CVE-2021 records published in July 2021
Page two of two: records 1,001 to 1,276 of the 1,276 published in July 2021, newest first. The first page carries the figures for July 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-33214 | HMS Networks eCatcher incorrect default permissions | 6.1v3.1 | 0.6% | 2021-07-09 | Fix |
| CVE-2021-33012 | Rockwell Automation MicroLogix 1100 denial of service | 8.6v3.1 | 2.6% | 2021-07-09 | |
| CVE-2021-32972 | Panasonic FPWIN Pro XML external entity injection | 5.5v3.1 | 0.7% | 2021-07-09 | Fix |
| CVE-2021-32753 | EdgeX Foundry API gateway OAuth2 authentication weak password requirements | 8.3CNA v3.1 | 0.8% | 2021-07-09 | |
| CVE-2021-32752 | Files or directories accessible to external parties in ether/logs | 7.2CNA v3.1 | 1.1% | 2021-07-09 | Fix |
| CVE-2021-32742 | vapor untrusted data fed into `Data.init` can result in exposing server memory and/or crash | 7.5CNA v3.1 | 1.2% | 2021-07-09 | Fix |
| CVE-2021-30201 | Unauthenticated XML external entity vulnerability in Kaseya Vsa | 7.5v3.1 | 25.4% | 2021-07-09 | Emerging ThreatsFix |
| CVE-2021-30121 | (Semi-)authenticated local file inclusion in Kaseya Vsa | 6.5v3.1 | 4.8% | 2021-07-09 | Fix |
| CVE-2021-30120 | Kaseya Vsa incorrect resource transfer | 7.5NVD v3.1 | 5.7% | 2021-07-09 | KCVFix |
| CVE-2021-30119 | Authenticated Authenticated reflective XSS in Kaseya Vsa | 5.4v3.1 | 58.8% | 2021-07-09 | Reported exploitedEmerging ThreatsKCVFix |
| CVE-2021-30118 | Unauthenticated remote code execution in Kaseya Vsa | 9.8v3.1 | 60.3% | 2021-07-09 | NucleiFix |
| CVE-2021-30117 | Authenticated SQL injection in Kaseya Vsa | 8.8NVD v3.1 | 72.1% | 2021-07-09 | Emerging ThreatsFix |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) information disclosure | 9.8v3.1 | 85.7% | 2021-07-09 | KEVNucleiEmerging ThreatsKCVFix |
| CVE-2021-29730 | IBM InfoSphere Information Server SQL injection | 6.3CNA v3.0 | 1.0% | 2021-07-09 | Fix |
| CVE-2021-29712 | IBM InfoSphere Information Server cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-07-09 | Fix |
| CVE-2021-27039 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 1.6% | 2021-07-09 | Fix |
| CVE-2021-27038 | Autodesk Design Review type confusion | 7.8v3.1 | 1.8% | 2021-07-09 | Fix |
| CVE-2021-27037 | Autodesk Design Review use-after-free | 7.8v3.1 | 1.6% | 2021-07-09 | Fix |
| CVE-2021-27036 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-09 | Fix |
| CVE-2021-27035 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 1.7% | 2021-07-09 | Fix |
| CVE-2021-27034 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 2.2% | 2021-07-09 | Fix |
| CVE-2021-27033 | Double free File Parsing vulnerability in Autodesk Design Review | 8.1CNA v3.1 | 3.0% | 2021-07-09 | Fix |
| CVE-2021-26106 | Fortinet FortiAP-W2 OS command injection | 7.8CNA v3.1 | 0.3% | 2021-07-09 | Fix |
| CVE-2021-26100 | Fortinet FortiMail Identity-Based Encryption service missing cryptographic step | 5.9CNA v3.1 | 0.3% | 2021-07-09 | Fix |
| CVE-2021-24020 | Fortinet FortiMail implementation of the hash digest algorithm missing cryptographic step | 7.5CNA v3.1 | 0.6% | 2021-07-09 | Fix |
| CVE-2021-24007 | Fortinet FortiMail SQL injection | 9.8CNA v3.1 | 1.4% | 2021-07-09 | Fix |
| CVE-2021-23405 | pimcore/pimcore SQL injection | 8.8v3.1 | 1.7% | 2021-07-09 | Fix |
| CVE-2021-22129 | Fortinet FortiMail Webmail and Administrative interface incorrect buffer size calculation | 8.8CNA v3.1 | 1.1% | 2021-07-09 | Fix |
| CVE-2021-20024 | SonicWall Switch Multiple out-of-bounds read | 8.1v3.1 | 0.6% | 2021-07-09 | Fix |
| CVE-2021-3637 | Allocation of resources without limits or throttling in keycloak-model-infinispan | 7.5v3.1 | 1.1% | 2021-07-09 | Fix |
| CVE-2021-3612 | Linux kernel joystick driver out-of-bounds write | 7.8NVD v3.1 | 0.7% | 2021-07-09 | Fix |
| CVE-2021-3571 | linuxptp information disclosure | 7.1NVD v3.1 | 1.9% | 2021-07-09 | Fix |
| CVE-2021-3570 | linuxptp information disclosure | 8.8NVD v3.1 | 3.0% | 2021-07-09 | Fix |
| CVE-2021-3541 | libxml2 XML entity expansion | 6.5NVD v3.1 | 2.1% | 2021-07-09 | Fix |
| CVE-2021-34616 | Aruba ClearPass Policy Manager OS command injection | 6.3v3.1 | 1.2% | 2021-07-08 | Fix |
| CVE-2021-34615 | Aruba ClearPass Policy Manager OS command injection | 6.3v3.1 | 1.2% | 2021-07-08 | Fix |
| CVE-2021-34614 | Aruba ClearPass Policy Manager OS command injection | 6.3v3.1 | 1.2% | 2021-07-08 | Fix |
| CVE-2021-34613 | Aruba ClearPass Policy Manager OS command injection | 6.3v3.1 | 1.2% | 2021-07-08 | Fix |
| CVE-2021-34612 | Aruba ClearPass Policy Manager OS command injection | 6.3v3.1 | 1.2% | 2021-07-08 | Fix |
| CVE-2021-34611 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 3.0% | 2021-07-08 | Fix |
| CVE-2021-34610 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 3.0% | 2021-07-08 | Fix |
| CVE-2021-34609 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 1.1% | 2021-07-08 | Fix |
| CVE-2021-34430 | The Eclipse Foundation Eclipse TinyDTLS weak random number generator | 7.5v3.1 | 1.0% | 2021-07-08 | |
| CVE-2021-34110 | Nica Winwaste.net incorrect permission assignment | 7.8v3.1 | 1.2% | 2021-07-08 | Exploit code |
| CVE-2021-32462 | Trend Micro Password Manager remote code execution | 8.8v3.1 | 5.2% | 2021-07-08 | Fix |
| CVE-2021-32461 | Trend Micro Password Manager incorrect numeric conversion | 7.8v3.1 | 0.4% | 2021-07-08 | Fix |
| CVE-2021-31817 | Octopus Deploy Octopus Server cleartext storage of sensitive information | 7.5v3.1 | 0.9% | 2021-07-08 | Fix |
| CVE-2021-31816 | Octopus Deploy Octopus Server cleartext storage of sensitive information | 7.5v3.1 | 0.9% | 2021-07-08 | Fix |
| CVE-2021-29711 | IBM UrbanCode Deploy CLI interface vulnerability | 4.9CNA v3.0 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-29152 | Aruba ClearPass Policy Manager denial of service | 6.5v3.1 | 1.2% | 2021-07-08 | Fix |
| CVE-2021-29151 | Aruba ClearPass Policy Manager authentication bypass | 4.3v3.1 | 1.0% | 2021-07-08 | Fix |
| CVE-2021-29150 | Aruba ClearPass Policy Manager deserialization of untrusted data | 7.2v3.1 | 1.3% | 2021-07-08 | Fix |
| CVE-2021-28809 | QNAP Systems HBS 3 missing authentication for critical function in RTRR Server in HBS3 | 9.8CNA v3.1 | 16.1% | 2021-07-08 | Fix |
| CVE-2021-25442 | Samsung Mobile Knox Mobile Enrollment improper privilege management | 7.5v3.1 | 0.9% | 2021-07-08 | Fix |
| CVE-2021-25441 | Samsung Mobile AR Emoji Editor improper input validation | 7.8v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25440 | Samsung Mobile FactoryCameraFB improper access control | 7.8v3.1 | 0.4% | 2021-07-08 | Fix |
| CVE-2021-25439 | Samsung Mobile Samsung Members improper access control | 3.3v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25438 | Samsung Mobile Samsung Members improper access control | 7.8v3.1 | 1.7% | 2021-07-08 | Fix |
| CVE-2021-25437 | Samsung Mobile Tizen wearable devices improper access control | 9.8v3.1 | 2.4% | 2021-07-08 | Fix |
| CVE-2021-25436 | Samsung Mobile Tizen wearable devices improper input validation | 9.8v3.1 | 1.6% | 2021-07-08 | Fix |
| CVE-2021-25435 | Samsung Mobile Tizen wearable devices improper input validation | 9.8v3.1 | 1.7% | 2021-07-08 | Fix |
| CVE-2021-25434 | Samsung Mobile Tizen wearable devices improper input validation | 9.8v3.1 | 1.7% | 2021-07-08 | Fix |
| CVE-2021-25433 | Samsung Mobile Tizen wearable devices improper authorization | 5.5v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25432 | Samsung Mobile Samsung Members information disclosure | 3.3v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25431 | Samsung Mobile Cameralyzer improper access control | 5.5v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25430 | Samsung Mobile Devices Bluetooth application improper access control | 4.3v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25429 | Samsung Mobile Devices Bluetooth application improper privilege management | 4.3v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25428 | Samsung Mobile Devices PackageManager improper input validation | 7.8v3.1 | 0.1% | 2021-07-08 | Fix |
| CVE-2021-25427 | Samsung Mobile Devices Bluetooth SQL injection | 6.5v3.1 | 0.2% | 2021-07-08 | Fix |
| CVE-2021-25426 | Samsung Mobile Devices information disclosure | 7.5v3.1 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-21821 | Accusoft ImageGear PDF process_fontname functionality stack-based buffer overflow | 9.8v3.1 | 2.0% | 2021-07-08 | |
| CVE-2021-21806 | WebKitGTK exploitable use-after-free | 8.8v3.1 | 2.8% | 2021-07-08 | Fix |
| CVE-2021-21794 | Accusoft ImageGear TIF bits_per_sample processing functionality out-of-bounds write | 7.8NVD v3.1 | 0.7% | 2021-07-08 | |
| CVE-2021-21793 | Accusoft ImageGear out-of-bounds write | 8.8NVD v3.1 | 1.1% | 2021-07-08 | |
| CVE-2021-21779 | WebKitGTK use-after-free | 8.8v3.1 | 2.9% | 2021-07-08 | Fix |
| CVE-2021-1607 | Cisco Identity Services Engine stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-1606 | Cisco Identity Services Engine stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-1605 | Cisco Identity Services Engine stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-1604 | Cisco Identity Services Engine stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-1603 | Cisco Identity Services Engine stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-07-08 | Fix |
| CVE-2021-1598 | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery protocol memory leak | 6.5CNA v3.1 | 0.4% | 2021-07-08 | Fix |
| CVE-2021-1597 | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery protocol memory leak | 6.5CNA v3.1 | 0.4% | 2021-07-08 | Fix |
| CVE-2021-1596 | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery protocol memory leak | 6.5CNA v3.1 | 0.4% | 2021-07-08 | Fix |
| CVE-2021-1595 | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery protocol memory leak | 6.5CNA v3.1 | 0.4% | 2021-07-08 | Fix |
| CVE-2021-1585 | Cisco Adaptive Security Device Manager remote code execution | 7.5CNA v3.1 | 20.0% | 2021-07-08 | Exploit codeFix |
| CVE-2021-1576 | Cisco Business Process Automation privilege escalation | 8.8CNA v3.1 | 1.1% | 2021-07-08 | Fix |
| CVE-2021-1575 | Cisco Virtualized Voice Browser cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-07-08 | Fix |
| CVE-2021-1574 | Cisco Business Process Automation privilege escalation | 8.8CNA v3.1 | 1.7% | 2021-07-08 | Fix |
| CVE-2021-1562 | Cisco BroadWorks Application Server information disclosure | 4.3CNA v3.1 | 0.9% | 2021-07-08 | Fix |
| CVE-2021-1359 | Cisco Web Security Appliance privilege escalation | 6.3CNA v3.1 | 1.9% | 2021-07-08 | Fix |
| CVE-2021-36212 | MISP cross-site scripting | 6.1v3.1 | 0.6% | 2021-07-07 | |
| CVE-2021-35451 | Teradici Pcoip Management Console cross-site scripting | 6.1v3.1 | 0.7% | 2021-07-07 | |
| CVE-2021-35039 | Linux kernel improper signature verification | 7.8v3.1 | 0.2% | 2021-07-07 | Fix |
| CVE-2021-34627 | WP Upload Restriction WordPress plugin missing access control in getSelectedMimeTypesByRole function | 4.3v3.1 | 0.7% | 2021-07-07 | Fix |
| CVE-2021-34626 | WP Upload Restriction WordPress plugin missing access control in deleteCustomType function | 4.3v3.1 | 0.7% | 2021-07-07 | Fix |
| CVE-2021-34625 | WP Upload Restriction WordPress plugin authenticated stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-07 | Fix |
| CVE-2021-34624 | ProfilePress - arbitrary file upload in File Uploader component | 9.8v3.1 | 6.7% | 2021-07-07 | NucleiFix |
| CVE-2021-34623 | ProfilePress - arbitrary file upload in Image Uploader component | 9.8v3.1 | 2.1% | 2021-07-07 | Fix |
| CVE-2021-34622 | ProfilePress - authenticated privilege escalation | 8.8NVD v3.1 | 4.1% | 2021-07-07 | NucleiFix |
| CVE-2021-34621 | ProfilePress - unauthenticated privilege escalation | 9.8v3.1 | 68.9% | 2021-07-07 | NucleiExploit codeFix |
| CVE-2021-34620 | CSRF in WP Fluent Forms allows stored XSS and privilege escalation | 8.8v3.1 | 2.6% | 2021-07-07 | Fix |
| CVE-2021-33221 | CommScope Ruckus Iot Controller missing authentication | 9.8v3.1 | 57.0% | 2021-07-07 | Nuclei |
| CVE-2021-33220 | CommScope Ruckus Iot Controller hard-coded credentials | 7.8v3.1 | 0.3% | 2021-07-07 | |
| CVE-2021-33219 | CommScope Ruckus Iot Controller hard-coded credentials | 9.8v3.1 | 2.2% | 2021-07-07 | |
| CVE-2021-33218 | CommScope Ruckus Iot Controller hard-coded credentials | 9.8v3.1 | 2.3% | 2021-07-07 | |
| CVE-2021-33217 | CommScope Ruckus Iot Controller out-of-bounds write | 8.8v3.1 | 1.4% | 2021-07-07 | |
| CVE-2021-33216 | CommScope Ruckus Iot Controller hidden functionality | 9.8v3.1 | 13.8% | 2021-07-07 | Exploit code |
| CVE-2021-33215 | CommScope Ruckus Iot Controller path traversal | 4.3v3.1 | 1.2% | 2021-07-07 | |
| CVE-2021-32715 | hyperium hyper Lenient Parsing of Content-Length header when Prefixed with Plus Sign | 3.1CNA v3.1 | 1.1% | 2021-07-07 | Fix |
| CVE-2021-32714 | hyperium hyper integer overflow in Chunked Transfer-Encoding | 5.9CNA v3.1 | 1.2% | 2021-07-07 | Fix |
| CVE-2021-32538 | Artware Cms unrestricted upload of file | 9.8CNA v3.1 | 2.0% | 2021-07-07 | Fix |
| CVE-2021-32537 | Realtek High definition audio Windows driver crashed | 6.5CNA v3.1 | 0.4% | 2021-07-07 | Exploit codeFix |
| CVE-2021-32535 | QSAN SANOS use of hard-coded credentials | 9.8CNA v3.1 | 1.4% | 2021-07-07 | Fix |
| CVE-2021-32534 | QSAN SANOS command injection | 9.8CNA v3.1 | 1.9% | 2021-07-07 | Fix |
| CVE-2021-32533 | QSAN SANOS command injection | 9.8CNA v3.1 | 1.9% | 2021-07-07 | Fix |
| CVE-2021-32532 | QSAN XEVO path traversal | 7.5v3.1 | 1.7% | 2021-07-07 | Fix |
| CVE-2021-32531 | QSAN XEVO command injection Following via Init function | 9.8v3.1 | 2.1% | 2021-07-07 | Fix |
| CVE-2021-32530 | QSAN XEVO command injection Following via Array function | 9.8CNA v3.1 | 2.3% | 2021-07-07 | Fix |
| CVE-2021-32529 | QSAN XEVO, SANOS command injection -1 | 9.8CNA v3.1 | 2.3% | 2021-07-07 | Fix |
| CVE-2021-32528 | QSAN Storage Manager exposure of sensitive information to an unauthorized actor | 5.3CNA v3.1 | 1.1% | 2021-07-07 | Fix |
| CVE-2021-32527 | QSAN Storage Manager path traversal-2 | 7.5CNA v3.1 | 1.7% | 2021-07-07 | |
| CVE-2021-32526 | QSAN Storage Manager incorrect permission assignment for critical resource | 6.5CNA v3.1 | 0.9% | 2021-07-07 | |
| CVE-2021-32525 | QSAN Storage Manager use of hard-coded password-2 | 7.2NVD v3.1 | 1.7% | 2021-07-07 | Fix |
| CVE-2021-32524 | QSAN Storage Manager command injection-3 | 7.2NVD v3.1 | 1.7% | 2021-07-07 | |
| CVE-2021-32523 | QSAN Storage Manager improper authorization | 7.2NVD v3.1 | 1.5% | 2021-07-07 | Fix |
| CVE-2021-32522 | QSAN Storage Manager, XEVO, SANOS improper restriction of excessive authentication attempts | 9.8CNA v3.1 | 1.4% | 2021-07-07 | Fix |
| CVE-2021-32521 | QSAN Storage Manager, XEVO, SANOS use of hard-coded password | 9.8v3.1 | 0.7% | 2021-07-07 | Fix |
| CVE-2021-32520 | QSAN Storage Manager use of hard-coded cryptographic key | 9.8CNA v3.1 | 1.0% | 2021-07-07 | |
| CVE-2021-32519 | QSAN Storage Manager, XEVO, SANOS use of password hash with insufficient computational effort | 7.5NVD v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-32518 | QSAN Storage Manager UNIX symbolic link (symlink) following | 7.5v3.1 | 1.7% | 2021-07-07 | Fix |
| CVE-2021-32517 | QSAN Storage Manager improper access control | 7.5CNA v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-32516 | QSAN Storage Manager path traversal | 7.5CNA v3.1 | 1.7% | 2021-07-07 | Fix |
| CVE-2021-32515 | QSAN Storage Manager exposure of information through directory listing | 5.3CNA v3.1 | 0.8% | 2021-07-07 | Fix |
| CVE-2021-32514 | QSAN Storage Manager improper access control Following via FirwareUpgrade function | 7.5CNA v3.1 | 1.2% | 2021-07-07 | Fix |
| CVE-2021-32513 | QSAN Storage Manager command injection Following via QsanTorture function | 9.8CNA v3.1 | 2.1% | 2021-07-07 | Fix |
| CVE-2021-32512 | QSAN Storage Manager command injection Following via QuickInstall function | 9.8CNA v3.1 | 2.1% | 2021-07-07 | Fix |
| CVE-2021-32511 | QSAN Storage Manager ViewBroserList function directory listing | 4.3CNA v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-32510 | QSAN Storage Manager antivirus function directory listing | 4.3CNA v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-32509 | QSAN Storage Manager UNIX symbolic link (symlink) following via FileviewDoc function | 6.5v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-32508 | QSAN Storage Manager UNIX symbolic link (symlink) following via FileStreaming function | 6.5CNA v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-32507 | QSAN Storage Manager absolute path traversal via FileDownload function | 6.5v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-32506 | QSAN Storage Manager absolute path traversal via GetImage function | 6.5CNA v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-31925 | Pexip Infinity improper input validation | 7.5v3.1 | 1.3% | 2021-07-07 | |
| CVE-2021-29759 | IBM App Connect Enterprise Certified Container sensitive information in log files | 4.4CNA v3.0 | 0.3% | 2021-07-07 | Fix |
| CVE-2021-28931 | Arbitrary file upload in Fork CMS | 8.8v3.1 | 1.2% | 2021-07-07 | Fix |
| CVE-2021-26274 | Ninjarmm incorrect default permissions | 7.1v3.1 | 0.4% | 2021-07-07 | Fix |
| CVE-2021-26273 | Ninjarmm incorrect authorization | 7.8v3.1 | 0.4% | 2021-07-07 | Fix |
| CVE-2021-26039 | Joomla! CMS core XSS in com_media imagelist | 6.1v3.1 | 0.7% | 2021-07-07 | Fix |
| CVE-2021-26038 | Joomla! CMS core privilege escalation through com_installer | 7.5v3.1 | 1.0% | 2021-07-07 | Fix |
| CVE-2021-26037 | Joomla! CMS core Lack of enforced session termination | 5.3v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-26036 | Joomla! CMS core DoS through usergroup table manipulation | 7.5v3.1 | 1.2% | 2021-07-07 | Fix |
| CVE-2021-26035 | Joomla! CMS Core XSS in JForm Rules field | 6.1v3.1 | 0.7% | 2021-07-07 | Fix |
| CVE-2021-25952 | just-safe-set prototype pollution | 9.8v3.1 | 3.3% | 2021-07-07 | Fix |
| CVE-2021-22555 | Linux Kernel Heap out-of-bounds write | 7.8NVD v3.1 | 78.7% | 2021-07-07 | KEVExploit codeFix |
| CVE-2021-22233 | GitLab An information disclosure | 4.3CNA v3.1 | 0.8% | 2021-07-07 | Fix |
| CVE-2021-22231 | GitLab denial of service | 3.5CNA v3.1 | 1.0% | 2021-07-07 | Fix |
| CVE-2021-22230 | GitLab merge request rendering vulnerability | 4.9CNA v3.1 | 1.0% | 2021-07-07 | Fix |
| CVE-2021-22227 | GitLab cross-site scripting | 6.1CNA v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-22225 | GitLab cross-site scripting | 4.7CNA v3.1 | 0.6% | 2021-07-07 | Fix |
| CVE-2021-22224 | GitLab GraphQL API cross-site request forgery | 7.1CNA v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-21807 | Accusoft ImageGear DICOM parse_dicom_meta_info functionality integer overflow | 9.8v3.1 | 1.5% | 2021-07-07 | |
| CVE-2021-21789 | IObit Advanced Systemcare Ultimate way IOBit privilege escalation | 8.8v3.1 | 0.3% | 2021-07-07 | |
| CVE-2021-21788 | IObit Advanced Systemcare Ultimate way IOBit privilege escalation | 8.8v3.1 | 0.3% | 2021-07-07 | |
| CVE-2021-21787 | IObit Advanced Systemcare Ultimate way IOBit privilege escalation | 8.8v3.1 | 0.3% | 2021-07-07 | |
| CVE-2021-21786 | Iobit IOCTL privilege escalation | 7.8v3.1 | 0.3% | 2021-07-07 | |
| CVE-2021-21775 | WebKitGTK use-after-free | 8.0v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-20780 | Wp-currency Wordpress Currency Switcher WPCS - cross-site request forgery | 8.8v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-20779 | codemiq WordPress Email Template Designer cross-site request forgery | 8.8v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-20777 | GU App handler for custom URL scheme vulnerability improper authorization | 4.3v3.1 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-20776 | A-Stage SCT-40CM01SR and AT-40CM01SR improper authentication | 9.8v3.1 | 1.3% | 2021-07-07 | Fix |
| CVE-2021-20739 | ELECOM WRC-300FEBK OS command injection | 8.8v3.1 | 0.5% | 2021-07-07 | Fix |
| CVE-2021-20738 | ELECOM WRC-1167FS-W information disclosure | 6.5v3.1 | 0.4% | 2021-07-07 | Fix |
| CVE-2021-20474 | IBM Guardium Data Encryption missing authentication | 6.5CNA v3.0 | 0.5% | 2021-07-07 | Fix |
| CVE-2021-20417 | IBM Guardium Data Encryption information disclosure through error messages | 4.3CNA v3.0 | 0.6% | 2021-07-07 | Fix |
| CVE-2021-20416 | IBM Guardium Data Encryption incorrect permission assignment | 3.7CNA v3.0 | 0.7% | 2021-07-07 | Fix |
| CVE-2021-20415 | IBM Guardium Data Encryption missing brute-force protection | 5.9CNA v3.0 | 0.9% | 2021-07-07 | Fix |
| CVE-2021-20379 | IBM Guardium Data Encryption weak cryptographic algorithm | 5.9CNA v3.0 | 0.5% | 2021-07-07 | Fix |
| CVE-2021-20378 | IBM Guardium Data Encryption insufficient session expiration | 6.3CNA v3.0 | 0.4% | 2021-07-07 | Fix |
| CVE-2021-35440 | Smashing cross-site scripting | 6.1v3.1 | 1.0% | 2021-07-06 | Fix |
| CVE-2021-34190 | Issabel PBX index.php?menu=billing_rates stored cross-site scripting | 4.8v3.1 | 0.6% | 2021-07-06 | |
| CVE-2021-32740 | Regular expression denial of service in Addressable templates | 7.5CNA v3.1 | 2.2% | 2021-07-06 | Fix |
| CVE-2021-32559 | Integer overflow in Pywin32 | 6.5v3.1 | 1.7% | 2021-07-06 | Fix |
| CVE-2021-32233 | SmarterTools SmarterMail cross-site scripting | 6.1v3.1 | 0.6% | 2021-07-06 | Fix |
| CVE-2021-27930 | Irislink Irisnext Multiple stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-07-06 | |
| CVE-2021-24494 | WP Offload SES Lite WordPress plugin stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-07-06 | Fix |
| CVE-2021-24451 | Export Users With Meta WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.4% | 2021-07-06 | Fix |
| CVE-2021-24407 | Jannah WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.6% | 2021-07-06 | NucleiFix |
| CVE-2021-24406 | wpForo Forum WordPress plugin open redirect | 6.1NVD v3.1 | 2.9% | 2021-07-06 | NucleiFix |
| CVE-2021-24405 | Easy Cookie Policy WordPress plugin broken access control to stored cross-site scripting | 6.5NVD v3.1 | 10.7% | 2021-07-06 | Exploit code |
| CVE-2021-24389 | FoodBakery WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 3.8% | 2021-07-06 | NucleiFix |
| CVE-2021-24388 | Vik Rent Car WordPress plugin CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2021-07-06 | Fix |
| CVE-2021-24387 | Real Estate 7 WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 3.7% | 2021-07-06 | NucleiFix |
| CVE-2021-24386 | WP SVG Images WordPress plugin authenticated (author+) stored XSS via SVG | 5.4NVD v3.1 | 0.7% | 2021-07-06 | Fix |
| CVE-2021-24384 | JoomSport WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 2.1% | 2021-07-06 | Fix |
| CVE-2021-24375 | Motor WordPress theme local file inclusion | 9.8NVD v3.1 | 2.6% | 2021-07-06 | Fix |
| CVE-2021-24005 | Fortinet FortiAuthenticator hard-coded credentials | 4.0CNA v3.1 | 0.6% | 2021-07-06 | Fix |
| CVE-2021-22232 | GitLab HTML injection | 3.5CNA v3.1 | 0.7% | 2021-07-06 | Fix |
| CVE-2021-22229 | GitLab project fork vulnerability | 5.9CNA v3.1 | 1.1% | 2021-07-06 | Fix |
| CVE-2021-22228 | GitLab improper access control | 6.5CNA v3.1 | 1.4% | 2021-07-06 | Fix |
| CVE-2021-22226 | GitLab protected branches vulnerability | 6.5CNA v3.1 | 0.9% | 2021-07-06 | Fix |
| CVE-2021-22223 | GitLab cross-site scripting | 6.1CNA v3.1 | 1.0% | 2021-07-06 | Fix |
| CVE-2021-3598 | OpenEXR out-of-bounds read | 5.5NVD v3.1 | 0.4% | 2021-07-06 | Fix |
| CVE-2021-36158 | Alpinelinux Aports cleartext storage of sensitive information | 5.9v3.1 | 0.3% | 2021-07-05 | |
| CVE-2021-35331 | Tcl nmakehlp build utility format string | 7.8v3.1 | 1.6% | 2021-07-05 | Fix |
| CVE-2021-33192 | Apache Jena Fuseki display information UI XSS | 6.1v3.1 | 2.9% | 2021-07-05 | Fix |
| CVE-2021-23401 | Flask-User open redirect | 6.1v3.1 | 1.1% | 2021-07-05 | |
| CVE-2021-36148 | Linux Acrn buffer overflow | 7.8v3.1 | 0.7% | 2021-07-02 | |
| CVE-2021-36147 | Linux Acrn null pointer dereference | 7.5v3.1 | 1.0% | 2021-07-02 | |
| CVE-2021-36146 | Linux Acrn null pointer dereference | 7.5v3.1 | 1.2% | 2021-07-02 | |
| CVE-2021-36145 | Linux Acrn use-after-free | 7.5v3.1 | 1.0% | 2021-07-02 | |
| CVE-2021-36144 | Linux Acrn use-after-free | 7.5v3.1 | 1.0% | 2021-07-02 | |
| CVE-2021-36143 | Linux Acrn null pointer dereference | 7.5v3.1 | 1.2% | 2021-07-02 | |
| CVE-2021-36132 | mediawiki incorrect authorization | 8.8v3.1 | 1.0% | 2021-07-02 | Fix |
| CVE-2021-36131 | mediawiki SportsTeams extension cross-site scripting | 4.8v3.1 | 0.4% | 2021-07-02 | Fix |
| CVE-2021-36130 | mediawiki SocialProfile extension cross-site scripting | 4.8v3.1 | 0.5% | 2021-07-02 | Fix |
| CVE-2021-36129 | mediawiki incorrect permission assignment | 4.3v3.1 | 0.6% | 2021-07-02 | Fix |
| CVE-2021-36128 | mediawiki improper exception handling | 9.8v3.1 | 1.5% | 2021-07-02 | Fix |
| CVE-2021-36127 | mediawiki insecure storage of sensitive information | 4.3v3.1 | 0.7% | 2021-07-02 | Fix |
| CVE-2021-36126 | MediaWiki AbuseFilter extension vulnerability | 9.8v3.1 | 1.2% | 2021-07-02 | Fix |
| CVE-2021-36125 | mediawiki infinite loop | 7.5v3.1 | 1.0% | 2021-07-02 | Fix |
| CVE-2021-35209 | Zimbra Collaboration server-side request forgery | 9.8v3.1 | 3.0% | 2021-07-02 | Fix |
| CVE-2021-35208 | Zimbra Collaboration cross-site scripting | 5.4v3.1 | 1.3% | 2021-07-02 | Fix |
| CVE-2021-35207 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 3.3% | 2021-07-02 | Fix |
| CVE-2021-35197 | mediawiki incorrect authorization | 7.5v3.1 | 1.9% | 2021-07-02 | Fix |
| CVE-2021-35042 | SQL injection in Django | 9.8v3.1 | 44.4% | 2021-07-02 | NucleiExploit codeFix |
| CVE-2021-35029 | Zyxel USG/ZyWALL series firmware improper authentication | 9.8CNA v3.1 | 2.3% | 2021-07-02 | Fix |
| CVE-2021-34807 | Zimbra Collaboration /preauth Servlet open redirect | 6.1v3.1 | 1.0% | 2021-07-02 | Fix |
| CVE-2021-34527 | Microsoft Windows Print Spooler remote code execution | 8.8CNA v3.1 | 99.8% | 2021-07-02 | KEVMetasploitExploit codeFix |
| CVE-2021-33889 | Openthread wpantund out-of-bounds write | 6.8v3.1 | 0.3% | 2021-07-02 | |
| CVE-2021-32738 | stellar js-stellar-sdk Utils.readChallengeTx does not verify the server account signature | 6.5CNA v3.1 | 0.5% | 2021-07-02 | Fix |
| CVE-2021-32737 | sulu XSS injection in Media Collection Title was possible | 8.4CNA v3.1 | 0.7% | 2021-07-02 | Fix |
| CVE-2021-32735 | getkirby kirby cross-site scripting (XSS) from field and configuration text displayed in the Panel | 7.1CNA v3.1 | 0.5% | 2021-07-02 | Fix |
| CVE-2021-32639 | Server-side request forgery (SSRF) in emissary:emissary | 7.2CNA v3.1 | 1.4% | 2021-07-02 | |
| CVE-2021-31874 | Zoho ManageEngine ADSelfService Plus information disclosure | 5.9v3.1 | 4.3% | 2021-07-02 | Fix |
| CVE-2021-30557 | Google Chrome TabGroups use-after-free | 8.8v3.1 | 11.7% | 2021-07-02 | Fix |
| CVE-2021-30556 | Google Chrome WebAudio use-after-free | 8.8v3.1 | 1.7% | 2021-07-02 | Fix |
| CVE-2021-30555 | Google Chrome Sharing use-after-free | 8.8v3.1 | 1.4% | 2021-07-02 | Fix |
| CVE-2021-30554 | Google Chromium WebGL use-after-free | 8.8v3.1 | 7.4% | 2021-07-02 | KEVFix |
| CVE-2021-27950 | Sitasoftware Azurcms azurWebEngine in Sita SQL injection | 8.8v3.1 | 1.7% | 2021-07-02 | Fix |
| CVE-2021-27455 | Delta Electronics DOPSoft out-of-bounds read | 5.5v3.1 | 0.7% | 2021-07-02 | Fix |
| CVE-2021-27412 | Delta Electronics DOPSoft out-of-bounds read | 7.8v3.1 | 1.0% | 2021-07-02 | Fix |
| CVE-2021-26920 | Druid ingestion system Authenticated users can read data from other sources than intended | 6.5v3.1 | 9.9% | 2021-07-02 | Fix |
| CVE-2021-23403 | ts-nodash prototype pollution | 9.8v3.1 | 1.3% | 2021-07-02 | Fix |
| CVE-2021-23402 | record-like-deep-assign prototype pollution | 9.8v3.1 | 1.2% | 2021-07-02 | |
| CVE-2021-3613 | OpenVPN Connect uncontrolled search path | 7.8v3.1 | 0.8% | 2021-07-02 | Fix |
| CVE-2021-3606 | OpenVPN-GUI uncontrolled search path | 7.8v3.1 | 0.3% | 2021-07-02 | Fix |
| CVE-2021-36089 | zope Grok out-of-bounds write | 7.8v3.1 | 1.2% | 2021-07-01 | Fix |
| CVE-2021-36088 | treasure-data Fluent Bit double free | 9.8v3.1 | 2.4% | 2021-07-01 | Fix |
| CVE-2021-36087 | SELinuxProject selinux out-of-bounds read | 3.3NVD v3.1 | 0.5% | 2021-07-01 | Fix |
| CVE-2021-36086 | SELinuxProject selinux use-after-free | 3.3NVD v3.1 | 0.6% | 2021-07-01 | Fix |
| CVE-2021-36085 | SELinuxProject selinux use-after-free | 3.3NVD v3.1 | 0.5% | 2021-07-01 | Fix |
| CVE-2021-36084 | SELinuxProject selinux use-after-free | 3.3NVD v3.1 | 0.5% | 2021-07-01 | Fix |
| CVE-2021-36083 | KDE Kimageformats out-of-bounds write | 5.5v3.1 | 0.9% | 2021-07-01 | Fix |
| CVE-2021-36082 | ntop nDPI out-of-bounds write | 8.8v3.1 | 1.8% | 2021-07-01 | Fix |
| CVE-2021-36081 | Tesseract Ocr use-after-free | 7.8v3.1 | 0.9% | 2021-07-01 | Fix |
| CVE-2021-36080 | GNU LibreDWG double free | 8.8v3.1 | 1.3% | 2021-07-01 | |
| CVE-2021-35337 | Phone Shop Sales Management System insecure direct object reference | 4.3v3.1 | 0.8% | 2021-07-01 | |
| CVE-2021-35336 | Tieline IP Audtio Gateway insecure default initialization | 9.8v3.1 | 10.1% | 2021-07-01 | Nuclei |
| CVE-2021-32731 | xwiki-platform the reset password form reveal users email address | 5.3CNA v3.1 | 1.2% | 2021-07-01 | Fix |
| CVE-2021-32730 | xwiki-platform no CSRF protection on the password change form | 5.7CNA v3.1 | 0.6% | 2021-07-01 | Fix |
| CVE-2021-32729 | xwiki-platform A user without PR can reset user authentication failures information | 2.0CNA v3.1 | 0.5% | 2021-07-01 | Fix |
| CVE-2021-31813 | Zoho ManageEngine Applications Manager cross-site scripting | 5.4v3.1 | 78.3% | 2021-07-01 | Fix |
| CVE-2021-28804 | Command injection vulnerabilities in QTS and QuTS hero | 9.8v3.1 | 1.8% | 2021-07-01 | Fix |
| CVE-2021-28803 | Stored XSS vulnerability in Q'center | 5.4v3.1 | 0.5% | 2021-07-01 | Fix |
| CVE-2021-28802 | Command injection vulnerabilities in QTS and QuTS hero | 9.8v3.1 | 1.8% | 2021-07-01 | Fix |
| CVE-2021-28424 | PHPGurukul Teachers Record Management System stored cross-site scripting | 5.4v3.1 | 1.3% | 2021-07-01 | |
| CVE-2021-28423 | PHPGurukul Teachers Record Management System Multiple SQL injection | 8.8v3.1 | 2.6% | 2021-07-01 | |
| CVE-2021-28127 | Stormshield Network Security missing brute-force protection | 7.5v3.1 | 0.9% | 2021-07-01 | Fix |
| CVE-2021-27661 | Johnson Controls Facility Explorer F4-SNC improper privilege management | 8.8CNA v3.1 | 0.8% | 2021-07-01 | Fix |
| CVE-2021-27660 | Johnson Controls C-CURE 9000 client auto update feature vulnerability | 8.8CNA v3.1 | 2.1% | 2021-07-01 | Fix |
| CVE-2021-27477 | JTEKT Corporation TOYOPUC PLC memory corruption | 7.5v3.1 | 1.1% | 2021-07-01 | Fix |
| CVE-2021-22347 | DoS vulnerability in some Huawei phones | 5.3v3.1 | 0.7% | 2021-07-01 | Fix |
| CVE-2021-22344 | DoS vulnerability in some Huawei phones | 5.3v3.1 | 0.7% | 2021-07-01 | Fix |
| CVE-2021-22343 | Logic bypass vulnerability in some Huawei phones | 9.1v3.1 | 0.7% | 2021-07-01 | Fix |
| CVE-2021-20778 | EC-CUBE improper access control | 7.5v3.1 | 2.1% | 2021-07-01 | Fix |
| CVE-2021-20752 | IkaIka RSS Reader cross-site scripting | 6.1v3.1 | 0.8% | 2021-07-01 |