CVE-2021 records published in August 2021
This page lists the 1,807 CVE-2021 records published in August 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 22 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 21011.6% of these records
- Listed in CISA KEV
- 221.2% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 482.7% of these records
- Exploit code
- 532.9% of these records
- Actionable vendor fix
- 1,50283.1% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in August 2021 have had from about 62 months to about 63 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-40330 | Git git_connect_git URL parser vulnerability | 7.5v3.1 | 2.9% | 2021-08-31 | Fix |
| CVE-2021-40085 | OpenStack Neutron dnsmasq configuration vulnerability | 6.5v3.1 | 1.8% | 2021-08-31 | Fix |
| CVE-2021-39316 | ZoomSounds unauthenticated directory traversal and Sensitive Information Dislosure | 7.5CNA v3.1 | 65.8% | 2021-08-31 | NucleiExploit codeFix |
| CVE-2021-39180 | OpenOLAT path traversal in Archive Handling leading to code execution | 8.1CNA v3.1 | 2.4% | 2021-08-31 | Fix |
| CVE-2021-39178 | XSS in Image Optimization API for Next.js versions between and | 7.5CNA v3.1 | 1.1% | 2021-08-31 | Fix |
| CVE-2021-39176 | Missing release of memory after effective lifetime in detect-character-encoding | 7.5CNA v3.1 | 1.9% | 2021-08-31 | Fix |
| CVE-2021-39164 | matrix-org synapse improper authorisation of /members discloses room membership to non-members | 3.1CNA v3.1 | 1.5% | 2021-08-31 | Fix |
| CVE-2021-39163 | Matrix Synapse group room metadata information disclosure | 3.1CNA v3.1 | 0.9% | 2021-08-31 | Fix |
| CVE-2021-39135 | UNIX symbolic link (symlink) following in @npmcli/arborist | 8.2CNA v3.1 | 0.6% | 2021-08-31 | Fix |
| CVE-2021-39134 | UNIX symbolic link (symlink) following in @npmcli/arborist | 8.2CNA v3.1 | 0.6% | 2021-08-31 | Fix |
| CVE-2021-38145 | Formtools core SQL injection | 9.8v3.1 | 2.2% | 2021-08-31 | |
| CVE-2021-38144 | Formtools core cross-site scripting | 5.4v3.1 | 0.9% | 2021-08-31 | |
| CVE-2021-38143 | Formtools core cross-site scripting | 6.1v3.1 | 1.4% | 2021-08-31 | |
| CVE-2021-37794 | filebrowser A stored cross-site scripting | 5.4v3.1 | 0.8% | 2021-08-31 | |
| CVE-2021-37713 | npm node-tar arbitrary file creation/Overwrite on Windows | 8.2CNA v3.1 | 1.3% | 2021-08-31 | Fix |
| CVE-2021-37712 | npm node-tar arbitrary file creation/Overwrite | 8.2CNA v3.1 | 1.9% | 2021-08-31 | Fix |
| CVE-2021-37701 | npm node-tar arbitrary file creation/Overwrite | 8.2CNA v3.1 | 3.3% | 2021-08-31 | Fix |
| CVE-2021-36981 | Sernet Verinice deserialization of untrusted data | 8.8v3.1 | 6.0% | 2021-08-31 | Exploit code |
| CVE-2021-36356 | Kramerav Viaware unrestricted file upload | 9.8v3.1 | 54.4% | 2021-08-31 | NucleiEmerging ThreatsExploit code |
| CVE-2021-36234 | UNIT4 Mik.starlight Use of a hard-coded cryptographic key | 5.5v3.1 | 0.3% | 2021-08-31 | |
| CVE-2021-36233 | UNIT4 Mik.starlight files accessible to external parties | 6.5v3.1 | 1.0% | 2021-08-31 | |
| CVE-2021-36232 | UNIT4 Mik.starlight multiple functions improper authorization | 8.8v3.1 | 1.1% | 2021-08-31 | |
| CVE-2021-36231 | UNIT4 Mik.starlight multiple functions deserialization of untrusted data | 8.8v3.1 | 2.6% | 2021-08-31 | |
| CVE-2021-35240 | SolarWinds Orion Platform stored XSS via Help Server settings | 6.5CNA v3.1 | 1.1% | 2021-08-31 | Fix |
| CVE-2021-35239 | SolarWinds Orion Platform stored XSS in Maps text box hyperlink | 7.5CNA v3.1 | 1.0% | 2021-08-31 | Fix |
| CVE-2021-35223 | SolarWinds Serv-U execute command function allows remote code execution (RCE)Vulnerability | 8.5CNA v3.1 | 2.9% | 2021-08-31 | Fix |
| CVE-2021-35222 | SolarWinds Orion Platform resource.aspx reflected cross-site scripting | 8.0CNA v3.1 | 2.6% | 2021-08-31 | Fix |
| CVE-2021-35221 | SolarWinds Orion Platform ImportAlert improper access control tampering | 6.3CNA v3.1 | 2.0% | 2021-08-31 | Fix |
| CVE-2021-35220 | SolarWinds Orion Platform EmailWebPage command injection RCE | 8.1CNA v3.1 | 2.5% | 2021-08-31 | Fix |
| CVE-2021-35219 | SolarWinds Orion Platform ExportToPdfCmd arbitrary file read information disclosure | 6.0CNA v3.1 | 0.8% | 2021-08-31 | Fix |
| CVE-2021-35213 | Orion User setting improper access control privilege escalation | 8.9CNA v3.1 | 3.4% | 2021-08-31 | Fix |
| CVE-2021-35212 | SolarWinds Orion Platform blind SQL injection | 8.9CNA v3.1 | 1.6% | 2021-08-31 | Fix |
| CVE-2021-34581 | WAGO: Denial of service vulnerability inside the OpenSSL implementation | 7.5v3.1 | 1.0% | 2021-08-31 | Fix |
| CVE-2021-34578 | WAGO: Authentication vulnerability in Web-Based Management | 8.1NVD v3.1 | 1.0% | 2021-08-31 | Fix |
| CVE-2021-34565 | Pepperl+Fuchs WirelessHART-Gateway SSH and telnet services hard-coded credentials | 9.8v3.1 | 1.0% | 2021-08-31 | |
| CVE-2021-34564 | Pepperl+Fuchs WirelessHART-Gateway session cookie vulnerability | 5.5v3.1 | 0.2% | 2021-08-31 | |
| CVE-2021-34563 | Pepperl+Fuchs WirelessHART-Gateway session cookie vulnerability | 3.3v3.1 | 0.2% | 2021-08-31 | |
| CVE-2021-34562 | Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-31 | |
| CVE-2021-34561 | In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's b | 8.8v3.1 | 0.9% | 2021-08-31 | |
| CVE-2021-34560 | Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH insufficiently protected credentials | 5.5v3.1 | 0.2% | 2021-08-31 | |
| CVE-2021-34559 | Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH HTTP request smuggling | 5.3v3.1 | 0.8% | 2021-08-31 | |
| CVE-2021-33555 | Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH path traversal | 7.5v3.1 | 1.2% | 2021-08-31 | |
| CVE-2021-29907 | IBM OpenPages with Watson unrestricted file upload | 8.8CNA v3.0 | 1.5% | 2021-08-31 | Fix |
| CVE-2021-27668 | HashiCorp Vault missing authentication | 5.3v3.1 | 1.0% | 2021-08-31 | Fix |
| CVE-2021-27558 | EasyCorp ZenTao cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-31 | |
| CVE-2021-27557 | EasyCorp ZenTao Cron job tab cross-site request forgery | 4.3v3.1 | 0.4% | 2021-08-31 | |
| CVE-2021-27556 | EasyCorp ZenTao OS command injection | 7.2v3.1 | 4.0% | 2021-08-31 | |
| CVE-2021-22944 | UniFi Protect privilege escalation | 8.0v3.1 | 0.4% | 2021-08-31 | Fix |
| CVE-2021-22943 | UniFi Protect application improper authentication | 9.6v3.1 | 0.4% | 2021-08-31 | Fix |
| CVE-2021-22929 | https://github.com/brave/brave-core An information disclosure | 6.1v3.1 | 0.4% | 2021-08-31 | Fix |
| CVE-2021-22684 | Tizen RT RTOS integer overflow | 7.5v3.1 | 1.1% | 2021-08-31 | Fix |
| CVE-2021-22029 | VMware Workspace ONE UEM console resource exhaustion | 7.5v3.1 | 1.0% | 2021-08-31 | Fix |
| CVE-2021-22003 | VMware Workspace ONE Access and Identity Manager missing brute-force protection | 7.5v3.1 | 1.0% | 2021-08-31 | Fix |
| CVE-2021-22002 | VMware Workspace ONE Access, Identity Manager and vRealize Automation improper authentication | 9.8v3.1 | 1.2% | 2021-08-31 | Fix |
| CVE-2021-21811 | AT&T Xmill memory corruption | 9.8v3.1 | 1.1% | 2021-08-31 | Fix |
| CVE-2021-21681 | Password stored in plain text by Jenkins Nomad Plugin | 5.5v3.1 | 0.3% | 2021-08-31 | Fix |
| CVE-2021-21680 | XXE vulnerability in Jenkins Nested View Plugin | 7.1v3.1 | 1.3% | 2021-08-31 | Fix |
| CVE-2021-21679 | Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL | 8.8v3.1 | 0.7% | 2021-08-31 | Fix |
| CVE-2021-21678 | Jenkins SAML Plugin allows bypassing CSRF protection for any URL | 8.8v3.1 | 0.8% | 2021-08-31 | Fix |
| CVE-2021-21677 | RCE vulnerability in Jenkins Code Coverage API Plugin | 8.8v3.1 | 2.2% | 2021-08-31 | Fix |
| CVE-2021-3749 | Inefficient regular expression complexity in axios/axios | 7.5v3.1 | 8.5% | 2021-08-31 | Exploit codeFix |
| CVE-2021-3634 | libssh out-of-bounds write | 6.5NVD v3.1 | 4.7% | 2021-08-31 | Fix |
| CVE-2021-39272 | fetchmail cleartext transmission of sensitive information | 5.9v3.1 | 0.9% | 2021-08-30 | Fix |
| CVE-2021-39271 | Bscw Classic remote code execution | 8.8v3.1 | 3.7% | 2021-08-30 | Fix |
| CVE-2021-39177 | GeyserMC Geyser user impersonation due to incorrect handling of the login JWT | 7.4CNA v3.1 | 1.4% | 2021-08-30 | Fix |
| CVE-2021-39175 | hedgedoc XSS vector in slide mode speaker-view | 8.1CNA v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-39133 | Cross-site request forgery (CSRF) can run untrusted code on Rundeck server | 7.2CNA v3.1 | 0.5% | 2021-08-30 | Fix |
| CVE-2021-39132 | rundeck YAML deserialization can run untrusted code | 8.8CNA v3.1 | 1.7% | 2021-08-30 | Fix |
| CVE-2021-39117 | Atlassian Jira Server cross-site scripting | 4.8v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-39113 | Atlassian Jira Server insufficient session expiration | 7.5v3.1 | 1.8% | 2021-08-30 | Fix |
| CVE-2021-39111 | Atlassian Jira Server cross-site scripting | 6.1v3.1 | 1.0% | 2021-08-30 | Fix |
| CVE-2021-38393 | Delta Electronics DIAEnergie /DataHandler/HandlerAlarmGroup.ashx endpoint blind SQL injection | 9.8v3.1 | 18.5% | 2021-08-30 | Fix |
| CVE-2021-38391 | Delta Electronics DIAEnergie /DataHandler/AM/AM_Handler.ashx endpoint blind SQL injection | 9.8v3.1 | 3.5% | 2021-08-30 | Fix |
| CVE-2021-38390 | Delta Electronics DIAEnergie /DataHandler/HandlerEnergyType.ashx endpoint blind SQL injection | 9.8v3.1 | 19.8% | 2021-08-30 | Fix |
| CVE-2021-38385 | torproject Tor reachable assertion | 7.5v3.1 | 1.7% | 2021-08-30 | Fix |
| CVE-2021-38343 | Nested Pages open redirect | 6.1v3.1 | 0.8% | 2021-08-30 | Fix |
| CVE-2021-38342 | Nested Pages cross-site request forgery to arbitrary Post Deletion and Modification | 8.1v3.1 | 0.5% | 2021-08-30 | Fix |
| CVE-2021-37911 | BenQ EH600 OTA improper privilege management | 8.8CNA v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-37749 | Hexagongeospatial Geomedia Webmap SQL injection | 9.8v3.1 | 1.8% | 2021-08-30 | Fix |
| CVE-2021-37421 | Zoho ManageEngine ADSelfService Plus insufficient verification of data authenticity | 9.8v3.1 | 2.5% | 2021-08-30 | Fix |
| CVE-2021-37417 | Zoho ManageEngine ADSelfService Plus improper authentication | 9.8v3.1 | 4.8% | 2021-08-30 | Fix |
| CVE-2021-37416 | Zoho ManageEngine ADSelfService Plus cross-site scripting | 6.1v3.1 | 2.9% | 2021-08-30 | NucleiFix |
| CVE-2021-36692 | libjxl divide by zero | 6.5v3.1 | 1.2% | 2021-08-30 | |
| CVE-2021-36691 | libjxl reachable assertion | 7.5v3.1 | 1.1% | 2021-08-30 | |
| CVE-2021-36370 | Midnight Commander improper authentication | 7.5v3.1 | 2.0% | 2021-08-30 | Fix |
| CVE-2021-36359 | Bscw Classic XML injection | 8.8v3.1 | 4.0% | 2021-08-30 | Fix |
| CVE-2021-35062 | Testzentrum-odw Testerfassung result.php in DRK Odenwaldkreis injection | 8.1v3.1 | 1.5% | 2021-08-30 | |
| CVE-2021-35061 | Drk-odenwaldkreis Testerfassung cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-30 | |
| CVE-2021-34668 | WordPress Real Media Library Author-only stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-34646 | Booster for WooCommerce authentication bypass | 9.8v3.1 | 50.9% | 2021-08-30 | Exploit codeFix |
| CVE-2021-34434 | The Eclipse Foundation Eclipse Mosquitto improper authorization | 5.3v3.1 | 1.4% | 2021-08-30 | Fix |
| CVE-2021-34066 | Edgegallery Developer-be deserialization of untrusted data | 9.8v3.1 | 2.0% | 2021-08-30 | |
| CVE-2021-33055 | Zoho ManageEngine ADSelfService Plus OS command injection | 9.8v3.1 | 18.1% | 2021-08-30 | Fix |
| CVE-2021-33019 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 2.4% | 2021-08-30 | Fix |
| CVE-2021-33007 | Delta Electronics TPEditor heap-based buffer overflow | 7.8v3.1 | 1.1% | 2021-08-30 | Fix |
| CVE-2021-33003 | Delta Electronics DIAEnergie weak password hash | 5.5v3.1 | 0.2% | 2021-08-30 | Fix |
| CVE-2021-32991 | Delta Electronics DIAEnergie cross-site request forgery | 4.3v3.1 | 0.4% | 2021-08-30 | Fix |
| CVE-2021-32983 | Delta Electronics DIAEnergie /DataHandler/Handler_CFG.ashx endpoint blind SQL injection | 9.8v3.1 | 3.9% | 2021-08-30 | Fix |
| CVE-2021-32967 | Delta Electronics DIAEnergie authentication bypass | 9.8v3.1 | 1.4% | 2021-08-30 | Fix |
| CVE-2021-32955 | Delta Electronics DIAEnergie unrestricted file upload | 9.8v3.1 | 37.3% | 2021-08-30 | Fix |
| CVE-2021-32832 | ReDOS in Rocket.Chat | 6.5NVD v3.1 | 1.6% | 2021-08-30 | Fix |
| CVE-2021-32831 | Code injection in Total.js | 7.2NVD v3.1 | 1.5% | 2021-08-30 | Fix |
| CVE-2021-29743 | IBM Maximo Asset Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-08-30 | Fix |
| CVE-2021-29728 | IBM Sterling Secure Proxy hard-coded credentials | 4.9CNA v3.0 | 1.0% | 2021-08-30 | Fix |
| CVE-2021-29723 | IBM Sterling Secure Proxy weak cryptographic algorithm | 5.9CNA v3.0 | 0.9% | 2021-08-30 | Fix |
| CVE-2021-29722 | IBM Sterling Secure Proxy weak cryptographic algorithm | 5.9CNA v3.0 | 0.9% | 2021-08-30 | Fix |
| CVE-2021-29631 | FreeBSD uninitialized resource use | 7.8v3.1 | 0.3% | 2021-08-30 | Fix |
| CVE-2021-29630 | FreeBSD out-of-bounds write | 8.1v3.1 | 1.6% | 2021-08-30 | Fix |
| CVE-2021-27913 | Mautic use of a broken or risky cryptographic algorithm | 3.5CNA v3.1 | 0.5% | 2021-08-30 | Fix |
| CVE-2021-27912 | Mautic XSS vulnerability on asset view | 7.1CNA v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-27911 | Mautic XSS vulnerability on contacts view | 8.3CNA v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-27910 | Mautic stored XSS vulnerability on Bounce Management Callback | 8.2CNA v3.1 | 0.7% | 2021-08-30 | Fix |
| CVE-2021-27909 | Mautic XSS vulnerability on password reset page | 6.3CNA v3.1 | 4.1% | 2021-08-30 | NucleiFix |
| CVE-2021-27663 | Johnson Controls CEM Systems AC2000 improper authorization | 8.2CNA v3.1 | 1.7% | 2021-08-30 | |
| CVE-2021-27020 | Puppet Enterprise CSV injection | 8.8v3.1 | 1.1% | 2021-08-30 | Fix |
| CVE-2021-27019 | PuppetDB, Puppet Enterprise sensitive information in log files | 4.3v3.1 | 0.7% | 2021-08-30 | Fix |
| CVE-2021-27018 | Puppet Remediate improper certificate validation | 7.5v3.1 | 0.5% | 2021-08-30 | Fix |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) injection | 9.8NVD v3.1 | 100.0% | 2021-08-30 | KEVNucleiMetasploitExploit codeFix |
| CVE-2021-25958 | Generation of error message containing sensitive information in Apache OFBiz | 7.5v3.1 | 2.6% | 2021-08-30 | |
| CVE-2021-24667 | Gallery Blocks with Lightbox WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-24665 | WP Video Lightbox WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-24593 | Business Hours Indicator WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-24592 | Sitewide Notice WP WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-24581 | Blue Admin WordPress plugin CSRF to stored cross-site scripting (XSS) | 8.8NVD v3.1 | 4.1% | 2021-08-30 | Exploit code |
| CVE-2021-24580 | Side Menu Lite WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.4% | 2021-08-30 | Fix |
| CVE-2021-24579 | Bold Page Builder WordPress plugin PHP object injection | 8.8NVD v3.1 | 8.2% | 2021-08-30 | Fix |
| CVE-2021-24528 | FluentSMTP WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-30 | Fix |
| CVE-2021-24438 | ShareThis Dashboard for Google Analytics WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-08-30 | Fix |
| CVE-2021-24437 | Favicon by RealFaviconGenerator WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-08-30 | Fix |
| CVE-2021-22027 | VMware vRealize Operations server-side request forgery | 7.5v3.1 | 1.2% | 2021-08-30 | Fix |
| CVE-2021-22026 | VMware vRealize Operations server-side request forgery | 7.5v3.1 | 1.1% | 2021-08-30 | Fix |
| CVE-2021-22025 | VMware vRealize Operations improper authentication | 7.5v3.1 | 0.8% | 2021-08-30 | Fix |
| CVE-2021-22024 | VMware vRealize Operations sensitive information in log files | 7.5v3.1 | 1.0% | 2021-08-30 | Fix |
| CVE-2021-22023 | VMware vRealize Operations insecure direct object reference | 7.2v3.1 | 1.0% | 2021-08-30 | Fix |
| CVE-2021-22022 | VMware vRealize Operations path traversal | 4.9v3.1 | 1.1% | 2021-08-30 | Fix |
| CVE-2021-22021 | VMware vRealize Log Insight cross-site scripting | 5.4v3.1 | 0.5% | 2021-08-30 | Fix |
| CVE-2021-21741 | ZTE ZXV10 M910 There is a command execution | 9.8v3.1 | 1.9% | 2021-08-30 | Fix |
| CVE-2021-3628 | OpenKM Document Management Community vulnerable to cross-site scripting | 5.4v3.1 | 0.9% | 2021-08-30 | Fix |
| CVE-2021-40178 | Zoho ManageEngine Log360 cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-29 | Fix |
| CVE-2021-40177 | Zoho ManageEngine Log360 remote code execution | 9.8v3.1 | 4.6% | 2021-08-29 | Fix |
| CVE-2021-40176 | Zoho ManageEngine Log360 cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-29 | Fix |
| CVE-2021-40175 | Zoho ManageEngine Log360 unrestricted file upload | 9.8v3.1 | 7.0% | 2021-08-29 | Fix |
| CVE-2021-40174 | Zoho ManageEngine Log360 cross-site request forgery | 8.8v3.1 | 1.0% | 2021-08-29 | Fix |
| CVE-2021-40173 | Zoho Manageengine Cloud Security Plus cross-site request forgery | 8.8v3.1 | 1.0% | 2021-08-29 | Fix |
| CVE-2021-40172 | Zoho ManageEngine Log360 cross-site request forgery | 8.8v3.1 | 1.0% | 2021-08-29 | Fix |
| CVE-2021-38154 | Canon imageRUNNER ADVANCE Catwalk Server vulnerability | 7.5v3.1 | 4.0% | 2021-08-29 | Nuclei |
| CVE-2021-39174 | Cachet configuration export command vulnerability | 8.8CNA v3.1 | 5.0% | 2021-08-28 | Exploit codeFix |
| CVE-2021-40153 | Squashfs-tools path traversal | 8.1v3.1 | 2.5% | 2021-08-27 | Fix |
| CVE-2021-40142 | OPC Foundation Local Discover Server denial of service | 7.5v3.1 | 2.6% | 2021-08-27 | Fix |
| CVE-2021-39173 | Cachet ReadyForUse middleware vulnerability | 8.8CNA v3.1 | 2.4% | 2021-08-27 | Fix |
| CVE-2021-39172 | fiveai Cachet new line injection during configuration edition | 8.8CNA v3.1 | 29.2% | 2021-08-27 | Exploit codeFix |
| CVE-2021-39171 | node-saml passport-saml unlimited transforms allowed for signed nodes | 5.3CNA v3.1 | 1.3% | 2021-08-27 | Fix |
| CVE-2021-39169 | misskey XSS vulnerability using dialog | 8.0CNA v3.1 | 0.7% | 2021-08-27 | Fix |
| CVE-2021-39168 | OpenZeppelin Contracts Upgradeable TimelockController privilege escalation | 10.0CNA v3.1 | 1.6% | 2021-08-27 | Fix |
| CVE-2021-39167 | OpenZeppelin Contracts TimelockController privilege escalation | 10.0CNA v3.1 | 1.6% | 2021-08-27 | Fix |
| CVE-2021-36531 | miniupnp project Ngiflib out-of-bounds write | 8.8v3.1 | 1.1% | 2021-08-27 | |
| CVE-2021-36530 | miniupnp project Ngiflib out-of-bounds write | 8.8v3.1 | 1.1% | 2021-08-27 | |
| CVE-2021-35342 | Northern.tech Useradm insufficient session expiration | 7.5v3.1 | 1.1% | 2021-08-27 | Fix |
| CVE-2021-32759 | OpenMage magento-lts Data Flow Sanitation issue Fix | 7.2CNA v3.1 | 1.3% | 2021-08-27 | Fix |
| CVE-2021-32758 | OpenMage magento-lts Layout XML arbitrary Code Fix | 7.2CNA v3.1 | 2.0% | 2021-08-27 | Fix |
| CVE-2021-29744 | IBM Maximo Asset Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-08-27 | Fix |
| CVE-2021-28700 | Xen resource exhaustion | 4.9v3.1 | 1.9% | 2021-08-27 | Fix |
| CVE-2021-28699 | Xen grant status frame array translation vulnerability | 5.5v3.1 | 0.4% | 2021-08-27 | Fix |
| CVE-2021-28698 | Xen grant table entry processing denial of service | 5.5v3.1 | 0.4% | 2021-08-27 | Fix |
| CVE-2021-28697 | Xen grant table v2 status pages race condition | 7.8v3.1 | 0.3% | 2021-08-27 | Fix |
| CVE-2021-28696 | Xen incorrect authorization | 6.8v3.1 | 0.4% | 2021-08-27 | Fix |
| CVE-2021-28695 | Xen IOMMU page mapping vulnerability | 6.8v3.1 | 0.4% | 2021-08-27 | Fix |
| CVE-2021-28694 | Xen IOMMU page mapping vulnerability | 6.8v3.1 | 0.4% | 2021-08-27 | Fix |
| CVE-2021-28233 | Ok-file-formats heap-based buffer overflow | 8.8v3.1 | 1.1% | 2021-08-27 | |
| CVE-2021-23434 | object-path prototype pollution | 8.6v3.1 | 1.9% | 2021-08-27 | Fix |
| CVE-2021-3264 | Cxuucms SQL injection | 7.2v3.1 | 0.9% | 2021-08-27 | |
| CVE-2021-40147 | EmTec ZOC before 8.02.2 allows \e[201~ pastes, a different vulnerability than CVE-2021-32198. | 9.8v3.1 | 1.1% | 2021-08-26 | Fix |
| CVE-2021-40145 | LibGD GD2 image decoder double free | 7.5v3.1 | 2.1% | 2021-08-26 | Fix |
| CVE-2021-39165 | fiveai Cachet unauthenticated SQL injection | 8.1CNA v3.1 | 8.2% | 2021-08-26 | NucleiExploit code |
| CVE-2021-39161 | Cross-site scripting via category name in Discourse | 4.4CNA v3.1 | 0.4% | 2021-08-26 | Fix |
| CVE-2021-38559 | digitaldruid HotelDruid cross-site scripting | 6.1v3.1 | 1.0% | 2021-08-26 | Fix |
| CVE-2021-37715 | Aruba AirWave Management Platform cross-site scripting | 4.8v3.1 | 0.5% | 2021-08-26 | Fix |
| CVE-2021-36931 | Microsoft Edge (Chromium-based) elevation of privilege | 4.4CNA v3.1 | 1.3% | 2021-08-26 | Fix |
| CVE-2021-36929 | Microsoft Edge (Chromium-based) information disclosure | 6.3CNA v3.1 | 3.2% | 2021-08-26 | Fix |
| CVE-2021-36928 | Microsoft Edge (Chromium-based) elevation of privilege | 6.0CNA v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-36352 | care2x Hospital Information Management stored cross-site scripting | 5.4v3.1 | 0.7% | 2021-08-26 | |
| CVE-2021-32648 | October CMS improper authentication | 8.2CNA v3.1 | 90.4% | 2021-08-26 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-32076 | SolarWinds Web Help Desk access restriction bypass vulnerability | 5.3CNA v3.1 | 1.2% | 2021-08-26 | Fix |
| CVE-2021-30604 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 2.5% | 2021-08-26 | Fix |
| CVE-2021-30603 | Google Chrome WebAudio race condition | 7.5v3.1 | 3.9% | 2021-08-26 | Fix |
| CVE-2021-30602 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 2.1% | 2021-08-26 | Fix |
| CVE-2021-30601 | Google Chrome Extensions API use-after-free | 8.8v3.1 | 1.9% | 2021-08-26 | Fix |
| CVE-2021-30600 | Google Chrome Printing use-after-free | 8.8v3.1 | 2.5% | 2021-08-26 | Fix |
| CVE-2021-30599 | Google Chrome V8 type confusion | 8.8v3.1 | 5.4% | 2021-08-26 | Fix |
| CVE-2021-30598 | Google Chrome V8 type confusion | 8.8v3.1 | 7.0% | 2021-08-26 | Fix |
| CVE-2021-30597 | Google Chrome Browser UI use-after-free | 6.8v3.1 | 1.3% | 2021-08-26 | Fix |
| CVE-2021-30596 | Google Chrome Navigation incorrect security UI | 4.3v3.1 | 1.7% | 2021-08-26 | Fix |
| CVE-2021-30594 | Google Chrome Page Info UI use-after-free | 6.8v3.1 | 1.3% | 2021-08-26 | Fix |
| CVE-2021-30593 | Google Chrome Tab Strip out-of-bounds read | 8.1v3.1 | 1.9% | 2021-08-26 | Fix |
| CVE-2021-30592 | Google Chrome Tab Groups out-of-bounds write | 8.8v3.1 | 2.0% | 2021-08-26 | Fix |
| CVE-2021-30591 | Google Chrome File System API use-after-free | 8.8v3.1 | 2.5% | 2021-08-26 | Fix |
| CVE-2021-30590 | Google Chrome Bookmarks heap-based buffer overflow | 8.8v3.1 | 2.8% | 2021-08-26 | Fix |
| CVE-2021-29862 | IBM VIOS denial of service | 6.2CNA v3.0 | 0.2% | 2021-08-26 | Fix |
| CVE-2021-29801 | IBM VIOS privilege escalation | 8.4CNA v3.0 | 0.3% | 2021-08-26 | Fix |
| CVE-2021-29772 | IBM API Connect code injection | 5.6CNA v3.0 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-29727 | IBM AIX denial of service | 6.2CNA v3.0 | 0.2% | 2021-08-26 | Fix |
| CVE-2021-29715 | IBM API Connect information disclosure | 6.5CNA v3.0 | 1.6% | 2021-08-26 | Fix |
| CVE-2021-29487 | Authentication bypass in Octobercms | 7.4CNA v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-27944 | Vizio E50x-e1 OS command injection | 9.8v3.1 | 3.5% | 2021-08-26 | |
| CVE-2021-20815 | Six Apart Movable Type Edit Boilerplate screen cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20814 | Six Apart Movable Type cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20813 | Six Apart Movable Type Edit screen of Content Data cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20812 | Six Apart Movable Type setting screen of Server Sync cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20811 | Six Apart Movable Type List of Assets screen cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20810 | Six Apart Movable Type Website Management screen cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20809 | Six Apart Movable Type Create screens of Entry cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20808 | Six Apart Movable Type Search screen cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-26 | Fix |
| CVE-2021-20793 | Sony Hap Music Transfer untrusted search path | 7.8v3.1 | 0.3% | 2021-08-26 | Fix |
| CVE-2021-3734 | Improper restriction of rendered UI layers or frames in yourls/yourls | 8.8v3.1 | 0.4% | 2021-08-26 | |
| CVE-2021-40089 | PrimeKey EJBCA General Purpose Custom Publisher vulnerability | 2.3v3.1 | 0.2% | 2021-08-25 | Fix |
| CVE-2021-40088 | Primekey EJBCA missing authorization | 5.4v3.1 | 0.4% | 2021-08-25 | Fix |
| CVE-2021-40087 | Primekey EJBCA cleartext storage of sensitive information | 2.7v3.1 | 0.4% | 2021-08-25 | Fix |
| CVE-2021-40086 | Primekey EJBCA information disclosure | 2.2v3.1 | 0.5% | 2021-08-25 | Fix |
| CVE-2021-40084 | Artixlinux Opensysusers code injection | 9.8v3.1 | 2.7% | 2021-08-25 | Fix |
| CVE-2021-40083 | NIC Knot Resolver reachable assertion | 7.5v3.1 | 1.4% | 2021-08-25 | Fix |
| CVE-2021-39160 | Code injection in nbgitpuller | 9.6CNA v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-39159 | Remote code execution in Binderhub | 9.6CNA v3.1 | 1.9% | 2021-08-25 | Fix |
| CVE-2021-39136 | baserproject basercms cross-site scripting vulnerability in file upload | 8.7CNA v3.1 | 0.9% | 2021-08-25 | Fix |
| CVE-2021-39112 | Atlassian Jira Server reverse tabnabbing | 4.8v3.1 | 0.7% | 2021-08-25 | Fix |
| CVE-2021-37334 | umbraco Forms arbitrary file deletion | 9.8v3.1 | 2.7% | 2021-08-25 | Fix |
| CVE-2021-37154 | ForgeRock Access Management XML injection | 9.8v3.1 | 1.4% | 2021-08-25 | Fix |
| CVE-2021-37153 | ForgeRock Access Management Active Directory identity store authentication bypass | 9.8v3.1 | 1.2% | 2021-08-25 | Fix |
| CVE-2021-33886 | B. Braun Spacecom2 format string | 8.8v3.1 | 0.8% | 2021-08-25 | Fix |
| CVE-2021-33885 | B. Braun Spacecom2 improper signature verification | 9.8v3.1 | 5.6% | 2021-08-25 | Fix |
| CVE-2021-33884 | B. Braun Spacecom2 unrestricted file upload | 9.1v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-33883 | B. Braun Spacecom2 cleartext transmission of sensitive information | 7.5v3.1 | 0.8% | 2021-08-25 | Fix |
| CVE-2021-33882 | B. Braun Spacecom2 missing authentication | 8.6v3.1 | 1.1% | 2021-08-25 | Fix |
| CVE-2021-33605 | Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20 | 4.3CNA v3.1 | 0.7% | 2021-08-25 | Fix |
| CVE-2021-33015 | Cscape uninitialized pointer access | 7.8v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-32995 | Cscape out-of-bounds write | 7.8v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-32975 | Cscape out-of-bounds read | 7.8v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-31989 | Axis Communications AXIS Device Manager cleartext storage of sensitive information in memory | 5.3v3.1 | 0.4% | 2021-08-25 | Fix |
| CVE-2021-28070 | PopojiCMS cross-site request forgery | 4.3v3.1 | 0.4% | 2021-08-25 | |
| CVE-2021-22256 | GitLab improper authorization | 5.4CNA v3.1 | 0.7% | 2021-08-25 | Fix |
| CVE-2021-22250 | GitLab improper authorization | 5.4CNA v3.1 | 0.8% | 2021-08-25 | Fix |
| CVE-2021-22247 | GitLab improper authorization | 4.3CNA v3.1 | 0.9% | 2021-08-25 | Fix |
| CVE-2021-22245 | GitLab improper input validation | 2.7CNA v3.1 | 1.4% | 2021-08-25 | Fix |
| CVE-2021-22244 | GitLab vulnerability report feature improper authorization | 3.1CNA v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-22243 | GitLab incorrect authorization | 5.0CNA v3.1 | 0.5% | 2021-08-25 | Fix |
| CVE-2021-22242 | GitLab cross-site scripting | 8.7CNA v3.1 | 63.6% | 2021-08-25 | Fix |
| CVE-2021-22237 | GitLab session fixation | 6.6CNA v3.1 | 0.8% | 2021-08-25 | Fix |
| CVE-2021-22236 | GitLab incorrect authorization | 5.5CNA v3.1 | 0.9% | 2021-08-25 | Fix |
| CVE-2021-21869 | CODESYS deserialization of untrusted data | 7.8v3.1 | 1.8% | 2021-08-25 | Fix |
| CVE-2021-21850 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21849 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21848 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21842 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21841 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21840 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21836 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21835 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.4% | 2021-08-25 | Fix |
| CVE-2021-21834 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-21778 | MZ Automation" ASDU message processing functionality denial of service | 7.5v3.1 | 1.3% | 2021-08-25 | |
| CVE-2021-3713 | QEMU UAS out-of-bounds write | 7.4NVD v3.1 | 0.6% | 2021-08-25 | Fix |
| CVE-2021-3605 | OpenEXR out-of-bounds read | 5.5NVD v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-1592 | Cisco UCS Manager Software SSH Sessions denial of service | 4.3CNA v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-1591 | Cisco Nexus 9500 Series Switches Access Control List Bypass vulnerability | 5.8CNA v3.1 | 1.0% | 2021-08-25 | Fix |
| CVE-2021-1590 | Cisco NX-OS Software system login block-for denial of service | 5.3CNA v3.1 | 1.4% | 2021-08-25 | Fix |
| CVE-2021-1588 | Cisco NX-OS Software MPLS OAM denial of service | 8.6CNA v3.1 | 1.3% | 2021-08-25 | Fix |
| CVE-2021-1587 | Cisco NX-OS Software VXLAN OAM (NGOAM) denial of service | 8.6CNA v3.1 | 1.7% | 2021-08-25 | Fix |
| CVE-2021-1586 | Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP denial of service | 8.6CNA v3.1 | 2.5% | 2021-08-25 | Fix |
| CVE-2021-1584 | Cisco Nexus 9000 Series Fabric Switches ACI Mode privilege escalation | 6.0CNA v3.1 | 0.4% | 2021-08-25 | Fix |
| CVE-2021-1583 | Cisco Nexus 9000 Series Fabric Switches ACI Mode arbitrary file read | 4.4CNA v3.1 | 0.2% | 2021-08-25 | Fix |
| CVE-2021-1582 | Cisco Application Policy Infrastructure Controller stored cross-site scripting | 5.4CNA v3.1 | 0.6% | 2021-08-25 | Fix |
| CVE-2021-1581 | Cisco Application Policy Infrastructure Controller command injection and file upload | 6.5CNA v3.1 | 1.1% | 2021-08-25 | Fix |
| CVE-2021-1580 | Cisco Application Policy Infrastructure Controller command injection and file upload | 6.5CNA v3.1 | 1.8% | 2021-08-25 | Fix |
| CVE-2021-1579 | Cisco Application Policy Infrastructure Controller App privilege escalation | 8.1CNA v3.1 | 2.1% | 2021-08-25 | Fix |
| CVE-2021-1578 | Cisco Application Policy Infrastructure Controller privilege escalation | 8.8CNA v3.1 | 2.0% | 2021-08-25 | Fix |
| CVE-2021-1577 | Cisco Application Policy Infrastructure Controller arbitrary file read and Write | 9.1CNA v3.1 | 1.3% | 2021-08-25 | Fix |
| CVE-2021-1523 | Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge denial of service | 8.6CNA v3.1 | 1.3% | 2021-08-25 | Fix |
| CVE-2021-39510 | D-Link DIR-816 command injection | 9.8v3.1 | 8.6% | 2021-08-24 | |
| CVE-2021-39509 | D-Link DIR-816 command injection | 9.8v3.1 | 5.1% | 2021-08-24 | |
| CVE-2021-39376 | Philips Tasy Electronic Medical Record SQL injection | 8.8v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-39375 | Philips Tasy Electronic Medical Record SQL injection | 8.8v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-39157 | Improper handling of exceptional conditions in detect-character-encoding | 7.5CNA v3.1 | 2.1% | 2021-08-24 | Fix |
| CVE-2021-39156 | istio Fragments in Path may lead to Authorization Policy Bypass | 8.1CNA v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-39155 | istio Authorization Policy Bypass due to Case Insensitive Host Comparison | 8.3CNA v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-39137 | Consensus flaw during block processing in go-ethereum | 6.5CNA v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-38714 | Plib integer overflow | 8.8v3.1 | 2.9% | 2021-08-24 | Fix |
| CVE-2021-38613 | Nascent Remkon Device Manager unrestricted file upload | 9.8v3.1 | 4.5% | 2021-08-24 | Fix |
| CVE-2021-38612 | Nascent Remkon Device Manager path traversal | 7.5v3.1 | 1.7% | 2021-08-24 | Fix |
| CVE-2021-38611 | Nascent Remkon Device Manager Image upload function of the NASCENT command injection | 9.8v3.1 | 1.9% | 2021-08-24 | Fix |
| CVE-2021-38557 | Raspap incorrect permission assignment | 8.8v3.1 | 2.2% | 2021-08-24 | |
| CVE-2021-38556 | Command injection in RaspAP | 8.8v3.1 | 13.0% | 2021-08-24 | |
| CVE-2021-38306 | LG N1T1 OS command injection | 9.8v3.1 | 9.0% | 2021-08-24 | Fix |
| CVE-2021-37538 | SmartDataSoft SmartBlog Multiple SQL injection | 9.8v3.1 | 74.5% | 2021-08-24 | NucleiFix |
| CVE-2021-36690 | SQLite sqlite3 command-line shell vulnerability | 7.5NVD v3.1 | 3.9% | 2021-08-24 | Fix |
| CVE-2021-36385 | Cerner Mobile Care SQL injection | 9.8v3.1 | 2.7% | 2021-08-24 | Fix |
| CVE-2021-33191 | Apache NiFi MiNiFi C++ C2 protocol agent-update command OS command injection | 9.8v3.1 | 4.0% | 2021-08-24 | Fix |
| CVE-2021-32781 | envoyproxy envoy continued processing of requests after locally generated response | 8.6CNA v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-32780 | envoyproxy envoy incorrect handling of H/2 GOAWAY followed by SETTINGS frames | 8.6CNA v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-32779 | envoyproxy envoy incorrectly handling of URI #fragment element as part of the path element | 8.6CNA v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-32778 | envoyproxy envoy excessive CPU utilization when closing HTTP/2 streams | 5.8CNA v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-32777 | envoyproxy envoy incorrect concatenation of multiple value request headers in ext-authz extension | 8.6CNA v3.1 | 3.3% | 2021-08-24 | Fix |
| CVE-2021-32263 | Ok-file-formats out-of-bounds write | 7.8v3.1 | 0.9% | 2021-08-24 | |
| CVE-2021-31013 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-31010 | Apple iOS, macOS, watchOS sandbox bypass | 7.5v3.1 | 3.7% | 2021-08-24 | KEVFix |
| CVE-2021-31009 | Apple iOS, iPadOS and macOS HDF5 vulnerability | 9.8v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-31008 | Apple macOS type confusion | 8.8v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-31007 | Apple watchOS incorrect default permissions | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-31006 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-31005 | Apple macOS logic flaw | 7.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-31004 | Apple macOS race condition | 7.0v3.1 | 0.5% | 2021-08-24 | Fix |
| CVE-2021-31002 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-31001 | Apple iOS and iPadOS information disclosure | 6.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-31000 | Apple watchOS incorrect default permissions | 3.3v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30999 | Apple iOS and iPadOS incorrect default permissions | 4.3v3.1 | 0.5% | 2021-08-24 | Fix |
| CVE-2021-30998 | Apple iOS and iPadOS S/MIME encrypted email vulnerability | 5.3v3.1 | 0.5% | 2021-08-24 | Fix |
| CVE-2021-30997 | Apple iOS and iPadOS cleartext storage of sensitive information | 7.5v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30996 | Apple macOS race condition | 7.0v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30995 | Apple watchOS race condition | 7.0v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-30994 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs. | 3.3v3.1 | 0.6% | 2021-08-24 | Fix |
| CVE-2021-30993 | Apple watchOS buffer overflow | 8.1v3.1 | 2.3% | 2021-08-24 | Fix |
| CVE-2021-30992 | Apple iOS and iPadOS information disclosure | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30991 | Apple iOS and iPadOS out-of-bounds read | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30990 | Apple macOS logic flaw | 5.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30988 | Apple iOS and iPadOS insecure permissions | 5.5v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30987 | Apple macOS incorrect authorization | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30986 | Apple macOS Bluetooth vulnerability | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30985 | Apple iOS and iPadOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30984 | Apple watchOS race condition | 7.5v3.1 | 1.7% | 2021-08-24 | Fix |
| CVE-2021-30983 | Apple iOS and iPadOS buffer overflow | 7.8v3.1 | 2.9% | 2021-08-24 | KEVFix |
| CVE-2021-30982 | Apple macOS race condition | 5.9v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30981 | Apple macOS buffer overflow | 7.8v3.1 | 1.7% | 2021-08-24 | Fix |
| CVE-2021-30980 | Apple watchOS use-after-free | 7.8v3.1 | 1.4% | 2021-08-24 | Fix |
| CVE-2021-30979 | Apple macOS buffer overflow | 7.8v3.1 | 1.6% | 2021-08-24 | Fix |
| CVE-2021-30977 | Apple macOS buffer overflow | 7.8v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30976 | Apple macOS logic flaw | 5.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30975 | Apple macOS incorrect authorization | 8.6v3.1 | 1.8% | 2021-08-24 | Fix |
| CVE-2021-30973 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30972 | Apple macOS incorrect authorization | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30971 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-30970 | Apple macOS logic flaw | 5.5v3.1 | 14.7% | 2021-08-24 | Fix |
| CVE-2021-30969 | A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk. | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30968 | Apple watchOS link following | 5.5v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30967 | Apple iOS and iPadOS insecure permissions | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30966 | Apple watchOS logic flaw | 7.5v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30965 | Apple macOS logic flaw | 6.5v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-30964 | Apple watchOS incorrect permission assignment | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30963 | Apple macOS buffer overflow | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30962 | Apple macOS improper initialization | 5.5v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30961 | Apple macOS buffer overflow | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30960 | Apple watchOS buffer overflow | 5.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30959 | Apple macOS buffer overflow | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30958 | Apple watchOS out-of-bounds read | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30957 | Apple watchOS buffer overflow | 7.8v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-30956 | Apple iOS and iPadOS lock screen information disclosure | 2.4NVD v3.1 | 0.4% | 2021-08-24 | Fix |
| CVE-2021-30955 | Apple watchOS race condition | 7.0NVD v3.1 | 4.8% | 2021-08-24 | Exploit codeFix |
| CVE-2021-30954 | Apple watchOS type confusion | 7.8v3.1 | 1.4% | 2021-08-24 | Fix |
| CVE-2021-30953 | Apple watchOS out-of-bounds read | 8.8v3.1 | 1.9% | 2021-08-24 | Fix |
| CVE-2021-30952 | Apple Multiple Products integer overflow or wraparound | 7.8v3.1 | 7.0% | 2021-08-24 | KEVKCVFix |
| CVE-2021-30951 | Apple watchOS use-after-free | 8.8v3.1 | 1.9% | 2021-08-24 | Fix |
| CVE-2021-30950 | Apple macOS logic flaw | 5.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30949 | Apple watchOS out-of-bounds write | 7.8v3.1 | 2.1% | 2021-08-24 | Fix |
| CVE-2021-30948 | Apple iOS and iPadOS insufficiently protected credentials | 4.6v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30947 | Apple iOS, iPadOS, macOS, tvOS and watchOS sandbox vulnerability | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30946 | Apple watchOS logic flaw | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30945 | Apple iOS, iPadOS, macOS, tvOS and watchOS privilege escalation | 7.8v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30944 | Apple watchOS logic flaw | 5.5v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30943 | Apple watchOS insufficient session expiration | 4.3v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30942 | Apple watchOS out-of-bounds write | 7.8v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30941 | Apple macOS buffer overflow | 5.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30940 | Apple macOS buffer overflow | 5.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30939 | Apple watchOS out-of-bounds read | 7.8v3.1 | 4.1% | 2021-08-24 | Fix |
| CVE-2021-30938 | Apple macOS denial of service | 7.7v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30937 | Apple watchOS out-of-bounds write | 7.8v3.1 | 18.0% | 2021-08-24 | Exploit codeFix |
| CVE-2021-30936 | Apple watchOS use-after-free | 8.8v3.1 | 1.9% | 2021-08-24 | Fix |
| CVE-2021-30935 | Apple macOS logic flaw | 8.8v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30934 | Apple watchOS buffer overflow | 8.8v3.1 | 2.6% | 2021-08-24 | Fix |
| CVE-2021-30933 | Apple macOS race condition | 7.0v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30932 | Apple iOS and iPadOS lock screen vulnerability | 4.6v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30931 | Apple macOS logic flaw | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30930 | Apple macOS logic flaw | 5.3v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30929 | Apple macOS out-of-bounds write | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30928 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.4% | 2021-08-24 | Fix |
| CVE-2021-30927 | Apple watchOS use-after-free | 7.8v3.1 | 0.4% | 2021-08-24 | Fix |
| CVE-2021-30926 | Apple watchOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-30925 | Apple macOS incorrect authorization | 9.1v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-30924 | Apple macOS denial of service | 7.5v3.1 | 2.3% | 2021-08-24 | Fix |
| CVE-2021-30923 | Apple macOS race condition | 7.0v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30922 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30921 | Apple iOS and iPadOS logic flaw | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30920 | Apple macOS incorrect permission assignment | 5.5v3.1 | 0.2% | 2021-08-24 | Fix |
| CVE-2021-30919 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.6% | 2021-08-24 | Fix |
| CVE-2021-30918 | Apple iOS and iPadOS lock screen information disclosure | 2.4v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30917 | Apple macOS processing of ICC profiles memory corruption | 7.8v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30916 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.6% | 2021-08-24 | Fix |
| CVE-2021-30915 | Apple macOS logic flaw | 2.4v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30914 | Apple iOS and iPadOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30913 | Apple macOS NVRAM vulnerability | 5.5v3.1 | 1.6% | 2021-08-24 | Fix |
| CVE-2021-30912 | Apple macOS improper preservation of permissions | 5.5v3.1 | 1.6% | 2021-08-24 | Fix |
| CVE-2021-30911 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30910 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30909 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.4% | 2021-08-24 | Fix |
| CVE-2021-30908 | Apple macOS fast user switching vulnerability | 3.3v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30907 | Apple macOS integer overflow | 7.8v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30906 | Apple iOS, iPadOS, macOS, tvOS and watchOS privilege escalation | 7.8v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30905 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30904 | Apple macOS improper synchronization | 5.3v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30903 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30902 | Apple iOS and iPadOS use-after-free | 7.8v3.1 | 0.4% | 2021-08-24 | Fix |
| CVE-2021-30901 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS out-of-bounds write | 7.8v3.1 | 5.2% | 2021-08-24 | KEVKCVFix |
| CVE-2021-30899 | Apple macOS race condition | 7.0v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30898 | Apple iOS and iPadOS sandbox vulnerability | 5.5v3.1 | 0.2% | 2021-08-24 | Fix |
| CVE-2021-30897 | Apple macOS resource timing API vulnerability | 6.5v3.1 | 1.7% | 2021-08-24 | Fix |
| CVE-2021-30896 | Apple macOS logic flaw | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30895 | Apple macOS logic flaw | 5.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30894 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-08-24 | Fix |
| CVE-2021-30892 | Apple macOS incorrect permission assignment | 5.5v3.1 | 10.4% | 2021-08-24 | Fix |
| CVE-2021-30890 | Apple macOS cross-site scripting | 6.1v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30889 | Apple macOS buffer overflow | 8.8v3.1 | 1.9% | 2021-08-24 | Fix |
| CVE-2021-30888 | Apple macOS open redirect | 7.4v3.1 | 1.7% | 2021-08-24 | Fix |
| CVE-2021-30887 | Apple macOS logic flaw | 6.5v3.1 | 1.7% | 2021-08-24 | Fix |
| CVE-2021-30886 | Apple macOS use-after-free | 7.8v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-30884 | Apple iOS, iPadOS, tvOS and watchOS CSS compositing vulnerability | 4.7v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-30883 | Apple Multiple Products memory corruption | 7.8v3.1 | 14.7% | 2021-08-24 | KEVFix |
| CVE-2021-30882 | Apple watchOS logic flaw | 7.5v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30881 | Apple macOS improper input validation | 7.8v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-30880 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30879 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30877 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30876 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30875 | Apple iOS and iPadOS lock screen information disclosure | 3.3v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30874 | Apple iOS and iPadOS missing authorization | 7.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30873 | Apple macOS logic flaw | 7.8v3.1 | 0.8% | 2021-08-24 | Fix |
| CVE-2021-30871 | Apple iOS, macOS and watchOS analytics vulnerability | 5.5v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30870 | Apple iOS and iPadOS handling of document loads logic flaw | 6.5v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS type confusion | 7.8v3.1 | 4.1% | 2021-08-24 | KEVKCVFix |
| CVE-2021-30868 | Apple macOS race condition | 7.0v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30867 | Apple iOS and iPadOS improper authentication | 5.5v3.1 | 0.7% | 2021-08-24 | Fix |
| CVE-2021-30866 | Apple iOS, iPadOS, tvOS and watchOS Wi-Fi vulnerability | 6.5v3.1 | 0.5% | 2021-08-24 | Fix |
| CVE-2021-30865 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-30864 | Apple macOS logic flaw | 8.6v3.1 | 1.5% | 2021-08-24 | Fix |
| CVE-2021-30863 | Apple iOS and iPadOS spoofing | 6.8v3.1 | 0.3% | 2021-08-24 | Fix |
| CVE-2021-30862 | Apple iTunes U code execution | 6.1v3.1 | 1.8% | 2021-08-24 | Exploit codeFix |
| CVE-2021-30861 | Apple macOS logic flaw | 5.5v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-30860 | Apple Multiple Products integer overflow | 7.8NVD v3.1 | 76.0% | 2021-08-24 | KEVExploit codeFix |
| CVE-2021-30859 | Apple macOS type confusion | 7.8v3.1 | 1.2% | 2021-08-24 | Fix |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS use-after-free | 8.8v3.1 | 13.4% | 2021-08-24 | KEVExploit codeFix |
| CVE-2021-30857 | Apple macOS race condition | 7.0v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30856 | Apple macOS incorrect authorization | 9.1v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-30855 | Apple macOS link following | 5.5v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-30854 | Apple tvOS logic flaw | 8.6v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-30853 | Apple macOS out-of-bounds write | 5.5v3.1 | 7.0% | 2021-08-24 | Fix |
| CVE-2021-30852 | Apple tvOS type confusion | 8.8v3.1 | 1.4% | 2021-08-24 | Fix |
| CVE-2021-30851 | Apple tvOS out-of-bounds write | 8.8v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28633 | Adobe Creative Cloud Installer arbitrary file write | 6.1CNA v3.1 | 0.5% | 2021-08-24 | Fix |
| CVE-2021-28632 | Adobe Acrobat Reader DC AcroForm field use-after-free remote code execution | 7.8CNA v3.1 | 5.2% | 2021-08-24 | Fix |
| CVE-2021-28631 | Adobe Acrobat Reader DC AcroForm field use-after-free remote code execution | 7.8CNA v3.1 | 4.7% | 2021-08-24 | Fix |
| CVE-2021-28630 | Adobe Animate FLA File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.8% | 2021-08-24 | Fix |
| CVE-2021-28629 | Adobe Animate heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 7.8% | 2021-08-24 | Fix |
| CVE-2021-28628 | Adobe Experience Manager cross-site scripting vulnerability in inbox render.jsp | 6.3CNA v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-28627 | Adobe Experience Manager server-side request forgery could lead to security feature bypass | 5.4CNA v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-28626 | Adobe Experience Manager improper authorization at /content/usergenerated | 3.7CNA v3.1 | 1.3% | 2021-08-24 | Fix |
| CVE-2021-28625 | Adobe Experience Manager cross-site scripting vulnerability in inbox workitem.jsp | 6.3CNA v3.1 | 1.0% | 2021-08-24 | Fix |
| CVE-2021-28622 | Adobe Animate BMP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 4.0% | 2021-08-24 | Fix |
| CVE-2021-28621 | Adobe Animate FLA File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 4.3% | 2021-08-24 | Fix |
| CVE-2021-28620 | Adobe Animate heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 7.8% | 2021-08-24 | Fix |
| CVE-2021-28619 | Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure | 5.5CNA v3.1 | 3.2% | 2021-08-24 | Fix |
| CVE-2021-28618 | Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure | 5.5CNA v3.0 | 3.3% | 2021-08-24 | Fix |
| CVE-2021-28617 | Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure | 5.5CNA v3.0 | 3.3% | 2021-08-24 | Fix |
| CVE-2021-28616 | Adobe After Effects out-of-bounds read | 6.1CNA v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28615 | Adobe After Effects out-of-bounds read vulnerability could lead to sensitive information disclosure | 5.5CNA v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28614 | Adobe After Effects out-of-bounds read | 6.1CNA v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28612 | Adobe After Effects out-of-bounds read | 6.1CNA v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28611 | Adobe After Effects out-of-bounds read | 6.1CNA v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28610 | Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 5.7% | 2021-08-24 | Fix |
| CVE-2021-28609 | Adobe After Effects out-of-bounds read vulnerability could lead to sensitive information disclosure | 5.5CNA v3.0 | 2.5% | 2021-08-24 | Fix |
| CVE-2021-28608 | Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 5.9% | 2021-08-24 | Fix |
| CVE-2021-28607 | Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.4% | 2021-08-24 | Fix |
| CVE-2021-28606 | Adobe After Effects stack overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 5.9% | 2021-08-24 | Fix |
| CVE-2021-28605 | Adobe After Effects memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 3.0% | 2021-08-24 | Fix |
| CVE-2021-28604 | Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 5.3% | 2021-08-24 | Fix |
| CVE-2021-28603 | Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 5.3% | 2021-08-24 | Fix |
| CVE-2021-28602 | Adobe After Effects memory corruption could lead to code execution | 7.8CNA v3.1 | 3.3% | 2021-08-24 | Fix |
| CVE-2021-28601 | Adobe After Effects null pointer dereference | 3.3CNA v3.1 | 1.9% | 2021-08-24 | Fix |
| CVE-2021-28600 | Adobe After Effects out-of-bounds read vulnerability could lead to sensitive information disclosure | 5.5CNA v3.1 | 2.4% | 2021-08-24 | Fix |
| CVE-2021-28594 | Adobe Creative Cloud Desktop Application (installer) uncontrolled search path | 7.8CNA v3.1 | 2.7% | 2021-08-24 | Fix |
| CVE-2021-28554 | Adobe Acrobat Reader DC Path Parsing out-of-bounds read could lead to arbitrary code execution | 7.8CNA v3.1 | 46.0% | 2021-08-24 | Fix |
| CVE-2021-28552 | Adobe Acrobat Reader DC XFA template use-after-free remote code execution | 7.8CNA v3.1 | 4.7% | 2021-08-24 | Fix |
| CVE-2021-28551 | Adobe Acrobat Pro DC JPEG2000 Editing out-of-bounds read remote code execution | 7.8CNA v3.1 | 3.4% | 2021-08-24 | Fix |
| CVE-2021-26040 | Joomla! CMS core insufficient access control for com_media deletion endpoint | 9.1v3.1 | 0.9% | 2021-08-24 | Fix |
| CVE-2021-23432 | mootools prototype pollution | 9.8v3.1 | 0.9% | 2021-08-24 | |
| CVE-2021-23431 | Joplin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2021-08-24 | Fix |
| CVE-2021-23430 | startserver directory traversal | 7.5v3.1 | 1.8% | 2021-08-24 | |
| CVE-2021-23429 | transpile denial of service (DoS) | 7.5v3.1 | 1.0% | 2021-08-24 | |
| CVE-2021-23406 | pac-resolver remote code execution (RCE) | 9.8v3.1 | 2.9% | 2021-08-24 | Fix |
| CVE-2021-3712 | OpenSSL read buffer overruns processing ASN.1 strings | 7.4NVD v3.1 | 50.4% | 2021-08-24 | Fix |
| CVE-2021-3711 | OpenSSL SM2 Decryption buffer overflow | 9.8NVD v3.1 | 87.8% | 2021-08-24 | Fix |
| CVE-2021-39615 | D-Link Dsr-500n hard-coded credentials | 9.8v3.1 | 2.2% | 2021-08-23 | Fix |
| CVE-2021-39614 | D-Link Dvx-2000ms hard-coded credentials | 9.8v3.1 | 1.7% | 2021-08-23 | Fix |
| CVE-2021-39613 | D-Link Dvg-3104ms hard-coded credentials | 9.8v3.1 | 1.7% | 2021-08-23 | Fix |
| CVE-2021-39609 | Flatcore-cms cross-site scripting | 5.4v3.1 | 1.7% | 2021-08-23 | |
| CVE-2021-39608 | Flatcore-cms remote code execution | 7.2v3.1 | 45.9% | 2021-08-23 | Exploit code |
| CVE-2021-39602 | Miniftpd A buffer overflow | 6.5v3.1 | 0.8% | 2021-08-23 | |
| CVE-2021-39599 | Cxuucms Multiple cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-23 | |
| CVE-2021-39371 | XML external entity injection in PyWPS | 7.5v3.1 | 1.5% | 2021-08-23 | Fix |
| CVE-2021-39368 | Canon Oce Print Exec Workgroup cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-23 | |
| CVE-2021-39367 | Canon Oce Print Exec Workgroup host header injection | 5.3v3.1 | 0.8% | 2021-08-23 | |
| CVE-2021-39291 | NetModule NB1600 sensitive information in log files | 8.8v3.1 | 1.5% | 2021-08-23 | |
| CVE-2021-39290 | NetModule NB1600 session fixation | 9.8v3.1 | 1.5% | 2021-08-23 | |
| CVE-2021-39289 | NetModule NB1600 insufficiently protected credentials | 7.5v3.1 | 1.1% | 2021-08-23 | |
| CVE-2021-39245 | Altus Hadron Xtorm HX3040 hard-coded credentials | 7.5v3.1 | 1.3% | 2021-08-23 | |
| CVE-2021-39244 | Altus Hadron Xtorm HX3040 OS command injection | 8.8v3.1 | 3.5% | 2021-08-23 | |
| CVE-2021-39243 | Altus Hadron Xtorm HX3040 cross-site request forgery | 6.5v3.1 | 0.5% | 2021-08-23 | |
| CVE-2021-39158 | Dependency injection in NVCaffe | 8.8CNA v3.1 | 0.5% | 2021-08-23 | |
| CVE-2021-39154 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.7% | 2021-08-23 | Fix |
| CVE-2021-39153 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.5% | 2021-08-23 | Fix |
| CVE-2021-39152 | A Server-Side Forgery request vulnerability in XStream via HashMap unmarshaling | 8.5CNA v3.1 | 11.4% | 2021-08-23 | Reported exploitedNucleiFix |
| CVE-2021-39151 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.7% | 2021-08-23 | Fix |
| CVE-2021-39150 | A Server-Side Forgery request vulnerability in XStream via PriorityQueue unmarshaling | 8.5CNA v3.1 | 3.4% | 2021-08-23 | Fix |
| CVE-2021-39149 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.7% | 2021-08-23 | Fix |
| CVE-2021-39148 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.7% | 2021-08-23 | Fix |
| CVE-2021-39147 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.7% | 2021-08-23 | Fix |
| CVE-2021-39146 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 14.3% | 2021-08-23 | NucleiFix |
| CVE-2021-39145 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.1% | 2021-08-23 | Fix |
| CVE-2021-39144 | XStream remote code execution | 8.5CNA v3.1 | 98.1% | 2021-08-23 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-39141 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 16.1% | 2021-08-23 | NucleiExploit codeFix |
| CVE-2021-39140 | XStream can cause a denial of service | 6.5CNA v3.1 | 5.9% | 2021-08-23 | Fix |
| CVE-2021-39139 | XStream is vulnerable to an arbitrary code execution attack | 8.5CNA v3.1 | 4.5% | 2021-08-23 | Fix |
| CVE-2021-38598 | OpenStack Neutron vulnerable to hardware address impersonation | 9.1v3.1 | 1.2% | 2021-08-23 | Fix |
| CVE-2021-37750 | MIT Kerberos 5 null pointer dereference | 6.5NVD v3.1 | 2.5% | 2021-08-23 | Fix |
| CVE-2021-36013 | Adobe Media Encoder VOB File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.8% | 2021-08-23 | Fix |
| CVE-2021-35940 | Apache Portable Runtime apr_time_exp functions out-of-bounds read | 7.1v3.1 | 1.2% | 2021-08-23 | Fix |
| CVE-2021-35465 | Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Ar | 3.4v3.1 | 0.3% | 2021-08-23 | Fix |
| CVE-2021-33598 | F-Secure endpoint protection products on Windows, Mac and Linux Security denial of service (DoS) | 6.5v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-29802 | IBM Security improper privilege management | 5.6CNA v3.0 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-29704 | IBM Security weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-28596 | Adobe FrameMaker PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 2.3% | 2021-08-23 | Fix |
| CVE-2021-24658 | Erident Custom Login and Dashboard WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-24602 | HM Multiple Roles WordPress plugin arbitrary role Change | 8.8NVD v3.1 | 1.5% | 2021-08-23 | Fix |
| CVE-2021-24574 | Simple Banner WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-24571 | HD Quiz WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-24565 | Contact Form 7 Captcha WordPress plugin CSRF to stored XSS | 8.8NVD v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-24564 | WPFront Scroll Top WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-24562 | LifterLMS WordPress plugin access Other Student Grades/Answers via IDOR | 7.5NVD v3.1 | 1.6% | 2021-08-23 | Fix |
| CVE-2021-24561 | WP SMS WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-24558 | Project Status WordPress plugin reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-08-23 | |
| CVE-2021-24557 | M-vSlider WordPress plugin authenticated (admin+) SQL injection | 7.2NVD v3.1 | 1.5% | 2021-08-23 | |
| CVE-2021-24556 | Email Subscriber WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 1.3% | 2021-08-23 | |
| CVE-2021-24555 | Diary and Availability Calendar WordPress plugin authenticated (subscriber+) SQL injection | 8.8NVD v3.1 | 0.8% | 2021-08-23 | |
| CVE-2021-24554 | Paytm - Donation WordPress plugin authenticated (admin+) SQL injection | 7.2NVD v3.1 | 6.5% | 2021-08-23 | Nuclei |
| CVE-2021-24553 | Timeline Calendar WordPress plugin authenticated (admin+) SQL injection | 7.2NVD v3.1 | 1.6% | 2021-08-23 | |
| CVE-2021-24552 | Simple Events Calendar WordPress plugin authenticated (admin+) SQL injection | 7.2NVD v3.1 | 1.6% | 2021-08-23 | Fix |
| CVE-2021-24551 | Edit Comments WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.9% | 2021-08-23 | |
| CVE-2021-24550 | Broken Link Manager WordPress plugin authenticated (admin+) SQL injection | 7.2NVD v3.1 | 1.6% | 2021-08-23 | |
| CVE-2021-24549 | AceIDE WordPress plugin authenticated (admin+) arbitrary file access | 4.9NVD v3.1 | 1.6% | 2021-08-23 | |
| CVE-2021-24547 | KN Fix Your Title WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-23 | |
| CVE-2021-24533 | Maintenance WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-24531 | Charitable Donation WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-24529 | Grid Gallery WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-24524 | GiveWP WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-24506 | Slider Hero WordPress plugin Contributor+ SQL injection | 8.8NVD v3.1 | 1.4% | 2021-08-23 | Fix |
| CVE-2021-24497 | Giveaway WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.3% | 2021-08-23 | |
| CVE-2021-24486 | Simple Social Media Share Buttons WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-22449 | There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device. | 7.5v3.1 | 0.6% | 2021-08-23 | Fix |
| CVE-2021-22357 | Huawei S12700 There is a denial of service | 7.5v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-22328 | Huawei CloudEngine 12800 some denial of service | 7.5v3.1 | 0.7% | 2021-08-23 | Fix |
| CVE-2021-22253 | GitLab improper authorization | 4.9CNA v3.1 | 0.8% | 2021-08-23 | Fix |
| CVE-2021-22252 | GitLab protected CI variables vulnerability | 6.5CNA v3.1 | 1.1% | 2021-08-23 | Fix |
| CVE-2021-22251 | GitLab incorrect authorization | 4.3CNA v3.1 | 0.8% | 2021-08-23 | Fix |
| CVE-2021-22249 | GitLab information disclosure through error messages | 4.3CNA v3.1 | 1.0% | 2021-08-23 | Fix |
| CVE-2021-22248 | GitLab improper authorization | 5.3CNA v3.1 | 1.1% | 2021-08-23 | Fix |
| CVE-2021-3731 | Improper restriction of rendered UI layers or frames in LedgerSMB/LedgerSMB | 4.7v3.1 | 1.2% | 2021-08-23 | Fix |
| CVE-2021-3730 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 6.5v3.1 | 0.5% | 2021-08-23 | Fix |
| CVE-2021-3729 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 4.3v3.1 | 0.4% | 2021-08-23 | Fix |
| CVE-2021-3728 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 6.5v3.1 | 0.5% | 2021-08-23 | Fix |
| CVE-2021-3694 | Cross-site scripting (XSS) Reflected in LedgerSMB/LedgerSMB | 9.6v3.1 | 2.5% | 2021-08-23 | Fix |
| CVE-2021-3693 | Cross-site scripting (XSS) DOM in LedgerSMB/LedgerSMB | 9.6v3.1 | 3.2% | 2021-08-23 | Fix |
| CVE-2021-39365 | GNOME Grilo improper certificate validation | 5.9v3.1 | 0.9% | 2021-08-22 | Fix |
| CVE-2021-39362 | Recaptcha Solver An cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-22 | |
| CVE-2021-39361 | GNOME Evolution-rss improper certificate validation | 5.9v3.1 | 0.6% | 2021-08-22 | Fix |
| CVE-2021-39360 | GNOME Libzapojit improper certificate validation | 5.9v3.1 | 0.7% | 2021-08-22 | Fix |
| CVE-2021-39359 | GNOME Libgda improper certificate validation | 5.9v3.1 | 1.1% | 2021-08-22 | Fix |
| CVE-2021-39358 | GNOME Libgfbgraph improper certificate validation | 5.9v3.1 | 0.7% | 2021-08-22 | Fix |
| CVE-2021-38171 | FFmpeg unchecked return value | 9.8v3.1 | 2.4% | 2021-08-21 | Fix |
| CVE-2021-36748 | Prestahome Blog list controller of the SQL injection | 7.5v3.1 | 15.4% | 2021-08-20 | Nuclei |
| CVE-2021-36016 | Adobe Media Encoder FLV File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.6% | 2021-08-20 | Fix |
| CVE-2021-36015 | Adobe Media Encoder memory corruption could lead to remote code execution | 7.8CNA v3.1 | 3.5% | 2021-08-20 | Fix |
| CVE-2021-36014 | Adobe Media Encoder MP4 File Parsing uninitialized variable information disclosure | 3.3CNA v3.1 | 2.5% | 2021-08-20 | Fix |
| CVE-2021-36011 | Adobe Illustrator improper neutralization of special elements used in an OS command | 8.3CNA v3.1 | 1.9% | 2021-08-20 | Fix |
| CVE-2021-36010 | Adobe Illustrator SVG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.2% | 2021-08-20 | Fix |
| CVE-2021-36009 | Adobe Illustrator PDF File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 3.0% | 2021-08-20 | Fix |
| CVE-2021-36008 | Adobe Illustrator PDF File Parsing use-after-free information disclosure | 3.3CNA v3.1 | 2.5% | 2021-08-20 | Fix |
| CVE-2021-36007 | Adobe Prelude MP4 File Parsing uninitialized variable information disclosure | 3.3CNA v3.1 | 1.5% | 2021-08-20 | Fix |
| CVE-2021-36006 | Adobe Photoshop MP4 File Parsing uninitialized variable information disclosure | 3.3CNA v3.1 | 2.4% | 2021-08-20 | Fix |
| CVE-2021-36005 | Adobe Photoshop PSD File Parsing stack overflow | 7.8CNA v3.1 | 6.8% | 2021-08-20 | Fix |
| CVE-2021-36001 | Adobe Character Animator PNG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.5% | 2021-08-20 | Fix |
| CVE-2021-36000 | Adobe Character Animator memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.3% | 2021-08-20 | Fix |
| CVE-2021-35999 | Adobe Prelude memory corruption remote code execution | 7.8CNA v3.1 | 2.4% | 2021-08-20 | Fix |
| CVE-2021-35997 | Adobe Premiere Pro memory corruption remote code execution | 7.8CNA v3.1 | 3.9% | 2021-08-20 | Fix |
| CVE-2021-35992 | Adobe Bridge PostScript Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.5% | 2021-08-20 | Fix |
| CVE-2021-35991 | Adobe Bridge MP4 File Parsing uninitialized variable information disclosure | 3.3CNA v3.1 | 2.5% | 2021-08-20 | Fix |
| CVE-2021-35990 | Adobe Bridge JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.7% | 2021-08-20 | Fix |
| CVE-2021-35989 | Adobe Bridge PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.7% | 2021-08-20 | Fix |
| CVE-2021-35988 | Adobe Acrobat Pro DC out-of-bounds read Bug | 3.3CNA v3.1 | 2.1% | 2021-08-20 | Fix |
| CVE-2021-35987 | Adobe Acrobat Pro DC PDFLibTool out-of-bound read | 3.3CNA v3.1 | 2.1% | 2021-08-20 | Fix |
| CVE-2021-35986 | Adobe Acrobat Pro DC getAnnot type confusion information disclosure | 3.3CNA v3.1 | 2.7% | 2021-08-20 | Fix |
| CVE-2021-35985 | Adobe Acrobat Pro DC PDFLibTool null pointer dereference Bug | 5.5CNA v3.1 | 1.9% | 2021-08-20 | Fix |
| CVE-2021-35984 | Adobe Acrobat Pro DC PDFLibTool null pointer dereference Bug | 5.5CNA v3.1 | 1.8% | 2021-08-20 | Fix |
| CVE-2021-35983 | Adobe Acrobat Reader DC AcroForm use-after-free remote code execution | 7.8CNA v3.1 | 3.9% | 2021-08-20 | Fix |
| CVE-2021-35981 | Adobe Acrobat Reader DC launchURL use-after-free remote code execution | 7.8CNA v3.1 | 3.9% | 2021-08-20 | Fix |
| CVE-2021-35529 | Hitachi ABB Power Grids Retail Operations client environment insufficiently protected credentials | 7.7CNA v3.1 | 1.3% | 2021-08-20 | Fix |
| CVE-2021-34433 | The Eclipse Foundation Eclipse Californium key exchange without authentication | 7.5v3.1 | 0.3% | 2021-08-20 | Fix |
| CVE-2021-34228 | TOTOLINK A3002R parent_control.htm cross-site scripting | 6.1v3.1 | 29.2% | 2021-08-20 | Emerging Threats |
| CVE-2021-34223 | TOTOLINK A3002R urlfilter.htm cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-20 | |
| CVE-2021-34220 | TOTOLINK A3002R tr069config.htm cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-20 | |
| CVE-2021-34218 | TOTOLINK A3002R login portal vulnerability | 5.3v3.1 | 0.8% | 2021-08-20 | |
| CVE-2021-34215 | TOTOLINK A3002R tcpipwan.htm cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-20 | |
| CVE-2021-34207 | TOTOLINK A3002R ddns.htm cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-20 | |
| CVE-2021-28643 | Adobe Acrobat Pro DC embedDocAsDataObject type confusion information disclosure | 3.3CNA v3.1 | 1.9% | 2021-08-20 | Fix |
| CVE-2021-28642 | Adobe Acrobat Pro DC out-of-bounds write arbitrary code execution | 8.8CNA v3.1 | 3.7% | 2021-08-20 | Fix |
| CVE-2021-28641 | Adobe Acrobat Reader use-after-free arbitrary code execution | 7.8CNA v3.1 | 4.3% | 2021-08-20 | Fix |
| CVE-2021-28640 | Adobe Acrobat Reader use-after-free arbitrary code execution | 7.3CNA v3.1 | 53.4% | 2021-08-20 | Fix |
| CVE-2021-28639 | Adobe Acrobat Reader DC setAction use-after-free remote code execution | 7.8CNA v3.1 | 66.1% | 2021-08-20 | Fix |
| CVE-2021-28638 | Adobe Acrobat Reader DC PDF File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 4.9% | 2021-08-20 | Fix |
| CVE-2021-28637 | Adobe Acrobat Pro DC PDFLibTool out-of-bounds read remote code execution | 7.8CNA v3.1 | 2.9% | 2021-08-20 | Fix |
| CVE-2021-28636 | Adobe Acrobat Reader unquoted search path | 7.3CNA v3.1 | 2.2% | 2021-08-20 | Fix |
| CVE-2021-28635 | Adobe Acrobat Reader use-after-free | 7.8CNA v3.1 | 51.2% | 2021-08-20 | Fix |
| CVE-2021-28634 | Adobe Acrobat Reader AcrobatUtils.scpt Extension OS command injection | 8.2CNA v3.1 | 2.2% | 2021-08-20 | Fix |
| CVE-2021-28624 | Adobe Bridge SGI File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 7.2% | 2021-08-20 | Fix |
| CVE-2021-28595 | Adobe Dimension uncontrolled search path element could lead to remote code execution | 7.8CNA v3.1 | 3.8% | 2021-08-20 | Fix |
| CVE-2021-28593 | Adobe Illustrator PostScript Parsing use-after-free information disclosure | 3.3CNA v3.1 | 1.8% | 2021-08-20 | Fix |
| CVE-2021-28592 | Adobe Illustrator JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 1.9% | 2021-08-20 | Fix |
| CVE-2021-28591 | Adobe Illustrator PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 1.9% | 2021-08-20 | Fix |
| CVE-2021-28590 | Adobe Media Encoder VOB File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.8% | 2021-08-20 | Fix |
| CVE-2021-28589 | Adobe Media Encoder TS File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.8% | 2021-08-20 | Fix |
| CVE-2021-22255 | Baserow URL file upload server-side request forgery | 7.7CNA v3.1 | 1.3% | 2021-08-20 | Fix |
| CVE-2021-22254 | GitLab improper output encoding | 3.1CNA v3.1 | 0.9% | 2021-08-20 | Fix |
| CVE-2021-22246 | GitLab resource exhaustion | 7.7CNA v3.1 | 1.3% | 2021-08-20 | Fix |
| CVE-2021-22238 | GitLab cross-site scripting | 6.8CNA v3.1 | 71.8% | 2021-08-20 | Fix |
| CVE-2021-21828 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 1.1% | 2021-08-20 | Fix |
| CVE-2021-21827 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 1.1% | 2021-08-20 | Fix |
| CVE-2021-21826 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 1.1% | 2021-08-20 | Fix |
| CVE-2021-21823 | Komoot Friend finder functionality of GmbH information disclosure | 7.5v3.1 | 0.9% | 2021-08-20 | |
| CVE-2021-39302 | MISP SQL injection | 9.8v3.1 | 0.9% | 2021-08-19 | |
| CVE-2021-39274 | Xerosecurity SN1PER incorrect default permissions | 9.8v3.1 | 3.1% | 2021-08-19 | Fix |
| CVE-2021-39273 | Xerosecurity SN1PER incorrect default permissions | 8.8v3.1 | 2.7% | 2021-08-19 | Exploit codeFix |
| CVE-2021-39138 | parse-community parse-server new anonymous user session acts as if it's created with password | 4.8CNA v3.1 | 1.0% | 2021-08-19 | Fix |
| CVE-2021-37698 | Icinga 2 time series database writers improper certificate validation | 7.5CNA v3.1 | 1.4% | 2021-08-19 | Fix |
| CVE-2021-37598 | Wp Cerber incorrect authorization | 5.3v3.1 | 2.4% | 2021-08-19 | NucleiFix |
| CVE-2021-37597 | Wp Cerber improper authentication | 9.8v3.1 | 2.1% | 2021-08-19 | Fix |
| CVE-2021-36762 | HCC Embedded InterNiche NicheStack TFTP server vulnerability | 7.5v3.1 | 2.3% | 2021-08-19 | Fix |
| CVE-2021-34645 | Shopping Cart and eCommerce Store cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.6% | 2021-08-19 | Fix |
| CVE-2021-32602 | Fortinet FortiPortal cross-site scripting | 5.8CNA v3.1 | 0.6% | 2021-08-19 | Fix |
| CVE-2021-31868 | Rapid7 Nexpose legacy ticketing feature missing authentication | 4.3CNA v3.1 | 0.5% | 2021-08-19 | |
| CVE-2021-31401 | Hcc-embedded Nichestack integer overflow | 7.5v3.1 | 2.3% | 2021-08-19 | Fix |
| CVE-2021-31400 | Hcc-embedded Nichestack infinite loop | 7.5v3.1 | 1.5% | 2021-08-19 | Fix |
| CVE-2021-31338 | Siemens SINEMA Remote Connect Client external control of a configuration setting | 7.8v3.1 | 0.2% | 2021-08-19 | Fix |
| CVE-2021-31228 | Hcc-embedded Nichestack insufficient randomness | 7.5v3.1 | 1.3% | 2021-08-19 | Fix |
| CVE-2021-31227 | Hcc-embedded Nichestack out-of-bounds write | 7.5v3.1 | 1.7% | 2021-08-19 | Fix |
| CVE-2021-31226 | Hcc-embedded Interniche out-of-bounds write | 9.8v3.1 | 3.2% | 2021-08-19 | Fix |
| CVE-2021-29280 | TP-Link Tl-wr840n buffer overflow | 6.4v3.1 | 0.8% | 2021-08-19 | |
| CVE-2021-28490 | Cross-site request forgery in OWASP CSRFGuard | 8.8v3.1 | 0.5% | 2021-08-19 | Fix |
| CVE-2021-28002 | Textpattern cross-site scripting | 5.4v3.1 | 1.1% | 2021-08-19 | |
| CVE-2021-28001 | Textpattern cross-site scripting | 5.4v3.1 | 1.0% | 2021-08-19 | |
| CVE-2021-28000 | Local Services Search Engine Management System cross-site scripting | 4.8v3.1 | 0.9% | 2021-08-19 | |
| CVE-2021-27999 | Local Services Search Engine Management System SQL injection | 4.9v3.1 | 0.8% | 2021-08-19 | |
| CVE-2021-27822 | PHPGurukul Vehicle Parking Management System Add Categories module stored cross-site scripting | 4.8v3.1 | 0.6% | 2021-08-19 | |
| CVE-2021-27565 | Hcc-embedded Nichestack infinite loop | 7.5v3.1 | 2.6% | 2021-08-19 | Fix |
| CVE-2021-24038 | Facebook Oculus Desktop improper privilege management | 7.8v3.1 | 0.2% | 2021-08-19 | Fix |
| CVE-2021-39286 | Cross-site scripting in Pywb | 6.1v3.1 | 0.7% | 2021-08-18 | Fix |
| CVE-2021-39283 | LIVE555 reachable assertion | 5.5v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-39282 | LIVE555 memory leak | 7.5v3.1 | 1.5% | 2021-08-18 | Fix |
| CVE-2021-39270 | Ping Identity RSA SecurID Integration Kit origin validation error | 7.5NVD v3.1 | 0.4% | 2021-08-18 | |
| CVE-2021-39268 | salesagility SuiteCRM web interface stored cross-site scripting | 6.1v3.1 | 1.4% | 2021-08-18 | Fix |
| CVE-2021-39267 | salesagility SuiteCRM web interface stored cross-site scripting | 6.1v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-38710 | Yclas cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-18 | |
| CVE-2021-37714 | Uncaught exception in Jsoup | 7.5CNA v3.1 | 6.7% | 2021-08-18 | Fix |
| CVE-2021-37702 | Improper neutralization of formula elements in a CSV file in pimcore/pimcore | 8.0CNA v3.1 | 1.1% | 2021-08-18 | Fix |
| CVE-2021-37617 | Untrusted search path in Nextcloud Desktop client | 7.3CNA v3.1 | 0.5% | 2021-08-18 | |
| CVE-2021-37608 | Arbitrary file upload vulnerability in OFBiz | 9.8v3.1 | 6.0% | 2021-08-18 | |
| CVE-2021-37358 | Seacms SQL injection | 9.8v3.1 | 2.3% | 2021-08-18 | |
| CVE-2021-34749 | Multiple Cisco Products Server Name Identification Data Exfiltration vulnerability | 5.8CNA v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-34745 | Cisco AppDynamics .NET Agent privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-08-18 | Fix |
| CVE-2021-34734 | Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol double free | 6.5CNA v3.1 | 0.4% | 2021-08-18 | Fix |
| CVE-2021-34730 | Cisco RV110W, RV130, RV130W and RV215W Routers UPnP service stack-based buffer overflow | 9.8CNA v3.1 | 18.5% | 2021-08-18 | Exploit code |
| CVE-2021-34716 | Cisco Expressway Series and TelePresence Video Communication Server remote code execution | 6.7CNA v3.1 | 2.4% | 2021-08-18 | Fix |
| CVE-2021-34715 | Cisco Expressway Series and TelePresence Video Communication Server Image Verification vulnerability | 4.7CNA v3.1 | 1.1% | 2021-08-18 | Fix |
| CVE-2021-33580 | Apache Roller regex injection leading to DoS | 7.5v3.1 | 3.3% | 2021-08-18 | Fix |
| CVE-2021-32728 | Nextcloud security-advisories end-to-end encryption device setup did not verify public key | 6.5CNA v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-32588 | Fortinet FortiPortal hard-coded credentials | 9.8CNA v3.1 | 3.3% | 2021-08-18 | Fix |
| CVE-2021-31820 | Octopus Deploy Octopus Server cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2021-08-18 | Fix |
| CVE-2021-25218 | ISC BIND 9 reachable assertion | 7.5CNA v3.1 | 3.6% | 2021-08-18 | Fix |
| CVE-2021-23425 | trim-off-newlines regular expression denial of service (ReDoS) | 5.3v3.1 | 1.9% | 2021-08-18 | Fix |
| CVE-2021-23424 | ansi-html regular expression denial of service (ReDoS) | 7.5v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21868 | CODESYS deserialization of untrusted data | 7.8v3.1 | 1.6% | 2021-08-18 | Fix |
| CVE-2021-21867 | CODESYS deserialization of untrusted data | 7.8v3.1 | 1.6% | 2021-08-18 | Fix |
| CVE-2021-21862 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.4% | 2021-08-18 | Fix |
| CVE-2021-21858 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-21857 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-21856 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.4% | 2021-08-18 | Fix |
| CVE-2021-21855 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-21854 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-21853 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-21852 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21851 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 1.7% | 2021-08-18 | Fix |
| CVE-2021-21847 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21846 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21845 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21844 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21843 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21839 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21838 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21837 | GPAC integer overflow to buffer overflow | 8.8v3.1 | 2.0% | 2021-08-18 | Fix |
| CVE-2021-21825 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 2.3% | 2021-08-18 | Fix |
| CVE-2021-21781 | Linux kernel ARM SIGPAGE functionality information disclosure | 3.3NVD v3.1 | 0.5% | 2021-08-18 | Fix |
| CVE-2021-20792 | ExpressTech Quiz And Survey Master cross-site scripting | 6.1v3.1 | 3.4% | 2021-08-18 | NucleiFix |
| CVE-2021-20775 | Cybozu Garoon Bulletin improper input validation | 4.3v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-20774 | Cybozu Garoon some functions of E-mail cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-18 | Fix |
| CVE-2021-20773 | Cybozu Garoon Workflow vulnerability | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20772 | Cybozu Garoon Bulletin information disclosure | 4.3v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-20771 | Cybozu Garoon some functions of E-Mail cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20770 | Cybozu Garoon message cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-18 | Fix |
| CVE-2021-20769 | Cybozu Garoon Bulletin cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-18 | Fix |
| CVE-2021-20768 | Cybozu Garoon Scheduler and MultiReport vulnerability | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20767 | Cybozu Garoon Full Text Search cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-18 | Fix |
| CVE-2021-20766 | Cybozu Garoon message cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20765 | Cybozu Garoon Bulletin cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20764 | Cybozu Garoon Attaching files improper input validation | 5.3v3.1 | 1.0% | 2021-08-18 | Fix |
| CVE-2021-20763 | Cybozu Garoon Portal vulnerability | 4.3v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-20762 | Cybozu Garoon E-mail improper input validation | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20761 | Cybozu Garoon E-mail improper input validation | 2.7v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20760 | Cybozu Garoon User Profile improper input validation | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20759 | Cybozu Garoon Bulletin vulnerability | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20758 | Cybozu Garoon message cross-site request forgery | 8.0v3.1 | 0.5% | 2021-08-18 | Fix |
| CVE-2021-20757 | Cybozu Garoon E-mail vulnerability | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20756 | Cybozu Garoon Address vulnerability | 4.3v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-20755 | Cybozu Garoon Portal vulnerability | 4.3v3.1 | 0.9% | 2021-08-18 | Fix |
| CVE-2021-20754 | Cybozu Garoon Workflow improper input validation | 4.3v3.1 | 0.8% | 2021-08-18 | Fix |
| CVE-2021-20753 | Cybozu Garoon Scheduler cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-18 | Fix |
| CVE-2021-1561 | Cisco Secure Email And Web Manager Spam Quarantine unauthorized access | 5.4CNA v3.1 | 0.7% | 2021-08-18 | Fix |
| CVE-2021-0628 | MT6580 improper input validation in OMA DRM | 6.7NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0627 | MT6580 integer overflow or wraparound in OMA DRM | 6.7NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0626 | MT6768 out-of-bounds write in ged | 6.7NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0420 | MT6580 denial of service in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0419 | MT6580 denial of service in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0418 | MT6580 denial of service in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0417 | MT6580 use of insufficiently random values in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0416 | MT6580 improper input validation in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0415 | MT6580 information disclosure in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0408 | MT6570 improper check or handling of exceptional conditions in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-0407 | MT6739 write-what-where condition in clk driver | 6.7NVD v3.1 | 0.1% | 2021-08-18 | Fix |
| CVE-2021-39250 | invisioncommunity Invision Power Board cross-site scripting | 5.4v3.1 | 0.8% | 2021-08-17 | Fix |
| CVE-2021-39249 | invisioncommunity Invision Power Board insufficient randomness | 6.1v3.1 | 0.8% | 2021-08-17 | Fix |
| CVE-2021-39248 | edx-platform cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-17 | |
| CVE-2021-39247 | Zint Barcode Generator out-of-bounds read | 6.5v3.1 | 0.9% | 2021-08-17 | Fix |
| CVE-2021-39242 | HAProxy improper exception handling | 7.5v3.1 | 2.3% | 2021-08-17 | Fix |
| CVE-2021-39241 | HAProxy HTTP method parsing vulnerability | 5.3v3.1 | 1.8% | 2021-08-17 | Fix |
| CVE-2021-39240 | HAProxy HTTP/2 authority handling vulnerability | 7.5v3.1 | 2.3% | 2021-08-17 | Fix |
| CVE-2021-39131 | Improper handling of unexpected data type in ced | 7.5CNA v3.1 | 1.9% | 2021-08-17 | Fix |
| CVE-2021-38702 | Cyberoamworks Netgenie C0101b1-20141120-ng11vo cross-site scripting | 6.1v3.1 | 6.9% | 2021-08-17 | NucleiFix |
| CVE-2021-32830 | Command injection in @diez/generation | 7.0NVD v3.1 | 1.9% | 2021-08-17 | |
| CVE-2021-32829 | Post-authentication remote code execution (RCE) in ZStack REST API | 9.6CNA v3.1 | 2.9% | 2021-08-17 | Fix |
| CVE-2021-29990 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.0% | 2021-08-17 | Fix |
| CVE-2021-29989 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 1.3% | 2021-08-17 | Fix |
| CVE-2021-29988 | Mozilla Thunderbird out-of-bounds read | 8.8v3.1 | 1.4% | 2021-08-17 | Fix |
| CVE-2021-29987 | Mozilla Firefox missing brute-force protection | 6.5v3.1 | 0.9% | 2021-08-17 | Fix |
| CVE-2021-29986 | Mozilla Thunderbird race condition | 8.1v3.1 | 1.3% | 2021-08-17 | Fix |
| CVE-2021-29985 | Mozilla Thunderbird media channels use-after-free | 8.8v3.1 | 1.5% | 2021-08-17 | Fix |
| CVE-2021-29984 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 1.4% | 2021-08-17 | Fix |
| CVE-2021-29983 | Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 91. | 6.5v3.1 | 0.7% | 2021-08-17 | Fix |
| CVE-2021-29982 | Mozilla Firefox missing resource release | 6.5v3.1 | 1.1% | 2021-08-17 | Fix |
| CVE-2021-29981 | Mozilla Firefox crash | 8.8v3.1 | 1.0% | 2021-08-17 | Fix |
| CVE-2021-29980 | Mozilla Thunderbird canvas object uninitialized memory use | 8.8v3.1 | 1.4% | 2021-08-17 | Fix |
| CVE-2021-29313 | Seacms cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-17 | |
| CVE-2021-29056 | Pixelimity cross-site scripting | 4.8v3.1 | 0.5% | 2021-08-17 | |
| CVE-2021-28372 | ThroughTek Kalay P2P Software Development Kit authentication bypass by spoofing | 8.3v3.1 | 2.6% | 2021-08-17 | Fix |
| CVE-2021-25957 | Account takeover in Dolibarr via Password Reset Functionality | 8.8v3.1 | 1.1% | 2021-08-17 | Fix |
| CVE-2021-25956 | Improper User Access Control in Dolibarr leads to account takeover | 7.2v3.1 | 0.9% | 2021-08-17 | Fix |
| CVE-2021-25263 | Yandex Browser (Desktop) incorrect permission assignment | 7.8v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-22156 | BlackBerry QNX Software Development Platform integer overflow | 9.0CNA v3.1 | 1.8% | 2021-08-17 | Fix |
| CVE-2021-21832 | Disc ISO Parsing functionality memory corruption | 9.8v3.1 | 1.2% | 2021-08-17 | |
| CVE-2021-21810 | AT&T Labs XML-parsing ParseAttribs functionality memory corruption | 9.8v3.1 | 1.1% | 2021-08-17 | Fix |
| CVE-2021-3633 | Lenovo Driver Management improper signature verification | 7.3CNA v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-3617 | Lenovo Smart Camera X3 OS command injection | 7.2CNA v3.1 | 1.7% | 2021-08-17 | Fix |
| CVE-2021-3616 | Lenovo Smart Camera X3 improper authorization | 9.4CNA v3.1 | 0.9% | 2021-08-17 | Fix |
| CVE-2021-3615 | Lenovo Smart Camera X3 code injection | 6.6CNA v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-3459 | Motorola MM1000 MoCA Adapter OS command injection | 6.8CNA v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-3458 | Motorola MM1000 MoCA Adapter improper authentication | 6.1CNA v3.1 | 0.2% | 2021-08-17 | Fix |
| CVE-2021-0646 | Android sqlite3.c out-of-bounds write | 7.8v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0645 | Android ExternalStorageProvider.java insecure permissions | 7.8v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0642 | Android VoicemailSettingsFragment.java information disclosure | 5.5v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0641 | Android SubscriptionController.java information disclosure | 5.5v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0640 | Android StatsdStats.cpp out-of-bounds write | 7.8v3.1 | 0.2% | 2021-08-17 | Fix |
| CVE-2021-0639 | Android libl3oemcrypto.cpp information disclosure | 5.5v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0593 | Android DevicePickerFragment.java privilege escalation | 7.8v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0591 | Android BluetoothPermissionActivity.java privilege escalation | 7.3v3.1 | 0.4% | 2021-08-17 | Fix |
| CVE-2021-0584 | Android Parcel.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0582 | Android out-of-bounds read in wifi driver | 6.5v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0581 | Android out-of-bounds read in wifi driver | 6.5v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0580 | Android integer underflow in wifi driver | 6.5v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0579 | Android buffer over-read in wifi driver | 6.5v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0578 | Android out-of-bounds read in wifi driver | 6.5v3.1 | 0.3% | 2021-08-17 | Fix |
| CVE-2021-0576 | Android heap overflow in flv extractor | 7.8v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0574 | Android out-of-bounds write in asf extractor | 7.8v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0573 | Android improper check or handling of exceptional conditions in asf extractor | 7.8v3.1 | 0.1% | 2021-08-17 | Fix |
| CVE-2021-0519 | Android ih264e_bitstream.h out-of-bounds write | 7.8NVD v3.1 | 0.2% | 2021-08-17 | Fix |
| CVE-2021-0284 | Juniper Networks Junos OS TCP/IP stack buffer overflow | 7.5CNA v3.1 | 1.0% | 2021-08-17 | Fix |
| CVE-2021-38758 | Online Catering Reservation System path traversal | 7.5v3.1 | 2.3% | 2021-08-16 | |
| CVE-2021-38757 | Hospital Management System stored cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-38756 | Hospital Management System stored cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-16 | |
| CVE-2021-38755 | Hospital Management System missing authorization | 5.3v3.1 | 1.0% | 2021-08-16 | |
| CVE-2021-38754 | Hospital Management System SQL injection | 9.8v3.1 | 1.8% | 2021-08-16 | |
| CVE-2021-38753 | Simple Image Gallery Web App unrestricted file upload | 9.8v3.1 | 1.5% | 2021-08-16 | |
| CVE-2021-38752 | Online Catering Reservation System cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-16 | |
| CVE-2021-38751 | Exponent CMS improper output encoding | 4.3v3.1 | 2.5% | 2021-08-16 | Nuclei |
| CVE-2021-38713 | Cross-site scripting in imgURL | 5.4v3.1 | 0.5% | 2021-08-16 | |
| CVE-2021-38712 | OneNav information disclosure | 7.5v3.1 | 1.1% | 2021-08-16 | |
| CVE-2021-38711 | Gitit files accessible to external parties | 7.5v3.1 | 1.3% | 2021-08-16 | Fix |
| CVE-2021-38709 | Composr CMS cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-38708 | Composr CMS cross-site scripting | 5.4v3.1 | 0.5% | 2021-08-16 | Fix |
| CVE-2021-38608 | Tranquil WAPT privilege escalation | 7.8v3.1 | 0.3% | 2021-08-16 | Fix |
| CVE-2021-38607 | Crocoblock JetEngine cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-38315 | SP Project and Document Manager reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | Fix |
| CVE-2021-37711 | shopware platform authenticated server-side request forgery in file upload via URL | 8.8CNA v3.1 | 1.1% | 2021-08-16 | Fix |
| CVE-2021-37710 | shopware platform cross-site scripting via SVG media files | 8.0CNA v3.1 | 0.7% | 2021-08-16 | Fix |
| CVE-2021-37709 | shopware platform insecure direct object reference of log files of the Import/Export feature | 6.5CNA v3.1 | 0.8% | 2021-08-16 | Fix |
| CVE-2021-37708 | shopware platform command injection in mail agent settings | 8.8CNA v3.1 | 2.4% | 2021-08-16 | Fix |
| CVE-2021-37707 | shopware platform manipulation of product reviews via API | 6.5CNA v3.1 | 0.9% | 2021-08-16 | Fix |
| CVE-2021-36282 | Dell PowerScale OneFS uninitialized resource use | 2.5CNA v3.1 | 0.2% | 2021-08-16 | Fix |
| CVE-2021-36281 | Dell PowerScale OneFS incorrect permission assignment | 7.5CNA v3.1 | 0.7% | 2021-08-16 | Fix |
| CVE-2021-36280 | Dell PowerScale OneFS incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2021-08-16 | Fix |
| CVE-2021-36279 | Dell PowerScale OneFS incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2021-08-16 | Fix |
| CVE-2021-36278 | Dell PowerScale OneFS sensitive information in log files | 8.1CNA v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-35936 | Apache Airflow no authentication on Logging Server | 5.3v3.1 | 5.5% | 2021-08-16 | Fix |
| CVE-2021-35395 | Realtek AP-Router SDK buffer overflow | 9.8v3.1 | 98.0% | 2021-08-16 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-35394 | Realtek Jungle SDK remote code execution | 9.8v3.1 | 99.9% | 2021-08-16 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-35393 | Realtek RTL819X Jungle Software Development Kit out-of-bounds write | 9.8v3.1 | 68.3% | 2021-08-16 | Emerging ThreatsFix |
| CVE-2021-35392 | Realtek RTL819X Jungle Software Development Kit out-of-bounds write | 7.5v3.1 | 83.2% | 2021-08-16 | Emerging ThreatsFix |
| CVE-2021-34667 | Calendar_plugin reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34666 | The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the ~/wp_sidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0. | 6.1v3.1 | 0.8% | 2021-08-16 | |
| CVE-2021-34665 | WP SEO Tags reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-16 | |
| CVE-2021-34664 | Moova for WooCommerce reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | Fix |
| CVE-2021-34663 | jQuery Tagline Rotator reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34659 | Plugmatter Pricing Table Lite reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34658 | Simple Popup Newsletter reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34657 | TypoFR reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-16 | |
| CVE-2021-34656 | 2Way VideoCalls and Random Chat HTML5 Webcam Videochat reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | Fix |
| CVE-2021-34655 | WP Songbook reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-16 | |
| CVE-2021-34654 | Custom Post Type Relations reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34653 | WP Fountain reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34652 | Media Usage reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-16 | |
| CVE-2021-34651 | Scribble Maps reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34649 | Simple Behance Portfolio reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34644 | Multiplayer Games reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34643 | Skaut Bazar reflected cross-site scripting | 6.1v3.1 | 2.4% | 2021-08-16 | NucleiFix |
| CVE-2021-34642 | Smart Email Alerts reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-16 | |
| CVE-2021-34641 | SEOPress authenticated stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-33193 | Request splitting via HTTP/2 method injection and mod_proxy | 7.5v3.1 | 46.2% | 2021-08-16 | Fix |
| CVE-2021-32827 | Arbitrary code execution in MockServer | 9.6NVD v3.1 | 2.2% | 2021-08-16 | Fix |
| CVE-2021-32826 | Remote code execution in Proxyee-Down | 8.1NVD v3.1 | 1.1% | 2021-08-16 | |
| CVE-2021-32825 | bblfshd archive unpacking path traversal | 9.1NVD v3.1 | 0.9% | 2021-08-16 | Fix |
| CVE-2021-32822 | pillarjs hbs template rendering configuration vulnerability | 5.3NVD v3.1 | 1.2% | 2021-08-16 | |
| CVE-2021-26086 | Atlassian Jira Server and Data Center path traversal | 5.3v3.1 | 100.0% | 2021-08-16 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-24548 | Mimetic Books WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-16 | |
| CVE-2021-24541 | Wonder PDF Embed WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-24540 | Wonder Video Embed WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-24538 | Current Book WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-16 | |
| CVE-2021-24536 | Custom Login Redirect WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.4% | 2021-08-16 | |
| CVE-2021-24535 | Light Messages WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.4% | 2021-08-16 | |
| CVE-2021-24534 | PhoneTrack Meu Site Manager WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-24527 | Profile Builder WordPress plugin admin access via password reset | 9.8NVD v3.1 | 7.6% | 2021-08-16 | NucleiFix |
| CVE-2021-24526 | Form Maker WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 1.1% | 2021-08-16 | Fix |
| CVE-2021-24519 | Vik Rent Car WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-24518 | WPFront Notification Bar WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.7% | 2021-08-16 | Fix |
| CVE-2021-24512 | Video Posts Webcam Recorder WordPress plugin authenticated reflected XSS | 5.4NVD v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-24471 | YouTube Embed WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-24466 | Verse-O-Matic WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.4% | 2021-08-16 | |
| CVE-2021-24445 | My Site Audit WordPress plugin authenticated stored cross-site scripting (XSS) | 5.5NVD v3.1 | 0.7% | 2021-08-16 | Fix |
| CVE-2021-24411 | Social Tape WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.4% | 2021-08-16 | |
| CVE-2021-24410 | Telugu Bible Verse Daily WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.4% | 2021-08-16 | |
| CVE-2021-24380 | Shantz WordPress QOTD plugin arbitrary setting update via CSRF | 4.3NVD v3.1 | 0.5% | 2021-08-16 | |
| CVE-2021-24363 | Photo Gallery WordPress plugin file upload path traversal | 4.9NVD v3.1 | 1.9% | 2021-08-16 | Fix |
| CVE-2021-24362 | Photo Gallery WordPress plugin stored cross-site scripting via Uploaded SVG | 6.1NVD v3.1 | 0.8% | 2021-08-16 | Fix |
| CVE-2021-23423 | bikeshed directory traversal | 7.5v3.1 | 1.1% | 2021-08-16 | Fix |
| CVE-2021-23422 | bikeshed arbitrary code injection | 7.8v3.1 | 0.8% | 2021-08-16 | Fix |
| CVE-2021-22940 | Node.js Node use-after-free | 7.5v3.1 | 13.9% | 2021-08-16 | Fix |
| CVE-2021-22939 | Node.js Node improper certificate validation | 5.3v3.1 | 14.7% | 2021-08-16 | Fix |
| CVE-2021-22938 | Pulse Connect Secure command injection | 7.2v3.1 | 2.1% | 2021-08-16 | Fix |
| CVE-2021-22937 | Pulse Connect Secure unrestricted file upload | 7.2v3.1 | 7.8% | 2021-08-16 | Fix |
| CVE-2021-22936 | Pulse Connect Secure cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-16 | Fix |
| CVE-2021-22935 | Pulse Connect Secure command injection | 7.2v3.1 | 2.1% | 2021-08-16 | Fix |
| CVE-2021-22934 | Pulse Connect Secure buffer overflow | 7.2v3.1 | 4.7% | 2021-08-16 | Fix |
| CVE-2021-22933 | Pulse Connect Secure path traversal | 6.5v3.1 | 1.4% | 2021-08-16 | Fix |
| CVE-2021-22932 | Citrix ShareFile Storage Zones Controller missing encryption | 7.5v3.1 | 0.4% | 2021-08-16 | Fix |
| CVE-2021-22931 | Node.js Node improper null termination | 9.8v3.1 | 22.0% | 2021-08-16 | Fix |
| CVE-2021-21861 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.6% | 2021-08-16 | Fix |
| CVE-2021-21860 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.6% | 2021-08-16 | Fix |
| CVE-2021-21859 | GPAC Project integer overflow to buffer overflow | 8.8v3.1 | 1.6% | 2021-08-16 | Fix |
| CVE-2021-21599 | Dell PowerScale OneFS OS command injection | 6.0CNA v3.1 | 0.4% | 2021-08-16 | Fix |
| CVE-2021-21595 | Dell PowerScale OneFS command injection | 6.0CNA v3.1 | 0.2% | 2021-08-16 | Fix |
| CVE-2021-21594 | Dell PowerScale OneFS sensitive query strings | 8.2CNA v3.1 | 0.8% | 2021-08-16 | Fix |
| CVE-2021-21592 | Dell PowerScale OneFS improper exception handling | 3.1CNA v3.1 | 0.8% | 2021-08-16 | Fix |
| CVE-2021-21568 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability. An authenticated user with ISI_PRIV_LOGIN_PAPI could make un-audited and un-trackable configuration changes to settings that their roles have privileges to change. | 4.3CNA v3.1 | 0.6% | 2021-08-16 | Fix |
| CVE-2021-3708 | D-Link DSL-2750U OS command injection | 7.8v3.1 | 24.6% | 2021-08-16 | Fix |
| CVE-2021-3707 | D-Link DSL-2750U external control of a configuration setting | 5.5v3.1 | 1.5% | 2021-08-16 | Exploit codeFix |
| CVE-2021-0114 | Intel(R) Processors firmware for some unchecked return value | 6.7NVD v3.1 | 0.3% | 2021-08-16 | Fix |
| CVE-2021-38699 | TastyIgniter cross-site scripting | 5.4NVD v3.1 | 8.0% | 2021-08-15 | Exploit code |
| CVE-2021-37326 | NetSarang Xshell information disclosure | 5.3v3.1 | 0.8% | 2021-08-15 | Fix |
| CVE-2021-25955 | Stored XSS in Dolibarr leads to privilege escalation | 9.0v3.1 | 0.9% | 2021-08-15 | Fix |
| CVE-2021-38623 | Deferred Image Processing improper resource shutdown or release in TYPO3 extension | 7.5v3.1 | 1.0% | 2021-08-13 | Fix |
| CVE-2021-38621 | Netless Flat Server cloudStorage remove API vulnerability | 9.1v3.1 | 1.0% | 2021-08-13 | |
| CVE-2021-38619 | Openbaraza Human Capital Management cross-site scripting | 6.1v3.1 | 2.0% | 2021-08-13 | Exploit code |
| CVE-2021-38583 | Openbaraza Human Capital Management cross-site scripting | 6.1v3.1 | 1.6% | 2021-08-13 | Exploit code |
| CVE-2021-38554 | Improper removal of sensitive information before storage or transfer in HashiCorp Vault | 5.3v3.1 | 0.9% | 2021-08-13 | Fix |
| CVE-2021-38553 | HashiCorp Vault underlying database had excessively broad filesystem permissions from until | 4.4v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-38302 | Newsletter SQL injection in TYPO3 extension | 9.8v3.1 | 1.0% | 2021-08-13 | Fix |
| CVE-2021-37705 | Microsoft improper authorization and origin validation error in OneFuzz | 10.0CNA v3.1 | 2.4% | 2021-08-13 | Fix |
| CVE-2021-37703 | Information exposure in Discourse | 4.3CNA v3.1 | 0.8% | 2021-08-13 | Fix |
| CVE-2021-37695 | Execution of JavaScript code using malformed HTML in CKEditor | 7.3CNA v3.1 | 1.3% | 2021-08-13 | Fix |
| CVE-2021-37693 | Re-use of email tokens in Discourse | 5.3CNA v3.1 | 0.8% | 2021-08-13 | Fix |
| CVE-2021-37690 | tensorflow use-after-free and segfault in shape inference functions | 6.6CNA v3.1 | 0.2% | 2021-08-13 | Fix |
| CVE-2021-37586 | Mitel Interaction Recording improper input validation | 4.9v3.1 | 0.8% | 2021-08-13 | Fix |
| CVE-2021-37353 | Nagios Xi Docker Wizard server-side request forgery | 9.8v3.1 | 2.9% | 2021-08-13 | Fix |
| CVE-2021-37352 | Nagios XI An open redirect | 6.1v3.1 | 6.1% | 2021-08-13 | Fix |
| CVE-2021-37351 | Nagios XI incorrect default permissions | 5.3v3.1 | 2.8% | 2021-08-13 | Fix |
| CVE-2021-37350 | Nagios XI SQL injection | 9.8v3.1 | 79.3% | 2021-08-13 | Fix |
| CVE-2021-37349 | Nagios XI local privilege escalation | 7.8v3.1 | 0.7% | 2021-08-13 | Fix |
| CVE-2021-37348 | Nagios XI files accessible to external parties | 7.5v3.1 | 2.8% | 2021-08-13 | Fix |
| CVE-2021-37347 | Nagios XI path traversal | 7.8v3.1 | 0.8% | 2021-08-13 | KCVFix |
| CVE-2021-37346 | Nagios Xi Watchguard Wizard OS command injection | 9.8v3.1 | 73.6% | 2021-08-13 | Fix |
| CVE-2021-37345 | Nagios XI improper privilege management | 7.8v3.1 | 0.6% | 2021-08-13 | Fix |
| CVE-2021-37344 | Nagios Xi Switch Wizard OS command injection | 9.8v3.1 | 96.8% | 2021-08-13 | Fix |
| CVE-2021-37343 | Nagios XI path traversal | 8.8v3.1 | 23.8% | 2021-08-13 | MetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-37028 | EchoLife HG8045Q There is a command injection | 6.7v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-36793 | Routes CSRF token exposure in TYPO3 extension | 7.5v3.1 | 1.0% | 2021-08-13 | Fix |
| CVE-2021-36792 | Dated News TYPO3 extension vulnerability | 7.2v3.1 | 0.7% | 2021-08-13 | Fix |
| CVE-2021-36791 | Dated News information disclosure | 5.3v3.1 | 0.8% | 2021-08-13 | Fix |
| CVE-2021-36790 | Dated News cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-13 | Fix |
| CVE-2021-36789 | Dated News SQL injection | 9.8v3.1 | 1.0% | 2021-08-13 | Fix |
| CVE-2021-36788 | Yoast SEO cross-site scripting in the yoast_seo TYPO3 extension | 5.4v3.1 | 0.5% | 2021-08-13 | Fix |
| CVE-2021-36787 | Cross-site scripting in the femanager TYPO3 extension | 5.4v3.1 | 1.3% | 2021-08-13 | Fix |
| CVE-2021-36786 | miniOrange saml sensitive data exposure in miniorange_saml | 7.5v3.1 | 1.0% | 2021-08-13 | Fix |
| CVE-2021-36785 | miniOrange saml cross-site scripting in TYPO3 extension | 5.4v3.1 | 0.5% | 2021-08-13 | Fix |
| CVE-2021-36380 | Sunhillo SureLine OS command injection Vulnerablity | 9.8v3.1 | 97.6% | 2021-08-13 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-34823 | ON24 Screenshare XML external entity injection | 9.1v3.1 | 2.0% | 2021-08-13 | |
| CVE-2021-34398 | NVIDIA Data Center GPU Manager (DCGM) inclusion of untrusted functionality | 7.8CNA v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-32072 | Mitel MiCollab improper output encoding | 6.5v3.1 | 0.8% | 2021-08-13 | Fix |
| CVE-2021-32071 | Mitel MiCollab improper access control | 9.8v3.1 | 1.2% | 2021-08-13 | Fix |
| CVE-2021-32070 | Mitel MiCollab clickjacking | 5.4v3.1 | 0.6% | 2021-08-13 | Fix |
| CVE-2021-32069 | Mitel MiCollab improper certificate validation | 4.8v3.1 | 0.5% | 2021-08-13 | Fix |
| CVE-2021-32068 | Mitel MiCollab resource exhaustion | 3.7v3.1 | 0.6% | 2021-08-13 | Fix |
| CVE-2021-32067 | Mitel MiCollab improper output encoding | 6.5v3.1 | 0.7% | 2021-08-13 | Fix |
| CVE-2021-31399 | 2N Access Unit 2.0 improper certificate validation | 5.9v3.1 | 0.8% | 2021-08-13 | Fix |
| CVE-2021-29880 | IBM QRadar SIEM information disclosure | 5.3CNA v3.0 | 0.9% | 2021-08-13 | Fix |
| CVE-2021-27741 | Commerce XML external entity injection | 9.1v3.1 | 1.2% | 2021-08-13 | Fix |
| CVE-2021-27402 | Mitel MiCollab path traversal | 6.5v3.1 | 1.1% | 2021-08-13 | Fix |
| CVE-2021-27401 | Mitel MiCollab cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-13 | Fix |
| CVE-2021-21830 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 2.3% | 2021-08-13 | Fix |
| CVE-2021-21829 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 2.5% | 2021-08-13 | Fix |
| CVE-2021-21815 | AT&T Xmill stack-based buffer overflow | 7.8v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-21814 | AT&T argument injection | 7.8v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-21813 | AT&T out-of-bounds write | 7.8v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-21812 | AT&T Xmill stack-based buffer overflow | 7.8v3.1 | 0.3% | 2021-08-13 | Fix |
| CVE-2021-3635 | Linux kernel netfilter netflow commands vulnerability | 4.4NVD v3.1 | 0.2% | 2021-08-13 | Fix |
| CVE-2021-3573 | Linux kernel function hci_sock_bound_ioctl of the use-after-free | 6.4NVD v3.1 | 0.4% | 2021-08-13 | Fix |
| CVE-2021-3352 | Mitel MiContact Center Business software development kit improper authorization | 9.1v3.1 | 1.0% | 2021-08-13 | Fix |
| CVE-2021-1104 | RISCV.org Machine Trap Base Address (MTVEC) Register uninitialized resource use | 9.8v3.1 | 1.7% | 2021-08-13 | |
| CVE-2021-38614 | polipo out-of-bounds write | 7.5v3.1 | 1.2% | 2021-08-12 | |
| CVE-2021-38606 | yogeshojha rengine insufficient randomness | 9.8v3.1 | 1.2% | 2021-08-12 | |
| CVE-2021-38604 | GNU glibc null pointer dereference | 7.5NVD v3.1 | 3.7% | 2021-08-12 | Fix |
| CVE-2021-38603 | PluXml cross-site scripting | 4.8v3.1 | 1.1% | 2021-08-12 | Exploit codeFix |
| CVE-2021-38602 | PluXml cross-site scripting | 4.8v3.1 | 0.8% | 2021-08-12 | Exploit codeFix |
| CVE-2021-38599 | Improper use of cryptographic key in Wal-g | 7.5v3.1 | 0.8% | 2021-08-12 | Fix |
| CVE-2021-38597 | wolfSSL insufficient verification of data authenticity | 5.9v3.1 | 0.5% | 2021-08-12 | Fix |
| CVE-2021-38593 | Qt out-of-bounds write | 7.5v3.1 | 3.0% | 2021-08-12 | Fix |
| CVE-2021-38592 | wasm3 out-of-bounds write | 7.5v3.1 | 1.3% | 2021-08-12 | |
| CVE-2021-38591 | An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can change some of the NvRAM content by leveraging the misconfiguration of a debug command. The LG ID is LVE-SMP-210005 (August 2021). | 3.3v3.1 | 0.1% | 2021-08-12 | |
| CVE-2021-38366 | Sitecore unrestricted file upload | 8.8v3.1 | 2.9% | 2021-08-12 | |
| CVE-2021-38291 | FFmpeg reachable assertion | 7.5v3.1 | 2.7% | 2021-08-12 | Fix |
| CVE-2021-38088 | Acronis Cyber Protect local privilege escalation | 7.8v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-38087 | Acronis Cyber Protect cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-38086 | Acronis Cyber Protect uncontrolled search path | 7.8v3.1 | 0.3% | 2021-08-12 | Fix |
| CVE-2021-37841 | Docker Desktop incorrect permission assignment | 7.8v3.1 | 0.7% | 2021-08-12 | Fix |
| CVE-2021-37704 | PHPSocialNetwork phpfastcache exposed phpinfo leadked via documentation files | 5.4CNA v3.1 | 6.1% | 2021-08-12 | NucleiFix |
| CVE-2021-37700 | GitHub paste-markdown clipboard-based DOM-XSS | 6.5CNA v3.1 | 1.7% | 2021-08-12 | Fix |
| CVE-2021-37699 | Open redirect in Next.js versions | 6.9CNA v3.1 | 1.0% | 2021-08-12 | Fix |
| CVE-2021-37692 | Segfault on strings tensors with mistmatched dimensions in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37691 | Division by zero in LSH in TensorFlow Lite | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37689 | Null pointer dereference in TensorFlow Lite MLIR optimizations | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37688 | Null pointer dereference in TensorFlow Lite | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37687 | Heap OOB in TensorFlow Lite's `Gather*` implementations | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37686 | Infinite loop in TensorFlow Lite | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37685 | Heap OOB in TensorFlow Lite | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37684 | Division by zero in TensorFlow Lite pooling operations | 5.5CNA v3.1 | 0.1% | 2021-08-12 | Fix |
| CVE-2021-37683 | Division by zero in TensorFlow Lite division operations | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37682 | tensorflow use of unitialized value in TFLite | 4.4CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37681 | Null pointer exception in TensorFlow Lite | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37680 | Division by zero in TFLite in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37679 | Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow | 7.1CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37678 | tensorflow arbitrary code execution due to YAML deserialization | 9.3CNA v3.1 | 0.4% | 2021-08-12 | Exploit codeFix |
| CVE-2021-37677 | Missing validation in shape inference for `Dequantize` in TensorFlow | 5.5CNA v3.1 | 0.1% | 2021-08-12 | Fix |
| CVE-2021-37676 | Reference binding to nullptr in shape inference in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |