-21 | Fix |
| CVE-2021-2366 | Oracle Primavera P6 Enterprise Project Portfolio Management unauthorized data modification | 6.4CNA v3.1 | 0.6% | 2021-07-21 | Fix |
| CVE-2021-2365 | Oracle E-Business Suite Human Resources People Management component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2364 | Oracle E-Business Suite iSupplier Portal Accounts component unauthorized data access | 8.1CNA v3.1 | 1.2% | 2021-07-21 | Fix |
| CVE-2021-2363 | Oracle Public Sector Financials (International) Authorization component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2362 | Oracle E-Business Suite Field Service Wireless component unauthorized data access | 8.1CNA v3.1 | 1.2% | 2021-07-21 | Fix |
| CVE-2021-2361 | Oracle E-Business Suite Advanced Inbound Telephony unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2360 | Oracle E-Business Suite Approvals Management AME page rendering component unauthorized data access | 8.1CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2359 | Oracle E-Business Suite Marketing Administration component unauthorized data access | 8.2CNA v3.1 | 1.1% | 2021-07-21 | Fix |
| CVE-2021-2358 | Oracle Access Manager Rest interfaces for Access Mgr component unauthorized data access | 4.9CNA v3.1 | 1.6% | 2021-07-21 | Fix |
| CVE-2021-2357 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.6% | 2021-07-21 | Fix |
| CVE-2021-2356 | Oracle MySQL Server Replication component unauthorized data modification | 5.9CNA v3.1 | 2.2% | 2021-07-21 | Fix |
| CVE-2021-2355 | Oracle E-Business Suite Marketing Administration component unauthorized data access | 9.1CNA v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-2354 | Oracle MySQL Server Federated component denial of service | 4.9CNA v3.1 | 2.8% | 2021-07-21 | Fix |
| CVE-2021-2353 | Oracle Siebel Core - Server Framework Loging component unauthorized data access | 4.4CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-2352 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 3.2% | 2021-07-21 | Fix |
| CVE-2021-2351 | Oracle WebLogic Server weak cryptographic algorithm | 8.3CNA v3.1 | 2.4% | 2021-07-21 | Fix |
| CVE-2021-2350 | Oracle Hyperion Essbase Administration Services EAS console component unauthorized data access | 7.5CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2349 | Oracle Hyperion Essbase Administration Services EAS console component unauthorized data access | 8.6CNA v3.1 | 1.7% | 2021-07-21 | Fix |
| CVE-2021-2348 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager information disclosure | 4.3CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2347 | Oracle Hyperion Infrastructure Technology Lifecycle Management component unauthorized data access | 5.2CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2346 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-2345 | Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification | 5.4CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2344 | Oracle Coherence Core component denial of service | 7.5CNA v3.1 | 1.4% | 2021-07-21 | Fix |
| CVE-2021-2343 | Oracle E-Business Suite Workflow Notification Mailer component information disclosure | 4.3CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2342 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.6% | 2021-07-21 | Fix |
| CVE-2021-2341 | Oracle Java SE, Oracle GraalVM Enterprise Edition Networking component information disclosure | 3.1CNA v3.1 | 4.2% | 2021-07-21 | Fix |
| CVE-2021-2340 | Oracle MySQL Server Memcached component denial of service | 2.7CNA v3.1 | 2.6% | 2021-07-21 | Fix |
| CVE-2021-2339 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 2.7% | 2021-07-21 | Fix |
| CVE-2021-2338 | Oracle Siebel Apps - Marketing Email Marketing Stand-Alone component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2337 | Oracle Database takeover | 7.2CNA v3.1 | 1.3% | 2021-07-21 | Fix |
| CVE-2021-2336 | Oracle Database Data Redaction vulnerability | 3.5CNA v3.1 | 0.6% | 2021-07-21 | Fix |
| CVE-2021-2335 | Oracle Database Data Redaction vulnerability | 3.5CNA v3.1 | 0.6% | 2021-07-21 | Fix |
| CVE-2021-2334 | Oracle Database Data Redaction vulnerability | 3.5CNA v3.1 | 0.7% | 2021-07-21 | Fix |
| CVE-2021-2333 | Oracle Database unauthorized access | 4.9CNA v3.1 | 0.9% | 2021-07-21 | Fix |
| CVE-2021-2330 | Oracle Database denial of service | 4.3CNA v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-2329 | Oracle Database takeover | 7.2CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2328 | Oracle Text takeover | 7.2CNA v3.1 | 1.0% | 2021-07-21 | Fix |
| CVE-2021-2326 | Oracle Database Database Vault information disclosure | 2.7CNA v3.1 | 0.8% | 2021-07-21 | Fix |
| CVE-2021-2324 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data modification | 4.6CNA v3.1 | 0.5% | 2021-07-21 | Fix |
| CVE-2021-2323 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access | 5.9CNA v3.1 | 1.3% | 2021-07-21 | Fix |
| CVE-2021-1103 | NVIDIA Virtual GPU Software null pointer dereference | 4.4CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-1102 | NVIDIA Virtual GPU Software improper exception handling | 5.5CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-1101 | NVIDIA Virtual GPU Software null pointer dereference | 5.5CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-1100 | NVIDIA Virtual GPU Software denial of service | 6.2CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-1099 | NVIDIA Virtual GPU Software out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2021-07-21 | Fix |
| CVE-2021-1098 | NVIDIA Virtual GPU Software improper resource release | 7.8CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-1097 | NVIDIA Virtual GPU Software information disclosure | 7.8CNA v3.1 | 0.3% | 2021-07-21 | Fix |
| CVE-2021-36980 | openvswitch use-after-free | 5.5v3.1 | 1.2% | 2021-07-20 | Fix |
| CVE-2021-36979 | Unicorn Engine out-of-bounds write | 5.5v3.1 | 0.9% | 2021-07-20 | Fix |
| CVE-2021-36978 | Qpdf out-of-bounds write | 5.5v3.1 | 1.3% | 2021-07-20 | Fix |
| CVE-2021-36977 | matio out-of-bounds write | 6.5v3.1 | 1.5% | 2021-07-20 | Fix |
| CVE-2021-36976 | libarchive use-after-free | 6.5v3.1 | 2.8% | 2021-07-20 | Fix |
| CVE-2021-36747 | Blackboard Learn cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-20 | Exploit code |
| CVE-2021-36746 | Blackboard Learn cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-20 | |
| CVE-2021-36230 | HashiCorp Terraform incorrect authorization | 8.8v3.1 | 1.0% | 2021-07-20 | Fix |
| CVE-2021-35054 | Minecraft path traversal | 7.5v3.1 | 1.4% | 2021-07-20 | Fix |
| CVE-2021-33910 | systemd resource exhaustion | 5.5NVD v3.1 | 8.8% | 2021-07-20 | Fix |
| CVE-2021-33909 | Linux kernel privilege escalation vulnerability in the file system components of some HUAWEI devices | 7.8NVD v3.1 | 9.7% | 2021-07-20 | Exploit codeFix |
| CVE-2021-32774 | Cross-site request forgery (CSRF) in DataDump | 6.1CNA v3.1 | 0.5% | 2021-07-20 | Fix |
| CVE-2021-32773 | racket confused deputy attack in sandbox module resolution | 6.1CNA v3.1 | 0.9% | 2021-07-20 | Fix |
| CVE-2021-32767 | TYPO3 CMS information disclosure in User Authentication | 5.3CNA v3.1 | 0.8% | 2021-07-20 | Fix |
| CVE-2021-32763 | Regular expression denial of service in OpenProject forum messages | 4.3CNA v3.1 | 0.9% | 2021-07-20 | Fix |
| CVE-2021-32751 | gradle arbitrary code execution via specially crafted environment variables | 7.5CNA v3.1 | 2.7% | 2021-07-20 | Fix |
| CVE-2021-32669 | TYPO3 CMS cross-site scripting in Backend Grid view | 6.4CNA v3.1 | 0.6% | 2021-07-20 | Fix |
| CVE-2021-32668 | TYPO3 CMS cross-site scripting in Query Generator and Query view | 6.4CNA v3.1 | 0.6% | 2021-07-20 | Fix |
| CVE-2021-32667 | TYPO3 CMS cross-site scripting in Page Preview | 6.4CNA v3.1 | 0.6% | 2021-07-20 | Fix |
| CVE-2021-32463 | Trend Micro Apex One An incorrect permission assignment | 7.8v3.1 | 0.4% | 2021-07-20 | Fix |
| CVE-2021-27517 | Foxit PhantomPDF cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-20 | |
| CVE-2021-27338 | Faraday Edge cross-site scripting | 5.4v3.1 | 0.7% | 2021-07-20 | Exploit code |
| CVE-2021-27021 | PuppetDB privilege escalation | 8.8v3.1 | 1.3% | 2021-07-20 | Fix |
| CVE-2021-26095 | Fortinet FortiMail session cookie encryption privilege escalation | 7.5CNA v3.1 | 0.7% | 2021-07-20 | Fix |
| CVE-2021-26083 | Atlassian Jira Server cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-20 | Fix |
| CVE-2021-26082 | Atlassian Jira Server cross-site scripting | 5.4v3.1 | 1.0% | 2021-07-20 | Fix |
| CVE-2021-26081 | Atlassian Jira Server information disclosure | 5.3v3.1 | 1.2% | 2021-07-20 | Fix |
| CVE-2021-24022 | Fortinet FortiAnalyzer, FortiManager buffer overflow | 6.7CNA v3.1 | 0.2% | 2021-07-20 | Fix |
| CVE-2021-22235 | The Wireshark Foundation Wireshark DNP dissector crash | 7.5CNA v3.1 | 3.4% | 2021-07-20 | Fix |
| CVE-2021-22125 | Fortinet FortiSandbox OS command injection | 6.3CNA v3.1 | 1.4% | 2021-07-20 | Fix |
| CVE-2021-20478 | IBM Cloud Pak System self service console information disclosure | 4.0CNA v3.0 | 0.2% | 2021-07-20 | Fix |
| CVE-2021-3246 | libsndfile msadpcm_decode_block heap-based buffer overflow | 8.8v3.1 | 3.3% | 2021-07-20 | Fix |
| CVE-2021-36799 | Knx Engineering Tool Software 5 hard-coded credentials | 8.8v3.1 | 0.4% | 2021-07-19 | Exploit codeFix |
| CVE-2021-36797 | In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation | 6.8v3.1 | 0.3% | 2021-07-19 | |
| CVE-2021-35968 | Learningdigital.com, Inc. Orca HCM path traversal-2 | 4.3CNA v3.1 | 1.0% | 2021-07-19 | Fix |
| CVE-2021-35967 | Learningdigital.com, Inc. Orca HCM path traversal-1 | 5.3CNA v3.1 | 1.3% | 2021-07-19 | Fix |
| CVE-2021-35966 | Learningdigital.com, Inc. Orca HCM URL redirection to untrusted site (open redirect) | 6.1CNA v3.1 | 0.8% | 2021-07-19 | Fix |
| CVE-2021-35965 | Learningdigital.com, Inc. Orca HCM Hard-code password | 9.8CNA v3.1 | 2.4% | 2021-07-19 | Fix |
| CVE-2021-35964 | Learningdigital.com, Inc. Orca HCM broken authentication | 9.8v3.1 | 1.1% | 2021-07-19 | Fix |
| CVE-2021-35963 | Learningdigital.com, Inc. Orca HCM unrestricted upload of file with dangerous type | 9.8CNA v3.1 | 2.4% | 2021-07-19 | Fix |
| CVE-2021-35449 | Adobe The Lexmark Universal Print Driver privilege escalation | 7.8v3.1 | 1.4% | 2021-07-19 | Exploit codeFix |
| CVE-2021-35043 | Cross-site scripting in OWASP AntiSamy | 6.1v3.1 | 1.5% | 2021-07-19 | Fix |
| CVE-2021-34821 | Aat Novus Management System cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-19 | |
| CVE-2021-34820 | Aat Novus Management System Novus HTTP Server path traversal | 7.5v3.1 | 4.0% | 2021-07-19 | |
| CVE-2021-34817 | etherpad chat component cross-site scripting | 6.1v3.1 | 1.3% | 2021-07-19 | Fix |
| CVE-2021-34676 | Basixonline NEX-Forms improper authentication | 7.5v3.1 | 1.8% | 2021-07-19 | Fix |
| CVE-2021-34675 | Basixonline NEX-Forms improper authentication | 7.5v3.1 | 1.8% | 2021-07-19 | Fix |
| CVE-2021-34618 | Aruba Instant Access Points denial of service | 6.5v3.1 | 0.5% | 2021-07-19 | Fix |
| CVE-2021-34617 | Aruba Instant Access Points cross-site scripting | 6.1v3.1 | 0.6% | 2021-07-19 | Fix |
| CVE-2021-33592 | NAVER Toolbar arbitrary code execution | 9.8v3.1 | 2.1% | 2021-07-19 | Fix |
| CVE-2021-33501 | Overwolf cross-site scripting | 9.6v3.1 | 7.9% | 2021-07-19 | |
| CVE-2021-33027 | sylabs singularity insufficient entropy | 9.8v3.1 | 1.3% | 2021-07-19 | Fix |
| CVE-2021-32760 | containerd archive package allows chmod of file outside of unpack target directory | 5.0CNA v3.1 | 1.6% | 2021-07-19 | Fix |
| CVE-2021-32014 | Denial of service in SheetJS Pro | 5.5v3.1 | 0.9% | 2021-07-19 | Fix |
| CVE-2021-32013 | Sheetjs Pro denial of service in SheetsJS Pro | 5.5v3.1 | 0.9% | 2021-07-19 | Fix |
| CVE-2021-32012 | Denial of service in SheetJS Pro | 5.5v3.1 | 0.9% | 2021-07-19 | Fix |
| CVE-2021-31590 | PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. With a valid JSON Webtoken that is used for authentication and authorization, a user can keep his admin privileges even if he is downgraded to the "user" privilege. Even after a us | 8.8v3.1 | 2.7% | 2021-07-19 | |
| CVE-2021-31216 | Siren Investigate server-side request forgery | 8.1v3.1 | 0.7% | 2021-07-19 | Fix |
| CVE-2021-29780 | IBM Resilient OnPrem improper input validation | 4.7CNA v3.0 | 0.7% | 2021-07-19 | Fix |
| CVE-2021-29707 | IBM Hardware Management Console restricted shell privilege escalation | 8.4CNA v3.0 | 0.3% | 2021-07-19 | Fix |
| CVE-2021-24482 | Related Posts for WordPress plugin authenticated stored XSS and XFS | 4.8NVD v3.1 | 0.7% | 2021-07-19 | Fix |
| CVE-2021-24453 | Include Me WordPress plugin authenticated remote code execution (RCE) via LFI log poisoning | 8.8NVD v3.1 | 5.0% | 2021-07-19 | Fix |
| CVE-2021-24452 | W3 Total Cache WordPress plugin reflected XSS in Extensions page (JS Context) | 6.1NVD v3.1 | 1.9% | 2021-07-19 | NucleiFix |
| CVE-2021-24447 | WP Image Zoom WordPress plugin local file inclusion | 5.3NVD v3.1 | 1.4% | 2021-07-19 | Fix |
| CVE-2021-24436 | W3 Total Cache WordPress plugin reflected XSS in Extensions page (attribute Context) | 6.1NVD v3.1 | 1.9% | 2021-07-19 | NucleiFix |
| CVE-2021-20507 | IBM Engineering Workflow Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-19 | Fix |
| CVE-2021-20110 | Manage Engine Asset Explorer Agent integer overflow | 9.8NVD v3.1 | 7.4% | 2021-07-19 | |
| CVE-2021-20109 | Manage Engine Asset Explorer Agent out-of-bounds write | 7.5NVD v3.1 | 1.4% | 2021-07-19 | |
| CVE-2021-20108 | Manage Engine Asset Explorer Agent memory leak | 7.5NVD v3.1 | 4.5% | 2021-07-19 | |
| CVE-2021-3279 | Fortics Szchat cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-19 | |
| CVE-2021-3135 | tagDiv Newspaper cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-19 | Fix |
| CVE-2021-36773 | uBlock Origin uncontrolled recursion | 7.5v3.1 | 1.3% | 2021-07-18 | Fix |
| CVE-2021-36772 | Zoho ManageEngine ADManager Plus cross-site scripting | 6.1v3.1 | 0.9% | 2021-07-17 | Fix |
| CVE-2021-36771 | Zoho ManageEngine ADManager Plus cross-site scripting | 6.1v3.1 | 0.9% | 2021-07-17 | Fix |
| CVE-2021-36769 | A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client. | 5.3v3.1 | 1.4% | 2021-07-17 | Fix |
| CVE-2021-36213 | HashiCorp Consul L7 deny intention results in an allow action | 7.5v3.1 | 1.7% | 2021-07-17 | Fix |
| CVE-2021-33911 | Zoho ManageEngine ADManager Plus remote code execution | 9.8v3.1 | 5.3% | 2021-07-17 | Fix |
| CVE-2021-32574 | HashiCorp Consul Missing SSL Certificate Validation | 7.5v3.1 | 1.5% | 2021-07-17 | Fix |
| CVE-2021-36758 | 1password Connect incorrect authorization | 5.4v3.1 | 0.5% | 2021-07-16 | Fix |
| CVE-2021-36755 | Cgm-remote-monitor cross-site scripting | 6.1v3.1 | 0.7% | 2021-07-16 | |
| CVE-2021-35962 | TAIWAN SECOM Door Access Control and Personnel Attendance Management system path traversal | 7.5CNA v3.1 | 1.8% | 2021-07-16 | Fix |
| CVE-2021-35961 | SECOM Dr.ID Access Control admin account hard-coded credentials | 9.8CNA v3.1 | 2.2% | 2021-07-16 | Fix |
| CVE-2021-34481 | Microsoft Windows Print Spooler remote code execution | 8.8CNA v3.1 | 47.7% | 2021-07-16 | Exploit codeFix |
| CVE-2021-34467 | Microsoft SharePoint server remote code execution | 7.1CNA v3.1 | 6.6% | 2021-07-16 | Fix |
| CVE-2021-34466 | Microsoft Windows Hello security feature bypass | 5.7CNA v3.1 | 0.8% | 2021-07-16 | Fix |
| CVE-2021-34464 | Microsoft Defender remote code execution | 7.8CNA v3.1 | 2.6% | 2021-07-16 | Fix |
| CVE-2021-34462 | Microsoft Windows AppX Deployment extensions elevation of privilege | 7.0CNA v3.1 | 0.9% | 2021-07-16 | Fix |
| CVE-2021-34461 | Microsoft Windows Container Isolation FS Filter driver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-07-16 | Fix |
| CVE-2021-34460 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-16 | Fix |
| CVE-2021-34459 | Microsoft Windows AppContainer elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-07-16 | Fix |
| CVE-2021-34458 | Microsoft Windows Kernel remote code execution | 9.9CNA v3.1 | 2.6% | 2021-07-16 | Fix |
| CVE-2021-34457 | Microsoft Windows Remote Access Connection Manager information disclosure | 5.5CNA v3.1 | 0.9% | 2021-07-16 | Fix |
| CVE-2021-34456 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-16 | Fix |
| CVE-2021-34455 | Microsoft Windows File History service elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-07-16 | Fix |
| CVE-2021-34454 | Microsoft Windows Remote Access Connection Manager information disclosure | 5.5CNA v3.1 | 0.9% | 2021-07-16 | Fix |
| CVE-2021-34452 | Microsoft Word remote code execution | 7.8CNA v3.1 | 2.2% | 2021-07-16 | Fix |
| CVE-2021-34451 | Microsoft Office Online Server spoofing | 5.3CNA v3.1 | 1.8% | 2021-07-16 | Fix |
| CVE-2021-34450 | Microsoft Windows Hyper-V remote code execution | 8.5CNA v3.1 | 2.5% | 2021-07-16 | Fix |
| CVE-2021-34449 | Microsoft Windows win32k elevation of privilege | 7.0CNA v3.1 | 2.7% | 2021-07-16 | Fix |
| CVE-2021-34448 | Microsoft Windows Scripting Engine memory corruption | 6.8CNA v3.1 | 40.1% | 2021-07-16 | KEVFix |
| CVE-2021-34447 | Microsoft Windows MSHTML Platform remote code execution | 6.8CNA v3.1 | 2.0% | 2021-07-16 | Fix |
| CVE-2021-34446 | Microsoft Windows HTML Platforms security feature bypass | 8.0CNA v3.1 | 2.0% | 2021-07-16 | Fix |
| CVE-2021-34445 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-16 | Fix |
| CVE-2021-34444 | Microsoft Windows DNS server denial of service | 6.5CNA v3.1 | 3.5% | 2021-07-16 | Fix |
| CVE-2021-34442 | Microsoft Windows DNS server remote code execution | 8.8CNA v3.1 | 3.2% | 2021-07-16 | Fix |
| CVE-2021-34441 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 2.2% | 2021-07-16 | Fix |
| CVE-2021-34440 | Microsoft Windows GDI+ information disclosure | 5.5CNA v3.1 | 0.9% | 2021-07-16 | Fix |
| CVE-2021-34439 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 2.7% | 2021-07-16 | Fix |
| CVE-2021-34438 | Microsoft Windows Font driver host remote code execution | 7.8CNA v3.1 | 2.2% | 2021-07-16 | Fix |
| CVE-2021-32769 | Improper limitation of a pathname to a restricted directory (path traversal) in micronaut-core | 7.5CNA v3.1 | 1.7% | 2021-07-16 | Fix |
| CVE-2021-32749 | fail2ban possible RCE vulnerability in mailing action using mailutils (mail-whois) | 6.1CNA v3.1 | 3.6% | 2021-07-16 | Fix |
| CVE-2021-28114 | Cross-site scripting in Froala WYSIWYG Editor | 5.4v3.1 | 52.0% | 2021-07-16 | Fix |
| CVE-2021-28054 | Centreon cross-site scripting | 5.4v3.1 | 1.1% | 2021-07-16 | Fix |
| CVE-2021-28053 | Centreon SQL injection | 8.8v3.1 | 1.8% | 2021-07-16 | Fix |
| CVE-2021-21820 | D-Link DIR-3040 Libcli Test Environment functionality hard-coded credentials | 9.8v3.1 | 3.0% | 2021-07-16 | Fix |
| CVE-2021-21819 | D-Link DIR-3040 Libcli Test Environment functionality code execution | 7.2NVD v3.1 | 2.9% | 2021-07-16 | Fix |
| CVE-2021-21818 | D-Link DIR-3040 Zebra IP Routing Manager functionality hard-coded credentials | 7.5v3.1 | 1.7% | 2021-07-16 | Fix |
| CVE-2021-21817 | D-Link DIR-3040 Zebra IP Routing Manager functionality information disclosure | 7.5v3.1 | 2.0% | 2021-07-16 | Fix |
| CVE-2021-21816 | D-Link DIR-3040 Syslog functionality information disclosure | 4.3v3.1 | 32.4% | 2021-07-16 | NucleiFix |
| CVE-2021-21804 | Advantech options.php script functionality local file inclusion | 9.8v3.1 | 3.7% | 2021-07-16 | |
| CVE-2021-21803 | Advantech cross-site scripting | 6.1NVD v3.1 | 7.9% | 2021-07-16 | Nuclei |
| CVE-2021-21802 | Advantech cross-site scripting | 6.1NVD v3.1 | 9.9% | 2021-07-16 | Nuclei |
| CVE-2021-21801 | Advantech cross-site scripting | 6.1NVD v3.1 | 63.4% | 2021-07-16 | Nuclei |
| CVE-2021-21800 | Advantech ssh_form.php script functionality cross-site scripting | 6.1NVD v3.1 | 14.1% | 2021-07-16 | Nuclei |
| CVE-2021-21799 | Advantech telnet_form.php script functionality cross-site scripting | 6.1NVD v3.1 | 12.3% | 2021-07-16 | Nuclei |
| CVE-2021-3649 | Inefficient regular expression complexity in chatwoot/chatwoot | 7.5v3.1 | 1.2% | 2021-07-16 | |
| CVE-2021-3647 | Open redirect in medialize/URI.js | 6.1v3.1 | 0.9% | 2021-07-16 | Fix |
| CVE-2021-3614 | Lenovo Notebook BIOS fail-open behavior | 6.4CNA v3.1 | 0.2% | 2021-07-16 | Fix |
| CVE-2021-3550 | Lenovo PC Manager uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2021-07-16 | Fix |
| CVE-2021-3453 | Lenovo BIOS protection mechanism failure | 6.8CNA v3.1 | 0.2% | 2021-07-16 | Fix |
| CVE-2021-3452 | Lenovo ThinkPad BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2021-07-16 | Fix |
| CVE-2021-1422 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software reachable assertion | 7.7CNA v3.1 | 1.2% | 2021-07-16 | Fix |
| CVE-2021-36753 | Uncontrolled search path element in sharkdp/Bat | 7.8v3.1 | 0.4% | 2021-07-15 | Fix |
| CVE-2021-35056 | Unisys Stealth unquoted search path | 6.7v3.1 | 0.3% | 2021-07-15 | Fix |
| CVE-2021-34830 | D-Link DAP-1330 stack-based buffer overflow | 8.8v3.1 | 2.3% | 2021-07-15 | Fix |
| CVE-2021-34829 | D-Link DAP-1330 buffer overflow | 8.8v3.1 | 2.3% | 2021-07-15 | Fix |
| CVE-2021-34828 | D-Link DAP-1330 buffer overflow | 8.8v3.1 | 2.3% | 2021-07-15 | Fix |
| CVE-2021-34827 | D-Link DAP-1330 stack-based buffer overflow | 8.8v3.1 | 2.3% | 2021-07-15 | Fix |
| CVE-2021-34692 | i-Drive Remotepc inclusion of untrusted functionality | 7.8v3.1 | 0.3% | 2021-07-15 | Fix |
| CVE-2021-34691 | i-Drive Remotepc denial of service | 7.5v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-34690 | i-Drive Remotepc improper authentication | 9.8v3.1 | 1.2% | 2021-07-15 | Fix |
| CVE-2021-34689 | i-Drive Remotepc sensitive information in log files | 5.5v3.1 | 0.3% | 2021-07-15 | Fix |
| CVE-2021-34688 | i-Drive Remotepc hard-coded credentials | 3.3v3.1 | 0.2% | 2021-07-15 | Fix |
| CVE-2021-34687 | i-Drive Remotepc weak cryptographic algorithm | 5.3v3.1 | 0.2% | 2021-07-15 | Fix |
| CVE-2021-34558 | Go improper certificate validation | 6.5v3.1 | 7.0% | 2021-07-15 | Exploit codeFix |
| CVE-2021-34429 | Encoded URIs can access web-INF directory in Eclipse Jetty | 5.3CNA v3.1 | 99.3% | 2021-07-15 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-33505 | Falco improper privilege management | 7.8v3.1 | 0.3% | 2021-07-15 | Fix |
| CVE-2021-32770 | Basic-auth app bundle credential exposure in Gatsby-source-wordpress | 7.5CNA v3.1 | 1.4% | 2021-07-15 | Fix |
| CVE-2021-32764 | discourse YouTube Onebox susceptible to XSS | 8.1CNA v3.1 | 0.5% | 2021-07-15 | |
| CVE-2021-32750 | MuWire messaging information disclosure | 6.8CNA v3.1 | 0.8% | 2021-07-15 | Fix |
| CVE-2021-32743 | icinga2 passwords used to access external services inadvertently exposed through API | 8.8CNA v3.1 | 1.8% | 2021-07-15 | Fix |
| CVE-2021-32739 | Icinga 2 ApiListener privilege escalation | 8.8CNA v3.1 | 1.1% | 2021-07-15 | Fix |
| CVE-2021-31999 | Rancher: Privilege escalation vulnerability via malicious Connection header | 8.8CNA v3.1 | 1.1% | 2021-07-15 | Fix |
| CVE-2021-29749 | IBM Secure Proxy server-side request forgery | 6.5CNA v3.0 | 0.8% | 2021-07-15 | Fix |
| CVE-2021-29742 | IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 201483. | 7.9CNA v3.0 | 0.4% | 2021-07-15 | Fix |
| CVE-2021-29725 | IBM Secure External Authentication Server resource exhaustion | 7.5CNA v3.0 | 2.9% | 2021-07-15 | Fix |
| CVE-2021-29699 | IBM Security Verify Access Docker unrestricted file upload | 6.6CNA v3.0 | 0.9% | 2021-07-15 | Fix |
| CVE-2021-27847 | libvips divide by zero | 6.5v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-27845 | jasper divide by zero | 5.5v3.1 | 0.7% | 2021-07-15 | Fix |
| CVE-2021-25320 | Rancher: Cloud credentials can be used through proxy API by users without access | 9.9CNA v3.1 | 0.9% | 2021-07-15 | Fix |
| CVE-2021-25318 | Rancher: API group not properly specified when creating Kubernetes RBAC resources | 8.8CNA v3.1 | 1.1% | 2021-07-15 | Fix |
| CVE-2021-21587 | Dell Wyse Management Suite information disclosure | 5.3CNA v3.1 | 0.9% | 2021-07-15 | Fix |
| CVE-2021-21586 | Dell Wyse Management Suite absolute path traversal | 8.1CNA v3.1 | 4.0% | 2021-07-15 | Fix |
| CVE-2021-20537 | IBM Security Verify Access Docker hard-coded credentials | 6.5CNA v3.0 | 0.7% | 2021-07-15 | Fix |
| CVE-2021-20534 | IBM Security Verify Access Docker open redirect | 4.5CNA v3.0 | 0.5% | 2021-07-15 | Fix |
| CVE-2021-20533 | IBM Security Verify Access Docker arbitrary command execution | 8.4CNA v3.0 | 1.8% | 2021-07-15 | Fix |
| CVE-2021-20524 | IBM Security Verify Access Docker cross-site scripting | 4.8CNA v3.0 | 0.5% | 2021-07-15 | Fix |
| CVE-2021-20523 | IBM Security Verify Access Docker information disclosure through error messages | 2.7CNA v3.0 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-20511 | IBM Security Verify Access Docker path traversal | 5.2CNA v3.0 | 1.9% | 2021-07-15 | Fix |
| CVE-2021-20510 | IBM Security Verify Access Docker cleartext storage of sensitive information | 6.8CNA v3.0 | 0.5% | 2021-07-15 | Fix |
| CVE-2021-20500 | IBM Security Verify Access Docker container information disclosure | 4.4CNA v3.0 | 0.3% | 2021-07-15 | Fix |
| CVE-2021-20499 | IBM Security Verify Access Docker information disclosure through error messages | 2.7CNA v3.0 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-20498 | IBM Security Verify Access Docker information disclosure | 5.3CNA v3.0 | 0.9% | 2021-07-15 | Fix |
| CVE-2021-20497 | IBM Security Verify Access Docker weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-07-15 | Fix |
| CVE-2021-20496 | IBM Security Verify Access Docker improper input validation | 2.7CNA v3.0 | 0.6% | 2021-07-15 | Fix |
| CVE-2021-20439 | IBM Security Verify Access Docker insufficiently protected credentials | 7.5CNA v3.0 | 1.2% | 2021-07-15 | Fix |
| CVE-2021-3043 | Prisma Cloud: Cross-site scripting (XSS) vulnerability in Prisma Cloud Compute Web console | 7.5CNA v3.1 | 0.6% | 2021-07-15 | Fix |
| CVE-2021-3042 | Cortex XDR Agent: Improper Control of User-Controlled file leads to local privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-07-15 | Fix |
| CVE-2021-0295 | Juniper Junos OS DVMRP packet forwarding denial of service | 6.1CNA v3.1 | 1.1% | 2021-07-15 | Fix |
| CVE-2021-0294 | Juniper Junos OS enhanced storm control denial of service | 5.3CNA v3.1 | 0.9% | 2021-07-15 | Fix |
| CVE-2021-0293 | Juniper Junos OS CLI netstat command memory leak | 5.5CNA v3.1 | 0.2% | 2021-07-15 | Fix |
| CVE-2021-0292 | Junos OS Evolved: Memory leak in arpd or ndp processes can lead to denial of service (DoS) | 6.5CNA v3.1 | 0.4% | 2021-07-15 | Fix |
| CVE-2021-0291 | Juniper Junos OS SNMP agent extensibility process information disclosure | 6.5CNA v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-0290 | Juniper Networks Junos OS Ethernet interface frame processing improper exception handling | 6.5CNA v3.1 | 0.4% | 2021-07-15 | Fix |
| CVE-2021-0289 | Juniper Junos OS ARP policer race condition | 6.5CNA v3.1 | 0.3% | 2021-07-15 | Fix |
| CVE-2021-0288 | Juniper Junos OS MPLS packet processing vulnerability | 6.5CNA v3.1 | 0.4% | 2021-07-15 | Fix |
| CVE-2021-0287 | Juniper Junos OS segment routing ISIS vulnerability | 6.5CNA v3.1 | 0.4% | 2021-07-15 | Fix |
| CVE-2021-0286 | Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart | 7.5CNA v3.1 | 1.1% | 2021-07-15 | Fix |
| CVE-2021-0285 | Juniper Networks Junos OS An resource exhaustion | 7.5CNA v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-0283 | Juniper Networks Junos OS TCP/IP stack buffer overflow | 7.5CNA v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-0282 | Juniper Junos OS BGP multipath vulnerability | 7.5CNA v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-0281 | Juniper Junos OS RPKI origin validation vulnerability | 5.9CNA v3.1 | 0.8% | 2021-07-15 | Fix |
| CVE-2021-0280 | Juniper Networks Junos OS Due to an improper initialization | 7.5CNA v3.1 | 1.0% | 2021-07-15 | Fix |
| CVE-2021-0279 | Contrail Cloud: Hard-coded credentials for RabbitMQ service | 8.6CNA v3.1 | 0.6% | 2021-07-15 | Fix |
| CVE-2021-0278 | Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root | 8.8CNA v3.1 | 0.9% | 2021-07-15 | Fix |
| CVE-2021-0277 | Junos OS and Junos OS Evolved: LLDP out-of-bounds read vulnerability in l2cpd | 8.8CNA v3.1 | 0.7% | 2021-07-15 | Fix |
| CVE-2021-0276 | Juniper Networks SBR Carrier stack-based buffer overflow | 9.8CNA v3.1 | 2.3% | 2021-07-15 | Fix |
| CVE-2021-36740 | Varnish Cache HTTP request smuggling | 6.5v3.1 | 1.6% | 2021-07-14 | Fix |
| CVE-2021-36716 | Improper input validation in Is-email | 7.5v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-36374 | Apache Ant ZIP, and ZIP based, archive denial of service vulerability | 5.5v3.1 | 2.6% | 2021-07-14 | Fix |
| CVE-2021-36373 | Apache Ant TAR archive denial of service | 5.5v3.1 | 2.5% | 2021-07-14 | Fix |
| CVE-2021-35527 | Password Autocomplete vulnerability in Hitachi ABB Power Grids eSOMS application | 7.5CNA v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-35469 | Lexmark Printer Software G2 unquoted search path | 7.8v3.1 | 0.2% | 2021-07-14 | Fix |
| CVE-2021-35211 | SolarWinds Serv-U remote code execution | 9.0CNA v3.1 | 91.2% | 2021-07-14 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-34529 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 5.1% | 2021-07-14 | Fix |
| CVE-2021-34528 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 3.1% | 2021-07-14 | Fix |
| CVE-2021-34525 | Microsoft Windows DNS server remote code execution | 8.8CNA v3.1 | 2.3% | 2021-07-14 | Fix |
| CVE-2021-34523 | Microsoft Exchange Server privilege escalation | 9.0CNA v3.1 | 100.0% | 2021-07-14 | KEVMetasploitSnortExploit codeKCVFix |
| CVE-2021-34522 | Microsoft Defender remote code execution | 7.8CNA v3.1 | 2.7% | 2021-07-14 | Fix |
| CVE-2021-34521 | Microsoft Windows raw Image extension remote code execution | 7.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-34520 | Microsoft SharePoint server remote code execution | 8.1CNA v3.1 | 4.4% | 2021-07-14 | Fix |
| CVE-2021-34519 | Microsoft SharePoint server information disclosure | 5.3CNA v3.1 | 6.1% | 2021-07-14 | Fix |
| CVE-2021-34518 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-34517 | Microsoft SharePoint server spoofing | 5.3CNA v3.1 | 2.0% | 2021-07-14 | Fix |
| CVE-2021-34516 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 1.3% | 2021-07-14 | Fix |
| CVE-2021-34514 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-07-14 | Fix |
| CVE-2021-34513 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-34512 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-34511 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-34510 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-34509 | Microsoft Windows storage Spaces controller information disclosure | 5.5CNA v3.1 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-34508 | Microsoft Windows Kernel remote code execution | 8.8CNA v3.1 | 2.3% | 2021-07-14 | Fix |
| CVE-2021-34507 | Microsoft Windows Remote Assistance information disclosure | 6.5CNA v3.1 | 3.3% | 2021-07-14 | Fix |
| CVE-2021-34504 | Microsoft Windows Address Book remote code execution | 7.8CNA v3.1 | 3.5% | 2021-07-14 | Fix |
| CVE-2021-34503 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 2.3% | 2021-07-14 | Fix |
| CVE-2021-34501 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 51.7% | 2021-07-14 | Fix |
| CVE-2021-34500 | Microsoft Windows Kernel Memory information disclosure | 6.3CNA v3.1 | 2.7% | 2021-07-14 | Fix |
| CVE-2021-34499 | Microsoft Windows DNS server denial of service | 6.5CNA v3.1 | 2.9% | 2021-07-14 | Fix |
| CVE-2021-34498 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-34497 | Microsoft Windows MSHTML Platform remote code execution | 6.8CNA v3.1 | 2.1% | 2021-07-14 | Fix |
| CVE-2021-34496 | Microsoft Windows GDI information disclosure | 5.5CNA v3.1 | 2.0% | 2021-07-14 | Fix |
| CVE-2021-34494 | Microsoft Windows DNS server remote code execution | 8.8CNA v3.1 | 4.0% | 2021-07-14 | Fix |
| CVE-2021-34493 | Microsoft Windows Partition Management driver elevation of privilege | 6.7CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-34492 | Microsoft Windows Certificate spoofing | 8.1CNA v3.1 | 2.5% | 2021-07-14 | Fix |
| CVE-2021-34491 | Microsoft Windows win32k information disclosure | 5.5CNA v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-34490 | Microsoft Windows TCP/IP driver denial of service | 7.5CNA v3.1 | 3.3% | 2021-07-14 | Fix |
| CVE-2021-34489 | Microsoft Windows DirectWrite remote code execution | 7.8CNA v3.1 | 2.5% | 2021-07-14 | Fix |
| CVE-2021-34488 | Microsoft Windows console driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-34479 | Microsoft Visual Studio spoofing | 7.8CNA v3.1 | 3.4% | 2021-07-14 | Fix |
| CVE-2021-34477 | Microsoft Visual Studio Code .NET Runtime elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-34476 | Microsoft Windows bowser.sys denial of service | 7.5CNA v3.1 | 3.3% | 2021-07-14 | Fix |
| CVE-2021-34474 | Microsoft Dynamics 365 Business Central remote code execution | 8.0CNA v3.1 | 2.2% | 2021-07-14 | Fix |
| CVE-2021-34473 | Microsoft Exchange Server remote code execution | 9.1CNA v3.1 | 100.0% | 2021-07-14 | KEVNucleiMetasploitEmerging ThreatsSnortExploit codeKCVFix |
| CVE-2021-34470 | Microsoft Exchange Server elevation of privilege | 8.0CNA v3.1 | 4.4% | 2021-07-14 | Fix |
| CVE-2021-34469 | Microsoft Office security feature bypass | 8.2CNA v3.1 | 3.7% | 2021-07-14 | Fix |
| CVE-2021-34468 | Microsoft SharePoint server remote code execution | 7.1CNA v3.1 | 2.1% | 2021-07-14 | Fix |
| CVE-2021-34174 | Broadcom BCM43684 denial of service | 4.6v3.1 | 0.4% | 2021-07-14 | |
| CVE-2021-34173 | espressif ESP32 attacker can cause a denial of service | 7.5v3.1 | 1.5% | 2021-07-14 | |
| CVE-2021-33788 | Microsoft Windows LSA denial of service | 7.5CNA v3.1 | 3.3% | 2021-07-14 | Fix |
| CVE-2021-33786 | Microsoft Windows LSA security feature bypass | 8.1CNA v3.1 | 2.1% | 2021-07-14 | Fix |
| CVE-2021-33785 | Microsoft Windows AF_UNIX Socket Provider denial of service | 7.5CNA v3.1 | 3.3% | 2021-07-14 | Fix |
| CVE-2021-33784 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-33783 | Microsoft Windows SMB information disclosure | 6.5CNA v3.1 | 2.8% | 2021-07-14 | Fix |
| CVE-2021-33782 | Microsoft Windows Authenticode spoofing | 5.5CNA v3.1 | 2.2% | 2021-07-14 | Fix |
| CVE-2021-33781 | Microsoft Windows azure AD security feature bypass | 8.1CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33780 | Microsoft Windows DNS server remote code execution | 8.8CNA v3.1 | 2.7% | 2021-07-14 | Fix |
| CVE-2021-33779 | Microsoft Windows AD FS security feature bypass | 8.1CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33778 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33777 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33776 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33775 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33774 | Microsoft Windows Event Tracing elevation of privilege | 7.0CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-33773 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-33772 | Microsoft Windows TCP/IP driver denial of service | 7.5CNA v3.1 | 3.3% | 2021-07-14 | Fix |
| CVE-2021-33771 | Microsoft Windows Kernel privilege escalation | 7.8CNA v3.1 | 10.2% | 2021-07-14 | KEVKCVFix |
| CVE-2021-33768 | Microsoft Exchange Server elevation of privilege | 8.0CNA v3.1 | 1.2% | 2021-07-14 | Fix |
| CVE-2021-33767 | Microsoft Open Enclave SDK elevation of privilege | 8.2CNA v3.1 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-33766 | Microsoft Exchange Server information disclosure | 7.3CNA v3.1 | 98.2% | 2021-07-14 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-33765 | Microsoft Windows Installer spoofing | 6.2CNA v3.1 | 0.7% | 2021-07-14 | Fix |
| CVE-2021-33764 | Microsoft Windows Key Distribution Center information disclosure | 5.9CNA v3.1 | 3.0% | 2021-07-14 | Fix |
| CVE-2021-33763 | Microsoft Windows Remote Access Connection Manager information disclosure | 5.5CNA v3.1 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-33761 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-33760 | Microsoft Windows media Foundation information disclosure | 5.5CNA v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-33759 | Microsoft Windows Desktop Bridge elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-07-14 | Fix |
| CVE-2021-33758 | Microsoft Windows Hyper-V denial of service | 7.7CNA v3.1 | 2.9% | 2021-07-14 | Fix |
| CVE-2021-33757 | Microsoft Windows Security Account Manager Remote protocol security feature bypass | 5.3CNA v3.1 | 3.0% | 2021-07-14 | Fix |
| CVE-2021-33756 | Microsoft Windows DNS Snap-in remote code execution | 8.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33755 | Microsoft Windows Hyper-V denial of service | 6.3CNA v3.1 | 3.1% | 2021-07-14 | Fix |
| CVE-2021-33754 | Microsoft Windows DNS server remote code execution | 8.0CNA v3.1 | 2.0% | 2021-07-14 | Fix |
| CVE-2021-33753 | Microsoft Bing Search spoofing | 4.7CNA v3.1 | 1.9% | 2021-07-14 | Fix |
| CVE-2021-33752 | Microsoft Windows DNS Snap-in remote code execution | 8.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33751 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.0CNA v3.1 | 0.8% | 2021-07-14 | Fix |
| CVE-2021-33750 | Microsoft Windows DNS Snap-in remote code execution | 8.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33749 | Microsoft Windows DNS Snap-in remote code execution | 8.8CNA v3.1 | 2.4% | 2021-07-14 | Fix |
| CVE-2021-33746 | Microsoft Windows DNS server remote code execution | 8.0CNA v3.1 | 2.0% | 2021-07-14 | Fix |
| CVE-2021-33745 | Microsoft Windows DNS server denial of service | 6.5CNA v3.1 | 2.9% | 2021-07-14 | Fix |
| CVE-2021-33744 | Microsoft Windows Secure Kernel Mode security feature bypass | 5.3CNA v3.1 | 0.8% | 2021-07-14 | Fix |
| CVE-2021-33743 | Microsoft Windows Projected File System elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-07-14 | Fix |
| CVE-2021-33740 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 2.8% | 2021-07-14 | Fix |
| CVE-2021-33689 | SAP NetWeaver AS JAVA Administrator applications vulnerability | 3.5CNA v3.0 | 0.5% | 2021-07-14 | Fix |
| CVE-2021-33687 | SAP NetWeaver AS JAVA (Enterprise Portal) cross-site scripting | 4.5CNA v3.0 | 1.6% | 2021-07-14 | Fix |
| CVE-2021-33684 | SAP NetWeaver AS ABAP and ABAP Platform out-of-bounds write | 5.3CNA v3.0 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-33683 | SAP Web Dispatcher and Internet Communication Manager HTTP request smuggling | 5.4CNA v3.0 | 0.5% | 2021-07-14 | Fix |
| CVE-2021-33682 | SAP Lumira Server cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-07-14 | Fix |
| CVE-2021-33681 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 4.3CNA v3.0 | 0.8% | 2021-07-14 | Fix |
| CVE-2021-33680 | SAP 3D Visual Enterprise Viewer buffer overflow | 4.3CNA v3.0 | 0.8% | 2021-07-14 | Fix |
| CVE-2021-33678 | SAP NetWeaver AS ABAP (Reconciliation Framework) eval injection | 6.5CNA v3.0 | 2.5% | 2021-07-14 | Fix |
| CVE-2021-33677 | SAP NetWeaver AS ABAP and ABAP Platform information disclosure | 6.5CNA v3.0 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-33676 | SAP CRM missing authorization | 6.8CNA v3.0 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-33671 | SAP NetWeaver Guided Procedures (Administration Workset) missing authorization | 7.6CNA v3.0 | 0.7% | 2021-07-14 | Fix |
| CVE-2021-33670 | SAP NetWeaver AS for JAVA (HTTP Service) denial of service | 7.5CNA v3.0 | 3.2% | 2021-07-14 | Fix |
| CVE-2021-33667 | SAP BusinessObjects Web Intelligence Analytical Reporting bundle vulnerability | 4.3CNA v3.0 | 0.7% | 2021-07-14 | Fix |
| CVE-2021-33213 | Element-it HTTP Commander "Upload from URL" feature in Elements-IT server-side request forgery | 6.5v3.1 | 1.3% | 2021-07-14 | |
| CVE-2021-33212 | Element-it HTTP Commander "View in Browser" feature in Elements-IT cross-site scripting | 5.4v3.1 | 0.7% | 2021-07-14 | |
| CVE-2021-33211 | Element-it HTTP Commander Unzip feature in Elements-IT path traversal | 6.5v3.1 | 1.7% | 2021-07-14 | |
| CVE-2021-31984 | Microsoft Power BI remote code execution | 7.6CNA v3.1 | 1.9% | 2021-07-14 | Fix |
| CVE-2021-31979 | Microsoft Windows Kernel privilege escalation | 7.8CNA v3.1 | 4.5% | 2021-07-14 | KEVKCVFix |
| CVE-2021-31961 | Microsoft Windows InstallService elevation of privilege | 6.1CNA v3.1 | 0.8% | 2021-07-14 | Fix |
| CVE-2021-31947 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.5% | 2021-07-14 | Fix |
| CVE-2021-31859 | YSoft Safeq incorrect permission assignment | 7.8v3.1 | 0.3% | 2021-07-14 | Fix |
| CVE-2021-31206 | Microsoft Exchange Server remote code execution | 7.6CNA v3.1 | 13.0% | 2021-07-14 | Fix |
| CVE-2021-31196 | Microsoft Exchange Server information disclosure | 7.2CNA v3.1 | 54.1% | 2021-07-14 | KEVFix |
| CVE-2021-31183 | Microsoft Windows TCP/IP driver denial of service | 7.5CNA v3.1 | 3.8% | 2021-07-14 | Fix |
| CVE-2021-25953 | Prototype pollution in putil-merge | 9.8v3.1 | 3.0% | 2021-07-14 | Fix |
| CVE-2021-24119 | Arm mbed TLS observable discrepancy | 4.9v3.1 | 1.5% | 2021-07-14 | Fix |
| CVE-2021-24117 | Apache Teaclave SGX SDK observable discrepancy | 4.9v3.1 | 2.2% | 2021-07-14 | |
| CVE-2021-24116 | wolfSSL observable discrepancy | 4.9v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-23407 | elFinder.NetCore directory traversal | 7.5v3.1 | 2.0% | 2021-07-14 | Fix |
| CVE-2021-22867 | Unsafe configuration options in GitHub pages leading to path traversal on GitHub Enterprise Server | 6.5v3.1 | 1.2% | 2021-07-14 | Fix |
| CVE-2021-22782 | EcoStruxure Control Expert missing encryption | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-22781 | EcoStruxure Control Expert insufficiently protected credentials | 5.5v3.1 | 0.2% | 2021-07-14 | Fix |
| CVE-2021-22780 | EcoStruxure Control Expert insufficiently protected credentials | 7.1v3.1 | 0.2% | 2021-07-14 | Fix |
| CVE-2021-22779 | EcoStruxure Control Expert, EcoStruxure Control Expert authentication bypass by spoofing | 9.1v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-22778 | EcoStruxure Control Expert insufficiently protected credentials | 7.1v3.1 | 0.2% | 2021-07-14 | Fix |
| CVE-2021-22318 | HarmonyOS null pointer dereference | 5.5v3.1 | 0.1% | 2021-07-14 | |
| CVE-2021-20784 | Voidtools Everything HTTP header injection | 6.1v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-20782 | Tips and Tricks HQ Software License Manager cross-site request forgery | 8.8v3.1 | 0.9% | 2021-07-14 | Fix |
| CVE-2021-20781 | realmag777 WordPress Meta Data Filter and Taxonomies Filter cross-site request forgery | 8.8v3.1 | 0.8% | 2021-07-14 | Fix |
| CVE-2021-20748 | Retty App hard-coded credentials | 7.5v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-20747 | Retty App handler for custom URL scheme vulnerability improper authorization | 4.3v3.1 | 1.0% | 2021-07-14 | Fix |
| CVE-2021-0654 | Android missing authorization | 5.5v3.1 | 0.3% | 2021-07-14 | Fix |
| CVE-2021-0604 | Android BluetoothOppSendFileInfo.java information disclosure | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0603 | Android ContactSelectionActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0602 | Android WifiNetworkDetailsFragment.java privilege escalation | 7.8v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0601 | Android avc_enc_fuzzer.cpp out-of-bounds write | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0600 | Android DeviceAdminAdd.java privilege escalation | 7.8v3.1 | 0.4% | 2021-07-14 | Fix |
| CVE-2021-0599 | Android NotificationRecord.java information disclosure | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0597 | Android SipService.java information disclosure | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0596 | Android phNxpExtns_MifareStd.cpp out-of-bounds read | 7.5v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-0594 | Android ConfirmConnectActivity privilege escalation | 8.0v3.1 | 1.4% | 2021-07-14 | Fix |
| CVE-2021-0592 | Android out-of-bounds write | 8.8v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-0590 | Android NetworkMonitor.java information disclosure | 4.4v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0589 | Android btm_scn.cc out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2021-07-14 | Exploit codeFix |
| CVE-2021-0588 | Android MceStateMachine.java information disclosure | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0587 | Android StreamOut.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0586 | Android DevicePickerFragment.java privilege escalation | 7.8v3.1 | 0.3% | 2021-07-14 | Exploit codeFix |
| CVE-2021-0585 | Android MessageQueueBase.h out-of-bounds write | 6.7v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0577 | Android flv extractor out-of-bounds write | 7.8v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0518 | Android Wi-Fi information disclosure | 5.5v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0515 | Android factory.cc out-of-bounds write | 9.8v3.1 | 1.4% | 2021-07-14 | Fix |
| CVE-2021-0514 | Android the V8 library use-after-free | 8.1v3.1 | 1.1% | 2021-07-14 | Fix |
| CVE-2021-0486 | Android incorrect default permissions | 7.8v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0441 | Android PermissionActivity.java insecure permissions | 7.3v3.1 | 0.1% | 2021-07-14 | Fix |
| CVE-2021-0144 | Intel BSSA DFTrs insecure default initialization | 6.7v3.1 | 0.3% | 2021-07-14 | Fix |
| CVE-2021-36376 | Delta relative path traversal in git-delta | 7.8v3.1 | 0.4% | 2021-07-13 | Fix |
| CVE-2021-36214 | LINE client cross-site scripting | 6.1v3.1 | 0.7% | 2021-07-13 | Fix |
| CVE-2021-36124 | Echobh Sharecare missing authentication | 9.8v3.1 | 1.1% | 2021-07-13 | |
| CVE-2021-36123 | Echobh Sharecare local file inclusion | 6.5v3.1 | 0.8% | 2021-07-13 | |
| CVE-2021-36122 | Echobh Sharecare argument injection | 8.8v3.1 | 1.0% | 2021-07-13 | |
| CVE-2021-36121 | Echobh Sharecare unrestricted file upload | 8.8v3.1 | 2.1% | 2021-07-13 | |
| CVE-2021-36090 | Apache Commons Compress to denial of service | 7.5NVD v3.1 | 12.9% | 2021-07-13 | Fix |
| CVE-2021-35957 | Stormshield Endpoint Security uncontrolled search path | 6.7v3.1 | 0.3% | 2021-07-13 | Fix |
| CVE-2021-35517 | Apache Commons Compress to denial of service | 7.5NVD v3.1 | 10.6% | 2021-07-13 | Fix |
| CVE-2021-35516 | Apache Commons Compress to denial of service | 7.5v3.1 | 12.4% | 2021-07-13 | Fix |
| CVE-2021-35515 | Apache Commons Compress to denial of service | 7.5v3.1 | 11.6% | 2021-07-13 | Fix |
| CVE-2021-34552 | Buffer overflow in Pillow | 9.8v3.1 | 3.2% | 2021-07-13 | Fix |
| CVE-2021-34333 | Siemens JT2Go double free | 5.5v3.1 | 1.1% | 2021-07-13 | Fix |
| CVE-2021-34332 | Siemens JT2Go infinite loop | 5.5v3.1 | 1.1% | 2021-07-13 | Fix |
| CVE-2021-34331 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34330 | Siemens JT2Go use-after-free | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34329 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 2.1% | 2021-07-13 | Fix |
| CVE-2021-34328 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 2.1% | 2021-07-13 | Fix |
| CVE-2021-34327 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 2.1% | 2021-07-13 | Fix |
| CVE-2021-34326 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 2.1% | 2021-07-13 | Fix |
| CVE-2021-34325 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34324 | Siemens JT2Go use-after-free | 7.8v3.1 | 1.8% | 2021-07-13 | Fix |
| CVE-2021-34323 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34322 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.2% | 2021-07-13 | Fix |
| CVE-2021-34321 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34320 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34319 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34318 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34317 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34316 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34315 | Siemens JT2Go out-of-bounds read | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34314 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34313 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34312 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34311 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34310 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34309 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34308 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34307 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34306 | Siemens JT2Go memory corruption | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34305 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.9% | 2021-07-13 | Fix |
| CVE-2021-34304 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34303 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34302 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34301 | Siemens JT2Go use-after-free | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34300 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34299 | Siemens JT2Go buffer over-read | 5.5v3.1 | 1.4% | 2021-07-13 | Fix |
| CVE-2021-34298 | Siemens JT2Go use-after-free | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34297 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34296 | Siemens JT2Go out-of-bounds read | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34295 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34294 | Siemens JT2Go out-of-bounds read | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34293 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34292 | Siemens JT2Go out-of-bounds read | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-34291 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-13 | Fix |
| CVE-2021-33718 | Siemens Mendix Applications using Mendix 7 incorrect authorization | 5.3v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-33715 | Siemens JT Utilities null pointer dereference | 5.5v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-33714 | Siemens JT Utilities null pointer dereference | 5.5v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-33713 | Siemens JT Utilities crash | 5.5v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-33711 | Siemens Teamcenter Active Workspace V4 information disclosure through error messages | 5.3v3.1 | 0.8% | 2021-07-13 | Fix |
| CVE-2021-33710 | Siemens Teamcenter Active Workspace V4 cross-site scripting | 6.1v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-33709 | Siemens Teamcenter Active Workspace V4 information disclosure | 4.3v3.1 | 0.9% | 2021-07-13 | Fix |
| CVE-2021-33578 | Echobh Sharecare SQL injection | 9.8v3.1 | 1.2% | 2021-07-13 | |
| CVE-2021-32755 | wireapp wire-ios-transport certificate pinning is not enforced on the web socket connection | 5.4CNA v3.1 | 0.3% | 2021-07-13 | |
| CVE-2021-31895 | Siemens RUGGEDCOM i800 buffer overflow | 8.1CNA v3.1 | 2.2% | 2021-07-13 | Fix |
| CVE-2021-31894 | Siemens SIMATIC PCS 7 incorrect permission assignment | 8.8v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-31893 | Siemens SIMATIC PCS 7 buffer overflow | 7.8v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-31892 | Siemens SINUMERIK Analyse MyCondition improper certificate validation | 7.4v3.1 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-31810 | Ruby Net::FTP information disclosure | 5.8v3.1 | 3.1% | 2021-07-13 | Fix |
| CVE-2021-31225 | Stormshield Endpoint Security administration console vulnerability | 7.3v3.1 | 0.3% | 2021-07-13 | Fix |
| CVE-2021-31224 | SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies. | 3.5v3.1 | 0.3% | 2021-07-13 | Fix |
| CVE-2021-31223 | Stormshield Endpoint Security administration console vulnerability | 5.7v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-31222 | Stormshield Endpoint Security administration console vulnerability | 5.7v3.1 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-31221 | Stormshield Endpoint Security administration console vulnerability | 5.7v3.1 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-31220 | SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. | 5.2v3.1 | 0.3% | 2021-07-13 | Fix |
| CVE-2021-31217 | SolarWinds Dameware Mini Remote Control incorrect default permissions | 9.1v3.1 | 4.0% | 2021-07-13 | Fix |
| CVE-2021-25671 | Siemens RWG1.M12 resource exhaustion | 4.3v3.1 | 0.4% | 2021-07-13 | Fix |
| CVE-2021-22440 | HUAWEI Mate 20 some path traversal | 4.6v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-22399 | HUAWEI P30 denial of service | 5.5v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-22000 | Vmware Thinapp uncontrolled search path | 7.8v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-21995 | VMware ESXi and VMware Cloud Foundation out-of-bounds read | 7.5v3.1 | 1.0% | 2021-07-13 | Fix |
| CVE-2021-21994 | VMware ESXi and VMware Cloud Foundation improper authentication | 9.8v3.1 | 1.2% | 2021-07-13 | Fix |
| CVE-2021-20595 | Mitsubishi Ae-200a XML external entity injection | 8.2v3.1 | 1.8% | 2021-07-13 | Fix |
| CVE-2021-20593 | Mitsubishi Ae-200a flawed authentication | 7.1v3.1 | 0.9% | 2021-07-13 | Fix |
| CVE-2021-20424 | IBM Cloud Pak for Applications information disclosure through error messages | 4.3CNA v3.0 | 1.0% | 2021-07-13 | Fix |
| CVE-2021-20423 | IBM Cloud Pak for Applications incorrect permission assignment | 8.8CNA v3.0 | 1.1% | 2021-07-13 | Fix |
| CVE-2021-20422 | IBM Cloud Pak for Applications information disclosure | 7.5CNA v3.0 | 1.3% | 2021-07-13 | Fix |
| CVE-2021-20369 | IBM Cloud Pak for Applications inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-07-13 | Fix |
| CVE-2021-20368 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20366 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20365 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20364 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20363 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20362 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20361 | IBM Cloud Pak for Applications cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-13 | Fix |
| CVE-2021-20360 | IBM Cloud Pak for Applications inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-07-13 | Fix |
| CVE-2021-1970 | Qualcomm Snapdragon improper input validation in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1965 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 9.8CNA v3.1 | 3.0% | 2021-07-13 | Exploit codeFix |
| CVE-2021-1964 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1955 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1954 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1953 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1945 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1943 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1940 | Qualcomm Snapdragon use-after-free in Neural Processing | 8.4CNA v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-1938 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1931 | Qualcomm Snapdragon buffer copy without checking size of input in Boot | 6.7CNA v3.1 | 0.2% | 2021-07-13 | Exploit codeFix |
| CVE-2021-1907 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1901 | Qualcomm Snapdragon buffer over-read in Boot | 4.6CNA v3.1 | 0.1% | 2021-07-13 | Fix |
| CVE-2021-1899 | Qualcomm Snapdragon buffer over-read in Boot | 4.6CNA v3.1 | 0.1% | 2021-07-13 | Fix |
| CVE-2021-1898 | Qualcomm Snapdragon buffer over-read in Boot | 4.6CNA v3.1 | 0.1% | 2021-07-13 | Fix |
| CVE-2021-1897 | Qualcomm Snapdragon buffer over-read in Boot | 4.6CNA v3.1 | 0.1% | 2021-07-13 | Fix |
| CVE-2021-1896 | Qualcomm Snapdragon weak Configuration in WLAN | 4.3CNA v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-1890 | Qualcomm Snapdragon out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-1889 | Qualcomm Snapdragon buffer copy without checking size of input in Trusted application | 8.4CNA v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-1888 | Qualcomm Snapdragon double free in Trusted application | 8.4CNA v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-1887 | Qualcomm Snapdragon reachable assertion in WLAN | 7.5CNA v3.1 | 0.6% | 2021-07-13 | Fix |
| CVE-2021-1886 | Qualcomm Snapdragon untrusted pointer dereference in Key Management | 8.4CNA v3.1 | 0.2% | 2021-07-13 | Fix |
| CVE-2021-36383 | Xen-orchestra Xo-server Xen Orchestra Mishandles Authorization | 4.3v3.1 | 0.7% | 2021-07-12 | |
| CVE-2021-36382 | Devolutions Server cleartext transmission of sensitive information | 3.7v3.1 | 0.7% | 2021-07-12 | Fix |
| CVE-2021-36381 | Edifecs Transaction Management injection | 5.3v3.1 | 0.9% | 2021-07-12 | Fix |
| CVE-2021-36377 | Fossil-scm Fossil improper certificate validation | 7.5v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-35064 | Kramerav Viaware improper privilege management | 9.8v3.1 | 70.8% | 2021-07-12 | NucleiEmerging ThreatsExploit code |
| CVE-2021-35037 | Jamf Pro open redirect | 6.1v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-33807 | Gespage path traversal | 7.5v3.1 | 16.1% | 2021-07-12 | NucleiFix |
| CVE-2021-33037 | Apache Tomcat incorrect Transfer-Encoding handling with HTTP/1.0 | 5.3NVD v3.1 | 74.7% | 2021-07-12 | Fix |
| CVE-2021-32754 | FlowDroid source and sink definition file XML external entity injection | 5.3CNA v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-32747 | icingaweb2 custom variable protection and blacklists can be circumvented | 5.3CNA v3.1 | 1.4% | 2021-07-12 | Fix |
| CVE-2021-32746 | icingaweb2 possible path traversal by use of the `doc` module | 5.3CNA v3.1 | 1.3% | 2021-07-12 | Fix |
| CVE-2021-32741 | Nextcloud security-advisories lack of ratelimit on public share link mount endpoint | 5.3CNA v3.1 | 1.3% | 2021-07-12 | Fix |
| CVE-2021-32734 | File path disclosure of shared files in Nextcloud Text application | 3.1CNA v3.1 | 1.4% | 2021-07-12 | Fix |
| CVE-2021-32733 | XSS in Nextcloud Text application | 4.8CNA v3.1 | 1.1% | 2021-07-12 | Fix |
| CVE-2021-32727 | Nextcloud security-advisories end-to-end encryption device setup did not verify public key | 5.7CNA v3.1 | 0.7% | 2021-07-12 | Fix |
| CVE-2021-32726 | Nextcloud security-advisories webauthn tokens not removed after user has been deleted | 7.1CNA v3.1 | 1.8% | 2021-07-12 | Fix |
| CVE-2021-32725 | Nextcloud security-advisories default share permissions not respected for federated reshares | 3.5CNA v3.1 | 1.2% | 2021-07-12 | Fix |
| CVE-2021-32707 | Bypass of image blocking in Nextcloud Mail | 4.3CNA v3.1 | 1.1% | 2021-07-12 | Fix |
| CVE-2021-32705 | Nextcloud security-advisories lack of ratelimit on public DAV endpoint | 5.3CNA v3.1 | 1.7% | 2021-07-12 | Fix |
| CVE-2021-32703 | Nextcloud security-advisories lack of ratelimit on shareinfo endpoint | 5.3CNA v3.1 | 1.5% | 2021-07-12 | Fix |
| CVE-2021-32689 | Nextcloud Talk not properly disassociating users from chats after account deletion | 8.1CNA v3.1 | 1.0% | 2021-07-12 | Fix |
| CVE-2021-32688 | Nextcloud security-advisories application specific tokens can change their own scope | 8.8CNA v3.1 | 2.3% | 2021-07-12 | Fix |
| CVE-2021-32680 | Nextcloud security-advisories audit log is not properly logging unsetting of share expiration date | 3.3CNA v3.1 | 0.4% | 2021-07-12 | Fix |
| CVE-2021-32679 | Nextcloud security-advisories filenames not escaped by default in controllers using DownloadResponse | 3.5CNA v3.1 | 1.4% | 2021-07-12 | Fix |
| CVE-2021-32678 | Nextcloud security-advisories ratelimit not applied on OCS API responses | 3.7CNA v3.1 | 1.4% | 2021-07-12 | Fix |
| CVE-2021-30640 | Apache Tomcat auth weakness in JNDIRealm | 6.5NVD v3.1 | 9.9% | 2021-07-12 | Fix |
| CVE-2021-30639 | Apache Tomcat DoS after non-blocking IO error | 7.5v3.1 | 6.9% | 2021-07-12 | Fix |
| CVE-2021-30129 | DoS/OOM leak vulnerability in Apache Mina Sshd Server | 6.5v3.1 | 3.4% | 2021-07-12 | Fix |
| CVE-2021-29822 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-29805 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-29804 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-29803 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-29794 | IBM Tivoli Netcool Impact weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-07-12 | Fix |
| CVE-2021-29792 | IBM Event Streams improper privilege management | 4.7CNA v3.0 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-27293 | Incorrect Regular Expression in RestSharp | 7.5v3.1 | 1.5% | 2021-07-12 | Fix |
| CVE-2021-26099 | Fortinet FortiMail Identity-Based Encryption service vulnerability | 4.4CNA v3.1 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-26090 | Fortinet FortiMail memory leak | 5.3CNA v3.1 | 1.3% | 2021-07-12 | Fix |
| CVE-2021-26089 | Fortinet FortiClientMac improper symlink following | 6.7CNA v3.1 | 0.4% | 2021-07-12 | Fix |
| CVE-2021-26088 | Fortinet FSSO Windows DC Agent, FSSO Windows CA FSSO Collector version improper authentication | 7.1CNA v3.1 | 1.0% | 2021-07-12 | Exploit codeFix |
| CVE-2021-24454 | YOP Poll WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 1.6% | 2021-07-12 | Fix |
| CVE-2021-24442 | Poll, Survey, Questionnaire and Voting system WordPress plugin unauthenticated blind SQL injection | 9.8NVD v3.1 | 46.0% | 2021-07-12 | NucleiFix |
| CVE-2021-24441 | Sign-up Sheets WordPress plugin authenticated CSV injection | 8.0NVD v3.1 | 1.3% | 2021-07-12 | Fix |
| CVE-2021-24440 | Sign-up Sheets WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24439 | Browser Screenshots WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24434 | Glass WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2021-07-12 | |
| CVE-2021-24429 | Salon Booking System WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 1.2% | 2021-07-12 | Fix |
| CVE-2021-24427 | W3 Total Cache WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24426 | Backup by 10Web WordPress plugin reflected cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-07-12 | |
| CVE-2021-24424 | WP Reset WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24421 | WP JobSearch WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24420 | Request a Quote WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24419 | WP YouTube Lyte WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24418 | Smooth Scroll Page Up/Down Buttons WordPress plugin authenticated stored XSS via psb_positioning | 4.8NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24409 | Prismatic WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.7% | 2021-07-12 | NucleiFix |
| CVE-2021-24408 | Prismatic WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-07-12 | Fix |
| CVE-2021-24385 | FileBird unauthenticated SQL injection | 9.8NVD v3.1 | 2.8% | 2021-07-12 | Fix |
| CVE-2021-24365 | Admin Columns custom field column stored cross-site scripting | 5.4NVD v3.1 | 0.9% | 2021-07-12 | Fix |
| CVE-2021-24015 | Fortinet FortiMail OS command injection | 7.2CNA v3.1 | 1.2% | 2021-07-12 | Fix |
| CVE-2021-24013 | Fortinet FortiMail Webmail path traversal | 8.8CNA v3.1 | 1.1% | 2021-07-12 | Fix |
| CVE-2021-23390 | total4 arbitrary code execution | 9.8v3.1 | 3.0% | 2021-07-12 | Fix |
| CVE-2021-23389 | total.js arbitrary code execution | 9.8v3.1 | 3.6% | 2021-07-12 | Fix |
| CVE-2021-22921 | Node.js Node incorrect permission assignment | 7.8v3.1 | 7.4% | 2021-07-12 | Fix |
| CVE-2021-22918 | Node.js Node out-of-bounds read | 5.3v3.1 | 23.1% | 2021-07-12 | Fix |
| CVE-2021-22917 | https://github.com/brave/brave-core information disclosure | 6.5v3.1 | 1.2% | 2021-07-12 | |
| CVE-2021-22916 | https://github.com/brave/brave-core information disclosure | 5.9v3.1 | 3.0% | 2021-07-12 | |
| CVE-2021-22515 | Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server | 4.8CNA v3.1 | 0.7% | 2021-07-12 | Fix |
| CVE-2021-21591 | Dell Unity information disclosure | 6.4CNA v3.1 | 0.2% | 2021-07-12 | Fix |
| CVE-2021-21590 | Dell Unity information disclosure | 6.4CNA v3.1 | 0.2% | 2021-07-12 | Fix |
| CVE-2021-21589 | Dell Unity privilege escalation | 5.7CNA v3.1 | 0.2% | 2021-07-12 | Fix |
| CVE-2021-21588 | Dell PowerFlex insufficient verification of data authenticity | 6.5CNA v3.1 | 0.3% | 2021-07-12 | Fix |
| CVE-2021-20414 | IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216. | 4.4CNA v3.0 | 0.5% | 2021-07-12 | Fix |
| CVE-2021-3547 | OpenVPN 3 Core Library authentication bypass | 7.4v3.1 | 1.2% | 2021-07-12 | Fix |
| CVE-2021-29105 | There is a stored cross-site scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory | 5.4CNA v3.0 | 0.6% | 2021-07-11 | Fix |
| CVE-2021-29104 | There is a stored cross-site scripting (XXS) vulnerability in ArcGIS Server Manager | 6.1CNA v3.0 | 0.8% | 2021-07-11 | Fix |
| CVE-2021-29103 | There is a reflected cross-site scripting (XSS) vulnerability in Esri ArcGIS Server | 6.1CNA v3.0 | 0.7% | 2021-07-11 | Fix |
| CVE-2021-29102 | There is a server-side request forgery (SSRF) vulnerability in Esri ArcGIS Server Manager | 9.1CNA v3.0 | 1.6% | 2021-07-11 | Fix |
| CVE-2021-29107 | There is a stored cross-site scripting (XXS) vulnerability in ArcGIS Server Manager | 6.1CNA v3.0 | 0.9% | 2021-07-10 | Fix |
| CVE-2021-29106 | There is a reflected cross-site scripting (XSS) vulnerability in Esri ArcGIS Server | 4.7CNA v3.0 | 0.7% | 2021-07-10 | Fix |
| CVE-2021-36371 | Getambassador Emissary-ingress improper certificate validation | 3.7v3.1 | 0.7% | 2021-07-09 | Fix |
| CVE-2021-36367 | PuTTY insufficient verification of data authenticity | 8.1v3.1 | 1.1% | 2021-07-09 | Fix |
| CVE-2021-36155 | Linux Foundation grpc-swift uncontrolled resource consumption in LengthPrefixedMessageReader | 7.5v3.1 | 2.1% | 2021-07-09 | Fix |
| CVE-2021-36154 | Linux Foundation grpc-swift uncontrolled recursion in HTTP2ToRawGRPCServerCodec | 7.5v3.1 | 2.1% | 2021-07-09 | Fix |
| CVE-2021-36153 | Linux Foundation grpc-swift Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec | 7.5v3.1 | 2.1% | 2021-07-09 | Fix |
| CVE-2021-35361 | dotCMS dotAdmin/#/c/links reflected cross-site scripting | 4.8v3.1 | 0.6% | 2021-07-09 | |
| CVE-2021-35360 | dotCMS dotAdmin/#/c/containers reflected cross-site scripting | 4.8v3.1 | 0.6% | 2021-07-09 | |
| CVE-2021-35358 | dotCMS dotAdmin/#/c/c_Images stored cross-site scripting | 4.8v3.1 | 0.5% | 2021-07-09 | |
| CVE-2021-33795 | Foxit Reader improper exception handling | 5.5v3.1 | 0.8% | 2021-07-09 | |
| CVE-2021-33792 | Foxit Reader out-of-bounds write | 7.8v3.1 | 2.1% | 2021-07-09 |