CVE-2021 records published in August 2021
Page two of two: records 1,001 to 1,807 of the 1,807 published in August 2021, newest first. The first page carries the figures for August 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-37675 | Division by 0 in most convolution operators in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37674 | Incomplete validation in `MaxPoolGrad` in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37673 | `CHECK`-fail in `MapStage` in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37672 | Heap OOB in `SdcaOptimizerV2` in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37671 | Reference binding to nullptr in map operations in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37670 | Heap OOB in `UpperBound` and `LowerBound` in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37669 | Crash in NMS ops caused by integer conversion to unsigned in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37668 | Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex` | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37667 | Reference binding to nullptr in unicode encoding in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37666 | Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37665 | Incomplete validation in MKL requantization in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37664 | Heap OOB in boosted trees in TensorFlow | 7.3CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37663 | Incomplete validation in `QuantizeV2` in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37662 | Reference binding to nullptr in boosted trees in TensorFlow | 7.1CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37661 | Crash caused by integer conversion to unsigned in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37660 | Division by 0 in inplace operations in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37659 | Out-of-bounds read via null pointer dereference in TensorFlow | 7.3CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37658 | Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow | 7.1CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37657 | Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow | 7.1CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37656 | Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow | 7.1CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37655 | Heap OOB in `ResourceScatterUpdate` in TensorFlow | 7.3CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37654 | Heap OOB and CHECK fail in `ResourceGather` in TensorFlow | 7.3CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37653 | Google TensorFlow ResourceGather op divide-by-zero | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37652 | tensorflow use-after-free in boosted trees creation | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37651 | Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow | 7.1CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37650 | Google TensorFlow DatasetToTFRecord op buffer overflow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37649 | Null pointer dereference in `UncompressElement` in TensorFlow | 7.7CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37648 | Incorrect validation of `SaveV2` inputs in TensorFlow | 7.8CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37647 | Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow | 7.7CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37646 | Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37645 | Integer overflow due to conversion to unsigned in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37644 | `std::abort` raised from `TensorListReserve` in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37643 | Null pointer dereference in `MatrixDiagPartOp` in TensorFlow | 7.7CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37642 | Google TensorFlow ResourceScatterDiv op divide-by-zero | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37641 | Heap OOB in `RaggedGather` in TensorFlow | 7.3CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37640 | Integer division by 0 in sparse reshaping in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37639 | Null pointer dereference and heap OOB read in TensorFlow | 8.4CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37638 | Null pointer dereference in `RaggedTensorToTensor` in TensorFlow | 7.7CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37637 | Null pointer dereference in `CompressElement` in TensorFlow | 7.7CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37636 | Floating point exception in `SparseDenseCwiseDiv` in TensorFlow | 5.5CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37635 | Heap out-of-bounds access in sparse reduction operations in TensorFlow | 7.3CNA v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-37599 | Nuance Winscribe Dictation SQL injection | 9.8v3.1 | 3.1% | 2021-08-12 | Fix |
| CVE-2021-37222 | Rcdcap denial of service | 9.8v3.1 | 2.5% | 2021-08-12 | Fix |
| CVE-2021-36982 | Monitorapp Application Insight Web Application Firewall OS command injection | 8.1v3.1 | 2.5% | 2021-08-12 | Fix |
| CVE-2021-36958 | Microsoft Windows Print Spooler remote code execution | 7.8CNA v3.1 | 30.8% | 2021-08-12 | Fix |
| CVE-2021-36950 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 1.0% | 2021-08-12 | Fix |
| CVE-2021-36949 | Microsoft Azure Active Directory Connect authentication bypass | 7.1CNA v3.1 | 1.4% | 2021-08-12 | Fix |
| CVE-2021-36948 | Microsoft Windows Update Medic service privilege escalation | 7.8CNA v3.1 | 23.3% | 2021-08-12 | KEVFix |
| CVE-2021-36947 | Microsoft Windows Print Spooler remote code execution | 8.8CNA v3.1 | 7.6% | 2021-08-12 | Fix |
| CVE-2021-36946 | Microsoft Dynamics Business Central cross-site scripting | 5.4CNA v3.1 | 1.0% | 2021-08-12 | Fix |
| CVE-2021-36945 | Microsoft Windows 10 Update Assistant elevation of privilege | 7.3CNA v3.1 | 1.9% | 2021-08-12 | Fix |
| CVE-2021-36943 | Microsoft Azure CycleCloud elevation of privilege | 4.0CNA v3.1 | 0.8% | 2021-08-12 | Fix |
| CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) spoofing | 7.5CNA v3.1 | 66.0% | 2021-08-12 | KEVFix |
| CVE-2021-36941 | Microsoft Word remote code execution | 7.8CNA v3.1 | 2.2% | 2021-08-12 | Fix |
| CVE-2021-36940 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 4.0% | 2021-08-12 | Fix |
| CVE-2021-36938 | Microsoft Windows Cryptographic Primitives library information disclosure | 5.5CNA v3.1 | 0.9% | 2021-08-12 | Fix |
| CVE-2021-36937 | Microsoft Windows Media MPEG-4 Video Decoder remote code execution | 7.8CNA v3.1 | 2.3% | 2021-08-12 | Fix |
| CVE-2021-36936 | Microsoft Windows Print Spooler remote code execution | 8.8CNA v3.1 | 7.5% | 2021-08-12 | Fix |
| CVE-2021-36933 | Microsoft Windows services for NFS ONCRPC XDR driver information disclosure | 7.5CNA v3.1 | 3.5% | 2021-08-12 | Fix |
| CVE-2021-36932 | Microsoft Windows services for NFS ONCRPC XDR driver information disclosure | 7.5CNA v3.1 | 3.5% | 2021-08-12 | Fix |
| CVE-2021-36927 | Microsoft Windows Digital TV Tuner device registration application elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-08-12 | Fix |
| CVE-2021-36926 | Microsoft Windows services for NFS ONCRPC XDR driver information disclosure | 7.5CNA v3.1 | 3.5% | 2021-08-12 | Fix |
| CVE-2021-36921 | Monitorapp Application Insight Web Application Firewall improper authentication | 8.8v3.1 | 1.4% | 2021-08-12 | Fix |
| CVE-2021-35955 | contao cross-site scripting via HTML attributes in the back end | 4.8v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-34537 | Microsoft Windows Bluetooth driver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-08-12 | Fix |
| CVE-2021-34536 | Microsoft Windows Storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-34535 | Microsoft Remote Desktop client remote code execution | 8.8CNA v3.1 | 21.9% | 2021-08-12 | Fix |
| CVE-2021-34534 | Microsoft Windows MSHTML Platform remote code execution | 6.8CNA v3.1 | 2.2% | 2021-08-12 | Fix |
| CVE-2021-34533 | Microsoft Windows Graphics Component Font Parsing remote code execution | 7.8CNA v3.1 | 2.4% | 2021-08-12 | Fix |
| CVE-2021-34532 | Microsoft ASP.NET Core and Visual Studio information disclosure | 5.5CNA v3.1 | 1.2% | 2021-08-12 | Fix |
| CVE-2021-34530 | Microsoft Windows Graphics component remote code execution | 7.8CNA v3.1 | 2.4% | 2021-08-12 | Fix |
| CVE-2021-34524 | Microsoft Dynamics 365 On-Premises remote code execution | 8.1CNA v3.1 | 3.6% | 2021-08-12 | Fix |
| CVE-2021-34487 | Microsoft Windows Event Tracing elevation of privilege | 7.0CNA v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-34486 | Microsoft Windows Event Tracing privilege escalation | 7.8CNA v3.1 | 9.3% | 2021-08-12 | KEVExploit codeFix |
| CVE-2021-34485 | Microsoft .NET Core and Visual Studio information disclosure | 5.0CNA v3.1 | 2.1% | 2021-08-12 | Fix |
| CVE-2021-34484 | Microsoft Windows User Profile service privilege escalation | 7.8CNA v3.1 | 21.8% | 2021-08-12 | KEVFix |
| CVE-2021-34483 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-08-12 | Fix |
| CVE-2021-34480 | Microsoft Windows scripting Engine memory corruption | 6.8CNA v3.1 | 34.2% | 2021-08-12 | Fix |
| CVE-2021-34478 | Microsoft Office remote code execution | 7.8CNA v3.1 | 51.5% | 2021-08-12 | Fix |
| CVE-2021-34471 | Microsoft Defender elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-08-12 | Fix |
| CVE-2021-33762 | Microsoft Azure CycleCloud elevation of privilege | 7.0CNA v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-33199 | ExpressionEngine improper input validation | 9.8v3.1 | 1.4% | 2021-08-12 | Fix |
| CVE-2021-33056 | Linphone Belle-sip HTTP request smuggling | 7.5v3.1 | 1.3% | 2021-08-12 | |
| CVE-2021-32809 | Arbitrary HTML injection vulnerability in CKEditor | 4.6CNA v3.1 | 1.2% | 2021-08-12 | Fix |
| CVE-2021-32808 | Cross-site scripting in CKEditor via abuse of undo functionality | 7.6CNA v3.1 | 1.2% | 2021-08-12 | Fix |
| CVE-2021-31731 | Kitesky Kitecms A path traversal | 6.5v3.1 | 1.3% | 2021-08-12 | |
| CVE-2021-31698 | Quectel Eg25-g OS command injection | 9.8v3.1 | 2.0% | 2021-08-12 | |
| CVE-2021-31556 | mediawiki improper quantity validation | 9.8v3.1 | 1.6% | 2021-08-12 | Fix |
| CVE-2021-29377 | Pearadmin Think unrestricted file upload | 9.8v3.1 | 1.6% | 2021-08-12 | |
| CVE-2021-28890 | J2eeFAST SQL injection | 9.8v3.1 | 1.3% | 2021-08-12 | |
| CVE-2021-28121 | Virtual Robots.txt robots.txt field vulnerability | 9.8v3.1 | 1.7% | 2021-08-12 | Fix |
| CVE-2021-27794 | Brocade Fabric OS improper authentication | 7.8v3.1 | 0.2% | 2021-08-12 | Fix |
| CVE-2021-27793 | Brocade Fabric OS incorrect authorization | 5.3v3.1 | 0.9% | 2021-08-12 | Fix |
| CVE-2021-27792 | Brocade Fabric OS crash | 7.8v3.1 | 0.3% | 2021-08-12 | Fix |
| CVE-2021-27791 | Brocade Fabric OS out-of-bounds read | 5.4v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-27790 | Brocade Fabric OS out-of-bounds write | 7.8v3.1 | 0.5% | 2021-08-12 | Fix |
| CVE-2021-26433 | Microsoft Windows services for NFS ONCRPC XDR driver information disclosure | 7.5CNA v3.1 | 3.6% | 2021-08-12 | Fix |
| CVE-2021-26432 | Microsoft Windows services for NFS ONCRPC XDR driver remote code execution | 9.8CNA v3.1 | 11.4% | 2021-08-12 | Fix |
| CVE-2021-26431 | Microsoft Windows Recovery Environment agent elevation of privilege | 7.8CNA v3.1 | 1.2% | 2021-08-12 | Fix |
| CVE-2021-26430 | Microsoft Azure Sphere denial of service | 6.0CNA v3.1 | 0.7% | 2021-08-12 | Fix |
| CVE-2021-26429 | Microsoft Azure Sphere elevation of privilege | 7.7CNA v3.1 | 0.6% | 2021-08-12 | Fix |
| CVE-2021-26428 | Microsoft Azure Sphere information disclosure | 4.4CNA v3.1 | 0.9% | 2021-08-12 | Fix |
| CVE-2021-26426 | Microsoft Windows User Account Profile Picture elevation of privilege | 7.0CNA v3.1 | 0.7% | 2021-08-12 | Fix |
| CVE-2021-26425 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-08-12 | Fix |
| CVE-2021-26424 | Microsoft Windows TCP/IP remote code execution | 9.9CNA v3.1 | 61.1% | 2021-08-12 | Fix |
| CVE-2021-26423 | Microsoft .NET Core and Visual Studio denial of service | 7.5CNA v3.1 | 3.9% | 2021-08-12 | Fix |
| CVE-2021-20509 | IBM Maximo Asset Management CSV injection | 7.0CNA v3.0 | 1.7% | 2021-08-12 | Fix |
| CVE-2021-20314 | libspf2 stack-based buffer overflow | 9.8NVD v3.1 | 2.8% | 2021-08-12 | Fix |
| CVE-2021-38590 | cPanel incorrect permission assignment | 5.5v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-38589 | cPanel fix-cpanel-perl script vulnerability | 8.1v3.1 | 0.9% | 2021-08-11 | Fix |
| CVE-2021-38588 | cPanel download without integrity check | 8.1v3.1 | 0.4% | 2021-08-11 | Fix |
| CVE-2021-38587 | cPanel race condition | 7.5v3.1 | 0.6% | 2021-08-11 | Fix |
| CVE-2021-38586 | cPanel cpan_config script vulnerability | 4.4v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-38585 | cPanel deserialization of untrusted data | 7.2v3.1 | 1.0% | 2021-08-11 | Fix |
| CVE-2021-38584 | cPanel XML external entity injection | 7.2v3.1 | 0.9% | 2021-08-11 | Fix |
| CVE-2021-38574 | Foxit Reader SQL injection | 9.8v3.1 | 1.0% | 2021-08-11 | |
| CVE-2021-38573 | Foxit Reader and PhantomPDF CombineFiles function vulnerability | 9.8v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-38572 | Foxit Reader and PhantomPDF extractPages function vulnerability | 9.8v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-38571 | Foxit Reader uncontrolled search path | 7.8v3.1 | 0.5% | 2021-08-11 | |
| CVE-2021-38570 | Foxit Reader link following | 9.1v3.1 | 1.2% | 2021-08-11 | |
| CVE-2021-38569 | Foxit Reader uncontrolled recursion | 7.5v3.1 | 1.0% | 2021-08-11 | |
| CVE-2021-38568 | Foxit Reader out-of-bounds write | 9.8v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-38567 | Foxit PDF Reader null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-11 | |
| CVE-2021-38566 | Foxit Software PDF Editor uncontrolled recursion | 7.5v3.1 | 1.0% | 2021-08-11 | |
| CVE-2021-38565 | Foxit PDF Reader and PDF Editor submitForm function vulnerability | 7.5v3.1 | 0.8% | 2021-08-11 | |
| CVE-2021-38564 | Foxit Software PDF Editor out-of-bounds read | 9.1v3.1 | 1.1% | 2021-08-11 | Fix |
| CVE-2021-38563 | Foxit PDF Reader improper array index validation | 9.8v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-38549 | MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We assume | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38548 | JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a dev | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38547 | Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the int | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38546 | CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity o | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38545 | Raspberry Pi 3 Model B+ and 4 Model B power LED vulnerability | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38544 | Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38543 | TP-Link UE330 USB splitter power LED vulnerability | 5.9v3.1 | 1.3% | 2021-08-11 | |
| CVE-2021-38539 | NETGEAR R7300DST privilege escalation | 8.8v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-38538 | NETGEAR RAX120 cross-site scripting | 6.1v3.1 | 0.4% | 2021-08-11 | Fix |
| CVE-2021-38537 | NETGEAR AC2100 cross-site scripting | 4.8v3.1 | 0.4% | 2021-08-11 | Fix |
| CVE-2021-38536 | NETGEAR AC2100 cross-site scripting | 4.8v3.1 | 0.5% | 2021-08-11 | Fix |
| CVE-2021-38535 | NETGEAR AC2100 cross-site scripting | 4.8v3.1 | 0.5% | 2021-08-11 | Fix |
| CVE-2021-38534 | NETGEAR DGND2200B cross-site scripting | 4.8v3.1 | 0.5% | 2021-08-11 | Fix |
| CVE-2021-38533 | NETGEAR RAX40 cross-site scripting | 5.4v3.1 | 0.5% | 2021-08-11 | Fix |
| CVE-2021-38532 | NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings. | 7.2v3.1 | 0.9% | 2021-08-11 | Fix |
| CVE-2021-38531 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before | 7.2v3.1 | 0.4% | 2021-08-11 | Fix |
| CVE-2021-38530 | NETGEAR RBS50Y command injection | 9.8v3.1 | 2.2% | 2021-08-11 | Fix |
| CVE-2021-38529 | NETGEAR D7800 command injection | 9.8v3.1 | 1.7% | 2021-08-11 | Fix |
| CVE-2021-38528 | NETGEAR WNDR3400 command injection | 9.8v3.1 | 2.0% | 2021-08-11 | Fix |
| CVE-2021-38527 | NETGEAR EX6100 command injection | 9.8v3.1 | 1.7% | 2021-08-11 | Fix |
| CVE-2021-38526 | NETGEAR RAX35 buffer overflow | 7.5v3.1 | 1.0% | 2021-08-11 | Fix |
| CVE-2021-38525 | NETGEAR EX6200 out-of-bounds write | 7.2v3.1 | 1.0% | 2021-08-11 | Fix |
| CVE-2021-38524 | NETGEAR RAX200 out-of-bounds write | 4.9v3.1 | 0.9% | 2021-08-11 | Fix |
| CVE-2021-38523 | NETGEAR R6400 out-of-bounds write | 7.2v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-38522 | NETGEAR R6400 out-of-bounds write | 7.2v3.1 | 1.2% | 2021-08-11 | Fix |
| CVE-2021-38521 | NETGEAR R7900P command injection | 7.2v3.1 | 0.9% | 2021-08-11 | Fix |
| CVE-2021-38520 | NETGEAR R7000P command injection | 7.2v3.1 | 1.5% | 2021-08-11 | Fix |
| CVE-2021-38519 | NETGEAR R7100LG command injection | 7.2v3.1 | 1.4% | 2021-08-11 | Fix |
| CVE-2021-38518 | NETGEAR RAX200 command injection | 7.2v3.1 | 1.4% | 2021-08-11 | Fix |
| CVE-2021-38517 | NETGEAR R6400 out-of-bounds read | 7.2v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-38516 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 bef | 9.8v3.1 | 1.3% | 2021-08-11 | Fix |
| CVE-2021-38515 | NETGEAR R6400 denial of service | 7.5v3.1 | 1.2% | 2021-08-11 | Fix |
| CVE-2021-38514 | NETGEAR DGND2200B authentication bypass | 2.7v3.1 | 0.7% | 2021-08-11 | Fix |
| CVE-2021-38513 | NETGEAR RBK752 authentication bypass | 9.8v3.1 | 1.8% | 2021-08-11 | Fix |
| CVE-2021-38085 | Canon Pixma TR150 incorrect permission assignment | 7.8v3.1 | 1.0% | 2021-08-11 | Exploit code |
| CVE-2021-37697 | Sensitive information leak in Welcome of tmerc-cogs | 7.1CNA v3.1 | 0.7% | 2021-08-11 | Fix |
| CVE-2021-37696 | Sensitive information leak in MassDM of tmerc-cogs | 7.1CNA v3.1 | 0.7% | 2021-08-11 | Fix |
| CVE-2021-37694 | Code injection issue for java-spring-cloud-stream-template | 8.7CNA v3.1 | 0.9% | 2021-08-11 | Fix |
| CVE-2021-37627 | contao privilege escalation via form generator | 8.0CNA v3.1 | 1.0% | 2021-08-11 | Fix |
| CVE-2021-37626 | contao PHP file inclusion via insert tags | 7.2CNA v3.1 | 1.3% | 2021-08-11 | Fix |
| CVE-2021-36770 | perl uncontrolled search path | 7.8v3.1 | 1.4% | 2021-08-11 | Fix |
| CVE-2021-34640 | Securimage-WP-Fixed reflected cross-site scripting | 6.1v3.1 | 2.3% | 2021-08-11 | Nuclei |
| CVE-2021-33794 | Foxit Reader information disclosure | 9.1v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-33793 | Foxit Reader out-of-bounds write | 9.8v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-33595 | F-Secure Safe browser for iOS vulnerable to address bar spoofing | 3.5v3.1 | 1.1% | 2021-08-11 | Fix |
| CVE-2021-33594 | F-Secure Safe browser for Android vulnerable to address bar spoofing | 3.5v3.1 | 1.1% | 2021-08-11 | Fix |
| CVE-2021-32947 | FATEK Automation FvDesigner stack-based buffer overflow | 7.8v3.1 | 1.8% | 2021-08-11 | |
| CVE-2021-32939 | FATEK Automation FvDesigner out-of-bounds write | 7.8v3.1 | 1.6% | 2021-08-11 | |
| CVE-2021-32931 | FATEK Automation FvDesigner An uninitialized pointer use | 7.8v3.1 | 2.0% | 2021-08-11 | |
| CVE-2021-32440 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-32439 | gpac stbl_AppendSize function in MP4Box buffer overflow | 7.8v3.1 | 1.3% | 2021-08-11 | Fix |
| CVE-2021-32438 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-32437 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-32122 | NETGEAR EX3700 cross-site request forgery | 8.0NVD v3.1 | 0.4% | 2021-08-11 | Fix |
| CVE-2021-23421 | merge-change prototype pollution | 9.8v3.1 | 1.1% | 2021-08-11 | |
| CVE-2021-23420 | codeception/codeception deserialization of untrusted data | 9.8v3.1 | 2.7% | 2021-08-11 | Fix |
| CVE-2021-22098 | UAA server open redirect | 6.1v3.1 | 0.7% | 2021-08-11 | Fix |
| CVE-2021-20427 | IBM Security Guardium missing brute-force protection | 5.3CNA v3.0 | 1.3% | 2021-08-11 | Fix |
| CVE-2021-20420 | IBM Security Guardium information disclosure | 4.3CNA v3.0 | 0.7% | 2021-08-11 | Fix |
| CVE-2021-20418 | IBM Security Guardium weak password requirements | 4.7CNA v3.0 | 1.0% | 2021-08-11 | Fix |
| CVE-2021-3050 | PAN-OS: OS command injection vulnerability in Web interface | 8.8CNA v3.1 | 1.8% | 2021-08-11 | Fix |
| CVE-2021-3048 | PAN-OS: Invalid URLs in an External Dynamic List (EDL) can lead to Firewall Outage | 5.9CNA v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-3047 | PAN-OS: Weak cryptography Used in Web Interface Authentication | 4.2CNA v3.1 | 0.5% | 2021-08-11 | Fix |
| CVE-2021-3046 | PAN-OS: Improper SAML Authentication vulnerability in GlobalProtect portal | 6.8CNA v3.1 | 1.1% | 2021-08-11 | Fix |
| CVE-2021-3045 | PAN-OS: OS command argument injection in Web interface | 4.9CNA v3.1 | 0.8% | 2021-08-11 | Fix |
| CVE-2021-1114 | NVIDIA Jetson AGX Xavier series use-after-free | 4.4CNA v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-1113 | NVIDIA Jetson AGX Xavier series unauthorized access | 4.7CNA v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-1112 | NVIDIA Jetson AGX Xavier series null pointer dereference | 5.5CNA v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-1111 | NVIDIA Jetson AGX Xavier series buffer overflow | 6.7CNA v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-1110 | NVIDIA Jetson AGX Xavier series, Jetson Xavier NX denial of service | 7.1CNA v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-1109 | NVIDIA Jetson AGX Xavier series unauthorized access | 7.2CNA v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-1108 | NVIDIA Jetson AGX Xavier series integer underflow | 7.3CNA v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-1107 | NVIDIA Jetson AGX Xavier series code execution | 7.8CNA v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-1106 | NVIDIA Jetson AGX Xavier series out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-0196 | Intel(R) NUC 9 Extreme Laptop Kits kernel mode driver for some improper access control | 7.8v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0160 | Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers some uncontrolled search path | 7.8v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0084 | Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver improper input validation | 7.8v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-0083 | Intel(R) Optane(TM) PMem some improper input validation | 4.4v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0062 | Intel(R) Graphics Drivers some improper input validation | 7.8v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0061 | Intel(R) Graphics Driver some improper initialization | 7.8v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-0012 | Intel(R) Graphics Driver some use-after-free | 5.5v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0009 | Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters out-of-bounds read | 6.5v3.1 | 0.4% | 2021-08-11 | Fix |
| CVE-2021-0008 | Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters resource exhaustion | 4.4v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0007 | Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters improper error handling | 4.4v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0006 | Intel Ethernet 800 Series Adapters firmware vulnerability | 4.4v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0005 | Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters improper error handling | 4.4v3.1 | 0.2% | 2021-08-11 | Fix |
| CVE-2021-0004 | Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters denial of service | 4.4v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-0003 | Intel(R) Ethernet Controllers 800 series Linux drivers improper exception handling | 5.5v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-0002 | Intel(R) Ethernet Controllers 800 series Linux drivers improper check for exceptional conditions | 7.1v3.1 | 0.3% | 2021-08-11 | Fix |
| CVE-2021-38512 | HTTP request smuggling in Actix-http | 7.5v3.1 | 1.8% | 2021-08-10 | Fix |
| CVE-2021-38511 | Tar links in archive can create arbitrary directories | 7.5v3.1 | 1.4% | 2021-08-10 | Fix |
| CVE-2021-38490 | Altova Mobiletogether Server XML entity expansion | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-38387 | Contiki-os Contiki infinite loop | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-38386 | Contiki-os Contiki buffer overflow | 7.5v3.1 | 1.3% | 2021-08-10 | |
| CVE-2021-38384 | Serverless Offline incorrect authorization in serverless-offline | 9.8v3.1 | 1.5% | 2021-08-10 | Fix |
| CVE-2021-38383 | owntone-server use-after-free | 9.8v3.1 | 1.2% | 2021-08-10 | Fix |
| CVE-2021-38382 | LIVE555 use-after-free | 6.5v3.1 | 1.2% | 2021-08-10 | Fix |
| CVE-2021-38381 | LIVE555 use-after-free | 6.5v3.1 | 1.2% | 2021-08-10 | Fix |
| CVE-2021-38380 | LIVE555 out-of-bounds read | 7.5v3.1 | 1.5% | 2021-08-10 | Fix |
| CVE-2021-38373 | KDE Kmail cleartext transmission of sensitive information | 5.3v3.1 | 0.5% | 2021-08-10 | Fix |
| CVE-2021-38372 | KDE Trojita command injection | 3.7v3.1 | 0.8% | 2021-08-10 | |
| CVE-2021-38371 | Exim STARTTLS vulnerability | 7.5v3.1 | 2.0% | 2021-08-10 | Fix |
| CVE-2021-38370 | alpine command injection | 5.9v3.1 | 1.6% | 2021-08-10 | Fix |
| CVE-2021-38365 | ToneWinner Winner Desktop Speakers power-indicator LED vulnerability | 3.7v3.1 | 1.2% | 2021-08-10 | |
| CVE-2021-38140 | set_user PostgreSQL extension privilege escalation | 9.8v3.1 | 1.3% | 2021-08-10 | Fix |
| CVE-2021-37425 | Altova Mobiletogether Server XML external entity injection | 9.1v3.1 | 66.3% | 2021-08-10 | Exploit codeFix |
| CVE-2021-37391 | chamilo-lms cross-site scripting | 5.4v3.1 | 2.1% | 2021-08-10 | Exploit code |
| CVE-2021-37390 | chamilo-lms cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-10 | |
| CVE-2021-37389 | Chamilo cross-site scripting | 6.1v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-37367 | Ctparental path traversal | 7.8v3.1 | 0.5% | 2021-08-10 | |
| CVE-2021-37366 | Ctparental cross-site request forgery | 8.8v3.1 | 0.5% | 2021-08-10 | |
| CVE-2021-37365 | Ctparental cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-10 | |
| CVE-2021-37180 | Siemens Solid Edge SE2021 uninitialized pointer access | 7.8v3.1 | 1.4% | 2021-08-10 | Fix |
| CVE-2021-37179 | Siemens Solid Edge SE2021 use-after-free | 7.8v3.1 | 1.4% | 2021-08-10 | Fix |
| CVE-2021-37178 | Siemens Solid Edge SE2021 XML external entity injection | 5.5v3.1 | 0.9% | 2021-08-10 | |
| CVE-2021-37172 | Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) improper authentication | 7.5v3.1 | 0.9% | 2021-08-10 | Fix |
| CVE-2021-37152 | Sonatype Nexus Repository Manager cross-site scripting | 5.4v3.1 | 24.4% | 2021-08-10 | Exploit codeFix |
| CVE-2021-36601 | GetSimpleCMS cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-10 | |
| CVE-2021-33738 | Siemens JT2Go out-of-bounds read | 3.3v3.1 | 1.3% | 2021-08-10 | Fix |
| CVE-2021-33721 | Siemens SINEC NMS OS command injection | 7.2v3.1 | 2.7% | 2021-08-10 | Fix |
| CVE-2021-33717 | Siemens JT2Go null pointer dereference | 5.5v3.1 | 0.8% | 2021-08-10 | Fix |
| CVE-2021-33708 | SAP Kyma Due to improper input validation | 7.6CNA v3.0 | 0.9% | 2021-08-10 | |
| CVE-2021-33707 | SAP NetWeaver (Knowledge Management) open redirect | 6.1CNA v3.0 | 2.0% | 2021-08-10 | Fix |
| CVE-2021-33706 | SAP InfraBox Due to improper input validation | 4.3CNA v3.0 | 0.6% | 2021-08-10 | |
| CVE-2021-33703 | SAP NetWeaver Enterprise Portal (Application Extensions) cross-site scripting | 8.3CNA v3.0 | 1.5% | 2021-08-10 | Fix |
| CVE-2021-33702 | SAP NetWeaver Enterprise Portal cross-site scripting | 8.3CNA v3.0 | 1.5% | 2021-08-10 | Fix |
| CVE-2021-33699 | SAP Fiori Client Native Mobile takeover | 7.6CNA v3.0 | 1.2% | 2021-08-10 | Fix |
| CVE-2021-32943 | WebAccess/SCADA stack-based buffer overflow | 9.8v3.1 | 1.9% | 2021-08-10 | Fix |
| CVE-2021-32768 | TYPO3 CMS cross-site scripting via Rich-Text Content | 6.1CNA v3.1 | 0.7% | 2021-08-10 | Fix |
| CVE-2021-31655 | TRENDnet TV-IP110WN cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-10 | |
| CVE-2021-29739 | IBM Planning Analytics Local unchecked return value | 2.7CNA v3.0 | 1.1% | 2021-08-10 | Fix |
| CVE-2021-29400 | Netexplorer My SMTP Contact cross-site request forgery | 6.5v3.1 | 0.6% | 2021-08-10 | |
| CVE-2021-29296 | D-Link DIR-825 null pointer dereference | 7.5v3.1 | 1.1% | 2021-08-10 | Fix |
| CVE-2021-29295 | D-Link DSP-W215 null pointer dereference | 7.5v3.1 | 1.1% | 2021-08-10 | Fix |
| CVE-2021-29294 | D-Link DSL-2740R null pointer dereference | 7.5v3.1 | 1.1% | 2021-08-10 | Fix |
| CVE-2021-28846 | TRENDnet TEW-755AP format string | 6.5v3.1 | 0.8% | 2021-08-10 | |
| CVE-2021-28845 | TRENDnet TEW-755AP null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-28844 | TRENDnet TEW-755AP null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-28843 | TRENDnet TEW-755AP null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-28842 | TRENDnet TEW-755AP null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-28841 | TRENDnet TEW-755AP null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-10 | |
| CVE-2021-28840 | D-Link Dap-2310 null pointer dereference | 7.5v3.1 | 2.3% | 2021-08-10 | |
| CVE-2021-28839 | D-Link Dap-2310 null pointer dereference | 7.5v3.1 | 1.4% | 2021-08-10 | |
| CVE-2021-28838 | D-Link Dap-2310 null pointer dereference | 7.5NVD v3.1 | 2.2% | 2021-08-10 | |
| CVE-2021-25659 | Siemens Automation License Manager 5 denial of service | 7.5v3.1 | 1.0% | 2021-08-10 | Fix |
| CVE-2021-22676 | WebAccess/SCADA cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-10 | Fix |
| CVE-2021-22674 | WebAccess/SCADA relative path traversal | 6.5v3.1 | 1.1% | 2021-08-10 | Fix |
| CVE-2021-22386 | Race condition vulnerability in some Huawei phones | 7.0v3.1 | 0.2% | 2021-08-10 | Fix |
| CVE-2021-22385 | NFC-based connection authentication vulnerability in some Huawei phones | 7.8v3.1 | 0.2% | 2021-08-10 | Fix |
| CVE-2021-21601 | Dell Data Protection Search sensitive information in log files | 8.8CNA v3.1 | 0.2% | 2021-08-10 | Fix |
| CVE-2021-21600 | Dell NetWorker missing resource release | 6.5CNA v3.1 | 0.8% | 2021-08-10 | Fix |
| CVE-2021-21598 | Dell Wyse ThinOS sensitive information in log files | 3.9CNA v3.1 | 0.3% | 2021-08-10 | Fix |
| CVE-2021-21597 | Dell Wyse ThinOS sensitive information in log files | 7.2CNA v3.1 | 0.3% | 2021-08-10 | Fix |
| CVE-2021-21567 | Dell PowerScale OneFS incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2021-08-10 | Fix |
| CVE-2021-21501 | ServiceComb ServiceCenter directory traversal | 7.5v3.1 | 4.4% | 2021-08-10 | Fix |
| CVE-2021-20032 | SonicWall Analytics On-Prem remote code execution | 9.8v3.1 | 2.0% | 2021-08-10 | Fix |
| CVE-2021-3692 | yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator | 5.3NVD v3.1 | 1.7% | 2021-08-10 | Fix |
| CVE-2021-3689 | yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator | 7.5v3.1 | 1.9% | 2021-08-10 | Fix |
| CVE-2021-38311 | Contiki-os Contiki infinite loop | 7.5v3.1 | 0.9% | 2021-08-09 | |
| CVE-2021-38305 | Command injection in Yamale | 7.8v3.1 | 2.5% | 2021-08-09 | Fix |
| CVE-2021-38290 | Thedaylightstudio Fuel CMS man-in-the-middle | 8.1v3.1 | 1.3% | 2021-08-09 | |
| CVE-2021-37788 | Gurock Testrail clickjacking | 5.4v3.1 | 1.5% | 2021-08-09 | |
| CVE-2021-37634 | vapor leaf-kit LeafKit allows XSS with untrusted user input | 7.4CNA v3.1 | 0.7% | 2021-08-09 | Fix |
| CVE-2021-37633 | discourse XSS via d-popover and d-html-popover attribute | 7.4CNA v3.1 | 0.8% | 2021-08-09 | Fix |
| CVE-2021-37623 | exiv2 denial of service due to infinite loop in JpegBase::printStructure (#2) | 5.5CNA v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-37622 | exiv2 denial of service due to infinite loop in JpegBase::printStructure (#1) | 5.5CNA v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-37621 | exiv2 denial of service due to infinite loop in Image::printIFDStructure | 5.5CNA v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-37620 | exiv2 out-of-bounds read in XmpTextValue::read | 4.7CNA v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-37619 | Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header | 4.7CNA v3.1 | 1.0% | 2021-08-09 | Fix |
| CVE-2021-37618 | Out-of-bounds read in Exiv2::Jp2Image::printStructure | 4.7CNA v3.1 | 1.0% | 2021-08-09 | Fix |
| CVE-2021-37616 | Null pointer dereference in Exiv2::Internal::resolveLens0x8ff | 5.5CNA v3.1 | 1.0% | 2021-08-09 | Fix |
| CVE-2021-37615 | Null pointer dereference in Exiv2::Internal::resolveLens0x319 | 4.7CNA v3.1 | 1.0% | 2021-08-09 | Fix |
| CVE-2021-37573 | Tiny Java Web Server web server T reflected cross-site scripting | 6.1v3.1 | 3.4% | 2021-08-09 | Nuclei |
| CVE-2021-37215 | Larvata Digital Technology Co. Ltd. FLYGO use of incorrectly-resolved name or reference-4 | 4.3v3.1 | 0.7% | 2021-08-09 | Fix |
| CVE-2021-37214 | Larvata Digital Technology Co. Ltd. FLYGO use of incorrectly-resolved name or reference-3 | 8.8v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-37213 | Larvata Digital Technology Co. Ltd. FLYGO use of incorrectly-resolved name or reference-2 | 4.3v3.1 | 0.8% | 2021-08-09 | Fix |
| CVE-2021-37212 | Larvata Digital Technology Co. Ltd. FLYGO use of incorrectly-resolved name or reference-1 | 5.4v3.1 | 0.6% | 2021-08-09 | Fix |
| CVE-2021-37211 | Larvata Digital Technology Co. Ltd. FLYGO stored XSS | 5.4v3.1 | 0.5% | 2021-08-09 | Fix |
| CVE-2021-36798 | Helpsystems Cobalt Strike resource exhaustion | 7.5v3.1 | 4.3% | 2021-08-09 | Exploit codeFix |
| CVE-2021-36277 | Dell Alienware Command Center (AWCC) improper signature verification | 7.8CNA v3.1 | 0.2% | 2021-08-09 | Fix |
| CVE-2021-36276 | Dell dbutil improper authorization | 8.8CNA v3.1 | 0.3% | 2021-08-09 | Fix |
| CVE-2021-34661 | WP Fusion Lite cross-site request forgery to Data Deletion | 4.7v3.1 | 0.5% | 2021-08-09 | Fix |
| CVE-2021-34660 | WP Fusion Lite reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-08-09 | Fix |
| CVE-2021-34335 | Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff | 4.7CNA v3.1 | 1.0% | 2021-08-09 | Fix |
| CVE-2021-34334 | exiv2 denial of service due to integer overflow in loop counter | 5.5CNA v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-33256 | Zoho ManageEngine ADSelfService Plus CSV injection | 8.8v3.1 | 79.0% | 2021-08-09 | |
| CVE-2021-32815 | exiv2 denial of service due to assertion failure in crwimage_int.cpp | 5.5CNA v3.1 | 1.1% | 2021-08-09 | Fix |
| CVE-2021-32798 | Failure to sanitize special elements into a different plane (special element injection) in notebook | 10.0CNA v3.1 | 2.1% | 2021-08-09 | Fix |
| CVE-2021-32797 | Project Jupyter JupyterLab form action attribute cross-site scripting | 7.4CNA v3.1 | 2.7% | 2021-08-09 | Fix |
| CVE-2021-29714 | IBM Content Navigator improper input validation | 6.5CNA v3.0 | 1.0% | 2021-08-09 | Fix |
| CVE-2021-25954 | Improper access control in Dolibarr | 4.3v3.1 | 0.7% | 2021-08-09 | Fix |
| CVE-2021-24522 | ProfilePress WordPress plugin unauthenticated cross-site scripting in tabbed login/register widget | 6.1NVD v3.1 | 1.6% | 2021-08-09 | NucleiFix |
| CVE-2021-24521 | Side Menu Lite WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.6% | 2021-08-09 | Fix |
| CVE-2021-24520 | Stock in and out WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.6% | 2021-08-09 | |
| CVE-2021-24509 | Page View Counts WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-09 | Fix |
| CVE-2021-24507 | Astra Pro Addon WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 11.0% | 2021-08-09 | Exploit codeFix |
| CVE-2021-24505 | Forms WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-09 | Fix |
| CVE-2021-24502 | WP Google Map WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.7% | 2021-08-09 | Fix |
| CVE-2021-24501 | Workreap WordPress theme missing authorization checks in ajax actions | 8.1NVD v3.1 | 1.3% | 2021-08-09 | Fix |
| CVE-2021-24500 | Workreap WordPress theme Multiple CSRF + IDOR | 8.1NVD v3.1 | 0.6% | 2021-08-09 | Fix |
| CVE-2021-24499 | Workreap WordPress theme unauthenticated upload Leading to remote code execution | 9.8NVD v3.1 | 60.1% | 2021-08-09 | NucleiExploit codeFix |
| CVE-2021-24495 | Marmoset Viewer WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 3.3% | 2021-08-09 | NucleiFix |
| CVE-2021-24467 | Leaflet Map WordPress plugin arbitrary settings update via CSRF Leading to stored XSS | 6.5NVD v3.1 | 0.6% | 2021-08-09 | Fix |
| CVE-2021-24304 | Newsmag WordPress theme unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.2% | 2021-08-09 | Fix |
| CVE-2021-22910 | Rocket.Chat server special element injection | 9.8v3.1 | 2.3% | 2021-08-09 | |
| CVE-2021-21740 | ZXHN H2640 digital media player information disclosure | 2.4v3.1 | 0.4% | 2021-08-09 | Fix |
| CVE-2021-21596 | Dell OpenManage Enterprise remote code execution | 9.6CNA v3.1 | 0.8% | 2021-08-09 | Fix |
| CVE-2021-21585 | Dell OpenManage Enterprise OS command injection | 9.1CNA v3.1 | 2.1% | 2021-08-09 | Fix |
| CVE-2021-21584 | Dell OpenManage Enterprise information disclosure | 7.7CNA v3.1 | 0.8% | 2021-08-09 | Fix |
| CVE-2021-21564 | Dell OpenManage Enterprise improper authentication | 9.8CNA v3.1 | 1.6% | 2021-08-09 | Fix |
| CVE-2021-20349 | IBM Workload Scheduler out-of-bounds write | 5.9CNA v3.0 | 0.3% | 2021-08-09 | Fix |
| CVE-2021-38209 | Linux kernel observable discrepancy | 3.3v3.1 | 0.3% | 2021-08-08 | Fix |
| CVE-2021-38208 | Linux kernel null pointer dereference | 5.5v3.1 | 0.5% | 2021-08-08 | Fix |
| CVE-2021-38207 | Linux kernel buffer overflow | 7.5v3.1 | 3.4% | 2021-08-08 | Fix |
| CVE-2021-38206 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.3% | 2021-08-08 | Fix |
| CVE-2021-38205 | Linux kernel uninitialized pointer access | 3.3v3.1 | 0.3% | 2021-08-08 | Fix |
| CVE-2021-38204 | Linux kernel use-after-free | 6.8v3.1 | 0.3% | 2021-08-08 | Fix |
| CVE-2021-38203 | Linux kernel improper locking | 5.5v3.1 | 0.4% | 2021-08-08 | Fix |
| CVE-2021-38202 | Linux kernel out-of-bounds read | 7.5NVD v3.1 | 3.2% | 2021-08-08 | Fix |
| CVE-2021-38201 | Linux kernel out-of-bounds access | 7.5v3.1 | 3.4% | 2021-08-08 | Fix |
| CVE-2021-38200 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2021-08-08 | Fix |
| CVE-2021-38199 | Linux kernel denial of service | 6.5NVD v3.1 | 1.2% | 2021-08-08 | Fix |
| CVE-2021-38198 | Linux kernel KVM MMU shadow paging vulnerability | 5.5NVD v3.1 | 0.5% | 2021-08-08 | Fix |
| CVE-2021-38197 | Go-unarr path traversal | 9.8v3.1 | 2.1% | 2021-08-08 | Fix |
| CVE-2021-38196 | Remote code execution in Better-macro | 9.8v3.1 | 2.6% | 2021-08-08 | |
| CVE-2021-38195 | Parity Libsecp256k1 improper signature verification | 9.8v3.1 | 0.9% | 2021-08-08 | Fix |
| CVE-2021-38194 | ark-r1cs-std FieldVar mul_by_inverse method incorrect calculation | 9.8v3.1 | 1.3% | 2021-08-08 | Fix |
| CVE-2021-38193 | Cross-site scripting in ammonia | 6.1v3.1 | 0.7% | 2021-08-08 | Fix |
| CVE-2021-38192 | Prost buffer overflow | 7.5v3.1 | 1.1% | 2021-08-08 | Fix |
| CVE-2021-38191 | Race condition in Tokio | 5.9v3.1 | 0.8% | 2021-08-08 | Fix |
| CVE-2021-38190 | Out-of-bounds write in Nalgebra | 9.8v3.1 | 1.4% | 2021-08-08 | Fix |
| CVE-2021-38189 | SMTP command injection in lettre | 9.8v3.1 | 1.5% | 2021-08-08 | Fix |
| CVE-2021-38188 | Incorrect buffer size calculation in Iced-x86 | 9.8v3.1 | 1.3% | 2021-08-08 | Fix |
| CVE-2021-38187 | Anymap incorrect numeric conversion | 9.8v3.1 | 1.4% | 2021-08-08 | |
| CVE-2021-38186 | Cross-site scripting in comrak | 6.1v3.1 | 0.7% | 2021-08-08 | Fix |
| CVE-2021-38185 | GNU cpio integer overflow | 7.8v3.1 | 4.1% | 2021-08-08 | Exploit codeFix |
| CVE-2021-36221 | Go net/http/httputil ReverseProxy race condition | 5.9v3.1 | 3.1% | 2021-08-08 | Fix |
| CVE-2021-23419 | open-graph prototype pollution | 9.8v3.1 | 1.1% | 2021-08-08 | Fix |
| CVE-2021-38173 | digint btrbk command injection | 9.8v3.1 | 3.2% | 2021-08-07 | Fix |
| CVE-2021-38169 | roxy-wi command injection | 8.8v3.1 | 1.5% | 2021-08-07 | |
| CVE-2021-38168 | roxy-wi SQL injection | 8.8v3.1 | 0.9% | 2021-08-07 | |
| CVE-2021-38167 | roxy-wi SQL injection | 9.8v3.1 | 1.3% | 2021-08-07 | |
| CVE-2021-38166 | Linux kernel integer overflow | 7.8NVD v3.1 | 0.3% | 2021-08-07 | Fix |
| CVE-2021-38165 | Lynx insufficiently protected credentials | 5.3v3.1 | 4.1% | 2021-08-07 | Fix |
| CVE-2021-38160 | Linux kernel buffer overflow | 7.8v3.1 | 0.4% | 2021-08-07 | Fix |
| CVE-2021-38159 | Progress MOVEit Transfer SQL injection | 9.8v3.1 | 1.9% | 2021-08-07 | Fix |
| CVE-2021-38148 | Obsidian does not require user confirmation for non-http/HTTPS URLs | 9.8v3.1 | 1.2% | 2021-08-07 | Fix |
| CVE-2021-29923 | Go net.ParseIP and net.ParseCIDR vulnerability | 7.5v3.1 | 3.8% | 2021-08-07 | Fix |
| CVE-2021-29922 | Rust IP address parser vulnerability | 9.1v3.1 | 2.6% | 2021-08-07 | Fix |
| CVE-2021-38157 | Leostream Connection Broker cross-site scripting | 6.1v3.1 | 1.1% | 2021-08-06 | Fix |
| CVE-2021-38155 | OpenStack Keystone allows information disclosure during account locking | 7.5v3.1 | 2.5% | 2021-08-06 | Fix |
| CVE-2021-38152 | Chikitsa Patient Management System cross-site scripting | 5.4v3.1 | 1.0% | 2021-08-06 | |
| CVE-2021-38151 | Chikitsa Patient Management System cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-06 | |
| CVE-2021-38149 | Chikitsa Patient Management System cross-site scripting | 5.4v3.1 | 0.7% | 2021-08-06 | Exploit code |
| CVE-2021-38137 | Corero Securewatch Managed Services incorrect authorization | 8.1v3.1 | 0.7% | 2021-08-06 | |
| CVE-2021-38136 | Corero Securewatch Managed Services path traversal | 6.5v3.1 | 1.2% | 2021-08-06 | |
| CVE-2021-37554 | JetBrains YouTrack boards vulnerability | 4.3v3.1 | 0.9% | 2021-08-06 | Fix |
| CVE-2021-37553 | JetBrains YouTrack weak random number generator | 7.5v3.1 | 1.5% | 2021-08-06 | Fix |
| CVE-2021-37552 | JetBrains YouTrack cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-37551 | JetBrains YouTrack weak password hash | 5.3v3.1 | 0.7% | 2021-08-06 | Fix |
| CVE-2021-37550 | JetBrains YouTrack incorrect comparison | 7.5v3.1 | 1.1% | 2021-08-06 | Fix |
| CVE-2021-37549 | JetBrains YouTrack workflow sandbox vulnerability | 9.1v3.1 | 1.3% | 2021-08-06 | Fix |
| CVE-2021-37548 | JetBrains TeamCity cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-37547 | JetBrains TeamCity file upload vulnerability | 5.3v3.1 | 0.7% | 2021-08-06 | Fix |
| CVE-2021-37546 | JetBrains TeamCity weak cryptographic algorithm | 5.3v3.1 | 0.5% | 2021-08-06 | Fix |
| CVE-2021-37545 | JetBrains TeamCity improper authentication | 7.5v3.1 | 0.9% | 2021-08-06 | Fix |
| CVE-2021-37544 | JetBrains TeamCity deserialization of untrusted data | 9.8v3.1 | 1.2% | 2021-08-06 | Fix |
| CVE-2021-37543 | JetBrains RubyMine code execution | 8.8v3.1 | 1.4% | 2021-08-06 | Fix |
| CVE-2021-37542 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-37541 | JetBrains Hub weak password recovery | 6.1v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-37540 | JetBrains Hub widget deployment feature vulnerability | 6.5v3.1 | 0.7% | 2021-08-06 | Fix |
| CVE-2021-37388 | D-Link DIR-615 buffer overflow | 9.8v3.1 | 3.7% | 2021-08-06 | |
| CVE-2021-37381 | Southsoft Graduate Management Information System cross-site request forgery | 8.8v3.1 | 0.6% | 2021-08-06 | |
| CVE-2021-36795 | Cohesity Linux Agent insecure permissions | 7.8v3.1 | 0.2% | 2021-08-06 | |
| CVE-2021-36708 | PROLiNK PRC2402M weak password recovery | 7.5v3.1 | 1.2% | 2021-08-06 | |
| CVE-2021-36707 | PROLiNK PRC2402M command injection | 9.8v3.1 | 2.6% | 2021-08-06 | |
| CVE-2021-36706 | PROLiNK PRC2402M OS command injection | 9.8v3.1 | 2.6% | 2021-08-06 | |
| CVE-2021-36705 | PROLiNK PRC2402M OS command injection | 9.8v3.1 | 2.6% | 2021-08-06 | |
| CVE-2021-36455 | Naviwebs Navigate CMS SQL injection | 8.8v3.1 | 1.1% | 2021-08-06 | Fix |
| CVE-2021-36454 | Naviwebs Navigate CMS cross-site scripting | 5.4v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-36351 | care2x Hospital Information Management System SQL injection | 9.8v3.1 | 1.9% | 2021-08-06 | |
| CVE-2021-36209 | JetBrains Hub weak password recovery | 9.8v3.1 | 1.0% | 2021-08-06 | Fix |
| CVE-2021-35312 | Gestionaleamica Amica Prodigy incorrect default permissions | 7.8v3.1 | 1.1% | 2021-08-06 | Exploit code |
| CVE-2021-32597 | Fortinet FortiAnalyzer, FortiManager FortiManager and cross-site scripting | 4.6CNA v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-32587 | Fortinet FortiAnalyzer, FortiManager FortiManager and improper access control | 4.3CNA v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-26999 | NetApp Cloud Manager sensitive information in log files | 4.3v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-26998 | NetApp Cloud Manager sensitive information in log files | 4.3v3.1 | 0.6% | 2021-08-06 | Fix |
| CVE-2021-26606 | Dream Security MagicLine4NX.exe DreamSecurity MagicLine buffer overflow | 9.8v3.1 | 2.4% | 2021-08-06 | Fix |
| CVE-2021-22295 | Huawei HarmonyOS incorrect default permissions | 5.5v3.1 | 0.1% | 2021-08-06 | Fix |
| CVE-2021-20598 | MELSEC iQ-R series CPU modules R08/16/32/120SFCPU improper authentication | 5.3v3.1 | 1.5% | 2021-08-06 | |
| CVE-2021-20597 | Mitsubishi Electric MELSEC iQ-R series Safety CPU modules insufficiently protected credentials | 9.1v3.1 | 2.2% | 2021-08-06 | Fix |
| CVE-2021-20594 | Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU information disclosure | 7.5v3.1 | 2.4% | 2021-08-06 | Fix |
| CVE-2021-38138 | OneNav cross-site scripting | 5.4v3.1 | 1.5% | 2021-08-05 | |
| CVE-2021-38095 | Planview Spigit REST API vulnerability | 7.5v3.1 | 2.0% | 2021-08-05 | Fix |
| CVE-2021-37859 | Mattermost reflected XSS in OAuth Flow | 7.1CNA v3.1 | 3.3% | 2021-08-05 | Fix |
| CVE-2021-37632 | Config Lib ConfigSyncPacket deserialization of untrusted data | 8.1CNA v3.1 | 1.7% | 2021-08-05 | Fix |
| CVE-2021-37625 | Incorrect Check of Function Return Value in Skytable | 7.5CNA v3.1 | 0.9% | 2021-08-05 | Fix |
| CVE-2021-37614 | Progress MOVEit Transfer SQL injection | 8.8v3.1 | 1.5% | 2021-08-05 | Fix |
| CVE-2021-37605 | Microchip Miwi incorrect control flow | 7.5v3.1 | 1.3% | 2021-08-05 | Fix |
| CVE-2021-37604 | Microchip Miwi incorrect control flow | 7.5v3.1 | 1.2% | 2021-08-05 | Fix |
| CVE-2021-37156 | Redmine insufficient session expiration | 7.5v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-36584 | gpac out-of-bounds write | 5.5v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-35327 | TOTOLINK A720R Firmware missing authorization | 9.8v3.1 | 1.4% | 2021-08-05 | |
| CVE-2021-35326 | TOTOLINK A720R configuration file download function vulnerability | 7.5v3.1 | 2.5% | 2021-08-05 | |
| CVE-2021-35325 | TOTOLINK A720R Firmware checkLoginUser function stack-based buffer overflow | 7.5v3.1 | 13.3% | 2021-08-05 | |
| CVE-2021-35324 | TOTOLINK A720R Firmware authentication bypass | 9.8v3.1 | 10.4% | 2021-08-05 | |
| CVE-2021-35307 | Axiosys Bento4 null pointer dereference | 6.5v3.1 | 1.0% | 2021-08-05 | |
| CVE-2021-35306 | Axiosys Bento4 null pointer dereference | 6.5v3.1 | 1.0% | 2021-08-05 | |
| CVE-2021-34639 | WordPress Download Manager authenticated arbitrary file upload | 8.8v3.1 | 0.6% | 2021-08-05 | Fix |
| CVE-2021-34638 | WordPress Download Manager Authenticated directory traversal | 6.5v3.1 | 1.3% | 2021-08-05 | Fix |
| CVE-2021-34634 | Nifty Newsletters WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.7% | 2021-08-05 | |
| CVE-2021-34633 | Youtube Feeder WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.7% | 2021-08-05 | |
| CVE-2021-34631 | NewsPlugin WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.6% | 2021-08-05 | Fix |
| CVE-2021-34371 | Deserialization of untrusted data in Neo4j | 9.8v3.1 | 13.4% | 2021-08-05 | Exploit codeFix |
| CVE-2021-33597 | F-Secure endpoint protection products on Windows, Mac and Linux Security denial of service (DoS) | 5.5v3.1 | 0.5% | 2021-08-05 | |
| CVE-2021-33596 | Fake Apple login prompt in F-Secure SAFE browser for iOS | 4.1v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-32603 | Fortinet FortiAnalyzer, FortiManager server-side request forgery | 8.8CNA v3.1 | 0.7% | 2021-08-05 | Fix |
| CVE-2021-32598 | Fortinet FortiAnalyzer, FortiManager HTTP headers CRLF injection | 4.3CNA v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-32581 | Acronis True Image improper certificate validation | 8.1v3.1 | 0.7% | 2021-08-05 | Fix |
| CVE-2021-32580 | Acronis True Image uncontrolled search path | 7.8v3.1 | 0.3% | 2021-08-05 | Fix |
| CVE-2021-32579 | Acronis True Image improper authentication | 7.8v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-32578 | Acronis True Image externally controlled resource reference | 7.8v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-32577 | Acronis True Image incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-32576 | Acronis True Image externally controlled resource reference | 7.8v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-32003 | Secomea SiteManager unprotected transport of credentials | 8.0CNA v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-32002 | SiteManager troubleshooter allows access without authentication from local network | 4.3CNA v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-29978 | Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN < 2.3. | 9.8v3.1 | 2.8% | 2021-08-05 | Fix |
| CVE-2021-29977 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-29976 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 1.2% | 2021-08-05 | Fix |
| CVE-2021-29975 | Mozilla Firefox DOM overlay rendering vulnerability | 6.5v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-29974 | Mozilla Firefox HSTS error override handling vulnerability | 4.3v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-29973 | Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality *This bug only affects Firefox for Android. Other operati | 8.8v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-29972 | Mozilla Firefox use-after-free | 8.8v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-29971 | Mozilla Firefox improper preservation of permissions | 9.8v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-29970 | Mozilla Thunderbird use-after-free | 8.8v3.1 | 1.4% | 2021-08-05 | Fix |
| CVE-2021-29969 | Mozilla Thunderbird files accessible to external parties | 5.9v3.1 | 1.2% | 2021-08-05 | Fix |
| CVE-2021-28216 | TianoCore EDK II PEI boot performance table vulnerability | 7.8v3.1 | 0.4% | 2021-08-05 | Fix |
| CVE-2021-26605 | Unidocs ezPDFReader arbitrary command execution | 9.8v3.1 | 1.0% | 2021-08-05 | |
| CVE-2021-26586 | HPE Edgeline Infrastructure Management Software information disclosure | 7.5v3.1 | 1.6% | 2021-08-05 | Fix |
| CVE-2021-25448 | Samsung Mobile Smart Touch Call improper access control | 5.3v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-25447 | Samsung Mobile SmartThings improper access control | 5.3v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-25446 | Samsung Mobile SmartThings improper access control | 5.3v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-25445 | Samsung Mobile Samsung Internet improper authentication | 5.3v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-25444 | Samsung Mobile Devices improper input validation | 5.5v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-25443 | Samsung Mobile Devices conn_gadget driver use-after-free | 5.3v3.1 | 0.1% | 2021-08-05 | Fix |
| CVE-2021-23849 | Bosch CPP Firmware cross-site request forgery (CSRF) vulnerability in web based management interface | 7.5CNA v3.1 | 0.5% | 2021-08-05 | Fix |
| CVE-2021-22928 | Citrix Virtual Apps and Desktops Profile Management privilege escalation | 7.8v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-22927 | Citrix ADC, Citrix Gateway Citrix ADC and Citrix session fixation | 8.1v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-22926 | https://github.com/curl/curl business logic error | 7.5NVD v3.1 | 15.1% | 2021-08-05 | Fix |
| CVE-2021-22925 | https://github.com/curl/curl uninitialized memory use | 5.3NVD v3.1 | 5.4% | 2021-08-05 | Fix |
| CVE-2021-22924 | https://github.com/curl/curl improper input validation | 3.7NVD v3.1 | 6.3% | 2021-08-05 | Fix |
| CVE-2021-22923 | https://github.com/curl/curl cleartext transmission of sensitive information | 5.3NVD v3.1 | 2.0% | 2021-08-05 | Fix |
| CVE-2021-22922 | https://github.com/curl/curl business logic error | 6.5NVD v3.1 | 4.3% | 2021-08-05 | Fix |
| CVE-2021-22920 | Citrix ADC, Citrix Gateway improper access control | 6.5v3.1 | 0.9% | 2021-08-05 | Fix |
| CVE-2021-22919 | Citrix ADC resource exhaustion | 7.5v3.1 | 0.9% | 2021-08-05 | Fix |
| CVE-2021-22517 | Data Protector privilege escalation | 8.8v3.1 | 1.0% | 2021-08-05 | |
| CVE-2021-22241 | GitLab cross-site scripting | 8.7CNA v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-22240 | GitLab EE improper access control | 4.2CNA v3.1 | 0.7% | 2021-08-05 | Fix |
| CVE-2021-22234 | GitLab cross-site scripting | 9.6CNA v3.1 | 1.0% | 2021-08-05 | Fix |
| CVE-2021-21893 | Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free | 8.8v3.1 | 1.9% | 2021-08-05 | Fix |
| CVE-2021-21870 | Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free | 8.8v3.1 | 1.9% | 2021-08-05 | Fix |
| CVE-2021-21863 | CODESYS Development System deserialization of untrusted data | 7.8v3.1 | 1.2% | 2021-08-05 | Fix |
| CVE-2021-21831 | Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free | 8.8v3.1 | 6.2% | 2021-08-05 | Fix |
| CVE-2021-21805 | Advantech ping.php script functionality OS command injection | 9.8v3.1 | 69.6% | 2021-08-05 | NucleiEmerging Threats |
| CVE-2021-21792 | IObit Advanced Systemcare Ultimate the way IOBit information disclosure | 5.5v3.1 | 0.3% | 2021-08-05 | |
| CVE-2021-21791 | IObit Advanced Systemcare Ultimate the way IOBit information disclosure | 5.5v3.1 | 0.3% | 2021-08-05 | |
| CVE-2021-21790 | IObit Advanced Systemcare Ultimate the way IOBit information disclosure | 5.5v3.1 | 0.3% | 2021-08-05 | |
| CVE-2021-21785 | Iobit IOCTL information disclosure | 5.5v3.1 | 0.3% | 2021-08-05 | |
| CVE-2021-21739 | ZTE ZXCTN 6120H optical module authentication authentication bypass | 4.6v3.1 | 0.2% | 2021-08-05 | Fix |
| CVE-2021-21738 | ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects: | 6.1v3.1 | 0.6% | 2021-08-05 | Fix |
| CVE-2021-20592 | GOT2000 series GT27 model improper synchronization | 7.5v3.1 | 1.5% | 2021-08-05 | Fix |
| CVE-2021-20116 | TCExam reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-08-05 | |
| CVE-2021-20115 | TCExam reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-08-05 | |
| CVE-2021-3682 | QEMU release of an invalid pointer | 8.5NVD v3.1 | 2.9% | 2021-08-05 | Fix |
| CVE-2021-3679 | kernel denial of service | 5.5NVD v3.1 | 0.8% | 2021-08-05 | Exploit codeFix |
| CVE-2021-3655 | kernel missing resource initialization | 3.3NVD v3.1 | 0.3% | 2021-08-05 | Fix |
| CVE-2021-3642 | wildfly-elytron observable discrepancy in Wildfly Elytron | 5.3v3.1 | 0.8% | 2021-08-05 | Fix |
| CVE-2021-3580 | Nettle RSA decryption denial of service | 7.5NVD v3.1 | 2.7% | 2021-08-05 | Fix |
| CVE-2021-3566 | FFmpeg information disclosure | 5.5NVD v3.1 | 0.9% | 2021-08-05 | Fix |
| CVE-2021-1630 | Mulesoft XML external entity injection | 7.5v3.1 | 1.1% | 2021-08-05 | Fix |
| CVE-2021-38115 | Libgd out-of-bounds read | 6.5v3.1 | 1.9% | 2021-08-04 | Fix |
| CVE-2021-38114 | FFmpeg unchecked return value | 5.5v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-38113 | Openwebif cross-site scripting | 5.4v3.1 | 0.5% | 2021-08-04 | |
| CVE-2021-38111 | Def Con 27 buffer overflow | 8.8v3.1 | 1.3% | 2021-08-04 | |
| CVE-2021-37232 | Atomicparsley stack-based buffer overflow | 9.8v3.1 | 2.2% | 2021-08-04 | Fix |
| CVE-2021-37231 | Atomicparsley out-of-bounds write | 5.5v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-36805 | Akaunting Invoice Footer persistent XSS | 4.8NVD v3.1 | 0.6% | 2021-08-04 | |
| CVE-2021-36804 | Akaunting Password Reset Relay | 8.1NVD v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-36803 | Akaunting Avatar persistent XSS | 5.4NVD v3.1 | 0.6% | 2021-08-04 | |
| CVE-2021-36802 | Akaunting DoS via User-Controlled locale variable | 6.5NVD v3.1 | 1.0% | 2021-08-04 | |
| CVE-2021-36801 | Akaunting authentication bypass in Company Selection | 8.1NVD v3.1 | 1.1% | 2021-08-04 | |
| CVE-2021-36800 | Akaunting OS command injection in Money.php | 9.1NVD v3.1 | 1.5% | 2021-08-04 | |
| CVE-2021-36765 | CODESYS Ethernetip null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-36764 | CODESYS Gateway null pointer dereference | 7.5v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-36483 | DevExpress deserialization of untrusted data | 8.8v3.1 | 2.9% | 2021-08-04 | Fix |
| CVE-2021-36168 | Fortinet FortiPortal path traversal | 6.5CNA v3.1 | 1.1% | 2021-08-04 | Fix |
| CVE-2021-35463 | Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module | 6.1v3.1 | 0.9% | 2021-08-04 | Fix |
| CVE-2021-35397 | drogon static router path traversal | 7.5v3.1 | 4.0% | 2021-08-04 | |
| CVE-2021-34853 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34852 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34851 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34850 | Foxit PDF Reader use-after-free | 7.8v3.1 | 38.3% | 2021-08-04 | Fix |
| CVE-2021-34849 | Foxit PDF Reader use-after-free | 7.8v3.1 | 2.9% | 2021-08-04 | Fix |
| CVE-2021-34848 | Foxit PDF Reader use-after-free | 7.8v3.1 | 3.5% | 2021-08-04 | Fix |
| CVE-2021-34847 | Foxit PDF Reader use-after-free | 7.8v3.1 | 61.6% | 2021-08-04 | Fix |
| CVE-2021-34846 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34845 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34844 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34843 | Foxit PDF Reader use-after-free | 7.8v3.1 | 2.9% | 2021-08-04 | Fix |
| CVE-2021-34842 | Foxit PDF Reader use-after-free | 7.8v3.1 | 13.3% | 2021-08-04 | Fix |
| CVE-2021-34841 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34840 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34839 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34838 | Foxit PDF Reader use-after-free | 7.8v3.1 | 3.8% | 2021-08-04 | Fix |
| CVE-2021-34837 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34836 | Foxit PDF Reader use-after-free | 7.8v3.1 | 3.8% | 2021-08-04 | Fix |
| CVE-2021-34835 | Foxit PDF Reader use-after-free | 7.8v3.1 | 3.1% | 2021-08-04 | Fix |
| CVE-2021-34834 | Foxit PDF Reader use-after-free | 7.8v3.1 | 3.1% | 2021-08-04 | Fix |
| CVE-2021-34833 | Foxit PDF Reader use-after-free | 7.8v3.1 | 95.7% | 2021-08-04 | Fix |
| CVE-2021-34832 | Foxit PDF Reader use-after-free | 7.8v3.1 | 4.0% | 2021-08-04 | Fix |
| CVE-2021-34831 | Foxit Reader use-after-free | 7.8v3.1 | 3.5% | 2021-08-04 | Fix |
| CVE-2021-34707 | Cisco Evolved Programmable Network Manager sensitive information disclosure | 6.5CNA v3.1 | 1.1% | 2021-08-04 | Fix |
| CVE-2021-33339 | Liferay Portal Fragment module and Liferay DXP vulnerable to cross-site scripting | 4.8v3.1 | 0.7% | 2021-08-04 | Fix |
| CVE-2021-33338 | Liferay Portal Layout module and Liferay DXP exposes the cross-site request forgery Token in URLs | 7.5v3.1 | 0.4% | 2021-08-04 | Fix |
| CVE-2021-33337 | Liferay portal and Liferay DXP cross-site scripting vulnerability in the Document library module | 6.1v3.1 | 0.8% | 2021-08-04 | Fix |
| CVE-2021-33336 | Liferay Portal Journal module and Liferay DXP vulnerable to cross-site scripting (XSS) | 5.4v3.1 | 0.7% | 2021-08-04 | Fix |
| CVE-2021-32793 | Stored XSS vulnerability in the Pi-hole Webinterface | 5.7CNA v3.1 | 0.8% | 2021-08-04 | Fix |
| CVE-2021-32706 | pi-hole AdminLTE (Authenticated) remote code execution possible in Web interface | 7.6CNA v3.1 | 60.2% | 2021-08-04 | MetasploitEmerging ThreatsFix |
| CVE-2021-32596 | Fortinet FortiPortal weak password hash | 6.0CNA v3.1 | 0.4% | 2021-08-04 | Fix |
| CVE-2021-32594 | Fortinet FortiPortal web interface arbitrary file upload | 5.4CNA v3.1 | 0.7% | 2021-08-04 | Fix |
| CVE-2021-32590 | Fortinet FortiPortal SQL injection | 9.9CNA v3.1 | 1.7% | 2021-08-04 | Fix |
| CVE-2021-32465 | Trend Micro Apex One improper preservation of permissions | 8.8v3.1 | 4.3% | 2021-08-04 | Fix |
| CVE-2021-32464 | Trend Micro Apex One An incorrect permission assignment | 7.8v3.1 | 0.6% | 2021-08-04 | Fix |
| CVE-2021-31869 | Pimcore AdminBundle specificID SQL injection | 7.5NVD v3.1 | 1.1% | 2021-08-04 | |
| CVE-2021-31867 | Pimcore Customer Data Framework SegmentAssignmentController.php SQL injection | 7.5NVD v3.1 | 1.2% | 2021-08-04 | |
| CVE-2021-29765 | IBM PowerVM Hypervisor information disclosure | 5.9CNA v3.0 | 1.1% | 2021-08-04 | Fix |
| CVE-2021-26098 | Fortinet FortiSandbox RPC API insufficient randomness | 5.3CNA v3.1 | 0.8% | 2021-08-04 | Fix |
| CVE-2021-26097 | Fortinet FortiSandbox OS command injection | 8.8CNA v3.1 | 1.2% | 2021-08-04 | Fix |
| CVE-2021-26096 | Fortinet FortiSandbox command shell heap-based buffer overflow | 6.4CNA v3.1 | 0.8% | 2021-08-04 | Fix |
| CVE-2021-24018 | Fortinet FortiOS firmware verification routine buffer underflow | 4.3CNA v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-24014 | Fortinet FortiSandbox cross-site scripting | 5.4CNA v3.1 | 0.6% | 2021-08-04 | Fix |
| CVE-2021-24010 | Fortinet FortiSandbox path traversal | 8.1CNA v3.1 | 0.9% | 2021-08-04 | Fix |
| CVE-2021-22124 | Fortinet FortiSandbox, FortiAuthenticator login modules resource exhaustion | 7.5CNA v3.1 | 1.0% | 2021-08-04 | Fix |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) SQL injection | 9.8v3.1 | 30.1% | 2021-08-04 | KEVFix |
| CVE-2021-3680 | Missing cryptographic step in star7th/ShowDoc | 4.9v3.1 | 0.5% | 2021-08-04 | Fix |
| CVE-2021-3678 | ShowDoc weak random number generator | 5.9NVD v3.1 | 1.1% | 2021-08-04 | Fix |
| CVE-2021-3539 | EspoCRM Avatar persistent XSS | 5.4NVD v3.1 | 0.6% | 2021-08-04 | Fix |
| CVE-2021-1610 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management vulnerabilities | 9.8CNA v3.1 | 9.1% | 2021-08-04 | Fix |
| CVE-2021-1609 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management vulnerabilities | 9.8CNA v3.1 | 9.7% | 2021-08-04 | Fix |
| CVE-2021-1602 | Cisco Small Business RV160 and RV260 Series VPN Routers remote command execution | 8.2CNA v3.1 | 2.0% | 2021-08-04 | Fix |
| CVE-2021-1593 | Cisco Packet Tracer for Windows DLL injection | 7.3CNA v3.1 | 0.3% | 2021-08-04 | Fix |
| CVE-2021-1572 | ConfD CLI Secure Shell Server privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-08-04 | Fix |
| CVE-2021-1522 | Cisco Connected Mobile Experiences Strong Authentication Requirements Enforcement Bypass | 4.3CNA v3.1 | 0.7% | 2021-08-04 | Fix |
| CVE-2021-38084 | Courier-mta Courier Mail Server injection | 8.1v3.1 | 1.4% | 2021-08-03 | Fix |
| CVE-2021-37916 | Joplin vulnerable to cross-site scripting in notes | 6.1v3.1 | 0.7% | 2021-08-03 | Fix |
| CVE-2021-37914 | argoproj argo-workflows workflow re-write vulnerability using input parameter | 6.5v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-37833 | digitaldruid HotelDruid multiple pages in version reflected cross-site scripting | 6.1v3.1 | 4.9% | 2021-08-03 | NucleiExploit codeFix |
| CVE-2021-37832 | digitaldruid HotelDruid version SQL injection | 9.8v3.1 | 4.1% | 2021-08-03 | Exploit codeFix |
| CVE-2021-37558 | Centreon MediaWiki script SQL injection | 9.8v3.1 | 2.1% | 2021-08-03 | Fix |
| CVE-2021-37557 | Centreon image generation SQL injection | 8.8v3.1 | 27.4% | 2021-08-03 | Fix |
| CVE-2021-37556 | Centreon reporting export SQL injection | 8.8v3.1 | 27.4% | 2021-08-03 | Fix |
| CVE-2021-36763 | CODESYS Control files accessible to external parties | 7.5v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-36703 | HTMLy cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-03 | |
| CVE-2021-36702 | HTMLy cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-03 | |
| CVE-2021-36701 | HTMLy arbitrary file deletion | 9.1v3.1 | 1.6% | 2021-08-03 | |
| CVE-2021-36654 | Cmsuno cross-site scripting | 5.4v3.1 | 1.9% | 2021-08-03 | Exploit code |
| CVE-2021-36623 | Phone Shop Sales Management System Sourcecodester arbitrary file upload | 9.8v3.1 | 1.8% | 2021-08-03 | |
| CVE-2021-36622 | Online Covid Vaccination Scheduler System unrestricted file upload | 9.8v3.1 | 1.9% | 2021-08-03 | |
| CVE-2021-36543 | Seeddms /op/op.UnlockDocument.php cross-site request forgery | 4.3v3.1 | 0.6% | 2021-08-03 | |
| CVE-2021-36542 | Seeddms /op/op.LockDocument.php cross-site request forgery | 4.3v3.1 | 0.6% | 2021-08-03 | |
| CVE-2021-36159 | FreeBSD Libfetch out-of-bounds read | 9.1v3.1 | 2.6% | 2021-08-03 | |
| CVE-2021-36157 | Path traversal in Grafana Cortex | 5.3v3.1 | 1.4% | 2021-08-03 | Fix |
| CVE-2021-36156 | Path traversal in Grafana Loki | 5.3v3.1 | 1.5% | 2021-08-03 | Fix |
| CVE-2021-35343 | Seeddms /op/op.Ajax.php cross-site request forgery | 4.3v3.1 | 0.5% | 2021-08-03 | |
| CVE-2021-35265 | MaxSite CMS reflected cross-site scripting | 6.1v3.1 | 3.4% | 2021-08-03 | Nuclei |
| CVE-2021-34273 | A security flaw in the 'owned' function of a smart contract implementation for BTC2X (B2X), a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets. | 7.5v3.1 | 1.1% | 2021-08-03 | |
| CVE-2021-34272 | A security flaw in the 'owned' function of a smart contract implementation for RobotCoin (RBTC), a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets. | 7.5v3.1 | 1.1% | 2021-08-03 | |
| CVE-2021-34270 | Doftcoin integer overflow | 7.5v3.1 | 1.1% | 2021-08-03 | |
| CVE-2021-33486 | CODESYS Runtime Toolkit improper exception handling | 7.5v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-33485 | CODESYS Control heap-based buffer overflow | 9.8v3.1 | 1.1% | 2021-08-03 | Fix |
| CVE-2021-33403 | Blocklancertoken integer overflow | 7.5v3.1 | 1.2% | 2021-08-03 | |
| CVE-2021-33335 | Liferay portal and Liferay DXP has Company Administrator Accounts vulnerable to Takeovers | 7.2v3.1 | 1.3% | 2021-08-03 | Fix |
| CVE-2021-33334 | Liferay portal and Liferay DXP fails to properly Check User Permissions | 4.3v3.1 | 0.9% | 2021-08-03 | Fix |
| CVE-2021-33333 | Liferay portal and Liferay DXP fails to Check User Permissions for Workflow Submissions | 6.3v3.1 | 0.8% | 2021-08-03 | Fix |
| CVE-2021-33332 | Liferay portal and Liferay DXP vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2021-08-03 | Fix |
| CVE-2021-33331 | Liferay portal and Liferay DXP allows arbitrary Redirect of Users to External URLs | 6.1v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-33330 | Exposure of resource to wrong sphere in Liferay Portal | 4.3v3.1 | 1.1% | 2021-08-03 | Fix |
| CVE-2021-33328 | Liferay portal and Liferay DXP vulnerable to cross-site scripting (XSS) in Edit Vocabulary page | 5.4v3.1 | 0.7% | 2021-08-03 | Fix |
| CVE-2021-33327 | Liferay Portal and Liferay DXP does not properly check user permission | 4.3v3.1 | 0.9% | 2021-08-03 | Fix |
| CVE-2021-33326 | Liferay portal and Liferay DXP cross-site scripting (XSS) vulnerability in the Frontend JS module | 6.1v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-33325 | Liferay portal and Liferay DXP Stores User Passwords in Cleartext | 4.9v3.1 | 0.6% | 2021-08-03 | Fix |
| CVE-2021-33324 | Liferay portal and Liferay DXP Don't Check Permissions of pages | 4.3v3.1 | 0.9% | 2021-08-03 | Fix |
| CVE-2021-33323 | Liferay portal and Liferay DXP autosaves form data for other users to see | 7.5v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-33322 | Liferay portal and Liferay DXP fails to invalidate password reset tokens after use | 7.5v3.1 | 1.2% | 2021-08-03 | Fix |
| CVE-2021-33321 | Liferay Portal and Liferay DXP insecure default configuration | 7.5v3.1 | 1.4% | 2021-08-03 | Fix |
| CVE-2021-33320 | Liferay portal and Liferay DXP vulnerable to email spam via lack of flagging rate | 4.3v3.1 | 1.2% | 2021-08-03 | Fix |
| CVE-2021-32814 | Improper limitation of a pathname to a restricted directory (path traversal) in Skytable | 8.8CNA v3.1 | 2.1% | 2021-08-03 | Fix |
| CVE-2021-32813 | traefik Drop headers via Malicious Connection header | 4.8CNA v3.1 | 1.1% | 2021-08-03 | Fix |
| CVE-2021-32804 | npm node-tar arbitrary file creation/Overwrite due to insufficient absolute path sanitization | 8.2CNA v3.1 | 15.1% | 2021-08-03 | Exploit codeFix |
| CVE-2021-32803 | npm node-tar arbitrary file creation/Overwrite | 8.2CNA v3.1 | 7.8% | 2021-08-03 | Fix |
| CVE-2021-32772 | Poddycast podcast feed parser OS command injection | 8.8CNA v3.1 | 2.4% | 2021-08-03 | Fix |
| CVE-2021-32018 | Jump-technology Asset Management path traversal | 6.5NVD v3.1 | 1.2% | 2021-08-03 | |
| CVE-2021-32017 | An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the remote file system. This can be used to identify the complete server filesystem structure, i.e., identifying all the directories and files. | 7.7NVD v3.1 | 0.9% | 2021-08-03 | |
| CVE-2021-32016 | Jump-technology Asset Management path traversal | 8.8NVD v3.1 | 2.3% | 2021-08-03 | |
| CVE-2021-31630 | openplcproject OpenPLC_v3 Open PLC Webserver v3 command injection | 8.8v3.1 | 27.1% | 2021-08-03 | Exploit code |
| CVE-2021-31504 | OpenText Brava! Desktop untrusted pointer dereference | 7.8v3.1 | 1.4% | 2021-08-03 | |
| CVE-2021-31503 | OpenText Brava! Desktop uninitialized pointer access | 7.8v3.1 | 1.4% | 2021-08-03 | |
| CVE-2021-30589 | Google Chrome improper output encoding | 4.3v3.1 | 1.5% | 2021-08-03 | Fix |
| CVE-2021-30588 | Google Chrome V8 type confusion | 8.8v3.1 | 2.0% | 2021-08-03 | Fix |
| CVE-2021-30587 | Google Chrome Compositing inappropriate implementation | 4.3v3.1 | 1.7% | 2021-08-03 | Fix |
| CVE-2021-30586 | Google Chrome dialog box handling in Windows use-after-free | 8.8v3.1 | 1.1% | 2021-08-03 | Fix |
| CVE-2021-30585 | Google Chrome sensor handling use-after-free | 8.8v3.1 | 1.4% | 2021-08-03 | Fix |
| CVE-2021-30584 | Google Chrome Downloads incorrect security UI | 6.5v3.1 | 1.9% | 2021-08-03 | Fix |
| CVE-2021-30583 | Google Chrome image handling in iOS insufficient policy enforcement | 6.5v3.1 | 1.8% | 2021-08-03 | Fix |
| CVE-2021-30582 | Google Chrome Animation inappropriate implementation | 6.5v3.1 | 5.5% | 2021-08-03 | Fix |
| CVE-2021-30581 | Google Chrome DevTools use-after-free | 8.8v3.1 | 1.2% | 2021-08-03 | Fix |
| CVE-2021-30580 | Google Chrome Android intents insufficient policy enforcement | 6.5v3.1 | 1.3% | 2021-08-03 | Fix |
| CVE-2021-30579 | Google Chrome UI framework use-after-free | 8.8v3.1 | 1.6% | 2021-08-03 | Fix |
| CVE-2021-30578 | Google Chrome uninitialized resource use | 8.8v3.1 | 1.7% | 2021-08-03 | Fix |
| CVE-2021-30577 | Google Chrome Installer insufficient policy enforcement | 7.8v3.1 | 1.0% | 2021-08-03 | Fix |
| CVE-2021-30576 | Google Chrome DevTools use-after-free | 8.8v3.1 | 1.2% | 2021-08-03 | Fix |
| CVE-2021-30575 | Google Chrome Autofill out-of-bounds write | 8.8v3.1 | 1.6% | 2021-08-03 | Fix |
| CVE-2021-30574 | Google Chrome protocol handling use-after-free | 8.8v3.1 | 1.6% | 2021-08-03 | Fix |
| CVE-2021-30573 | Google Chrome GPU use-after-free | 8.8v3.1 | 6.3% | 2021-08-03 | Exploit codeFix |
| CVE-2021-30572 | Google Chrome Autofill use-after-free | 8.8v3.1 | 1.6% | 2021-08-03 | Fix |
| CVE-2021-30571 | Google Chrome DevTools insufficient policy enforcement | 9.6v3.1 | 1.2% | 2021-08-03 | Fix |
| CVE-2021-30569 | Google Chrome sqlite use-after-free | 8.8v3.1 | 1.4% | 2021-08-03 | Fix |
| CVE-2021-30568 | Google Chrome WebGL heap-based buffer overflow | 8.8v3.1 | 1.5% | 2021-08-03 | Fix |
| CVE-2021-30567 | Google Chrome DevTools use-after-free | 8.8v3.1 | 1.2% | 2021-08-03 | Fix |
| CVE-2021-30566 | Google Chrome Printing stack-based buffer overflow | 8.8v3.1 | 1.7% | 2021-08-03 | Fix |
| CVE-2021-30565 | Google ChromeOS out-of-bounds write | 8.8v3.1 | 1.9% | 2021-08-03 | Fix |
| CVE-2021-30564 | Google Chrome WebXR heap-based buffer overflow | 8.8v3.1 | 1.4% | 2021-08-03 | Fix |
| CVE-2021-30563 | Google Chromium V8 type confusion | 8.8v3.1 | 8.9% | 2021-08-03 | KEVFix |
| CVE-2021-30562 | Google Chrome WebSerial use-after-free | 8.8v3.1 | 1.3% | 2021-08-03 | Fix |
| CVE-2021-30561 | Google Chrome V8 type confusion | 8.8v3.1 | 4.7% | 2021-08-03 | Fix |
| CVE-2021-30560 | Google Chrome Blink XSLT use-after-free | 8.8v3.1 | 17.6% | 2021-08-03 | Fix |
| CVE-2021-30559 | Google Chrome ANGLE out-of-bounds write | 8.8v3.1 | 1.3% | 2021-08-03 | Fix |
| CVE-2021-30541 | Google Chrome V8 use-after-free | 8.8v3.1 | 1.7% | 2021-08-03 | Fix |
| CVE-2021-27954 | Ecobee3 Lite out-of-bounds write | 8.2v3.1 | 0.9% | 2021-08-03 | |
| CVE-2021-27953 | Ecobee3 Lite null pointer dereference | 7.5v3.1 | 1.7% | 2021-08-03 | |
| CVE-2021-27952 | Ecobee3 Lite hard-coded credentials | 9.8v3.1 | 1.1% | 2021-08-03 | |
| CVE-2021-27942 | Vizio E50x-e1 arbitrary code execution | 6.8v3.1 | 0.4% | 2021-08-03 | |
| CVE-2021-26085 | Atlassian Confluence Server Pre-Authorization arbitrary file read | 5.3v3.1 | 99.9% | 2021-08-03 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-22425 | Huawei HarmonyOS double free | 7.8v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-22424 | Huawei HarmonyOS memory leak | 5.5v3.1 | 0.1% | 2021-08-03 | |
| CVE-2021-22423 | Integer overflow vulnerability with the Always On Display (AOD) driver in some Huawei devices | 7.8v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-22422 | Integer overflow vulnerability with the Always On Display (AOD) driver in some Huawei devices | 7.8v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-22421 | Huawei HarmonyOS improper privilege management | 7.8v3.1 | 0.2% | 2021-08-03 | |
| CVE-2021-22420 | Huawei HarmonyOS external control of a configuration setting | 7.8v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-22419 | Startup verification vulnerability with non-HUAWEI APKs in some Huawei devices | 5.5v3.1 | 0.1% | 2021-08-03 | Fix |
| CVE-2021-22418 | Integer overflow vulnerability with the Always On Display (AOD) driver in some Huawei devices | 7.8v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-22417 | Memory leaks and out-of-bounds access vulnerabilities in some Huawei phones | 5.5v3.1 | 0.1% | 2021-08-03 | Fix |
| CVE-2021-22416 | Huawei HarmonyOS code execution | 7.8v3.1 | 0.2% | 2021-08-03 | |
| CVE-2021-22400 | OxfordS-AN00A improper input validation | 5.5v3.1 | 0.4% | 2021-08-03 | Fix |
| CVE-2021-21581 | Integrated Dell Remote Access Controller (iDRAC) cross-site scripting | 6.5CNA v3.1 | 0.7% | 2021-08-03 | Fix |
| CVE-2021-21580 | Integrated Dell Remote Access Controller (iDRAC) injection | 4.3CNA v3.1 | 0.7% | 2021-08-03 | Fix |
| CVE-2021-21579 | Integrated Dell Remote Access Controller (iDRAC) open redirect | 6.1CNA v3.1 | 0.8% | 2021-08-03 | Fix |
| CVE-2021-21578 | Integrated Dell Remote Access Controller (iDRAC) open redirect | 6.1CNA v3.1 | 0.8% | 2021-08-03 | Fix |
| CVE-2021-21577 | Integrated Dell Remote Access Controller (iDRAC) cross-site scripting | 6.1CNA v3.1 | 0.7% | 2021-08-03 | Fix |
| CVE-2021-21576 | Integrated Dell Remote Access Controller (iDRAC) cross-site scripting | 6.1CNA v3.1 | 0.7% | 2021-08-03 | Fix |
| CVE-2021-21565 | Dell PowerScale OneFS denial of service | 5.3CNA v3.1 | 0.9% | 2021-08-03 | Fix |
| CVE-2021-21563 | Dell PowerScale OneFS improper check for exceptional conditions | 6.5CNA v3.1 | 0.8% | 2021-08-03 | Fix |
| CVE-2021-21562 | Dell PowerScale OneFS untrusted search path | 4.4CNA v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-21553 | Dell PowerScale OneFS incorrect user management | 7.3CNA v3.1 | 0.2% | 2021-08-03 | Fix |
| CVE-2021-37848 | Pengutronix barebox observable discrepancy | 7.5v3.1 | 1.5% | 2021-08-02 | |
| CVE-2021-37847 | Pengutronix barebox information disclosure | 7.5v3.1 | 1.5% | 2021-08-02 | |
| CVE-2021-37843 | Atlassian SAML Single Sign On missing authentication | 9.8v3.1 | 1.5% | 2021-08-02 | |
| CVE-2021-37840 | aaPanel webssh WebSocket vulnerability | 8.8v3.1 | 1.7% | 2021-08-02 | Exploit code |
| CVE-2021-37216 | QSAN Storage Manager reflected cross-site scripting | 6.1v3.1 | 3.2% | 2021-08-02 | NucleiFix |
| CVE-2021-37167 | Swisslog-healthcare Hmi-3 Control Panel insecure permissions | 9.8v3.1 | 1.7% | 2021-08-02 | Fix |
| CVE-2021-37166 | Swisslog-healthcare Hmi-3 Control Panel buffer overflow | 7.5v3.1 | 2.1% | 2021-08-02 | Fix |
| CVE-2021-37165 | Swisslog-healthcare Hmi-3 Control Panel buffer overflow | 9.8v3.1 | 3.3% | 2021-08-02 | Emerging ThreatsFix |
| CVE-2021-37164 | Swisslog-healthcare Hmi-3 Control Panel buffer overflow | 9.8v3.1 | 3.4% | 2021-08-02 | Emerging ThreatsFix |
| CVE-2021-37163 | Swisslog-healthcare Hmi-3 Control Panel insecure permissions | 9.8v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-37162 | Swisslog-healthcare Hmi-3 Control Panel buffer overflow | 9.8v3.1 | 3.3% | 2021-08-02 | Emerging ThreatsFix |
| CVE-2021-37161 | Swisslog-healthcare Hmi-3 Control Panel buffer overflow | 9.8v3.1 | 3.3% | 2021-08-02 | Emerging ThreatsFix |
| CVE-2021-37160 | Swisslog-healthcare Hmi-3 Control Panel improper signature verification | 9.8v3.1 | 8.2% | 2021-08-02 | Fix |
| CVE-2021-35477 | Linux kernel observable discrepancy | 5.5NVD v3.1 | 0.5% | 2021-08-02 | Fix |
| CVE-2021-35450 | Entando admin-console server-side template injection | 7.2v3.1 | 2.4% | 2021-08-02 | |
| CVE-2021-34637 | Post Index cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.7% | 2021-08-02 | |
| CVE-2021-34635 | Poll Maker WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-08-02 | Fix |
| CVE-2021-34632 | SEO Backlinks WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.7% | 2021-08-02 | |
| CVE-2021-34628 | Admin Custom Login WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-34575 | Information exposure in mymbCONNECT24, mbCONNECT24 | 7.5v3.1 | 1.0% | 2021-08-02 | Fix |
| CVE-2021-34574 | Password policy evasion in products of MB connect line and Helmholz | 4.3v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-34556 | Linux kernel observable discrepancy | 5.5NVD v3.1 | 0.4% | 2021-08-02 | Fix |
| CVE-2021-33527 | OS command injection in mbDIALUP | 9.8v3.1 | 4.5% | 2021-08-02 | Fix |
| CVE-2021-33526 | Privilege escalation in mbDIALUP | 7.8v3.1 | 0.3% | 2021-08-02 | Fix |
| CVE-2021-33198 | Go math/big package denial of service | 7.5v3.1 | 3.4% | 2021-08-02 | Fix |
| CVE-2021-33197 | Go missing authorization | 5.3v3.1 | 2.3% | 2021-08-02 | Fix |
| CVE-2021-33196 | Go archive/zip package denial of service | 7.5v3.1 | 3.5% | 2021-08-02 | Fix |
| CVE-2021-33195 | Go DNS lookup functions vulnerability | 7.3v3.1 | 3.2% | 2021-08-02 | Fix |
| CVE-2021-32812 | Tekmonks monkshu frontend HTTP server reflected cross-site scripting | 4.6CNA v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-32811 | zopefoundation Zope remote code execution via Script (Python) objects under Python 3 | 7.5CNA v3.1 | 2.3% | 2021-08-02 | Fix |
| CVE-2021-32810 | crossbeam-rs crossbeam data race in crossbeam-deque | 9.8CNA v3.1 | 1.9% | 2021-08-02 | Fix |
| CVE-2021-32806 | URL redirection to untrusted site (open redirect) in Products.Isurlinportal | 6.5CNA v3.1 | 1.0% | 2021-08-02 | Fix |
| CVE-2021-32787 | Low risk information disclosure in Sourcegraph | 3.1CNA v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-32019 | openwrt cross-site scripting | 6.1v3.1 | 0.6% | 2021-08-02 | |
| CVE-2021-29979 | Mozilla Hubs Cloud cross-site scripting | 6.1v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-29757 | IBM QRadar User Behavior Analytics cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2021-08-02 | Fix |
| CVE-2021-29741 | IBM VIOS privilege escalation | 8.4CNA v3.0 | 0.3% | 2021-08-02 | Fix |
| CVE-2021-29697 | IBM Cloud Pak for Security information disclosure | 4.9CNA v3.0 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-29696 | IBM Cloud Pak for Security arbitrary command execution | 8.0CNA v3.0 | 2.5% | 2021-08-02 | Fix |
| CVE-2021-27943 | Vizio E50x-e1 missing brute-force protection | 7.5v3.1 | 0.9% | 2021-08-02 | |
| CVE-2021-27503 | Ypsomed mylife Cloud, mylife Mobile Application hard-coded credentials | 4.8v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-27499 | Ypsomed mylife Cloud, mylife Mobile Application predictable initialization vector | 5.9v3.1 | 0.5% | 2021-08-02 | Fix |
| CVE-2021-24504 | WP LMS WordPress plugin stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-24503 | Popular Brand SVG Icons - Simple Icons WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-24498 | Calendar Event Multi View WordPress plugin unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 3.5% | 2021-08-02 | NucleiFix |
| CVE-2021-24496 | Community Events import parameters reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-24492 | Handsome Testimonials and Reviews WordPress plugin authenticated (Subscriber+) SQL injection | 8.8NVD v3.1 | 1.6% | 2021-08-02 | Fix |
| CVE-2021-24488 | Post Grid WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 11.2% | 2021-08-02 | NucleiExploit codeFix |
| CVE-2021-24484 | Secure Copy Content Protection and Content Locking WordPress plugin blind SQL Injections | 7.2NVD v3.1 | 1.3% | 2021-08-02 | Fix |
| CVE-2021-24483 | Poll Maker WordPress plugin authenticated blind SQL Injections | 7.2NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24481 | Any Hostname WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-08-02 | |
| CVE-2021-24480 | Event Geek WordPress plugin stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-08-02 | |
| CVE-2021-24479 | DrawBlog WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-08-02 | |
| CVE-2021-24478 | Bookshelf WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-02 | |
| CVE-2021-24477 | Migrate Users WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2021-08-02 | |
| CVE-2021-24476 | Steam Group Viewer WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-08-02 | |
| CVE-2021-24474 | Awesome Weather Widget WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.7% | 2021-08-02 | |
| CVE-2021-24473 | User Profile Picture WordPress plugin arbitrary user Picture Change/Deletion via IDOR | 5.4NVD v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-24472 | QantumThemes OnAir2 and QT KenthaRadio proxy functionality server-side request forgery | 9.8NVD v3.1 | 56.6% | 2021-08-02 | NucleiFix |
| CVE-2021-24470 | Yada Wiki WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2021-08-02 | Fix |
| CVE-2021-24468 | Leaflet Map WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-24464 | YouTube Embed, Playlist and Popup WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-24463 | Image Slider by Ays - Responsive Slider and Carousel WordPress plugin blind SQL injection | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24462 | Photo Gallery by Ays - Responsive Image Gallery WordPress plugin authenticated blind SQL Injections | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24461 | FAQ Builder WordPress plugin authenticated blind SQL Injections | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24460 | Popup Like box - Page WordPress plugin authenticated blind SQL Injections | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24459 | Survey Maker WordPress plugin authenticated blind SQL Injections | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24458 | Popup box WordPress plugin authenticated blind SQL Injections | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24457 | Portfolio Responsive Gallery WordPress plugin authenticated blind SQL Injections | 8.8NVD v3.1 | 1.4% | 2021-08-02 | Fix |
| CVE-2021-24456 | Quiz Maker WordPress plugin Multiple authenticated blind SQL Injections | 7.2NVD v3.1 | 1.3% | 2021-08-02 | Fix |
| CVE-2021-24455 | Tutor LMS WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-24450 | ProfilePress WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-24448 | Profile Builder WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-24444 | TaxoPress WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 2.3% | 2021-08-02 | Exploit codeFix |
| CVE-2021-24443 | Youzify WordPress plugin stored cross-site scripting via Biography | 5.4NVD v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-24430 | Speed Booster Pack Authenticated (admin+) RCE | 7.2NVD v3.1 | 1.7% | 2021-08-02 | Fix |
| CVE-2021-24428 | RSS for Yandex Turbo WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.5% | 2021-08-02 | Fix |
| CVE-2021-24425 | myStickymenu WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-24371 | RSVPMaker WordPress plugin authenticated (admin+) SSRF | 2.7NVD v3.1 | 1.0% | 2021-08-02 | Fix |
| CVE-2021-22552 | Google Memory overread secure enclave in Asylo | 5.3CNA v3.1 | 0.2% | 2021-08-02 | |
| CVE-2021-22447 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22446 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22445 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22444 | Logic bypass vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-22443 | Improper verification vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22442 | Improper verification of the integrity check result in some Huawei devices | 7.5v3.1 | 0.3% | 2021-08-02 | Fix |
| CVE-2021-22438 | Memory address out-of-bounds vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-22435 | Logic bypass vulnerability in some Huawei phones | 9.1v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22428 | Race condition vulnerability in some Huawei phones | 8.1v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-22427 | Race condition vulnerability in some Huawei phones | 8.1v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-22415 | DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22414 | Stack overflow vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22413 | Out-of-bounds memory write vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22412 | Out-of-bounds address access in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22398 | Hulk-AL00C several smartphones logic flaw | 4.6v3.1 | 0.2% | 2021-08-02 | Fix |
| CVE-2021-22397 | ManageOne Huawei privilege escalation | 6.7v3.1 | 0.2% | 2021-08-02 | Fix |
| CVE-2021-22396 | Huawei eCNS280_TD some privilege escalation | 7.8v3.1 | 0.1% | 2021-08-02 | Fix |
| CVE-2021-22392 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-22391 | Stack overflow vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22390 | UAF vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-22389 | Kernel address rewrite vulnerability in some Huawei phones | 9.8v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22388 | Out-of-bounds array access in some Huawei phones | 9.8v3.1 | 0.8% | 2021-08-02 | Fix |
| CVE-2021-22387 | Deserialization vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2021-08-02 | Fix |
| CVE-2021-22384 | Race condition vulnerability in some Huawei phones | 8.1v3.1 | 0.6% | 2021-08-02 | Fix |
| CVE-2021-22381 | Bluetooth protocol stack vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-22379 | Integer overflow vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-08-02 | Fix |
| CVE-2021-21866 | CODESYS Development System deserialization of untrusted data | 7.8v3.1 | 1.7% | 2021-08-02 | Fix |
| CVE-2021-21865 | CODESYS Development System deserialization of untrusted data | 7.8v3.1 | 1.3% | 2021-08-02 | Fix |
| CVE-2021-21864 | CODESYS Development System deserialization of untrusted data | 7.8v3.1 | 1.7% | 2021-08-02 | Fix |
| CVE-2021-20541 | IBM Cloud Pak for Security information disclosure | 3.7CNA v3.0 | 0.9% | 2021-08-02 | Fix |
| CVE-2021-20540 | IBM Cloud Pak for Security information disclosure | 2.7CNA v3.0 | 0.9% | 2021-08-02 | Fix |
| CVE-2021-20539 | IBM Cloud Pak for Security information disclosure | 5.3CNA v3.0 | 0.9% | 2021-08-02 | Fix |
| CVE-2021-20332 | Exposure of sensitive information to an unauthorized actor in MongoDB Rust Driver | 4.2CNA v3.1 | 0.3% | 2021-08-02 | Fix |
| CVE-2021-3673 | Radare2 improper input validation | 7.5NVD v3.1 | 1.8% | 2021-08-02 | Fix |
| CVE-2021-3351 | openplcproject OpenPLC cross-site scripting | 5.4v3.1 | 0.5% | 2021-08-02 | |
| CVE-2021-32066 | ruby-lang Ruby improper exception handling | 7.4v3.1 | 2.9% | 2021-08-01 | Fix |