CVE-2021 records published in September 2021
This page lists the 1,703 CVE-2021 records published in September 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 30 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 19711.6% of these records
- Listed in CISA KEV
- 301.8% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 533.1% of these records
- Exploit code
- 734.3% of these records
- Actionable vendor fix
- 1,39381.8% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in September 2021 have had from about 61 months to about 62 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-41829 | Zoho Manageengine Remote Access Plus insufficient randomness | 7.5v3.1 | 3.2% | 2021-09-30 | Fix |
| CVE-2021-41828 | Zoho Manageengine Remote Access Plus hard-coded credentials | 7.5v3.1 | 4.7% | 2021-09-30 | Fix |
| CVE-2021-41827 | Zoho Manageengine Remote Access Plus hard-coded credentials | 7.5v3.1 | 4.7% | 2021-09-30 | Fix |
| CVE-2021-41826 | Placeos Authentication open redirect | 6.1v3.1 | 11.9% | 2021-09-30 | Nuclei |
| CVE-2021-41824 | Craft CMS CSV injection | 8.8v3.1 | 1.4% | 2021-09-30 | Fix |
| CVE-2021-41729 | Baicloud-cms missing authorization | 9.1v3.1 | 1.0% | 2021-09-30 | |
| CVE-2021-41616 | Deserialization of untrusted data in org.Apache.Ddlutils:Ddlutils | 9.8v3.1 | 3.5% | 2021-09-30 | Fix |
| CVE-2021-41325 | pydio cells missing authorization | 6.5v3.1 | 1.1% | 2021-09-30 | Fix |
| CVE-2021-41324 | pydio cells Copy path traversal | 6.5v3.1 | 2.1% | 2021-09-30 | Fix |
| CVE-2021-41323 | pydio cells Compress feature path traversal | 6.5v3.1 | 2.1% | 2021-09-30 | Fix |
| CVE-2021-41302 | ECOA BAS controller missing encryption of sensitive data | 7.3CNA v3.1 | 0.4% | 2021-09-30 | Fix |
| CVE-2021-41301 | ECOA BAS controller exposure of sensitive information to an unauthorized actor | 9.8CNA v3.1 | 2.0% | 2021-09-30 | Fix |
| CVE-2021-41300 | ECOA BAS controller insufficiently protected credentials-2 | 9.8CNA v3.1 | 1.0% | 2021-09-30 | Fix |
| CVE-2021-41299 | ECOA BAS controller use of hard-coded credentials | 9.8CNA v3.1 | 2.1% | 2021-09-30 | Fix |
| CVE-2021-41298 | ECOA BAS controller improper access control | 8.8CNA v3.1 | 0.9% | 2021-09-30 | Fix |
| CVE-2021-41297 | ECOA BAS controller insufficiently protected credentials-1 | 8.8CNA v3.1 | 0.7% | 2021-09-30 | Fix |
| CVE-2021-41296 | ECOA BAS controller weak password requirements | 9.8CNA v3.1 | 1.0% | 2021-09-30 | Fix |
| CVE-2021-41295 | ECOA BAS controller cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.4% | 2021-09-30 | Fix |
| CVE-2021-41294 | ECOA BAS controller path traversal-4 | 9.1v3.1 | 1.2% | 2021-09-30 | Fix |
| CVE-2021-41293 | ECOA BAS controller path traversal-3 | 7.5CNA v3.1 | 19.9% | 2021-09-30 | NucleiFix |
| CVE-2021-41292 | ECOA BAS controller broken authentication | 9.1v3.1 | 1.2% | 2021-09-30 | Fix |
| CVE-2021-41291 | ECOA BAS controller path traversal-1 | 7.5CNA v3.1 | 82.7% | 2021-09-30 | NucleiFix |
| CVE-2021-41290 | ECOA BAS controller path traversal-1 | 9.8CNA v3.1 | 2.3% | 2021-09-30 | Fix |
| CVE-2021-41288 | Zoho ManageEngine OpManager SQL injection | 9.8v3.1 | 79.6% | 2021-09-30 | Emerging ThreatsFix |
| CVE-2021-41109 | parse-community parse-server LiveQuery publishes user session tokens | 7.5CNA v3.1 | 1.2% | 2021-09-30 | Fix |
| CVE-2021-41101 | wireapp wire-server CORS `Access-Control-Allow-Origin` settings are too lenient | 5.7CNA v3.1 | 0.7% | 2021-09-30 | Fix |
| CVE-2021-35205 | Netscout Ngeniusone open redirect | 5.4v3.1 | 0.4% | 2021-09-30 | Fix |
| CVE-2021-35204 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.5% | 2021-09-30 | Fix |
| CVE-2021-35203 | Netscout Ngeniusone files accessible to external parties | 5.7v3.1 | 0.7% | 2021-09-30 | Fix |
| CVE-2021-35202 | Netscout Ngeniusone incorrect permission assignment | 4.3v3.1 | 0.7% | 2021-09-30 | Fix |
| CVE-2021-35201 | Netscout Ngeniusone XML external entity injection | 6.5v3.1 | 1.0% | 2021-09-30 | Fix |
| CVE-2021-35200 | Netscout Ngeniusone cross-site scripting | 4.8v3.1 | 0.5% | 2021-09-30 | Fix |
| CVE-2021-35199 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.5% | 2021-09-30 | Fix |
| CVE-2021-35198 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.5% | 2021-09-30 | Fix |
| CVE-2021-33583 | Reiner-sct Timecard hard-coded credentials | 9.8v3.1 | 1.3% | 2021-09-30 | |
| CVE-2021-29894 | IBM Cloud Pak for Security weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-09-30 | Fix |
| CVE-2021-25963 | Shuup reflected XSS in Error page | 6.1v3.1 | 1.0% | 2021-09-30 | Fix |
| CVE-2021-24017 | Fortinet FortiManager improper authentication | 5.4CNA v3.1 | 0.6% | 2021-09-30 | Fix |
| CVE-2021-24016 | Fortinet FortiManager csv file improper neutralization | 3.7CNA v3.1 | 0.5% | 2021-09-30 | Fix |
| CVE-2021-21089 | Adobe Acrobat Reader DC URI Parsing out-of-bounds read | 3.3CNA v3.1 | 1.9% | 2021-09-30 | Fix |
| CVE-2021-20578 | IBM Cloud Pak for Security improper authentication | 5.4CNA v3.0 | 1.0% | 2021-09-30 | Fix |
| CVE-2021-20554 | IBM Sterling Order Management cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-09-30 | Fix |
| CVE-2021-41821 | wazuh integer underflow | 6.5v3.1 | 1.1% | 2021-09-29 | Fix |
| CVE-2021-41795 | 1password authorization bypass | 6.5v3.1 | 0.9% | 2021-09-29 | Fix |
| CVE-2021-41764 | Streama cross-site request forgery | 8.8v3.1 | 0.7% | 2021-09-29 | |
| CVE-2021-41732 | zeek HTTP request smuggling | 7.5v3.1 | 0.9% | 2021-09-29 | |
| CVE-2021-41573 | Hitachi Content Platform Anywhere files accessible to external parties | 6.5NVD v3.1 | 0.8% | 2021-09-29 | Fix |
| CVE-2021-41034 | The Eclipse Foundation Eclipse Che improper message integrity enforcement | 8.1v3.1 | 0.4% | 2021-09-29 | Fix |
| CVE-2021-40716 | Adobe XMP Toolkit SDK SVG_Adapter out-of-bounds read information disclosure | 5.5CNA v3.0 | 2.3% | 2021-09-29 | Fix |
| CVE-2021-40715 | Adobe Premiere Pro 2021 EXR File Parsing leads to memory corruption | 7.8CNA v3.1 | 2.1% | 2021-09-29 | Fix |
| CVE-2021-40710 | Adobe Premiere Pro 2021 SVG File Parsing leads to memory corruption | 7.8CNA v3.0 | 2.1% | 2021-09-29 | Fix |
| CVE-2021-40708 | Adobe Genuine Service Installer privilege escalation | 7.3CNA v3.1 | 1.7% | 2021-09-29 | Fix |
| CVE-2021-40697 | Adobe FrameMaker PDF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.5% | 2021-09-29 | Fix |
| CVE-2021-40651 | OS4ED Opensis path traversal | 6.5v3.1 | 18.4% | 2021-09-29 | NucleiExploit code |
| CVE-2021-39865 | Adobe FrameMaker TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 2.2% | 2021-09-29 | Fix |
| CVE-2021-39863 | Adobe Acrobat Reader DC buffer overflow | 7.8CNA v3.1 | 13.2% | 2021-09-29 | Exploit codeFix |
| CVE-2021-39862 | Adobe FrameMaker PostScript File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.5% | 2021-09-29 | Fix |
| CVE-2021-39861 | Adobe Acrobat Reader DC Catalog plugin out-of-bounds read Bug | 5.5CNA v3.1 | 2.5% | 2021-09-29 | Fix |
| CVE-2021-39860 | Adobe Acrobat Reader DC Search plugin null pointer dereference | 5.5CNA v3.1 | 2.4% | 2021-09-29 | Fix |
| CVE-2021-39858 | Adobe Acrobat Pro DC PostScript File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 2.5% | 2021-09-29 | Fix |
| CVE-2021-39857 | Adobe Acrobat Reader DC information disclosure via ActiveX LoadFile | 4.3CNA v3.0 | 2.5% | 2021-09-29 | Fix |
| CVE-2021-39856 | Adobe Acrobat Reader DC NTLMv2 SSO information disclosure via LoadFile | 6.5CNA v3.1 | 2.4% | 2021-09-29 | Fix |
| CVE-2021-39855 | Adobe Acrobat Reader DC NTLMv2 SSO information disclosure via src parameter | 6.5CNA v3.1 | 2.4% | 2021-09-29 | Fix |
| CVE-2021-39854 | Adobe Acrobat Reader DC null pointer dereference could lead to application denial of service | 5.5CNA v3.0 | 2.4% | 2021-09-29 | Fix |
| CVE-2021-39853 | Adobe Acrobat Reader DC null pointer dereference could lead to application denial of service | 5.5CNA v3.0 | 2.2% | 2021-09-29 | Fix |
| CVE-2021-39852 | Adobe Acrobat Reader DC null pointer dereference could lead to application denial of service | 5.5CNA v3.1 | 1.9% | 2021-09-29 | Fix |
| CVE-2021-39851 | Adobe Acrobat Reader DC null pointer dereference could lead to application denial of service | 5.5CNA v3.1 | 1.9% | 2021-09-29 | Fix |
| CVE-2021-39850 | Adobe Acrobat Reader DC null pointer dereference could lead to application denial of service | 5.5CNA v3.1 | 1.9% | 2021-09-29 | Fix |
| CVE-2021-39849 | Adobe Acrobat Reader DC null pointer dereference could lead to application denial of service | 5.5CNA v3.1 | 1.9% | 2021-09-29 | Fix |
| CVE-2021-39846 | Adobe Acrobat Reader /Parent Property Recursive stack overflow | 6.1CNA v3.1 | 2.6% | 2021-09-29 | Fix |
| CVE-2021-39845 | Adobe Acrobat Reader Page Tree Node Recursive stack overflow | 6.1CNA v3.1 | 2.6% | 2021-09-29 | Fix |
| CVE-2021-39844 | Adobe Acrobat Reader CalRGB out-of-bounds read | 3.3CNA v3.1 | 3.1% | 2021-09-29 | Fix |
| CVE-2021-39843 | Adobe Acrobat Reader XObject out-of-bound write | 7.8CNA v3.1 | 76.7% | 2021-09-29 | Fix |
| CVE-2021-39842 | Adobe Acrobat Reader DC messageHandler.OnMessage use-after-free | 7.8CNA v3.0 | 17.4% | 2021-09-29 | Fix |
| CVE-2021-39841 | Adobe Acrobat Pro DC DocMedia type confusion remote code execution | 7.8CNA v3.0 | 11.7% | 2021-09-29 | Fix |
| CVE-2021-39840 | Adobe Acrobat Reader DC AcroForm field use-after-free remote code execution | 7.8CNA v3.0 | 50.6% | 2021-09-29 | Fix |
| CVE-2021-39839 | Adobe Acrobat Reader DC AcroForm getItemAt use-after-free remote code execution | 7.8CNA v3.0 | 65.2% | 2021-09-29 | Fix |
| CVE-2021-39838 | Adobe Acrobat Reader DC AcroForm buttonGetCaption use-after-free remote code execution | 7.8CNA v3.0 | 65.2% | 2021-09-29 | Fix |
| CVE-2021-39837 | Adobe Acrobat Reader DC AcroForm deleteItemAt use-after-free remote code execution | 7.8CNA v3.0 | 65.2% | 2021-09-29 | Fix |
| CVE-2021-39836 | Adobe Acrobat Reader DC AcroForm buttonGetIcon use-after-free remote code execution | 7.8CNA v3.0 | 69.5% | 2021-09-29 | Fix |
| CVE-2021-39835 | Adobe FrameMaker PDF File Parsing use-after-free information disclosure | 4.3CNA v3.0 | 1.5% | 2021-09-29 | Fix |
| CVE-2021-39834 | Adobe FrameMaker TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.3% | 2021-09-29 | Fix |
| CVE-2021-39833 | Adobe FrameMaker TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.3% | 2021-09-29 | Fix |
| CVE-2021-39832 | Adobe FrameMaker PDF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 2.0% | 2021-09-29 | Fix |
| CVE-2021-39831 | Adobe FrameMaker PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 2.2% | 2021-09-29 | Fix |
| CVE-2021-39830 | Adobe FrameMaker PDF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 2.0% | 2021-09-29 | Fix |
| CVE-2021-39829 | Adobe FrameMaker PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2021-09-29 | Fix |
| CVE-2021-39821 | Adobe InDesign TIF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 4.0% | 2021-09-29 | Fix |
| CVE-2021-39342 | Credova_Financial sensitive information disclosure | 7.5v3.1 | 0.8% | 2021-09-29 | Fix |
| CVE-2021-36745 | Trend Micro ServerProtect for Storage forced browsing | 9.8v3.1 | 9.0% | 2021-09-29 | Fix |
| CVE-2021-35982 | Adobe Acrobat Reader DC uncontrolled search path | 7.3CNA v3.0 | 1.8% | 2021-09-29 | Fix |
| CVE-2021-35945 | Couchbase Server buffer overflow | 7.5v3.1 | 1.1% | 2021-09-29 | Fix |
| CVE-2021-35944 | Couchbase Server buffer overflow | 7.5v3.1 | 1.1% | 2021-09-29 | Fix |
| CVE-2021-35943 | Couchbase Server improper authentication | 9.8v3.1 | 1.1% | 2021-09-29 | Fix |
| CVE-2021-35028 | Zyxel ZyWALL VPN2S Firmware CGI program of the command injection | 7.3CNA v3.1 | 0.3% | 2021-09-29 | Fix |
| CVE-2021-35027 | Zyxel ZyWALL VPN2S Firmware web server of the path traversal | 7.5CNA v3.1 | 2.0% | 2021-09-29 | Fix |
| CVE-2021-33924 | confluent Ansible missing authorization | 9.8v3.1 | 1.6% | 2021-09-29 | |
| CVE-2021-33923 | confluent Cp-ansible insecure permissions | 5.5v3.1 | 0.3% | 2021-09-29 | |
| CVE-2021-32466 | Trend Micro HouseCall for Home Networks An uncontrolled search path | 7.0v3.1 | 0.5% | 2021-09-29 | Fix |
| CVE-2021-29834 | IBM Business Automation Workflow cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-29 | Fix |
| CVE-2021-28547 | Adobe Creative Cloud for macOS privilege escalation | 7.8CNA v3.0 | 0.5% | 2021-09-29 | Fix |
| CVE-2021-25962 | Shuup formula injection in Checkout Addresses | 8.8v3.1 | 1.1% | 2021-09-29 | Fix |
| CVE-2021-25961 | SuiteCRM account takeover in Password Reset Functionality | 8.0v3.1 | 1.0% | 2021-09-29 | Fix |
| CVE-2021-25960 | SuiteCRM CSV injection in Accounts module | 8.0v3.1 | 1.2% | 2021-09-29 | Fix |
| CVE-2021-25959 | OpenCRX reflected cross-site scripting in Password Reset Functionality | 6.1v3.1 | 0.9% | 2021-09-29 | Fix |
| CVE-2021-23446 | handsontable regular expression denial of service (ReDoS) | 7.5v3.1 | 3.0% | 2021-09-29 | Fix |
| CVE-2021-22947 | https://github.com/curl/curl cryptographic weakness | 5.9NVD v3.1 | 3.0% | 2021-09-29 | Fix |
| CVE-2021-22946 | https://github.com/curl/curl missing cryptographic step | 7.5NVD v3.1 | 4.5% | 2021-09-29 | Fix |
| CVE-2021-3653 | kernel missing authorization | 8.8NVD v3.1 | 0.4% | 2021-09-29 | Fix |
| CVE-2021-41540 | Siemens Solid Edge SE2021 use-after-free | 7.8v3.1 | 1.2% | 2021-09-28 | Fix |
| CVE-2021-41539 | Siemens Solid Edge SE2021 use-after-free | 7.8v3.1 | 1.2% | 2021-09-28 | Fix |
| CVE-2021-41538 | Siemens NX 1953 Series uninitialized pointer access | 3.3v3.1 | 1.0% | 2021-09-28 | Fix |
| CVE-2021-41537 | Siemens Solid Edge SE2021 use-after-free | 7.8v3.1 | 1.2% | 2021-09-28 | Fix |
| CVE-2021-41536 | Siemens Solid Edge SE2021 use-after-free | 7.8v3.1 | 1.2% | 2021-09-28 | Fix |
| CVE-2021-41535 | Siemens NX 1953 Series use-after-free | 7.8v3.1 | 1.6% | 2021-09-28 | Fix |
| CVE-2021-41534 | Siemens NX 1980 Series out-of-bounds read | 3.3v3.1 | 1.0% | 2021-09-28 | Fix |
| CVE-2021-41533 | Siemens NX 1980 Series out-of-bounds read | 3.3v3.1 | 1.0% | 2021-09-28 | Fix |
| CVE-2021-41318 | Progress WhatsUp Gold cross-site scripting | 6.1v3.1 | 5.9% | 2021-09-28 | Exploit codeFix |
| CVE-2021-41106 | lcobucci jwt file reference keys leads to incorrect hashes on HMAC algorithms | 4.4CNA v3.1 | 0.2% | 2021-09-28 | Fix |
| CVE-2021-41104 | esphome web_server allows OTA update without checking user defined basic auth username and password | 7.5CNA v3.1 | 1.2% | 2021-09-28 | Fix |
| CVE-2021-38303 | Surelinesystems Sureedge Migrator SQL injection | 9.8v3.1 | 1.3% | 2021-09-28 | |
| CVE-2021-38124 | ArcSight Enterprise Security Manager (ESM) Micro Focus remote code execution | 9.8v3.1 | 2.1% | 2021-09-28 | |
| CVE-2021-37273 | Chinatelecom Epon Tianyi Gateway Zxhn F450 China Telecom Corporation denial of service | 7.5v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-37271 | Baidu UEditor cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-28 | Fix |
| CVE-2021-37267 | Kindsoft Kind Editor all versions of KindEditor cross-site scripting | 6.1v3.1 | 0.6% | 2021-09-28 | |
| CVE-2021-37146 | Ros-comm Open Robotics infinite loop | 7.5v3.1 | 2.0% | 2021-09-28 | Fix |
| CVE-2021-37106 | FusionCompute CMA service module command injection | 7.2v3.1 | 0.9% | 2021-09-28 | Fix |
| CVE-2021-37105 | FusionCompute unrestricted file upload | 7.5v3.1 | 0.7% | 2021-09-28 | Fix |
| CVE-2021-37104 | HUAWEI P40 There is a server-side request forgery | 7.5v3.1 | 0.7% | 2021-09-28 | Fix |
| CVE-2021-36366 | Nagios XI manage_services.sh script vulnerability | 9.8v3.1 | 4.0% | 2021-09-28 | Fix |
| CVE-2021-36365 | Nagios XI incorrect default permissions | 9.8v3.1 | 3.8% | 2021-09-28 | Fix |
| CVE-2021-36364 | Nagios XI backup_xi.sh script vulnerability | 9.8v3.1 | 4.0% | 2021-09-28 | Fix |
| CVE-2021-36363 | Nagios XI incorrect default permissions | 9.8v3.1 | 3.8% | 2021-09-28 | Fix |
| CVE-2021-36297 | Dell SupportAssist Client Consumer untrusted search path | 7.8CNA v3.1 | 0.5% | 2021-09-28 | Fix |
| CVE-2021-36286 | Dell SupportAssist Client Consumer path traversal | 7.1CNA v3.1 | 0.3% | 2021-09-28 | Fix |
| CVE-2021-36285 | Dell CPG BIOS missing brute-force protection | 5.7CNA v3.1 | 0.2% | 2021-09-28 | Fix |
| CVE-2021-36284 | Dell CPG BIOS missing brute-force protection | 5.7CNA v3.1 | 0.2% | 2021-09-28 | Fix |
| CVE-2021-36283 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2021-09-28 | Fix |
| CVE-2021-36165 | Riconmobile S9922L cleartext storage of sensitive information | 5.3v3.1 | 0.6% | 2021-09-28 | |
| CVE-2021-34636 | wpdevart Countdown and CountUp, WooCommerce Sales Timer cross-site request forgery | 8.8CNA v3.1 | 0.6% | 2021-09-28 | Fix |
| CVE-2021-33601 | Arbitrary code execution in Web interface of F-Secure Internet Gatekeeper | 8.8v3.1 | 0.9% | 2021-09-28 | Fix |
| CVE-2021-33600 | Denial of service vulnerability in Web interface of F-Secure Internet Gatekeeper | 7.5v3.1 | 0.6% | 2021-09-28 | Fix |
| CVE-2021-30086 | Kindsoft Kind Editor cross-site scripting | 6.1v3.1 | 0.7% | 2021-09-28 | |
| CVE-2021-29367 | IrfanView WPG+0x1dda buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29366 | IrfanView FORMATS!GetPlugInInfo+0x2de9 buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29365 | IrfanView infinite loop | 5.5v3.1 | 0.7% | 2021-09-28 | |
| CVE-2021-29364 | IrfanView Formats!ReadRAS_W+0x1001 buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29363 | IrfanView FORMATS!ReadRAS_W+0xa74 buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29362 | IrfanView FORMATS!ReadRAS_W+0xa30 buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29361 | IrfanView FORMATS!Read_Utah_RLE+0x340 buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29360 | IrfanView FORMATS!Read_Utah_RLE+0x37a buffer overflow | 7.8v3.1 | 1.0% | 2021-09-28 | |
| CVE-2021-29358 | IrfanView FORMATS!ReadPVR_W+0xfa buffer overflow | 5.5v3.1 | 0.7% | 2021-09-28 | |
| CVE-2021-22535 | Directory and Resource Administrator (DRA) incorrect authorization | 4.9v3.1 | 0.8% | 2021-09-28 | |
| CVE-2021-21570 | Dell NetWorker OS command injection | 6.8CNA v3.1 | 0.8% | 2021-09-28 | Fix |
| CVE-2021-21569 | Dell NetWorker OS command injection | 6.8CNA v3.1 | 1.0% | 2021-09-28 | Fix |
| CVE-2021-21522 | Dell CPG BIOS credential management weakness | 8.2CNA v3.1 | 0.2% | 2021-09-28 | Fix |
| CVE-2021-41753 | D-Link Dir-x1560 WPA2 denial of service | 7.5v3.1 | 2.4% | 2021-09-27 | Fix |
| CVE-2021-41580 | Improper access control in Passport-oauth2 | 5.3v3.1 | 1.3% | 2021-09-27 | Fix |
| CVE-2021-41558 | The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config. | 9.8v3.1 | 1.3% | 2021-09-27 | Fix |
| CVE-2021-41385 | Securonix Snypr server-side request forgery | 6.5v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-41329 | Datalust Seq incorrect calculation | 6.5v3.1 | 1.0% | 2021-09-27 | |
| CVE-2021-41098 | Improper restriction of XML external entity reference (XXE) in Nokogiri on JRuby | 7.5CNA v3.0 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-41097 | Prototype pollution in Aurelia-path | 9.1CNA v3.1 | 4.9% | 2021-09-27 | NucleiFix |
| CVE-2021-41096 | mayankmetha Rucky use of a broken or risky cryptographic algorithm in com.mayank.Rucky | 7.5CNA v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-41095 | discourse XSS via blocked watched word in error message | 4.2CNA v3.1 | 0.6% | 2021-09-27 | |
| CVE-2021-40981 | ASUS Armoury Crate Lite Service uncontrolled search path | 7.3v3.1 | 0.4% | 2021-09-27 | |
| CVE-2021-40714 | Adobe Experience Manager reflected cross-site scripting via accesskey parameter | 6.1CNA v3.1 | 1.1% | 2021-09-27 | Fix |
| CVE-2021-40713 | Adobe Experience Manager improper certificate validation could lead to man in the middle Attack | 5.9CNA v3.1 | 1.0% | 2021-09-27 | Fix |
| CVE-2021-40712 | Adobe Experience Manager Path parameter improper input validation could lead to DOS | 6.5CNA v3.1 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-40711 | Adobe Experience Manager stored cross-site scripting could lead to arbitrary code execution | 5.4CNA v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-40709 | Adobe Photoshop buffer overflow leads to arbitrary code execution | 7.8CNA v3.1 | 4.6% | 2021-09-27 | Fix |
| CVE-2021-40703 | Adobe Premiere Elements m4a memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-40702 | Adobe Premiere Elements psd memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-40701 | Adobe Premiere Elements m4a memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-40700 | Adobe Premiere Elements TIFF memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-40349 | speedtest path traversal | 5.3v3.1 | 1.1% | 2021-09-27 | Fix |
| CVE-2021-40329 | Ping Identity PingFederate Authentication API vulnerability | 9.8NVD v3.1 | 1.1% | 2021-09-27 | |
| CVE-2021-40109 | Concrete CMS A server-side request forgery | 6.4v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-40108 | Concrete CMS cross-site request forgery | 8.8v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-40106 | Concrete CMS cross-site scripting | 6.1v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-40105 | Concrete CMS cross-site scripting | 6.1v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-40104 | Concrete CMS SVG sanitizer vulnerability | 7.5v3.1 | 1.4% | 2021-09-27 | Fix |
| CVE-2021-40103 | Concrete CMS path traversal | 7.5v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-40098 | Concrete CMS path traversal | 9.8v3.1 | 1.6% | 2021-09-27 | Fix |
| CVE-2021-40097 | Concrete CMS path traversal | 8.8v3.1 | 2.5% | 2021-09-27 | Fix |
| CVE-2021-39828 | Adobe Digital Editions Installer flaw leads to local privilege escalation | 5.8CNA v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-39827 | Adobe Digital Editions Installer flaw leads to arbitrary File System Write | 6.5CNA v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-39826 | Adobe Digital Editions command execution | 8.6CNA v3.1 | 2.1% | 2021-09-27 | Fix |
| CVE-2021-39825 | Adobe Photoshop Elements Edit 2021 TTF Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 1.9% | 2021-09-27 | Fix |
| CVE-2021-39824 | Adobe Premiere Elements png memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.8% | 2021-09-27 | Fix |
| CVE-2021-39823 | Adobe SVG Native Viewer svg-native-viewer heap buffer overflow | 7.8CNA v3.1 | 4.2% | 2021-09-27 | Fix |
| CVE-2021-39819 | Adobe InCopy memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-39818 | Adobe InCopy memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-38299 | Improper access control in Webauthn Framework | 9.8v3.1 | 1.8% | 2021-09-27 | Fix |
| CVE-2021-37786 | Bag Covid Certificate improper exception handling | 4.6v3.1 | 0.2% | 2021-09-27 | |
| CVE-2021-37761 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 9.2% | 2021-09-27 | Fix |
| CVE-2021-37539 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 93.4% | 2021-09-27 | Fix |
| CVE-2021-37274 | Kingdee Kis Cloud privilege escalation | 8.8v3.1 | 1.1% | 2021-09-27 | |
| CVE-2021-37270 | S-cms Cms Enterprise Website Construction System There is an unauthorized access | 9.8v3.1 | 1.5% | 2021-09-27 | |
| CVE-2021-36880 | uListing WordPress plugin unauthenticated SQL injection (SQLi) | 9.8v3.1 | 2.1% | 2021-09-27 | Fix |
| CVE-2021-36879 | uListing WordPress plugin unauthenticated privilege escalation | 9.8v3.1 | 2.2% | 2021-09-27 | Fix |
| CVE-2021-36878 | uListing WordPress plugin settings update via cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2021-09-27 | Fix |
| CVE-2021-36877 | uListing WordPress plugin Modify user roles via cross-site request forgery (CSRF) | 6.5v3.1 | 0.4% | 2021-09-27 | Fix |
| CVE-2021-36876 | uListing WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2021-09-27 | Fix |
| CVE-2021-36875 | uListing WordPress plugin Auth. reflected cross-site scripting (XSS) | 4.8v3.1 | 0.8% | 2021-09-27 | Fix |
| CVE-2021-36874 | uListing WordPress plugin authenticated insecure direct object references (IDOR) | 8.8v3.1 | 1.1% | 2021-09-27 | Fix |
| CVE-2021-36845 | YITH Maintenance Mode (WordPress plugin) Multiple authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-36841 | YITH Maintenance Mode (WordPress plugin) authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-36219 | Skale Sgxwallet uninitialized pointer access | 9.8v3.1 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-36218 | Skale Sgxwallet out-of-bounds write | 7.5v3.1 | 2.3% | 2021-09-27 | Fix |
| CVE-2021-36134 | Out-of-bounds write in NetOp Vision Pro | 6.5NVD v3.1 | 0.5% | 2021-09-27 | |
| CVE-2021-34570 | Phoenix Contact: DoS for PLCnext Control devices in versions LTS | 7.5v3.1 | 1.0% | 2021-09-27 | Fix |
| CVE-2021-34416 | Zoom On-Premise Meeting Connector Controller improper input validation | 9.8v3.1 | 1.6% | 2021-09-27 | |
| CVE-2021-34415 | Zoom On-Premise Meeting Connector Controller resource exhaustion | 7.5v3.1 | 1.0% | 2021-09-27 | |
| CVE-2021-34414 | Zoom On-Premise Meeting Connector Controller improper input validation | 7.2v3.1 | 1.5% | 2021-09-27 | |
| CVE-2021-34413 | Zoom Plugin for Microsoft Outlook for MacOS time-of-check time-of-use race condition | 7.5v3.1 | 0.6% | 2021-09-27 | |
| CVE-2021-34412 | Zoom Client for Meetings improper privilege management | 7.8v3.1 | 0.3% | 2021-09-27 | |
| CVE-2021-34411 | Zoom Rooms for Conference Room improper privilege management | 7.8v3.1 | 0.2% | 2021-09-27 | |
| CVE-2021-34410 | Zoom Plugin for Microsoft Outlook incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-09-27 | |
| CVE-2021-34409 | Zoom Client Installer local privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-09-27 | Fix |
| CVE-2021-34408 | Zoom Client for Meetings link following | 7.8v3.1 | 0.4% | 2021-09-27 | |
| CVE-2021-34351 | Command injection vulnerability in QVR | 9.8CNA v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-34349 | Command injection vulnerability in QVR | 7.2CNA v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-34348 | Command injection vulnerability in QVR | 9.8CNA v3.1 | 1.5% | 2021-09-27 | Fix |
| CVE-2021-33907 | Zoom Client for Meetings improper certificate validation | 9.8v3.1 | 3.0% | 2021-09-27 | |
| CVE-2021-31606 | Furlongm Openvpn-monitor allows authorization bypass to disconnect arbitrary clients | 7.5v3.1 | 2.6% | 2021-09-27 | |
| CVE-2021-31605 | Furlongm Openvpn-monitor command injection | 7.5v3.1 | 3.3% | 2021-09-27 | |
| CVE-2021-31604 | Furlongm Openvpn-monitor allows CSRF to disconnect an arbitrary client | 6.5v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-28613 | Adobe Creative Cloud arbitrary file overwrite | 7.4CNA v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-26587 | HPE StoreOnce 3620 cross-site scripting | 6.5v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-24671 | MX Time Zone Clocks WordPress plugin Contributor+ cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-24670 | CoolClock WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-24666 | Podlove Podcast Publisher WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 8.9% | 2021-09-27 | NucleiFix |
| CVE-2021-24661 | PostX Gutenberg Blocks Saved Templates Addon WordPress plugin Private content disclosure | 4.3NVD v3.1 | 0.8% | 2021-09-27 | Fix |
| CVE-2021-24660 | PostX Gutenberg Blocks Saved Templates Addon WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-24659 | PostX Gutenberg Blocks for Post Grid WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-24652 | PostX Gutenberg Blocks for Post Grid WordPress plugin missing access Controls | 6.5NVD v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-24643 | WP Map Block WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-24634 | Recipe Card Blocks WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-24633 | Countdown Block WordPress plugin missing authorisation in AJAX action | 4.3NVD v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-24632 | Recipe Card Blocks WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-09-27 | Fix |
| CVE-2021-24610 | TranslatePress WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 5.4% | 2021-09-27 | Exploit codeFix |
| CVE-2021-24569 | Cookie Notice and Compliance for GDPR / CCPA WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-23445 | datatables.net cross-site scripting (XSS) | 6.1v3.1 | 2.0% | 2021-09-27 | Fix |
| CVE-2021-23243 | OPPO Android Phone with Qualcomm chipset battery application vulnerability | 7.8v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-23054 | BIG-IP APM cross-site scripting | 6.1v3.1 | 0.6% | 2021-09-27 | Fix |
| CVE-2021-22272 | ABB ControlTouch device commissioning vulnerability | 6.5CNA v3.1 | 0.7% | 2021-09-27 | Fix |
| CVE-2021-20317 | kernel improper initialization | 4.4NVD v3.1 | 0.4% | 2021-09-27 | Fix |
| CVE-2021-20035 | SonicWall SMA100 Appliances OS command injection | 6.5v3.1 | 4.2% | 2021-09-27 | KEVFix |
| CVE-2021-20034 | SonicWall SMA100 An improper access control | 9.1v3.1 | 81.8% | 2021-09-27 | Emerging ThreatsExploit codeFix |
| CVE-2021-3828 | Inefficient regular expression complexity in nltk/nltk | 7.5v3.1 | 1.7% | 2021-09-27 | Fix |
| CVE-2021-3822 | Inefficient regular expression complexity in josdejong/Jsoneditor | 7.5v3.1 | 1.4% | 2021-09-27 | Fix |
| CVE-2021-3820 | Inefficient regular expression complexity in pksunkara/Inflect | 7.5v3.1 | 1.2% | 2021-09-27 | Fix |
| CVE-2021-3819 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 8.8v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-3818 | Reliance on cookies without validation and integrity checking in getgrav/grav | 5.3v3.1 | 2.5% | 2021-09-27 | Fix |
| CVE-2021-3799 | Improper restriction of rendered UI layers or frames in getgrav/grav-plugin-admin | 5.4v3.1 | 1.6% | 2021-09-27 | Fix |
| CVE-2021-0660 | MT6779 improper check or handling of exceptional conditions in ccu | 4.9NVD v3.1 | 0.5% | 2021-09-27 | Fix |
| CVE-2021-0612 | MT6580 use-after-free in m4u | 7.8NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0611 | MT6580 use-after-free in m4u | 7.8NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0610 | MT6580 integer overflow or wraparound in memory management driver | 7.8NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0425 | MT6580 information disclosure in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0424 | MT6580 denial of service in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0423 | MT6580 information disclosure in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0422 | MT6580 denial of service in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-0421 | MT6580 out-of-bounds read in memory management driver | 5.5NVD v3.1 | 0.1% | 2021-09-27 | Fix |
| CVE-2021-41617 | OpenBSD OpenSSH privilege escalation | 7.0NVD v3.1 | 2.5% | 2021-09-26 | Exploit codeKCVFix |
| CVE-2021-3830 | Cross-site scripting (XSS) Stored in btcpayserver/btcpayserver | 5.4v3.1 | 0.6% | 2021-09-26 | Fix |
| CVE-2021-21742 | ZTE Axon 30 Pro Message Service App message service app of a information disclosure | 5.5v3.1 | 0.7% | 2021-09-25 | Fix |
| CVE-2021-41588 | gradle deserialization of untrusted data | 8.1v3.1 | 0.8% | 2021-09-24 | Fix |
| CVE-2021-41587 | gradle server-side request forgery | 7.5v3.1 | 0.9% | 2021-09-24 | Fix |
| CVE-2021-41586 | gradle server-side request forgery | 7.5v3.1 | 0.8% | 2021-09-24 | Fix |
| CVE-2021-41584 | gradle information disclosure | 7.5v3.1 | 1.3% | 2021-09-24 | Fix |
| CVE-2021-41583 | Eduvpn Vpn-user-portal improper input validation | 6.5v3.1 | 1.9% | 2021-09-24 | Fix |
| CVE-2021-41581 | OpenBSD LibreSSL out-of-bounds read | 5.5v3.1 | 0.6% | 2021-09-24 | Fix |
| CVE-2021-41504 | D-Link Dcs-5000l privilege escalation | 8.0v3.1 | 0.5% | 2021-09-24 | Fix |
| CVE-2021-41503 | D-Link Dcs-5000l improper authentication | 8.0v3.1 | 0.4% | 2021-09-24 | Fix |
| CVE-2021-40655 | D-Link DIR-605 Router information disclosure | 7.5v3.1 | 86.7% | 2021-09-24 | KEVNucleiEmerging Threats |
| CVE-2021-40654 | D-Link DIR-615 information disclosure | 6.5v3.1 | 1.9% | 2021-09-24 | |
| CVE-2021-40310 | Adobe OpenSIS Community Edition cross-site scripting | 5.4v3.1 | 0.8% | 2021-09-24 | |
| CVE-2021-40309 | OS4ED Opensis Take Attendance functionality of OS4Ed's SQL injection | 8.8v3.1 | 1.8% | 2021-09-24 | |
| CVE-2021-40102 | Concrete CMS deserialization of untrusted data | 9.1v3.1 | 1.3% | 2021-09-24 | Fix |
| CVE-2021-40100 | Concrete CMS cross-site scripting | 5.4v3.1 | 0.5% | 2021-09-24 | Fix |
| CVE-2021-40099 | Concrete CMS remote code execution | 7.2v3.1 | 2.1% | 2021-09-24 | Fix |
| CVE-2021-39246 | torproject Tor Browser sensitive information in log files | 6.1v3.1 | 0.5% | 2021-09-24 | |
| CVE-2021-36749 | Druid ingestion system Authenticated users can read data from other sources than intended | 6.5NVD v3.1 | 80.9% | 2021-09-24 | NucleiExploit codeFix |
| CVE-2021-31923 | Ping Identity PingAccess HTTP request smuggling | 5.3NVD v3.1 | 0.7% | 2021-09-24 | |
| CVE-2021-28130 | Drweb Security Space uncontrolled search path | 7.8v3.1 | 0.4% | 2021-09-24 | Fix |
| CVE-2021-22869 | GitHub Enterprise Server An improper access control | 9.8v3.1 | 1.2% | 2021-09-24 | Fix |
| CVE-2021-22868 | Unsafe configuration options in GitHub pages leading to path traversal on GitHub Enterprise Server | 4.3v3.1 | 0.9% | 2021-09-24 | Fix |
| CVE-2021-2464 | Oracle Linux takeover | 7.8CNA v3.1 | 0.3% | 2021-09-24 | Fix |
| CVE-2021-41381 | Payara MicroCommunity path traversal | 7.5v3.1 | 52.9% | 2021-09-23 | NucleiExploit code |
| CVE-2021-41088 | Remote code execution via the web UI backend of Elvish | 8.0CNA v3.1 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-38877 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-38870 | IBM Aspera cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-38864 | IBM Security Verify Bridge improper certificate validation | 6.1CNA v3.0 | 0.7% | 2021-09-23 | Fix |
| CVE-2021-38863 | IBM Security Verify Bridge insufficiently protected credentials | 6.5CNA v3.0 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-36873 | iQ Block Country WordPress plugin authenticated persistent cross-site scripting (XSS) | 5.4v3.1 | 1.2% | 2021-09-23 | NucleiFix |
| CVE-2021-36872 | Popular Posts WordPress plugin authenticated persistent cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2021-09-23 | Fix |
| CVE-2021-36823 | Absolutely Glamorous Custom Admin WordPress plugin Auth. stored cross-site scripting (XSS) | 8.2v3.1 | 0.7% | 2021-09-23 | Fix |
| CVE-2021-34770 | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP remote code execution | 10.0CNA v3.1 | 3.0% | 2021-09-23 | Fix |
| CVE-2021-34769 | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP denial of service | 8.6CNA v3.1 | 1.4% | 2021-09-23 | Fix |
| CVE-2021-34768 | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP denial of service | 8.6CNA v3.1 | 1.4% | 2021-09-23 | Fix |
| CVE-2021-34767 | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 denial of service | 7.4CNA v3.1 | 0.8% | 2021-09-23 | Fix |
| CVE-2021-34740 | Cisco Aironet Access Points WLAN Control Protocol Packet Buffer leak denial of service | 7.4CNA v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-34729 | Cisco IOS Xe Sd-wan Software command injection | 6.7CNA v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-34727 | Cisco IOS XE SD-WAN Software buffer overflow | 9.8CNA v3.1 | 2.6% | 2021-09-23 | Fix |
| CVE-2021-34726 | Cisco SD-WAN software command injection | 6.7CNA v3.0 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-34725 | Cisco IOS XE SD-WAN Software command injection | 6.7CNA v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-34724 | Cisco IOS XE SD-WAN Software privilege escalation | 6.0CNA v3.1 | 0.3% | 2021-09-23 | Fix |
| CVE-2021-34723 | Cisco IOS XE SD-WAN software arbitrary file overwrite | 6.7CNA v3.1 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-34714 | Multiple Cisco Operating Systems Unidirectional Link Detection denial of service | 7.4CNA v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-34712 | Cisco SD-WAN vManage Software Cypher Query Language injection | 5.4CNA v3.1 | 0.7% | 2021-09-23 | Fix |
| CVE-2021-34705 | Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass vulnerability | 5.3CNA v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-34703 | Cisco IOS and IOS XE Software Link Layer Discovery protocol denial of service | 6.8CNA v3.1 | 1.2% | 2021-09-23 | Fix |
| CVE-2021-34699 | Cisco IOS and IOS XE Software TrustSec CLI parser denial of service | 7.7CNA v3.1 | 1.2% | 2021-09-23 | Fix |
| CVE-2021-34697 | Cisco IOS XE Software Protection against Distributed denial of service Attacks feature | 5.8CNA v3.1 | 1.3% | 2021-09-23 | Fix |
| CVE-2021-34696 | Cisco IOS XE Software access control list programming improper access control | 5.8CNA v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-33035 | Apache OpenOffice buffer overflow from a crafted DBF file | 7.8v3.1 | 50.6% | 2021-09-23 | Fix |
| CVE-2021-32999 | AVEVA SuiteLink server improper handling of exceptional conditions | 7.5v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-32987 | AVEVA SuiteLink server null pointer dereference | 7.5v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-32979 | AVEVA SuiteLink server null pointer dereference | 7.5v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-32971 | AVEVA SuiteLink server null pointer dereference | 7.5v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-32963 | AVEVA SuiteLink server null pointer dereference | 7.5v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-32959 | AVEVA SuiteLink server buffer overflow | 9.8v3.1 | 0.9% | 2021-09-23 | Fix |
| CVE-2021-29905 | IBM Jazz for Service Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29904 | IBM Jazz for Service Management cleartext storage of sensitive information | 6.2CNA v3.0 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-29833 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29832 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29816 | IBM Jazz for Service Management cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-29815 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29814 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29813 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29812 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29810 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-29800 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-26794 | Frog CMS 'upload.php' in FrogCMS SentCMS v0.9.5 privilege escalation | 9.8v3.1 | 1.6% | 2021-09-23 | |
| CVE-2021-26750 | Panda Adaptive Defense 360 uncontrolled search path | 7.8v3.1 | 0.3% | 2021-09-23 | |
| CVE-2021-22953 | Concrete CMS A cross-site request forgery | 5.4v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-22952 | UniFi Talk application code injection | 8.8v3.1 | 1.0% | 2021-09-23 | |
| CVE-2021-22950 | https://github.com/concrete5/concrete5 cross-site request forgery | 6.5v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-22949 | Concrete CMS A cross-site request forgery | 5.4v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-22948 | https://github.com/revive-adserver/revive-adserver cross-site scripting | 7.1v3.1 | 2.7% | 2021-09-23 | Fix |
| CVE-2021-22945 | https://github.com/curl/curl double free | 9.1NVD v3.1 | 6.7% | 2021-09-23 | Fix |
| CVE-2021-22941 | Citrix ShareFile improper access control | 9.8NVD v3.1 | 53.6% | 2021-09-23 | KEVEmerging ThreatsExploit codeFix |
| CVE-2021-22276 | ABB free@home System Access Point firmware integrity check vulnerability | 6.1CNA v3.1 | 0.3% | 2021-09-23 | Fix |
| CVE-2021-22020 | VMware vCenter Server, VMware Cloud Foundation denial of service | 5.5v3.1 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-22019 | VMware vCenter Server, VMware Cloud Foundation denial of service | 7.5v3.1 | 1.6% | 2021-09-23 | Fix |
| CVE-2021-22018 | VMware vCenter Server, VMware Cloud Foundation arbitrary file deletion | 6.5v3.1 | 1.1% | 2021-09-23 | Fix |
| CVE-2021-22017 | VMware vCenter Server improper access control | 5.3v3.1 | 49.2% | 2021-09-23 | KEVNucleiFix |
| CVE-2021-22016 | VMware vCenter Server, VMware Cloud Foundation cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-23 | Fix |
| CVE-2021-22015 | VMware vCenter Server, VMware Cloud Foundation files accessible to external parties | 7.8NVD v3.1 | 1.9% | 2021-09-23 | Exploit codeFix |
| CVE-2021-22014 | VMware vCenter Server, VMware Cloud Foundation code execution | 7.2v3.1 | 1.5% | 2021-09-23 | Fix |
| CVE-2021-22013 | VMware vCenter Server path traversal | 7.5v3.1 | 1.7% | 2021-09-23 | Fix |
| CVE-2021-22012 | VMware vCenter Server missing authentication | 7.5v3.1 | 1.4% | 2021-09-23 | Fix |
| CVE-2021-22011 | VMware vCenter Server Content Library API vulnerability | 5.3v3.1 | 1.1% | 2021-09-23 | Fix |
| CVE-2021-22010 | VMware vCenter Server, VMware Cloud Foundation denial of service | 7.5v3.1 | 1.6% | 2021-09-23 | Fix |
| CVE-2021-22009 | VMware vCenter Server, VMware Cloud Foundation denial of service | 7.5v3.1 | 1.4% | 2021-09-23 | Fix |
| CVE-2021-22008 | VMware vCenter Server, VMware Cloud Foundation information disclosure | 7.5v3.1 | 1.7% | 2021-09-23 | Fix |
| CVE-2021-22007 | VMware vCenter Server, VMware Cloud Foundation information disclosure | 5.5v3.1 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-22006 | VMware vCenter Server reverse proxy vulnerability | 7.5v3.1 | 6.3% | 2021-09-23 | Exploit codeFix |
| CVE-2021-22005 | VMware vCenter Server file upload | 9.8NVD v3.1 | 100.0% | 2021-09-23 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-21993 | VMware vCenter Server, VMware Cloud Foundation server-side request forgery | 6.5v3.1 | 0.9% | 2021-09-23 | Fix |
| CVE-2021-21913 | D-Link DIR-3040 WiFi Smart Mesh functionality information disclosure | 9.8v3.1 | 2.2% | 2021-09-23 | Fix |
| CVE-2021-20563 | IBM Sterling File Gateway information disclosure | 4.3CNA v3.0 | 0.7% | 2021-09-23 | Fix |
| CVE-2021-20485 | IBM Sterling File Gateway information disclosure through error messages | 4.3CNA v3.0 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-20484 | IBM Sterling File Gateway cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-23 | Fix |
| CVE-2021-20435 | IBM Security Verify Bridge improper certificate validation | 2.5CNA v3.0 | 0.1% | 2021-09-23 | Fix |
| CVE-2021-20434 | IBM Security Verify Bridge insufficiently protected credentials | 4.1CNA v3.0 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-20377 | IBM Security Guardium information disclosure through error messages | 2.7CNA v3.0 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-3824 | OpenVPN Access Server cross-site scripting | 6.1v3.1 | 0.7% | 2021-09-23 | Fix |
| CVE-2021-1625 | Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection vulnerability | 5.8CNA v3.1 | 0.9% | 2021-09-23 | Fix |
| CVE-2021-1624 | Cisco IOS XE Software Rate Limiting Network Address Translation denial of service | 8.6CNA v3.1 | 1.3% | 2021-09-23 | Fix |
| CVE-2021-1623 | Cisco IOS XE Software SNMP punt handling denial of service | 7.7CNA v3.1 | 1.1% | 2021-09-23 | Fix |
| CVE-2021-1622 | Cisco IOS XE Software Common Open Policy Service deadlock | 8.6CNA v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-1621 | Cisco IOS XE Software Interface Queue Wedge denial of service | 7.4CNA v3.1 | 0.4% | 2021-09-23 | Fix |
| CVE-2021-1620 | Cisco IOS and IOS XE Software IKEv2 AutoReconnect feature denial of service | 7.7CNA v3.1 | 1.1% | 2021-09-23 | Fix |
| CVE-2021-1619 | Cisco IOS XE Software NETCONF and RESTCONF authentication bypass | 9.8CNA v3.1 | 1.8% | 2021-09-23 | Fix |
| CVE-2021-1616 | Cisco IOS XE Software H.323 Application Level Gateway Bypass vulnerability | 4.7CNA v3.1 | 1.2% | 2021-09-23 | Fix |
| CVE-2021-1615 | Cisco Embedded Wireless Controller Software for Catalyst Access Points denial of service | 8.6CNA v3.1 | 1.3% | 2021-09-23 | Fix |
| CVE-2021-1612 | Cisco IOS XE SD-WAN Software arbitrary file overwrite | 5.5CNA v3.1 | 0.3% | 2021-09-23 | Fix |
| CVE-2021-1611 | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE denial of service | 8.6CNA v3.1 | 1.3% | 2021-09-23 | Fix |
| CVE-2021-1589 | Cisco SD-WAN vManage Software Disaster Recovery feature password exposure | 6.5CNA v3.1 | 1.0% | 2021-09-23 | Fix |
| CVE-2021-1565 | Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP denial of service | 8.6CNA v3.1 | 1.3% | 2021-09-23 | Fix |
| CVE-2021-1546 | Cisco SD-WAN software information disclosure | 5.5CNA v3.1 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-1419 | Cisco Access Points SSH management privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-09-23 | Fix |
| CVE-2021-41382 | Plastic SCM WebAdmin server management interface vulnerability | 7.5v3.1 | 8.9% | 2021-09-22 | Exploit codeFix |
| CVE-2021-41011 | LINE client for iOS information disclosure | 7.5v3.1 | 1.1% | 2021-09-22 | |
| CVE-2021-40875 | Gurock Testrail improper access control | 7.5NVD v3.1 | 47.5% | 2021-09-22 | NucleiExploit codeFix |
| CVE-2021-40684 | Talend ESB Runtime Jolokia HTTP endpoint vulnerability | 9.1v3.1 | 1.2% | 2021-09-22 | Fix |
| CVE-2021-39404 | Maianaffiliate cross-site scripting | 4.8v3.1 | 0.5% | 2021-09-22 | |
| CVE-2021-39339 | Telefication Open Proxy and server-side request forgery | 5.3v3.1 | 1.4% | 2021-09-22 | |
| CVE-2021-38153 | Timing Attack vulnerability for Apache Kafka Connect and Clients | 5.9v3.1 | 5.8% | 2021-09-22 | Fix |
| CVE-2021-38112 | Amazon AWS Workspaces argument injection | 8.8v3.1 | 7.5% | 2021-09-22 | Fix |
| CVE-2021-37927 | Zoho ManageEngine ADManager Plus improper signature verification | 9.8v3.1 | 2.2% | 2021-09-22 | Fix |
| CVE-2021-37925 | Zoho ManageEngine ADManager Plus OS command injection | 9.8v3.1 | 10.5% | 2021-09-22 | Fix |
| CVE-2021-37860 | Cross-site scripting in Mattermost | 3.7CNA v3.1 | 0.6% | 2021-09-22 | Fix |
| CVE-2021-36260 | Hikvision improper input validation | 9.8NVD v3.1 | 99.9% | 2021-09-22 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-34648 | Ninja Forms Unprotected REST-API to email injection | 4.3v3.1 | 0.7% | 2021-09-22 | Fix |
| CVE-2021-34647 | Ninja Forms sensitive information disclosure | 6.5CNA v3.1 | 1.2% | 2021-09-22 | Fix |
| CVE-2021-31847 | McAfee Agent improper privilege management in repair process of MA for Windows | 8.2CNA v3.1 | 0.4% | 2021-09-22 | Fix |
| CVE-2021-31841 | McAfee Agent DLL side loading vulnerability in MA for Windows | 8.2CNA v3.1 | 0.2% | 2021-09-22 | Fix |
| CVE-2021-31836 | McAfee Agent improper privilege management in MA for Windows | 5.6CNA v3.1 | 0.2% | 2021-09-22 | Fix |
| CVE-2021-31819 | Remote code execution in Halibut | 9.8v3.1 | 2.4% | 2021-09-22 | Fix |
| CVE-2021-21992 | VMware vCenter Server, VMware Cloud Foundation denial of service | 6.5v3.1 | 1.0% | 2021-09-22 | Fix |
| CVE-2021-21991 | VMware vCenter Server, VMware Cloud Foundation local privilege escalation | 7.8v3.1 | 0.3% | 2021-09-22 | Fix |
| CVE-2021-3583 | Improper input validation and command injection in Ansible | 7.1v3.1 | 0.9% | 2021-09-22 | Fix |
| CVE-2021-41531 | NLnet Labs Routinator invalid RPKI data could disable Route Origin Validation on RTR clients | 7.5v3.1 | 0.9% | 2021-09-21 | Fix |
| CVE-2021-41525 | An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior. | 5.5NVD v3.1 | 0.2% | 2021-09-21 | Fix |
| CVE-2021-41087 | Improperly Implemented path matching for in-toto-golang | 5.6CNA v3.1 | 0.4% | 2021-09-21 | Fix |
| CVE-2021-41086 | Clipboard-based XSS in jsuites | 8.7CNA v3.1 | 0.9% | 2021-09-21 | Fix |
| CVE-2021-41084 | Response Splitting from unsanitized headers in http4s | 8.7CNA v3.1 | 1.2% | 2021-09-21 | Fix |
| CVE-2021-40868 | Cloudron cross-site scripting | 6.1v3.1 | 9.1% | 2021-09-21 | NucleiExploit code |
| CVE-2021-40847 | NETGEAR R6400v2 cleartext transmission of sensitive information | 8.1v3.1 | 10.1% | 2021-09-21 | Fix |
| CVE-2021-39230 | Error in JPNS kernel of Butter | 8.8CNA v3.1 | 0.8% | 2021-09-21 | Fix |
| CVE-2021-37741 | Zoho ManageEngine ADManager Plus unrestricted file upload | 8.8v3.1 | 2.7% | 2021-09-21 | Fix |
| CVE-2021-37424 | Zoho ManageEngine ADManager Plus account takeover | 9.8v3.1 | 4.8% | 2021-09-21 | Fix |
| CVE-2021-37420 | Zoho ManageEngine ADManager Plus missing authentication | 6.5v3.1 | 1.9% | 2021-09-21 | Fix |
| CVE-2021-37419 | Zoho ManageEngine ADManager Plus server-side request forgery | 7.5v3.1 | 2.5% | 2021-09-21 | Fix |
| CVE-2021-31917 | Red Hat DataGrid and Infinispan improper authentication | 9.8v3.1 | 1.3% | 2021-09-21 | Fix |
| CVE-2021-29831 | IBM Jazz for Service Management XML external entity injection | 7.1CNA v3.0 | 1.5% | 2021-09-21 | Fix |
| CVE-2021-29795 | IBM PowerVM Hypervisor crash | 6.0CNA v3.0 | 0.2% | 2021-09-21 | Fix |
| CVE-2021-28960 | ManageEngine Desktop Central command injection | 9.8v3.1 | 2.0% | 2021-09-21 | Fix |
| CVE-2021-26333 | AMD Chipset Driver information disclosure | 5.5v3.1 | 0.5% | 2021-09-21 | Fix |
| CVE-2021-23444 | jointjs prototype pollution | 9.8v3.1 | 1.9% | 2021-09-21 | Fix |
| CVE-2021-23443 | edge.js cross-site scripting (XSS) | 6.1v3.1 | 0.9% | 2021-09-21 | Fix |
| CVE-2021-20829 | WESEEK GROWI cross-site scripting | 6.1v3.1 | 0.8% | 2021-09-21 | Fix |
| CVE-2021-20037 | SonicWall Global VPN Client incorrect default permissions | 7.8v3.1 | 0.4% | 2021-09-21 | Fix |
| CVE-2021-0869 | Android DumpstateDevice.cpp out-of-bounds write | 9.8v3.1 | 0.8% | 2021-09-21 | Fix |
| CVE-2021-41083 | CSRF vulnerability in dada-mail | 8.0CNA v3.1 | 0.4% | 2021-09-20 | Fix |
| CVE-2021-41082 | Private message title and participating users leaked in discourse | 7.5CNA v3.1 | 1.8% | 2021-09-20 | |
| CVE-2021-40674 | WuzhiCMS Wuzhi CMS v4.1.0 SQL injection | 9.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39598 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39597 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39596 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39595 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39594 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39593 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39592 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39591 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39590 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39589 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39588 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39587 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39585 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39584 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39583 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2021-09-20 | |
| CVE-2021-39582 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39579 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39577 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39575 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39574 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39569 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39564 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39563 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39562 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39561 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39559 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39558 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39557 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39556 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39555 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39554 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39553 | swftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39552 | Sela out-of-bounds write | 7.8v3.1 | 0.8% | 2021-09-20 | |
| CVE-2021-39551 | Sela out-of-bounds write | 7.8v3.1 | 0.8% | 2021-09-20 | |
| CVE-2021-39550 | Sela out-of-bounds write | 7.8v3.1 | 0.8% | 2021-09-20 | |
| CVE-2021-39549 | Sela null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39548 | Sela null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39547 | Sela null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39546 | Sela out-of-bounds write | 7.8v3.1 | 0.8% | 2021-09-20 | |
| CVE-2021-39545 | Sela null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39544 | Sela out-of-bounds write | 7.8v3.1 | 0.8% | 2021-09-20 | |
| CVE-2021-39543 | pdftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39542 | pdftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39541 | pdftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39540 | pdftools out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39539 | pdftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39538 | pdftools null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-39537 | Invisible-island ncurses out-of-bounds write | 8.8NVD v3.1 | 3.2% | 2021-09-20 | Fix |
| CVE-2021-39536 | Libxsmm out-of-bounds write | 8.8v3.1 | 1.1% | 2021-09-20 | Fix |
| CVE-2021-39535 | Libxsmm null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39534 | Juniper Libslax out-of-bounds write | 8.8v3.1 | 1.3% | 2021-09-20 | |
| CVE-2021-39533 | Juniper Libslax out-of-bounds write | 8.8v3.1 | 1.3% | 2021-09-20 | |
| CVE-2021-39532 | Juniper Libslax null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | |
| CVE-2021-39531 | Juniper Libslax out-of-bounds write | 8.8v3.1 | 1.3% | 2021-09-20 | |
| CVE-2021-39530 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39528 | GNU LibreDWG double free | 8.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39527 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39525 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39523 | GNU LibreDWG null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | |
| CVE-2021-39522 | GNU LibreDWG out-of-bounds write | 8.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-39521 | GNU LibreDWG null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | |
| CVE-2021-39520 | JPEG Libjpeg null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39519 | JPEG Libjpeg null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39518 | JPEG Libjpeg out-of-bounds write | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39517 | JPEG Libjpeg null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39516 | JPEG Libjpeg null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39515 | JPEG Libjpeg null pointer dereference | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39514 | JPEG Libjpeg denial of service | 6.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39402 | Maian Media Maianaffiliate code injection | 7.2v3.1 | 1.3% | 2021-09-20 | |
| CVE-2021-39325 | OptinMonster reflected cross-site scripting | 6.1CNA v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-39229 | Regular expression deinal of service in apprise | 7.5CNA v3.1 | 1.9% | 2021-09-20 | Fix |
| CVE-2021-38899 | IBM Cloud Pak for Data information disclosure | 4.4CNA v3.0 | 0.3% | 2021-09-20 | Fix |
| CVE-2021-38300 | Linux kernel arbitrary code execution | 7.8v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-38094 | FFmpeg integer overflow | 8.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-38093 | FFmpeg integer overflow | 8.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-38092 | FFmpeg integer overflow | 8.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-38091 | FFmpeg integer overflow | 8.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-38090 | FFmpeg integer overflow | 8.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-34650 | eID Easy reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-09-20 | Fix |
| CVE-2021-32839 | Regular expression denial of service in sqlparse | 7.5CNA v3.1 | 2.3% | 2021-09-20 | Fix |
| CVE-2021-32838 | Regular expression denial of service in flask-restx | 7.5CNA v3.1 | 1.9% | 2021-09-20 | Fix |
| CVE-2021-32299 | Pbrt out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-32298 | Libiff out-of-bounds write | 8.8v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-32297 | LIEF out-of-bounds write | 8.8v3.1 | 1.6% | 2021-09-20 | Fix |
| CVE-2021-32294 | Linuxsampler Libgig out-of-bounds write | 8.8v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-32289 | Nokia Heif null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-32288 | Nokia Heif out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-32287 | Nokia Heif out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-32286 | Hcxtools Project Hcxtoold out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | Fix |
| CVE-2021-32285 | Creolabs Gravity null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-32284 | Creolabs Gravity null pointer dereference | 7.8v3.1 | 0.8% | 2021-09-20 | |
| CVE-2021-32283 | Creolabs Gravity null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-32282 | Creolabs Gravity null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-32281 | Creolabs Gravity out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | |
| CVE-2021-32280 | Xfig Project fig2dev null pointer dereference | 5.5v3.1 | 1.0% | 2021-09-20 | Fix |
| CVE-2021-32278 | faad2 out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-32277 | faad2 out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-32276 | faad2 null pointer dereference | 5.5v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-32275 | Grame Faust null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-32274 | faad2 out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-32273 | faad2 out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | Fix |
| CVE-2021-32272 | faad2 out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-32271 | gpac out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-20 | Fix |
| CVE-2021-32270 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-32269 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-32268 | gpac function gf_fprintf in os_file.c buffer overflow | 7.8v3.1 | 1.2% | 2021-09-20 | Fix |
| CVE-2021-32265 | Axiosys Bento4 buffer overflow | 8.8v3.1 | 1.6% | 2021-09-20 | |
| CVE-2021-29856 | IBM Tivoli Netcool/OMNIbus denial of service | 6.5CNA v3.0 | 1.1% | 2021-09-20 | Fix |
| CVE-2021-29821 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29820 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29819 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29818 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29817 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29811 | IBM Tivoli Netcool/OMNIbus insufficiently protected credentials | 4.9CNA v3.0 | 1.0% | 2021-09-20 | Fix |
| CVE-2021-29809 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29808 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29807 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-29806 | IBM Tivoli Netcool/OMNIbus cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-25741 | Kubernetes Symlink Exchange can allow Host Filesystem Access | 8.8CNA v3.1 | 8.0% | 2021-09-20 | Exploit codeFix |
| CVE-2021-25740 | Kubernetes Holes in EndpointSlice Validation Enable Host Network Hijack | 3.1CNA v3.1 | 2.0% | 2021-09-20 | Fix |
| CVE-2021-24741 | Support Board WordPress plugin Multiple unauthenticated SQL Injections | 9.8NVD v3.1 | 5.6% | 2021-09-20 | Exploit codeFix |
| CVE-2021-24663 | Simple School Staff Directory WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-24657 | The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputting them in the reports table, leading to an Unauthenticated Stored Cross-Site Scripting issue. | 6.1NVD v3.1 | 1.6% | 2021-09-20 | NucleiFix |
| CVE-2021-24640 | Gutenslider WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24639 | OMGF WordPress plugin Subscriber+ arbitrary File/Folder deletion | 8.1NVD v3.1 | 0.9% | 2021-09-20 | Fix |
| CVE-2021-24638 | OMGF WordPress plugin unauthenticated path traversal in REST API | 9.1NVD v3.1 | 1.8% | 2021-09-20 | Fix |
| CVE-2021-24637 | Fonts WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24636 | Print My Blog WordPress plugin plugin deactivation via CSRF | 8.1NVD v3.1 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-24635 | Visual Link Preview WordPress plugin Unauthorised AJAX Calls | 5.4NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24618 | Donate With QRCode WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2021-09-20 | Fix |
| CVE-2021-24613 | Post Views Counter WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24609 | WP Mapa Politico Espana WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24606 | Availability Calendar WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.3% | 2021-09-20 | Fix |
| CVE-2021-24604 | Availability Calendar WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24600 | WP Dialog WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-24597 | You Shang WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-20 | |
| CVE-2021-24596 | youForms for WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 2.8% | 2021-09-20 | Fix |
| CVE-2021-24587 | Splash Header WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24585 | MotoPress Timetable and Event Schedule event timeslot data information disclosure | 6.5NVD v3.1 | 1.2% | 2021-09-20 | Fix |
| CVE-2021-24584 | Timetable and Event Schedule by MotoPress WordPress plugin Unauthorised Event TimeSlot update | 5.4NVD v3.1 | 0.5% | 2021-09-20 | Fix |
| CVE-2021-24583 | Timetable and Event Schedule by MotoPress WordPress plugin Unauthorised Event TimeSlot deletion | 4.3NVD v3.1 | 1.6% | 2021-09-20 | Fix |
| CVE-2021-24582 | ThinkTwit WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24530 | Alojapro Widget WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24525 | Shortcodes Ultimate WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-20 | Fix |
| CVE-2021-24511 | Create WooCommerce Product Feeds For 40+ Merchants WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | Fix |
| CVE-2021-24404 | WP-Board (beta) unauthenticated SQL injection | 8.8NVD v3.1 | 4.7% | 2021-09-20 | |
| CVE-2021-24403 | WordPress Page Contact plugin authenticated (editor+) SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-24402 | WP iCommerce WordPress plugin authenticated (contributor+) SQL injection | 7.2NVD v3.1 | 4.6% | 2021-09-20 | |
| CVE-2021-24401 | WP Domain Redirect WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 4.6% | 2021-09-20 | |
| CVE-2021-24400 | Display users WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-24399 | The Sorter WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-24398 | Responsive 3D Slider WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-24397 | MicroCopy WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-24396 | GSEOR WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-20 | |
| CVE-2021-41073 | Linux kernel release of an invalid pointer | 7.8v3.1 | 1.7% | 2021-09-19 | Fix |
| CVE-2021-40690 | Apache Santuario bypass of the secureValidation property | 7.5NVD v3.1 | 7.4% | 2021-09-19 | Fix |
| CVE-2021-41395 | Teleport database connection string handling vulnerability | 6.5v3.1 | 0.8% | 2021-09-18 | Fix |
| CVE-2021-41394 | Teleport build artifact verification vulnerability | 5.3v3.1 | 1.2% | 2021-09-18 | Fix |
| CVE-2021-41393 | Teleport SSH host certificate issuance vulnerability | 9.8v3.1 | 1.1% | 2021-09-18 | Fix |
| CVE-2021-3806 | Path traversal in Pardus Software Center | 5.9NVD v3.1 | 0.7% | 2021-09-18 | Fix |
| CVE-2021-41392 | Boostnote remote command execution | 9.8v3.1 | 2.8% | 2021-09-17 | |
| CVE-2021-41391 | Ericsson Enterprise Content Management cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-17 | |
| CVE-2021-41390 | Ericsson Enterprise Content Management CSV injection | 8.0v3.1 | 1.1% | 2021-09-17 | |
| CVE-2021-41387 | Seatd untrusted search path | 8.8v3.1 | 1.1% | 2021-09-17 | |
| CVE-2021-41383 | NETGEAR R6020 command injection | 7.2v3.1 | 1.6% | 2021-09-17 | |
| CVE-2021-41380 | Realvnc VNC Viewer memory leak | 6.5v3.1 | 1.0% | 2021-09-17 | |
| CVE-2021-41326 | In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call. | 9.8v3.1 | 1.8% | 2021-09-17 | |
| CVE-2021-41317 | XSS Hunter Express improper authentication | 9.8v3.1 | 1.8% | 2021-09-17 | |
| CVE-2021-41316 | Device42 argument injection | 8.1v3.1 | 1.4% | 2021-09-17 | Fix |
| CVE-2021-41315 | Device42 Remote Collector OS command injection | 8.8v3.1 | 1.3% | 2021-09-17 | Fix |
| CVE-2021-41303 | Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass | 9.8v3.1 | 76.7% | 2021-09-17 | Fix |
| CVE-2021-40825 | Acuitybrands Nlight Eclypse System Controller insecure default initialization | 8.6v3.1 | 1.1% | 2021-09-17 | Fix |
| CVE-2021-39327 | BulletProof Security sensitive information disclosure | 5.3v3.1 | 72.3% | 2021-09-17 | NucleiExploit codeFix |
| CVE-2021-39228 | tremor-rs tremor-runtime memory safety issue when | 6.5CNA v3.1 | 1.3% | 2021-09-17 | Fix |
| CVE-2021-39227 | ecomfe zrender prototype pollution in the merge and clone helper methods | 6.2CNA v3.1 | 1.4% | 2021-09-17 | Fix |
| CVE-2021-39219 | bytecodealliance wasmtime wrong type for `Linker`-define functions when used across two `Engine`s | 6.3CNA v3.1 | 0.4% | 2021-09-17 | Fix |
| CVE-2021-39218 | Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime | 6.3CNA v3.1 | 0.3% | 2021-09-17 | Fix |
| CVE-2021-39216 | Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime | 6.3CNA v3.1 | 0.3% | 2021-09-17 | Fix |
| CVE-2021-38412 | Digi PortServer TS 16 improper authentication | 9.8v3.1 | 1.3% | 2021-09-17 | |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 improper input validation | 7.8v3.1 | 76.4% | 2021-09-17 | KEV |
| CVE-2021-38404 | Delta Electronics DOPSoft 2 heap-based buffer overflow | 7.8v3.1 | 1.0% | 2021-09-17 | |
| CVE-2021-38402 | Delta Electronics DOPSoft 2 stack-based buffer overflow | 7.8v3.1 | 7.7% | 2021-09-17 | |
| CVE-2021-38304 | NI-PAL National Instruments improper input validation | 7.8v3.1 | 0.4% | 2021-09-17 | Exploit codeFix |
| CVE-2021-31845 | Remote code execution in McAfee DLP Discover | 8.4CNA v3.1 | 1.1% | 2021-09-17 | Fix |
| CVE-2021-31844 | Local privilege escalation in McAfee DLP Endpoint for Windows | 8.2CNA v3.1 | 0.4% | 2021-09-17 | Fix |
| CVE-2021-31843 | Improper access control vulnerability in McAfee ENS for Windows | 7.3CNA v3.1 | 0.3% | 2021-09-17 | Fix |
| CVE-2021-31842 | McAfee Endpoint Security (ENS) XML entity expansion | 5.0CNA v3.1 | 0.2% | 2021-09-17 | Fix |
| CVE-2021-30261 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 8.4CNA v3.1 | 0.2% | 2021-09-17 | Fix |
| CVE-2021-30260 | Qualcomm Snapdragon integer overflow to buffer overflow in WLAN | 8.4CNA v3.1 | 0.2% | 2021-09-17 | Fix |
| CVE-2021-23442 | @cookiex/deep prototype pollution | 9.8v3.1 | 1.6% | 2021-09-17 | Fix |
| CVE-2021-20828 | ActiveFusions Order Status Batch Change Plug-in cross-site scripting | 6.1v3.1 | 0.8% | 2021-09-17 | |
| CVE-2021-20825 | shiro8 List (order management) item change plug-in cross-site scripting | 6.1v3.1 | 0.8% | 2021-09-17 | Fix |
| CVE-2021-20791 | J’s Communication RevoWorks Browser improper access control | 9.3v3.1 | 0.8% | 2021-09-17 | Fix |
| CVE-2021-20790 | Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors. | 9.6v3.1 | 1.3% | 2021-09-17 | Fix |
| CVE-2021-3812 | Cross-site scripting (XSS) Reflected in pi-hole/adminlte | 6.1v3.1 | 0.6% | 2021-09-17 | Fix |
| CVE-2021-3811 | Cross-site scripting (XSS) Reflected in pi-hole/adminlte | 6.1v3.1 | 0.6% | 2021-09-17 | Fix |
| CVE-2021-3810 | Inefficient regular expression complexity in cdr/code-server | 7.5v3.1 | 1.3% | 2021-09-17 | Fix |
| CVE-2021-3807 | Inefficient regular expression complexity in chalk/Ansi-regex | 7.5NVD v3.1 | 3.6% | 2021-09-17 | Fix |
| CVE-2021-3805 | Prototype pollution in mariocasciaro/object-path | 7.5v3.1 | 2.1% | 2021-09-17 | Fix |
| CVE-2021-3804 | Inefficient regular expression complexity in nervjs/Taro | 7.5v3.1 | 1.3% | 2021-09-17 | Fix |
| CVE-2021-3803 | Inefficient regular expression complexity in fb55/Nth-check | 7.5v3.1 | 2.2% | 2021-09-17 | Fix |
| CVE-2021-1976 | Qualcomm Snapdragon use-after-free in WLAN | 9.8CNA v3.1 | 0.8% | 2021-09-17 | Fix |
| CVE-2021-1947 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.2% | 2021-09-17 | Fix |
| CVE-2021-1939 | Qualcomm Snapdragon null pointer dereference in Graphics | 8.4CNA v3.1 | 0.1% | 2021-09-17 | Fix |
| CVE-2021-41314 | NETGEAR MS510TXUP injection | 8.8v3.1 | 13.6% | 2021-09-16 | Emerging ThreatsFix |
| CVE-2021-41079 | Apache Tomcat DoS with unexpected TLS packet | 7.5NVD v3.1 | 7.2% | 2021-09-16 | Fix |
| CVE-2021-40670 | WuzhiCMS SQL injection | 9.8v3.1 | 1.3% | 2021-09-16 | |
| CVE-2021-40669 | WuzhiCMS SQL injection | 9.8v3.1 | 1.3% | 2021-09-16 | |
| CVE-2021-40438 | Apache HTTP server-side request forgery (SSRF) | 9.0NVD v3.1 | 100.0% | 2021-09-16 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-40067 | NetMotion Mobility incorrect permission assignment | 6.8v3.1 | 0.6% | 2021-09-16 | Fix |
| CVE-2021-40066 | NetMotion Mobility incorrect permission assignment | 5.3v3.1 | 0.6% | 2021-09-16 | Fix |
| CVE-2021-39275 | Apache HTTP Server ap_escape_quotes buffer overflow | 9.8v3.1 | 39.4% | 2021-09-16 | Fix |
| CVE-2021-39239 | Apache Jena XML external entity (XXE) | 7.5v3.1 | 4.3% | 2021-09-16 | Fix |
| CVE-2021-39214 | Lacking Protection against HTTP request smuggling in mitmproxy | 8.1CNA v3.1 | 1.1% | 2021-09-16 | Fix |
| CVE-2021-39208 | Partial path traversal in sharpcompress | 4.3CNA v3.1 | 1.2% | 2021-09-16 | Fix |
| CVE-2021-39128 | Atlassian Jira Server server-side template injection | 7.2v3.1 | 1.9% | 2021-09-16 | Fix |
| CVE-2021-36160 | Apache HTTP Server mod_proxy_uwsgi out of bound read | 7.5v3.1 | 62.9% | 2021-09-16 | Fix |
| CVE-2021-34798 | Null pointer dereference in httpd core | 7.5v3.1 | 64.5% | 2021-09-16 | Fix |
| CVE-2021-34576 | Observable discrepancy in Kaden PICOFLUX AiR leaks water consumption | 4.3v3.1 | 0.4% | 2021-09-16 | |
| CVE-2021-34573 | Incorrect calculation in Enbra EWM does not report backflows or no flow events | 5.5v3.1 | 0.2% | 2021-09-16 | |
| CVE-2021-34572 | Insufficient verification of data authenticity in Enbra EWM (replay attack) | 6.5v3.1 | 0.2% | 2021-09-16 | |
| CVE-2021-34571 | Hard-coded credentials in Enbra Wireless M-Bus devices | 6.5v3.1 | 0.2% | 2021-09-16 | |
| CVE-2021-29842 | IBM WebSphere Application Server missing brute-force protection | 3.7CNA v3.0 | 1.3% | 2021-09-16 | Fix |
| CVE-2021-29825 | IBM Db2 information disclosure | 5.9CNA v3.0 | 1.5% | 2021-09-16 | Fix |
| CVE-2021-29763 | IBM Db2 resource exhaustion | 5.1CNA v3.0 | 0.3% | 2021-09-16 | Fix |
| CVE-2021-29752 | IBM Db2 information disclosure | 4.4CNA v3.0 | 1.1% | 2021-09-16 | Fix |
| CVE-2021-27341 | Adobe OpenSIS Community Edition local file inclusion | 9.8v3.1 | 2.1% | 2021-09-16 | Fix |
| CVE-2021-27340 | Adobe OpenSIS Community Edition reflected cross-site scripting | 6.1v3.1 | 1.1% | 2021-09-16 | Fix |
| CVE-2021-41061 | RIOT-OS RIOT insufficient randomness | 5.5v3.1 | 0.2% | 2021-09-15 | |
| CVE-2021-40966 | prasathmani TinyFileManager stored cross-site scripting | 5.4v3.1 | 0.5% | 2021-09-15 | |
| CVE-2021-40965 | prasathmani TinyFileManager cross-site request forgery | 8.8v3.1 | 0.6% | 2021-09-15 | |
| CVE-2021-40964 | prasathmani TinyFileManager path traversal | 6.5v3.1 | 8.2% | 2021-09-15 | Exploit code |
| CVE-2021-40881 | PublicCMS arbitrary code execution | 9.8v3.1 | 1.6% | 2021-09-15 | |
| CVE-2021-40862 | HashiCorp Terraform Enterprise privilege escalation | 8.8v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-40845 | Zenitel alphacom_xe_audio_server unrestricted file upload | 8.8v3.1 | 4.7% | 2021-09-15 | Exploit code |
| CVE-2021-40639 | jflyfox jfinal_cms improper access control | 7.5v3.1 | 1.2% | 2021-09-15 | |
| CVE-2021-40448 | Microsoft Accessibility Insights for Android information disclosure | 6.3CNA v3.1 | 3.2% | 2021-09-15 | Fix |
| CVE-2021-40447 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-09-15 | Fix |
| CVE-2021-40444 | Microsoft MSHTML remote code execution | 8.8CNA v3.1 | 97.5% | 2021-09-15 | KEVExploit codeKCVFix |
| CVE-2021-40440 | Microsoft Dynamics Business Central cross-site scripting | 5.4CNA v3.1 | 1.1% | 2021-09-15 | Fix |
| CVE-2021-40238 | Webuzo cross-site scripting | 6.1v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-40157 | Autodesk FBX Review untrusted pointer dereference | 7.8v3.1 | 0.8% | 2021-09-15 | Fix |
| CVE-2021-40156 | Autodesk Navisworks out-of-bounds write | 7.8v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-40155 | Autodesk Navisworks out-of-bounds read | 7.8v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-39392 | Mylittletools Mylittlebackup deserialization of untrusted data | 9.8v3.1 | 2.3% | 2021-09-15 | |
| CVE-2021-39307 | Pdftron Webviewer UI cross-site scripting | 6.1v3.1 | 1.1% | 2021-09-15 | Fix |
| CVE-2021-39215 | jitsi-meet authentication bypass: Forged Tokens allow Access to arbitrary Rooms | 7.5CNA v3.1 | 1.2% | 2021-09-15 | Fix |
| CVE-2021-39213 | IP restriction on GLPI API Bypass with custom header injection | 6.8CNA v3.1 | 1.1% | 2021-09-15 | Fix |
| CVE-2021-39211 | Disclosure of GLPI and server information in telemetry endpoint | 5.3CNA v3.1 | 4.7% | 2021-09-15 | NucleiFix |
| CVE-2021-39210 | glpi autologin cookie accessible by scripts | 6.5CNA v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-39209 | glpi bypassable CSRF protection | 8.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-39205 | jitsi-meet DOM-based XSS/content spoofing via prototype pollution | 6.8CNA v3.1 | 1.2% | 2021-09-15 | Fix |
| CVE-2021-39189 | pimcore observable response discrepancy in Lost Password service | 5.3CNA v3.1 | 1.4% | 2021-09-15 | Fix |
| CVE-2021-38671 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-09-15 | Fix |
| CVE-2021-38669 | Microsoft Edge (Chromium-based) tampering | 6.4CNA v3.1 | 2.9% | 2021-09-15 | Fix |
| CVE-2021-38667 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-09-15 | Fix |
| CVE-2021-38661 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2021-09-15 | Fix |
| CVE-2021-38660 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 2.3% | 2021-09-15 | Fix |
| CVE-2021-38659 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 6.3% | 2021-09-15 | Fix |
| CVE-2021-38658 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 6.3% | 2021-09-15 | Fix |
| CVE-2021-38657 | Microsoft Office Graphics component information disclosure | 6.1CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-38656 | Microsoft Word remote code execution | 7.8CNA v3.1 | 6.7% | 2021-09-15 | Fix |
| CVE-2021-38655 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 6.3% | 2021-09-15 | Fix |
| CVE-2021-38654 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 6.3% | 2021-09-15 | Fix |
| CVE-2021-38653 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 6.3% | 2021-09-15 | Fix |
| CVE-2021-38652 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.3% | 2021-09-15 | Fix |
| CVE-2021-38651 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.3% | 2021-09-15 | Fix |
| CVE-2021-38650 | Microsoft Office spoofing | 7.6CNA v3.1 | 1.6% | 2021-09-15 | Fix |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) privilege escalation | 7.0CNA v3.1 | 2.9% | 2021-09-15 | KEVFix |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) privilege escalation | 7.8CNA v3.1 | 11.4% | 2021-09-15 | KEVExploit codeFix |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) remote code execution | 9.8CNA v3.1 | 99.9% | 2021-09-15 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-38646 | Microsoft Office Access Connectivity Engine remote code execution | 7.8CNA v3.1 | 8.0% | 2021-09-15 | KEVFix |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) privilege escalation | 7.8CNA v3.1 | 2.7% | 2021-09-15 | KEVFix |
| CVE-2021-38644 | Microsoft MPEG-2 Video Extension remote code execution | 7.8CNA v3.1 | 2.3% | 2021-09-15 | Fix |
| CVE-2021-38639 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 1.4% | 2021-09-15 | Fix |
| CVE-2021-38638 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-38637 | Microsoft Windows Storage information disclosure | 5.5CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-38636 | Microsoft Windows Redirected Drive Buffering SubSystem driver information disclosure | 5.5CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-38635 | Microsoft Windows Redirected Drive Buffering SubSystem driver information disclosure | 5.5CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-38634 | Microsoft Windows Update client elevation of privilege | 7.1CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-38633 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-38632 | Microsoft Windows BitLocker security feature bypass | 5.7CNA v3.1 | 0.8% | 2021-09-15 | Fix |
| CVE-2021-38630 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-38629 | Microsoft Windows Ancillary function driver for WinSock information disclosure | 6.5CNA v3.1 | 2.7% | 2021-09-15 | Fix |
| CVE-2021-38628 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-38626 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-38625 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-38624 | Microsoft Windows Key Storage Provider security feature bypass | 6.5CNA v3.1 | 1.5% | 2021-09-15 | Fix |
| CVE-2021-38156 | Nagios XI cross-site scripting | 5.4v3.1 | 92.9% | 2021-09-15 | NucleiFix |
| CVE-2021-37913 | HGiga OAKlouds command injection-2 | 9.8CNA v3.1 | 2.8% | 2021-09-15 | Fix |
| CVE-2021-37912 | HGiga OAKlouds command injection-1 | 9.8v3.1 | 2.8% | 2021-09-15 | Fix |
| CVE-2021-37909 | CHANGING Inc. TSSServiSignAdapter Windows Versions improper input validation | 9.8CNA v3.1 | 2.0% | 2021-09-15 | Fix |
| CVE-2021-37412 | It-economics Techradar cross-site scripting | 6.1v3.1 | 1.0% | 2021-09-15 | |
| CVE-2021-36975 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 1.3% | 2021-09-15 | Fix |
| CVE-2021-36974 | Microsoft Windows SMB elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-36973 | Microsoft Windows Redirected Drive Buffering System elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-36972 | Microsoft Windows SMB information disclosure | 5.5CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-36969 | Microsoft Windows Redirected Drive Buffering SubSystem driver information disclosure | 5.5CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-36968 | Microsoft Windows DNS elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-36967 | Microsoft Windows WLAN AutoConfig service elevation of privilege | 8.0CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-36966 | Microsoft Windows subsystem for Linux elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-36965 | Microsoft Windows WLAN AutoConfig service remote code execution | 8.8CNA v3.1 | 4.7% | 2021-09-15 | Fix |
| CVE-2021-36964 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-36963 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 1.2% | 2021-09-15 | Fix |
| CVE-2021-36962 | Microsoft Windows Installer information disclosure | 5.5CNA v3.1 | 1.3% | 2021-09-15 | Fix |
| CVE-2021-36961 | Microsoft Windows Installer denial of service | 5.5CNA v3.1 | 1.1% | 2021-09-15 | Fix |
| CVE-2021-36960 | Microsoft Windows SMB information disclosure | 7.5CNA v3.1 | 3.3% | 2021-09-15 | Fix |
| CVE-2021-36959 | Microsoft Windows Authenticode spoofing | 5.5CNA v3.1 | 1.3% | 2021-09-15 | Fix |
| CVE-2021-36956 | Microsoft Azure Sphere information disclosure | 4.4CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) driver privilege escalation | 7.8CNA v3.1 | 4.1% | 2021-09-15 | KEVExploit codeFix |
| CVE-2021-36954 | Microsoft Windows Bind Filter driver elevation of privilege | 8.8CNA v3.1 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-36952 | Visual Studio remote code execution | 7.8CNA v3.1 | 51.5% | 2021-09-15 | Fix |
| CVE-2021-33705 | SAP NetWeaver Enterprise Portal server-side request forgery | 8.1CNA v3.0 | 2.1% | 2021-09-15 | Fix |
| CVE-2021-33704 | SAP Business One missing authorization | 6.3CNA v3.0 | 0.6% | 2021-09-15 | Fix |
| CVE-2021-33701 | SAP DMIS Mobile Plug-In SQL injection | 9.1CNA v3.0 | 2.1% | 2021-09-15 | Fix |
| CVE-2021-33700 | SAP Business One authentication bypass | 7.0CNA v3.0 | 0.2% | 2021-09-15 | Fix |
| CVE-2021-33698 | SAP Business One unrestricted file upload | 9.9CNA v3.0 | 1.1% | 2021-09-15 | Fix |
| CVE-2021-33697 | SAP BusinessObjects Business Intelligence Platform (SAPUI5) reverse tabnabbing | 4.7CNA v3.0 | 0.6% | 2021-09-15 | Fix |
| CVE-2021-33696 | SAP BusinessObjects Business Intelligence Platform (Crystal Report) cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-33695 | SAP Cloud Connector improper certificate host validation | 6.8CNA v3.0 | 0.6% | 2021-09-15 | Fix |
| CVE-2021-33694 | SAP Cloud Connector cross-site scripting | 5.9CNA v3.0 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-33693 | SAP Cloud Connector code injection | 5.7CNA v3.0 | 0.5% | 2021-09-15 | Fix |
| CVE-2021-33692 | SAP Cloud Connector path traversal | 5.2CNA v3.0 | 1.2% | 2021-09-15 | Fix |
| CVE-2021-33691 | SAP NetWeaver Development Infrastructure (Notification Service) cross-site scripting | 6.9CNA v3.0 | 0.6% | 2021-09-15 | Fix |
| CVE-2021-33690 | SAP NetWeaver Development Infrastructure server-side request forgery | 9.9CNA v3.0 | 69.1% | 2021-09-15 | Reported exploitedNucleiExploit codeFix |
| CVE-2021-33045 | Dahua IP Camera authentication bypass | 9.8v3.1 | 99.6% | 2021-09-15 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-33044 | Dahua IP Camera authentication bypass | 9.8v3.1 | 99.9% | 2021-09-15 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-30137 | Axiossystems Assyst XML external entity injection | 8.2v3.1 | 0.8% | 2021-09-15 | |
| CVE-2021-29773 | IBM Security Guardium insecure direct object reference | 5.4CNA v3.0 | 0.7% | 2021-09-15 | Fix |
| CVE-2021-29750 | IBM QRadar SIEM weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-09-15 | Fix |
| CVE-2021-28901 | Sitasoftware Azurcms cross-site scripting | 5.4v3.1 | 0.8% | 2021-09-15 | |
| CVE-2021-27662 | Johnson Controls KT-1 door controller authentication bypass by replay | 8.6CNA v3.1 | 0.8% | 2021-09-15 | Fix |
| CVE-2021-27046 | Autodesk Navisworks out-of-bounds write | 7.8v3.1 | 0.3% | 2021-09-15 | Fix |
| CVE-2021-27045 | Autodesk Navisworks out-of-bounds read | 7.8v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-27044 | Autodesk FBX Review out-of-bounds read | 7.8v3.1 | 1.2% | 2021-09-15 | Fix |
| CVE-2021-26437 | Microsoft Visual Studio Code spoofing | 5.5CNA v3.1 | 2.3% | 2021-09-15 | Fix |
| CVE-2021-26435 | Microsoft Windows Scripting Engine memory corruption | 8.1CNA v3.1 | 5.4% | 2021-09-15 | Fix |
| CVE-2021-26434 | Visual Studio elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-22149 | Elastic Enterprise Search incorrect permission assignment | 8.8v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-22148 | Elastic Enterprise Search incorrect permission assignment | 8.8v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-22147 | Exposure of sensitive information in Elasticsearch | 6.5v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-21798 | Nitro Pro code execution | 7.8v3.1 | 21.4% | 2021-09-15 | |
| CVE-2021-20433 | IBM Security Guardium information disclosure | 6.5CNA v3.0 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-3801 | Inefficient regular expression complexity in PrismJS/prism | 6.5NVD v3.1 | 1.0% | 2021-09-15 | Fix |
| CVE-2021-3797 | hestiacp is vulnerable to Use of Wrong Operator in String Comparison | 9.8v3.1 | 1.1% | 2021-09-15 | |
| CVE-2021-3796 | vim/vim use-after-free | 7.3v3.1 | 1.7% | 2021-09-15 | Fix |
| CVE-2021-3795 | Inefficient regular expression complexity in sindresorhus/semver-regex | 7.5v3.1 | 1.5% | 2021-09-15 | Fix |
| CVE-2021-3794 | Inefficient regular expression complexity in Vuelidate/Vuelidate | 7.5v3.1 | 1.2% | 2021-09-15 | Fix |
| CVE-2021-3785 | Cross-site scripting (XSS) Stored in yourls/yourls | 5.4NVD v3.1 | 0.7% | 2021-09-15 | Fix |
| CVE-2021-3783 | Cross-site scripting (XSS) Reflected in yourls/yourls | 6.1v3.1 | 0.7% | 2021-09-15 | Fix |
| CVE-2021-3780 | Cross-site scripting (XSS) Stored in chocobozzz/PeerTube | 6.1NVD v3.1 | 0.9% | 2021-09-15 | Fix |
| CVE-2021-3778 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.7% | 2021-09-15 | Fix |
| CVE-2021-3777 | Inefficient regular expression complexity in daaku/nodejs-tmpl | 7.5v3.1 | 1.3% | 2021-09-15 | Fix |
| CVE-2021-3751 | Out-of-bounds write in bfabiszewski/Libmobi | 9.8v3.1 | 1.2% | 2021-09-15 | |
| CVE-2021-3706 | Sensitive Cookie without HttpOnly Flag in pi-hole/adminlte | 7.5v3.1 | 1.1% | 2021-09-15 | Fix |
| CVE-2021-41077 | Travis Ci missing authorization | 7.5v3.1 | 1.5% | 2021-09-14 | Fix |
| CVE-2021-41072 | Squashfs-tools path traversal | 8.1v3.1 | 2.3% | 2021-09-14 | Fix |
| CVE-2021-40357 | Siemens Teamcenter Active Workspace path traversal | 4.9v3.1 | 1.2% | 2021-09-14 | Fix |
| CVE-2021-40356 | Siemens Teamcenter XML external entity injection | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-40355 | Siemens Teamcenter insecure direct object reference | 8.8v3.1 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-40354 | Siemens Teamcenter unsafe privilege definition | 7.1v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-39391 | Cross-site scripting in Beego | 6.1v3.1 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-39125 | Atlassian Jira Server and Data Center password reset page vulnerability | 5.3v3.1 | 1.4% | 2021-09-14 | Fix |
| CVE-2021-39124 | Atlassian Jira Server cross-site request forgery | 4.3v3.1 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-39123 | Atlassian Jira Server denial of service | 7.5v3.1 | 1.6% | 2021-09-14 | Fix |
| CVE-2021-39118 | Atlassian Jira Server and Data Center render REST endpoint vulnerability | 5.3v3.1 | 1.4% | 2021-09-14 | Fix |
| CVE-2021-38177 | SAP CommonCryptoLib null pointer dereference | 7.5CNA v3.0 | 3.2% | 2021-09-14 | Fix |
| CVE-2021-38176 | SAP S/4HANA SQL injection | 9.9CNA v3.0 | 1.3% | 2021-09-14 | Fix |
| CVE-2021-38175 | SAP Analysis for Microsoft Office information disclosure | 6.5CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-38174 | SAP 3D Visual Enterprise Viewer crash | 4.3CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-38164 | SAP ERP Financial Accounting (RFOPENPOSTING_FR) missing authorization | 5.4CNA v3.0 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-38163 | SAP NetWeaver unrestricted file upload | 9.9CNA v3.1 | 36.9% | 2021-09-14 | KEVEmerging ThreatsExploit codeFix |
| CVE-2021-38162 | SAP Web Dispatcher HTTP request smuggling | 8.9CNA v3.1 | 2.7% | 2021-09-14 | Fix |
| CVE-2021-38150 | SAP Business Client cleartext storage of sensitive information | 6.1CNA v3.0 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-37535 | SAP NetWeaver Application Server Java (JMS Connector Service) missing authorization | 10.0CNA v3.0 | 1.1% | 2021-09-14 | Fix |
| CVE-2021-37532 | SAP Business One path traversal | 4.3CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-37531 | SAP NetWeaver Knowledge Management XML Forms OS command injection | 9.9CNA v3.0 | 3.2% | 2021-09-14 | Fix |
| CVE-2021-37206 | Siemens SIPROTEC 5 relays with CPU variants CP050 improper input validation | 7.5v3.1 | 1.4% | 2021-09-14 | Fix |
| CVE-2021-37203 | Siemens NX 1980 Series out-of-bounds read | 7.1v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-37202 | Siemens NX 1980 Series use-after-free | 7.8v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-37201 | Siemens SINEC NMS cross-site request forgery | 8.8v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37200 | Siemens SINEC NMS path traversal | 7.7v3.1 | 37.4% | 2021-09-14 | Fix |
| CVE-2021-37193 | Siemens SINEMA Remote Connect Server modification of assumed-immutable data | 4.3v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37192 | Siemens SINEMA Remote Connect Server information disclosure | 4.3v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37191 | Siemens SINEMA Remote Connect Server improper interaction frequency control | 4.3v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37190 | Siemens SINEMA Remote Connect Server information disclosure | 4.3v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37186 | Siemens LOGO! CMR2020 insufficient randomness | 5.4v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37184 | Siemens Industrial Edge Management insecure direct object reference | 9.8v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-37183 | Siemens SINEMA Remote Connect Server denial of service | 6.5v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37181 | Siemens Cerberus DMS deserialization of untrusted data | 10.0v3.1 | 1.9% | 2021-09-14 | Fix |
| CVE-2021-37177 | Siemens SINEMA Remote Connect Server modification of assumed-immutable data | 6.5v3.1 | 0.4% | 2021-09-14 | Fix |
| CVE-2021-37176 | Siemens Simcenter Femap out-of-bounds read | 3.3v3.1 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-37175 | Siemens RUGGEDCOM ROX MX5000 improper handling of insufficient permissions | 5.3v3.1 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-37174 | Siemens RUGGEDCOM ROX MX5000 execution with unnecessary privileges | 8.8v3.1 | 1.2% | 2021-09-14 | Fix |
| CVE-2021-37173 | Siemens RUGGEDCOM ROX MX5000 improper privilege management | 8.8v3.1 | 1.6% | 2021-09-14 | Fix |
| CVE-2021-36582 | Kooboo Cms unrestricted file upload | 9.8v3.1 | 1.5% | 2021-09-14 | |
| CVE-2021-36581 | Kooboo Cms unrestricted file upload | 9.8v3.1 | 1.4% | 2021-09-14 | |
| CVE-2021-35493 | TIBCO WebFOCUS cross-site scripting | 9.0CNA v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-33737 | Siemens SIMATIC CP 343-1 (incl. SIPLUS variants) memory corruption | 7.5CNA v3.1 | 1.1% | 2021-09-14 | Fix |
| CVE-2021-33720 | Siemens SIPROTEC 5 relays with CPU variants CP050 buffer overflow | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-33719 | Siemens SIPROTEC 5 relays with CPU variants CP050 buffer overflow | 9.8v3.1 | 2.2% | 2021-09-14 | Fix |
| CVE-2021-33716 | Siemens SIMATIC CP 1543-1 (incl. SIPLUS variants) cleartext storage of sensitive information | 6.5v3.1 | 0.3% | 2021-09-14 | Fix |
| CVE-2021-33688 | SAP Business One SQL injection | 4.3v3.1 | 0.7% | 2021-09-14 | Fix |
| CVE-2021-33686 | SAP Business One information disclosure | 5.3CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-33685 | SAP Business One path traversal | 6.5CNA v3.0 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-33679 | SAP BusinessObjects Business Intelligence Platform (BI Workspace) cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-33675 | SAP Contact Center cross-site scripting | 6.1CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-33674 | SAP Contact Center cross-site scripting | 6.5CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-33673 | SAP Contact Center cross-site scripting | 8.3CNA v3.0 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-33672 | SAP Contact Center improper output encoding | 9.6CNA v3.0 | 1.1% | 2021-09-14 | Fix |
| CVE-2021-32202 | Cs-cart cross-site scripting | 6.1v3.1 | 0.6% | 2021-09-14 | |
| CVE-2021-31891 | Siemens Desigo CC OS command injection | 10.0v3.1 | 3.8% | 2021-09-14 | Fix |
| CVE-2021-29841 | IBM Financial Transaction Manager cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-27391 | Siemens APOGEE MBC (PPC) (P2 Ethernet) buffer overflow | 9.8v3.1 | 3.4% | 2021-09-14 | Fix |
| CVE-2021-25665 | Siemens Simcenter STAR-CCM+ Viewer out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-14 | Fix |
| CVE-2021-23053 | BIG-IP Advanced WAF and BIG-IP ASM missing brute-force protection | 5.3v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23052 | BIG-IP APM open redirect | 6.1v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-23051 | BIG-IP improper input validation | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23050 | BIG-IP Advanced WAF and BIG-IP ASM cross-site request forgery | 7.5v3.1 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-23049 | BIG-IP denial of service | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23048 | BIG-IP improper input validation | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23047 | BIG-IP APM resource exhaustion | 5.3v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-23046 | BIG-IP Guided Configuration sensitive information in log files | 4.9v3.1 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-23045 | BIG-IP improper input validation | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23044 | BIG-IP improper input validation | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23043 | BIG-IP path traversal | 6.5v3.1 | 2.0% | 2021-09-14 | Fix |
| CVE-2021-23042 | BIG-IP resource exhaustion | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23041 | BIG-IP cross-site scripting | 6.1v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-23040 | BIG-IP AFM SQL injection | 8.8v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23039 | BIG-IP improper input validation | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23038 | BIG-IP cross-site scripting | 9.0v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23037 | BIG-IP cross-site scripting | 9.6v3.1 | 0.8% | 2021-09-14 | Fix |
| CVE-2021-23036 | BIG-IP Advanced WAF and BIG-IP ASM improper input validation | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23035 | BIG-IP improper input validation | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23034 | BIG-IP improper input validation | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23033 | BIG-IP Advanced WAF and BIG-IP ASM improper input validation | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23032 | BIG-IP DNS improper input validation | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23031 | BIG-IP Advanced WAF and BIG-IP ASM OS command injection | 9.9v3.1 | 2.1% | 2021-09-14 | Fix |
| CVE-2021-23030 | BIG-IP Advanced WAF and BIG-IP ASM improper input validation | 7.5v3.1 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-23029 | BIG-IP Advanced WAF and BIG-IP ASM server-side request forgery | 8.8v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23028 | BIG-IP Advanced WAF and BIG-IP ASM improper input validation | 7.5v3.1 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-23027 | BIG-IP cross-site scripting | 6.1v3.1 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-23026 | BIG-IP, BIG-IQ cross-site request forgery | 8.8v3.1 | 0.5% | 2021-09-14 | Fix |
| CVE-2021-23025 | BIG-IP OS command injection | 8.8v3.1 | 2.3% | 2021-09-14 | Fix |
| CVE-2021-21489 | SAP NetWeaver Enterprise Portal cross-site scripting | 4.8CNA v3.0 | 0.6% | 2021-09-14 | Fix |
| CVE-2021-20582 | IBM Security Secret Server information disclosure | 3.7CNA v3.0 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-20569 | IBM Security Secret Server improper input validation | 5.3CNA v3.0 | 0.9% | 2021-09-14 | Fix |
| CVE-2021-20508 | IBM Security Secret Server information disclosure through error messages | 2.7CNA v3.0 | 1.0% | 2021-09-14 | Fix |
| CVE-2021-41054 | Atftp buffer overflow | 7.5v3.1 | 2.6% | 2021-09-13 | Fix |
| CVE-2021-41033 | The Eclipse Foundation Eclipse Equinox man-in-the-middle | 8.1v3.1 | 1.1% | 2021-09-13 | Fix |
| CVE-2021-40870 | Aviatrix Controller unrestricted upload of File | 9.8v3.1 | 93.0% | 2021-09-13 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-40867 | NETGEAR MS510TXUP authentication bypass by spoofing | 7.1v3.1 | 1.4% | 2021-09-13 | Fix |
| CVE-2021-40866 | Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8.2 | 8.8NVD v3.1 | 1.8% | 2021-09-13 | Fix |
| CVE-2021-40824 | Logic error in Matrix SDK for Android | 5.9v3.1 | 0.7% | 2021-09-13 | Fix |
| CVE-2021-40823 | Matrix JavaScript SDK room key sharing functionality logic flaw | 5.9v3.1 | 0.7% | 2021-09-13 | Fix |
| CVE-2021-40214 | gibbonedu gibbon cross-site scripting | 5.4v3.1 | 0.7% | 2021-09-13 | |
| CVE-2021-39212 | Issue when Configuring the ImageMagick Security Policy | 4.4CNA v3.1 | 0.4% | 2021-09-13 | Fix |
| CVE-2021-38833 | Apartment Visitors Management System PHPGurukul SQL injection | 9.8v3.1 | 2.3% | 2021-09-13 | Fix |
| CVE-2021-33554 | Geutebrück E2 Series OS command injection | 7.2v3.1 | 59.6% | 2021-09-13 | MetasploitExploit codeKCVFix |
| CVE-2021-33553 | UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE | 7.2v3.1 | 51.4% | 2021-09-13 | MetasploitExploit codeKCVFix |
| CVE-2021-33552 | UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE | 7.2v3.1 | 51.4% | 2021-09-13 | MetasploitExploit codeKCVFix |
| CVE-2021-33551 | Geutebrück E2 Series OS command injection | 7.2v3.1 | 51.4% | 2021-09-13 | MetasploitExploit codeKCVFix |
| CVE-2021-33550 | UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE | 7.2v3.1 | 59.2% | 2021-09-13 | MetasploitExploit codeKCVFix |
| CVE-2021-33549 | UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE | 7.2v3.1 | 67.3% | 2021-09-13 | Emerging ThreatsExploit codeFix |
| CVE-2021-33548 | UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE | 7.2v3.1 | 59.6% | 2021-09-13 | MetasploitExploit codeKCVFix |
| CVE-2021-33547 | UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE | 7.2v3.1 | 2.8% | 2021-09-13 | Emerging ThreatsFix |
| CVE-2021-33546 | UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE | 7.2v3.1 | 2.8% | 2021-09-13 | Emerging ThreatsFix |
| CVE-2021-33545 | UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE | 7.2v3.1 | 2.8% | 2021-09-13 | Emerging ThreatsFix |
| CVE-2021-33544 | UDP Technology/Geutebrück camera devices: Command injection leading to RCE | 7.2v3.1 | 95.5% | 2021-09-13 | NucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-33543 | UDP Technology/Geutebrück camera devices: Authentication bypass | 9.8v3.1 | 82.1% | 2021-09-13 | MetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-33366 | gpac gf_isom_oinf_read_entry function in MP4Box memory leak | 5.5v3.1 | 1.0% | 2021-09-13 | Fix |
| CVE-2021-33365 | gpac gf_isom_get_root_od function in MP4Box memory leak | 5.5v3.1 | 0.9% | 2021-09-13 | Fix |
| CVE-2021-33364 | gpac def_parent_box_new function in MP4Box memory leak | 5.5v3.1 | 1.0% | 2021-09-13 | Fix |
| CVE-2021-33363 | gpac infe_box_read function in MP4Box memory leak | 5.5v3.1 | 0.9% | 2021-09-13 | Fix |
| CVE-2021-33362 | gpac hevc_parse_vps_extension function in MP4Box stack-based buffer overflow | 7.8v3.1 | 1.3% | 2021-09-13 | Fix |
| CVE-2021-33361 | gpac afra_box_read function in MP4Box memory leak | 5.5v3.1 | 1.0% | 2021-09-13 | Fix |
| CVE-2021-32139 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2021-09-13 | Fix |
| CVE-2021-32138 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2021-09-13 | Fix |
| CVE-2021-32137 | gpac URL_GetProtocolType function in MP4Box heap-based buffer overflow | 5.5v3.1 | 1.2% | 2021-09-13 | Fix |
| CVE-2021-32136 | gpac print_udta function in MP4Box heap-based buffer overflow | 7.8v3.1 | 1.5% | 2021-09-13 | Fix |
| CVE-2021-32135 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-09-13 | Fix |
| CVE-2021-32134 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-09-13 | Fix |
| CVE-2021-32132 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2021-09-13 | Fix |
| CVE-2021-29643 | Paessler PRTG Network Monitor cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-13 | Fix |
| CVE-2021-24728 | cozmoslabs Paid Member Subscriptions members and payments pages SQL injection | 8.8NVD v3.1 | 1.7% | 2021-09-13 | Fix |
| CVE-2021-24727 | Block and Stop Bad Bots WordPress plugin authenticated SQL Injections | 8.8NVD v3.1 | 1.7% | 2021-09-13 | Fix |
| CVE-2021-24726 | WP Simple Booking Calendar (/12/2021) authenticated SQL injection | 8.8NVD v3.1 | 1.6% | 2021-09-13 | Fix |
| CVE-2021-24725 | Comment Link Remove and Other Comment Tools WordPress plugin arbitrary comment deletion via CSRF | 4.3NVD v3.1 | 0.5% | 2021-09-13 | Fix |
| CVE-2021-24724 | Timetable and Event Schedule by MotoPress WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 0.9% | 2021-09-13 | Fix |
| CVE-2021-24623 | WordPress Advanced Ticket System plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-09-13 | Fix |
| CVE-2021-24621 | WP Courses LMS WordPress plugin authenticated stored XSS via Video Embed code | 4.8NVD v3.1 | 0.6% | 2021-09-13 | Fix |
| CVE-2021-24620 | Simple eCommerce WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2021-09-13 | |
| CVE-2021-24619 | Per Page Add to Head WordPress plugin authenticated stored XSS | 4.8NVD v3.1 | 0.6% | 2021-09-13 | |
| CVE-2021-24614 | Book appointment Online WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2021-09-13 | Fix |
| CVE-2021-24605 | Custom Post View Generator WordPress plugin reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-13 | |
| CVE-2021-24586 | Per Page Add to Head WordPress plugin CSRF to stored XSS | 4.3NVD v3.1 | 0.5% | 2021-09-13 | Fix |
| CVE-2021-24560 | Software License Manager WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2021-09-13 | Fix |
| CVE-2021-24523 | Daily Prayer Time WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-13 | Fix |
| CVE-2021-24510 | MF Gig Calendar WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.7% | 2021-09-13 | NucleiFix |
| CVE-2021-24508 | Smash Balloon Social Post Feed WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 1.3% | 2021-09-13 | Fix |
| CVE-2021-24493 | Shopp eCommerce WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 2.0% | 2021-09-13 | |
| CVE-2021-24491 | Fileviewer WordPress plugin arbitrary file upload/Deletion via CSRF | 8.8NVD v3.1 | 0.7% | 2021-09-13 | |
| CVE-2021-24490 | Email Artillery WordPress plugin arbitrary file upload | 6.8NVD v3.1 | 0.6% | 2021-09-13 | |
| CVE-2021-24431 | Language Bar Flags WordPress plugin CSRF to stored XSS | 4.3NVD v3.1 | 0.5% | 2021-09-13 | Fix |
| CVE-2021-22528 | Information leakage vulnerability in NetIQ Access Manager versions prior to and | 8.0CNA v3.1 | 0.6% | 2021-09-13 | Fix |
| CVE-2021-22527 | Information leakage vulnerability in NetIQ Access Manager versions prior to and | 6.0CNA v3.1 | 0.7% | 2021-09-13 | Fix |
| CVE-2021-22526 | Open redirection vulnerability in NetIQ Access Manager versions prior to and | 4.9CNA v3.1 | 0.5% | 2021-09-13 | Fix |
| CVE-2021-22524 | Denial of service vulnerability in NetIQ Access Manager versions prior to and | 5.4CNA v3.1 | 0.7% | 2021-09-13 | Fix |
| CVE-2021-3666 | Prototype pollution in fiznool/body-parser-xml | 9.8v3.1 | 1.3% | 2021-09-13 | Fix |
| CVE-2021-23440 | Prototype pollution in set-value | 9.8v3.1 | 2.5% | 2021-09-12 | Fix |
| CVE-2021-23435 | clearance open redirect | 6.1NVD v3.1 | 0.7% | 2021-09-12 | Fix |
| CVE-2021-40146 | A remote code execution (RCE) vulnerability exists in Apache ANY23 YAMLExtractor.java | 9.8v3.1 | 5.7% | 2021-09-11 | Fix |
| CVE-2021-38555 | An XML external entity (XXE) injection vulnerability exists in Apache ANY23 StreamUtils.java | 9.1v3.1 | 2.8% | 2021-09-11 | Fix |
| CVE-2021-40864 | The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields. | 9.8v3.1 | 2.3% | 2021-09-10 | |
| CVE-2021-40839 | Infinite loop in Rencode | 7.5v3.1 | 5.6% | 2021-09-10 | Exploit codeFix |
| CVE-2021-40373 | PlaySMS code injection | 9.8v3.1 | 4.7% | 2021-09-10 | Exploit codeFix |
| CVE-2021-40347 | GNU Mailman Postorius Access Control issues | 5.4v3.1 | 1.2% | 2021-09-10 | KCVFix |
| CVE-2021-39207 | Deserialization of untrusted data in ParlAI | 8.4CNA v3.1 | 1.8% | 2021-09-10 | Fix |
| CVE-2021-38360 | wp-publications Local File Include | 9.8v3.1 | 2.3% | 2021-09-10 | Fix |
| CVE-2021-38359 | WordPress InviteBox Plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-09-10 | |
| CVE-2021-38358 | MoolaMojo reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-09-10 | |
| CVE-2021-38357 | SMS OVH reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-09-10 | |
| CVE-2021-38355 | Bug Library reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-38354 | GNU-Mailman Integration reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38353 | Dropdown and scrollable Text reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-38352 | Feedify Web Push Notifications reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-38351 | OSD Subscribe reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38350 | spideranalyse reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38349 | Integration of Moneybird for WooCommerce reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38348 | Advance Search reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-38347 | Custom Website Data reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38341 | WooCommerce Payment Gateway Per Category reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38340 | Wordpress Simple Shop reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38339 | Simple Matted Thumbnails reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38338 | Border Loading Bar reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38337 | RSVPMaker Excel reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38336 | Edit Comments XT reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38335 | Wise Agent Capture Forms reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-38334 | WP Design Maps and Places reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38333 | WP Scrippets reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38332 | On Page SEO + Whatsapp Chat Button reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-38331 | WP-T-Wap reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38330 | Yet Another bol.com Plugin reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38329 | DJ EmailPublish reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38328 | Notices reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38327 | YouTube Video Inserter reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-38326 | Post Title Counter reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-10 | |
| CVE-2021-37423 | Zoho ManageEngine ADSelfService Plus takeover | 9.8v3.1 | 2.8% | 2021-09-10 | Fix |
| CVE-2021-37422 | Zoho ManageEngine ADSelfService Plus SQL injection | 9.8v3.1 | 3.4% | 2021-09-10 | Fix |
| CVE-2021-37414 | Zoho Manageengine Desktop Central improper authentication | 7.5v3.1 | 5.2% | 2021-09-10 | Fix |
| CVE-2021-35976 | Plesk Obsidian cross-site scripting | 6.1v3.1 | 1.1% | 2021-09-10 | Fix |
| CVE-2021-34346 | Stack based overflow vulnerability in NVR Storage Expansion | 9.8CNA v3.1 | 1.6% | 2021-09-10 | Fix |
| CVE-2021-34345 | Stack based overflow vulnerability in NVR Storage Expansion | 9.8CNA v3.1 | 1.6% | 2021-09-10 | Fix |
| CVE-2021-34344 | Stack buffer overflow vulnerability in QUSBCam2 | 9.8CNA v3.1 | 1.6% | 2021-09-10 | Fix |
| CVE-2021-34343 | Buffer overflow vulnerability in QTS, QuTS hero, and QuTScloud | 6.0CNA v3.1 | 2.0% | 2021-09-10 | Fix |
| CVE-2021-33011 | JTEKT Corporation TOYOPUC products resource exhaustion | 4.3v3.1 | 0.4% | 2021-09-10 | |
| CVE-2021-28816 | Stack buffer overflow vulnerabilities in QTS, QuTS hero, and QuTScloud | 7.6CNA v3.1 | 0.9% | 2021-09-10 | Fix |
| CVE-2021-28813 | Insufficiently protected credentials vulnerability in QSW-M2116P-2T2S and QuNetSwitch | 9.6CNA v3.1 | 1.1% | 2021-09-10 | Fix |
| CVE-2021-24040 | Deserialization of untrusted data in ParlAI | 9.8v3.1 | 17.4% | 2021-09-10 | Exploit codeFix |
| CVE-2021-3646 | Cross-site scripting (XSS) Reflected in btcpayserver/btcpayserver | 6.1v3.1 | 0.8% | 2021-09-10 | Fix |
| CVE-2021-3645 | Prototype pollution in viking04/merge | 9.8v3.1 | 1.4% | 2021-09-10 | Fix |
| CVE-2021-3145 | Ionic Identity Vault improper authentication | 6.7v3.1 | 0.5% | 2021-09-10 | Fix |
| CVE-2021-40284 | D-Link DSL-3782 buffer overflow | 6.5v3.1 | 2.6% | 2021-09-09 | Fix |
| CVE-2021-40223 | Rittal Cmc Pu Iii 7030.000 cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-09 | Exploit code |
| CVE-2021-40222 | Rittal Cmc Pu Iii 7030.000 OS command injection | 7.2v3.1 | 4.7% | 2021-09-09 | Exploit code |
| CVE-2021-39459 | redaxo modules component in Yakamara Media remote code execution | 7.2v3.1 | 4.9% | 2021-09-09 | |
| CVE-2021-39458 | redaxo information disclosure through error messages | 6.5v3.1 | 1.2% | 2021-09-09 | |
| CVE-2021-39296 | OpenBMC improper authentication | 10.0v3.1 | 3.0% | 2021-09-09 | |
| CVE-2021-39206 | pomerium incorrect authorization with specially crafted requests | 8.6CNA v3.1 | 1.5% | 2021-09-09 | Fix |