CVE-2021 records published in September 2021
Page two of two: records 1,001 to 1,703 of the 1,703 published in September 2021, newest first. The first page carries the figures for September 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-39204 | Excessive CPU usage in Pomerium | 7.5CNA v3.1 | 1.7% | 2021-09-09 | Fix |
| CVE-2021-39203 | wordpress-develop private data disclosure/privilege escalation through the block editor in WordPress | 6.8CNA v3.1 | 0.9% | 2021-09-09 | Fix |
| CVE-2021-39202 | wordpress-develop WordPress beta: Stored cross-site scripting (XSS) vulnerability in widget | 7.6CNA v3.1 | 0.8% | 2021-09-09 | Fix |
| CVE-2021-39201 | wordpress-develop authenticated cross-site scripting (XSS) in WordPress editor | 7.6CNA v3.1 | 1.5% | 2021-09-09 | Fix |
| CVE-2021-39200 | wordpress-develop information disclosure in wp_die via JSONP in WordPress | 5.3CNA v3.1 | 2.0% | 2021-09-09 | Fix |
| CVE-2021-39162 | pomerium incorrect handling of H2 GOAWAY + SETTINGS frames | 8.6CNA v3.1 | 1.6% | 2021-09-09 | Fix |
| CVE-2021-38727 | Thedaylightstudio Fuel CMS SQL injection | 9.8v3.1 | 1.6% | 2021-09-09 | |
| CVE-2021-38725 | Thedaylightstudio Fuel CMS missing brute-force protection | 5.3v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38723 | Thedaylightstudio Fuel CMS SQL injection | 8.8v3.1 | 1.0% | 2021-09-09 | |
| CVE-2021-38721 | Thedaylightstudio Fuel CMS cross-site request forgery | 6.5v3.1 | 0.6% | 2021-09-09 | |
| CVE-2021-38540 | Apache Airflow: Variable Import endpoint missed authentication check | 9.8v3.1 | 80.9% | 2021-09-09 | NucleiExploit codeFix |
| CVE-2021-38408 | Advantech WebAccess stack-based buffer overflow | 9.8v3.1 | 11.6% | 2021-09-09 | |
| CVE-2021-38325 | User Activation Email reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38324 | SP Rental Manager Unauthenticated SQL injection | 7.5v3.1 | 1.8% | 2021-09-09 | |
| CVE-2021-38323 | RentPress reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38322 | Twitter Friends Widget reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38321 | Custom Menu Plugin reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38320 | simpleSAMLphp Authentication reflected cross-site scripting | 6.1v3.1 | 1.0% | 2021-09-09 | |
| CVE-2021-38319 | More From Google reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38318 | 3D Cover Carousel reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38317 | Konnichiwa! Membership reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-38316 | WP Academic People List reflected cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-37579 | Bypass deserialization checks in Apache Dubbo | 9.8v3.1 | 6.7% | 2021-09-09 | Fix |
| CVE-2021-37101 | AIS-BW50-00 There is an improper authorization | 6.8v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-36871 | WP Google Maps Pro premium WordPress plugin Multiple authenticated persistent XSS | 5.4v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-36870 | WP Google Maps WordPress plugin Multiple authenticated persistent XSS | 5.4v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-36161 | Apache Dubbo unprotected input value toString cause RCE | 9.8v3.1 | 2.5% | 2021-09-09 | Fix |
| CVE-2021-34786 | Cisco BroadWorks CommPilot Application Software privilege escalation | 6.5CNA v3.1 | 1.0% | 2021-09-09 | Fix |
| CVE-2021-34785 | Cisco BroadWorks CommPilot Application Software privilege escalation | 6.5CNA v3.1 | 1.3% | 2021-09-09 | Fix |
| CVE-2021-34771 | Cisco IOS XR Software unauthorized information disclosure | 5.5CNA v3.1 | 0.3% | 2021-09-09 | Fix |
| CVE-2021-34737 | Cisco IOS XR Software DHCPv4 server null pointer dereference | 5.8CNA v3.1 | 1.3% | 2021-09-09 | Fix |
| CVE-2021-34728 | Cisco IOS XR Software authenticated user privilege escalation | 7.8CNA v3.1 | 0.3% | 2021-09-09 | Fix |
| CVE-2021-34722 | Cisco IOS XR Software command injection | 6.7CNA v3.1 | 0.3% | 2021-09-09 | Fix |
| CVE-2021-34721 | Cisco IOS XR Software command injection | 6.7CNA v3.1 | 0.3% | 2021-09-09 | Fix |
| CVE-2021-34720 | Cisco IOS XR Software IP SLA and TWAMP denial of service | 8.6CNA v3.1 | 1.3% | 2021-09-09 | Fix |
| CVE-2021-34719 | Cisco IOS XR Software authenticated user privilege escalation | 7.8CNA v3.1 | 0.3% | 2021-09-09 | Fix |
| CVE-2021-34718 | Cisco IOS XR Software arbitrary file read and Write | 8.1CNA v3.1 | 1.6% | 2021-09-09 | Fix |
| CVE-2021-34713 | Cisco IOS XR Software for Asr 9000 Series Routers denial of service | 7.4CNA v3.1 | 0.4% | 2021-09-09 | Fix |
| CVE-2021-34709 | Cisco IOS XR Software image improper signature verification | 6.0CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-34708 | Cisco IOS XR Software image improper signature verification | 6.0CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-32836 | Pre-auth unsafe deserialization in ZStack | 7.5CNA v3.1 | 2.0% | 2021-09-09 | Fix |
| CVE-2021-32835 | Groovy sandbox escape in Eclipse Keti | 9.9NVD v3.1 | 4.6% | 2021-09-09 | |
| CVE-2021-32834 | Arbitrary Groovy script evaluation in Eclipse Keti | 9.9NVD v3.1 | 0.9% | 2021-09-09 | |
| CVE-2021-32833 | Unauthenticated file read in Emby Server | 8.6CNA v3.1 | 1.3% | 2021-09-09 | |
| CVE-2021-32724 | check-spelling is a github action which provides CI spell checking. In affected versions and for a repository with the [check-spelling action](https://github.com/marketplace/actions/check-spelling) enabled that triggers on `pull_request_target` (or `schedule`), an attacker can send a crafted Pull Re | 9.9CNA v3.1 | 2.3% | 2021-09-09 | Exploit codeFix |
| CVE-2021-32487 | Heap-based buffer overflow in Modem 2G RRM | 7.5v3.1 | 2.4% | 2021-09-09 | Fix |
| CVE-2021-32486 | Heap-based buffer overflow in Modem 2G RRM | 7.5v3.1 | 2.4% | 2021-09-09 | Fix |
| CVE-2021-32485 | Heap-based buffer overflow in Modem 2G RRM | 7.5v3.1 | 2.4% | 2021-09-09 | Fix |
| CVE-2021-32484 | Heap-based buffer overflow in Modem 2G RRM | 7.5v3.1 | 2.4% | 2021-09-09 | Fix |
| CVE-2021-30295 | Qualcomm Snapdragon buffer copy without checking size of input in DSP services | 8.4CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-30294 | Qualcomm Snapdragon null pointer dereference in Graphics | 8.4CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-30290 | Qualcomm Snapdragon null pointer dereference in Graphics | 8.4CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-28914 | Bab-technologie Eibport weak password requirements | 6.5v3.1 | 1.0% | 2021-09-09 | |
| CVE-2021-28913 | Bab-technologie Eibport missing authentication | 9.8v3.1 | 1.8% | 2021-09-09 | |
| CVE-2021-28912 | Bab-technologie Eibport weak password requirements | 7.2v3.1 | 1.2% | 2021-09-09 | |
| CVE-2021-28911 | Bab-technologie Eibport missing brute-force protection | 9.8v3.1 | 1.7% | 2021-09-09 | |
| CVE-2021-28910 | Bab-technologie Eibport server-side request forgery | 7.5v3.1 | 1.2% | 2021-09-09 | |
| CVE-2021-28909 | Bab-technologie Eibport missing brute-force protection | 9.8v3.1 | 1.4% | 2021-09-09 | |
| CVE-2021-28499 | Arista Metamako Operating System credential management weakness | 6.3CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-28498 | Arista Metamako Operating System credential management weakness | 8.7CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-28497 | Arista Metamako Operating System access control weakness | 4.4CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-28495 | Arista Metamako Operating System improper authentication | 7.2CNA v3.1 | 0.9% | 2021-09-09 | Fix |
| CVE-2021-28494 | Arista Metamako Operating System improper authentication | 9.6CNA v3.1 | 0.9% | 2021-09-09 | Fix |
| CVE-2021-28493 | Arista Metamako Operating System improper authentication | 8.4CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-26608 | Handysoft groupware arbitrary file download and execution | 9.8v3.1 | 0.6% | 2021-09-09 | |
| CVE-2021-26603 | bandisoft ARK library heap overflow | 7.8v3.1 | 0.7% | 2021-09-09 | |
| CVE-2021-25466 | Samsung Mobile Samsung Internet improper authentication | 6.5CNA v3.1 | 0.8% | 2021-09-09 | Fix |
| CVE-2021-25465 | Samsung Mobile Samsung Theme man-in-the-middle | 3.3CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25464 | Samsung Mobile Samsung Capture information disclosure | 3.3CNA v3.1 | 0.3% | 2021-09-09 | Fix |
| CVE-2021-25463 | Samsung Mobile PENUP improper access control | 4.0CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25462 | Samsung Mobile Devices NPU driver null pointer dereference | 3.3CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25461 | Samsung Mobile Devices buffer overflow | 4.0CNA v3.1 | 0.2% | 2021-09-09 | Exploit codeFix |
| CVE-2021-25460 | Samsung Mobile Devices sspExit in BlockchainTZService improper access control | 4.0CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25459 | Samsung Mobile Devices sspInit in BlockchainTZService improper access control | 4.0CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25458 | Samsung Mobile Devices ION driver null pointer dereference | 3.3CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25457 | Samsung Mobile Devices DSP driver improper input validation | 5.9CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25456 | Samsung Mobile Devices libswmfextractor.so library out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25455 | Samsung Mobile Devices libsaviextractor.so library out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25454 | Samsung Mobile Devices libsaacextractor.so library out-of-bounds read | 3.1CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25453 | Samsung Mobile Devices Bluetooth APIs improper access control | 5.1CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25452 | Samsung Mobile Devices An improper input validation | 5.5CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-25451 | Samsung Mobile Devices improper authentication | 3.3CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25450 | Samsung Mobile Devices FactoryAirCommnadManger path traversal | 4.5CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-25449 | Samsung Mobile Devices libsapeextractor library improper input validation | 6.5CNA v3.1 | 0.4% | 2021-09-09 | Fix |
| CVE-2021-22239 | GitLab incorrect authorization | 5.0CNA v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-20118 | Nessus Agent local privilege escalation | 6.7NVD v3.1 | 0.3% | 2021-09-09 | |
| CVE-2021-20117 | Nessus Agent local privilege escalation | 6.7NVD v3.1 | 0.3% | 2021-09-09 | |
| CVE-2021-3761 | OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values | 7.5CNA v3.1 | 1.2% | 2021-09-09 | Fix |
| CVE-2021-1974 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-1971 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-1963 | Qualcomm Snapdragon integer overflow or wraparound in Modem | 6.7CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-1962 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 6.7CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-1961 | Qualcomm Snapdragon buffer copy without checking size of input in HLOS | 6.7CNA v3.1 | 0.4% | 2021-09-09 | Exploit codeFix |
| CVE-2021-1960 | Qualcomm Snapdragon improper input validation in Bluetooth | 6.5CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-1958 | Qualcomm Snapdragon use-after-free in DSP services | 6.7CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-1957 | Qualcomm Snapdragon improper access control in Bluetooth | 6.5CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-1956 | Qualcomm Snapdragon improper access control in Bluetooth | 6.5CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-1952 | Qualcomm Snapdragon improper restriction of operations within the bounds of a memory buffer in Boot | 7.8CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-1948 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-1946 | Qualcomm Snapdragon null pointer dereference in Data Modem | 9.8CNA v3.1 | 0.8% | 2021-09-09 | Fix |
| CVE-2021-1941 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-09-09 | Fix |
| CVE-2021-1935 | Qualcomm Snapdragon null pointer dereference in Trusted application | 7.1CNA v3.1 | 0.1% | 2021-09-09 | Fix |
| CVE-2021-1934 | Qualcomm Snapdragon double free in Digital Rights Management | 8.4CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-1933 | Qualcomm Snapdragon improper validation of array index in Modem | 9.8CNA v3.1 | 0.8% | 2021-09-09 | Fix |
| CVE-2021-1909 | Qualcomm Snapdragon buffer copy without checking size of input in Core | 7.3CNA v3.1 | 0.2% | 2021-09-09 | Fix |
| CVE-2021-40818 | Glewlwyd SSO Server buffer overflow | 9.8v3.1 | 1.5% | 2021-09-08 | Fix |
| CVE-2021-40814 | MyPresta Customer Photo Gallery SQL injection | 9.8v3.1 | 1.1% | 2021-09-08 | |
| CVE-2021-40812 | Libgd out-of-bounds read | 6.5v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-40797 | OpenStack Neutron denial of service | 6.5v3.1 | 1.8% | 2021-09-08 | Fix |
| CVE-2021-40537 | ownCloud User LDAP server-side request forgery | 2.7v3.1 | 0.7% | 2021-09-08 | Fix |
| CVE-2021-40377 | SmarterTools SmarterMail cross-site scripting | 5.4v3.1 | 0.5% | 2021-09-08 | Fix |
| CVE-2021-40346 | HAProxy An integer overflow | 7.5v3.1 | 57.9% | 2021-09-08 | Exploit codeFix |
| CVE-2021-39122 | Atlassian Jira Server information disclosure | 5.3v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-39121 | Atlassian Jira Server information disclosure | 4.3v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-39116 | Atlassian Jira Server denial of service | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-38388 | LINE Central Dogma missing authorization | 8.8v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-36695 | Deskpro cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-08 | |
| CVE-2021-36440 | Unrestricted file upload in ShowDoc | 9.8v3.1 | 4.8% | 2021-09-08 | Fix |
| CVE-2021-36216 | LINE uncontrolled search path | 7.8v3.1 | 0.4% | 2021-09-08 | |
| CVE-2021-36215 | LINE client spoofing | 5.3v3.1 | 0.8% | 2021-09-08 | |
| CVE-2021-36182 | Fortinet FortiWeb OS command injection | 8.8CNA v3.1 | 1.9% | 2021-09-08 | Fix |
| CVE-2021-36179 | Fortinet FortiWeb A stack-based buffer overflow | 8.0CNA v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-35526 | Hitachi Energy SDM600 backup files cleartext storage of sensitive information | 6.3CNA v3.1 | 0.1% | 2021-09-08 | Fix |
| CVE-2021-35217 | SolarWinds Orion Platform insecure deserialization of untrusted data causing remote code execution | 8.9CNA v3.1 | 72.8% | 2021-09-08 | Fix |
| CVE-2021-33982 | An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions. | 7.5v3.1 | 1.1% | 2021-09-08 | |
| CVE-2021-33981 | An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal information and images of their hunting/fishing licenses. | 4.3v3.1 | 0.8% | 2021-09-08 | |
| CVE-2021-32805 | URL redirection to untrusted site (open redirect) in Flask-AppBuilder | 7.2CNA v3.1 | 0.7% | 2021-09-08 | Fix |
| CVE-2021-31274 | Cross-site scripting in LibreNMS | 5.4v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30805 | Apple macOS out-of-bounds write | 9.8v3.1 | 3.1% | 2021-09-08 | Fix |
| CVE-2021-30804 | Apple iOS insecure permissions | 3.3v3.1 | 0.7% | 2021-09-08 | Fix |
| CVE-2021-30803 | Apple macOS insecure permissions | 3.3v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30802 | Apple iOS use-after-free | 8.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30800 | Apple iOS denial of service | 8.8v3.1 | 0.7% | 2021-09-08 | Fix |
| CVE-2021-30799 | Apple iOS out-of-bounds write | 8.8v3.1 | 2.2% | 2021-09-08 | Fix |
| CVE-2021-30798 | Apple iOS logic flaw | 7.5v3.1 | 1.8% | 2021-09-08 | Fix |
| CVE-2021-30797 | Apple iOS code execution | 8.8v3.1 | 1.9% | 2021-09-08 | Fix |
| CVE-2021-30796 | Apple iOS logic flaw | 6.5v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-30795 | Apple iOS use-after-free | 8.8v3.1 | 2.1% | 2021-09-08 | Fix |
| CVE-2021-30793 | Apple macOS logic flaw | 9.8v3.1 | 3.1% | 2021-09-08 | Fix |
| CVE-2021-30792 | Apple iOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30791 | Apple iOS out-of-bounds read | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30790 | Apple macOS information disclosure | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30789 | Apple iOS out-of-bounds read | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30788 | Apple iOS denial of service | 7.1v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30787 | Apple macOS denial of service | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30786 | Apple iOS race condition | 7.0v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30785 | Apple iOS buffer overflow | 7.8v3.1 | 1.8% | 2021-09-08 | Fix |
| CVE-2021-30784 | Apple macOS Apple T2 Security Chip arbitrary code execution | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30783 | Apple macOS sandbox vulnerability | 6.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30782 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access restricted files. | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30781 | Apple iOS arbitrary code execution | 7.8v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-30780 | Apple iOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30779 | Apple iOS arbitrary code execution | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30778 | Apple macOS Privacy preferences vulnerability | 5.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30777 | Apple macOS injection | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30776 | Apple iOS logic flaw | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30775 | Apple iOS out-of-bounds write | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30774 | Apple iOS logic flaw | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30773 | Apple iOS improper signature verification | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30772 | Apple macOS privilege escalation | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30770 | Apple iOS improper authentication | 5.5v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-30769 | Apple iOS improper authentication | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30768 | Apple iOS logic flaw | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30766 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30765 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30764 | Apple tvOS arbitrary code execution | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30763 | Apple iOS improper input validation | 5.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30762 | Apple iOS WebKit use-after-free | 8.8v3.1 | 11.0% | 2021-09-08 | KEVFix |
| CVE-2021-30761 | Apple iOS WebKit memory corruption | 8.8v3.1 | 10.5% | 2021-09-08 | KEVFix |
| CVE-2021-30760 | Apple iOS integer overflow | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30759 | Apple iOS out-of-bounds write | 7.8v3.1 | 1.5% | 2021-09-08 | Fix |
| CVE-2021-30758 | Apple iOS type confusion | 8.8v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-30757 | This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app. | 5.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30756 | Apple macOS, iOS and iPadOS Now Playing lock screen access vulnerability | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30755 | Apple macOS out-of-bounds read | 6.5v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30753 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30752 | Apple tvOS out-of-bounds read | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30751 | Apple macOS Privacy preferences vulnerability | 5.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30750 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30749 | Apple macOS out-of-bounds write | 8.8v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-30748 | Apple iOS out-of-bounds write | 7.8v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-30746 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30744 | Apple macOS cross-site scripting | 6.1v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30743 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30742 | Apple iOS and iPadOS arbitrary code execution | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30741 | Apple iOS and iPadOS use-after-free | 7.1v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30740 | Apple macOS logic flaw | 7.8v3.1 | 1.5% | 2021-09-08 | Fix |
| CVE-2021-30739 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30738 | Apple macOS arbitrary file write | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30737 | Apple macOS memory corruption | 8.8v3.1 | 1.5% | 2021-09-08 | Fix |
| CVE-2021-30736 | Apple macOS buffer overflow | 7.8v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-30735 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-30734 | Apple macOS out-of-bounds write | 8.8v3.1 | 2.0% | 2021-09-08 | Fix |
| CVE-2021-30733 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30731 | Apple macOS USB device capture vulnerability | 5.5v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-30729 | Apple iOS and iPadOS logic flaw | 7.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30728 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30727 | Apple macOS logic flaw | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30726 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30725 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30724 | This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local attacker may be able to elevate their privileges. | 7.8v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30723 | Apple macOS information disclosure | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30722 | Apple macOS information disclosure | 5.9v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-30721 | Apple macOS information disclosure | 6.5v3.1 | 24.3% | 2021-09-08 | Fix |
| CVE-2021-30720 | Apple macOS improper authentication | 5.4v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-30719 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30718 | Apple macOS restricted settings access vulnerability | 4.3v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-30717 | Apple macOS out-of-bounds write | 8.1v3.1 | 2.0% | 2021-09-08 | Fix |
| CVE-2021-30716 | Apple macOS logic flaw | 5.9v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-30715 | Apple macOS logic flaw | 7.5v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-30714 | Apple iOS and iPadOS race condition | 6.3v3.1 | 0.5% | 2021-09-08 | Fix |
| CVE-2021-30713 | Apple macOS missing authorization | 7.8v3.1 | 7.0% | 2021-09-08 | KEVFix |
| CVE-2021-30712 | Apple macOS logic flaw | 7.8v3.1 | 3.8% | 2021-09-08 | Fix |
| CVE-2021-30710 | Apple macOS out-of-bounds write | 7.1v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30709 | Apple macOS, iOS and iPadOS USD file processing information disclosure | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30708 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30707 | Apple macOS buffer overflow | 8.8v3.1 | 1.9% | 2021-09-08 | Fix |
| CVE-2021-30706 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30705 | Apple macOS, iOS and iPadOS ASTC file processing information disclosure | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30704 | Apple macOS logic flaw | 7.8v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-30703 | Apple macOS double free | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30702 | Apple macOS improper authentication | 4.6v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30701 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30700 | Apple macOS, iOS, iPadOS, tvOS and watchOS image processing information disclosure | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30699 | Apple iOS and iPadOS lock screen window management vulnerability | 4.6v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30698 | Apple macOS null pointer dereference | 7.5v3.1 | 2.2% | 2021-09-08 | Fix |
| CVE-2021-30697 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30696 | Apple macOS logic flaw | 5.9v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30695 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30694 | Apple macOS information disclosure | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30693 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30692 | Apple macOS information disclosure | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30691 | Apple macOS information disclosure | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30690 | Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache. | 9.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-30689 | Apple macOS cross-site scripting | 6.1v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30688 | Apple macOS sandbox escape | 8.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30687 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30686 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30685 | Apple iOS, iPadOS, tvOS, watchOS and macOS audio file parsing information disclosure | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30684 | Apple macOS logic flaw | 7.8v3.1 | 1.5% | 2021-09-08 | Fix |
| CVE-2021-30683 | Apple macOS use-after-free | 7.8v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30682 | Apple macOS logic flaw | 5.5v3.1 | 1.7% | 2021-09-08 | Exploit codeFix |
| CVE-2021-30681 | Apple macOS privilege escalation | 7.8v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30680 | Apple macOS logic flaw | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30679 | Apple macOS privilege escalation | 7.8v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30678 | Apple macOS logic flaw | 9.8v3.1 | 3.3% | 2021-09-08 | Fix |
| CVE-2021-30677 | Apple macOS sandbox escape | 8.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30676 | Apple macOS logic flaw | 7.1v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30675 | Apple Boot Camp out-of-bounds write | 7.8v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30674 | Apple iOS and iPadOS memory access checks information disclosure | 5.5v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30673 | Apple macOS call history access controls vulnerability | 5.5v3.1 | 0.7% | 2021-09-08 | Fix |
| CVE-2021-30672 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30671 | Apple macOS improper input validation | 3.3v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-30669 | Apple macOS download without integrity check | 5.5v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-30668 | Apple macOS improper authentication | 4.6v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-30667 | Apple iOS and iPadOS improper authentication | 5.4v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-30666 | Apple iOS WebKit buffer overflow | 8.8v3.1 | 3.0% | 2021-09-08 | KEVFix |
| CVE-2021-30665 | Apple Multiple Products WebKit memory corruption | 8.8v3.1 | 3.7% | 2021-09-08 | KEVFix |
| CVE-2021-30664 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-30663 | Apple Multiple Products WebKit integer overflow | 8.8v3.1 | 3.5% | 2021-09-08 | KEVFix |
| CVE-2021-30662 | Apple iOS and iPadOS arbitrary code execution | 7.3v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage use-after-free | 8.8v3.1 | 4.5% | 2021-09-08 | KEVFix |
| CVE-2021-30660 | Apple tvOS out-of-bounds read | 7.5v3.1 | 2.1% | 2021-09-08 | Fix |
| CVE-2021-30659 | Apple watchOS information disclosure | 6.5v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-30658 | Apple macOS download without integrity check | 5.5v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-30657 | Apple macOS missing authorization | 5.5v3.1 | 68.5% | 2021-09-08 | KEVExploit codeFix |
| CVE-2021-30656 | Apple iOS and iPadOS kernel memory management vulnerability | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-30655 | Apple macOS arbitrary code execution | 9.8v3.1 | 2.3% | 2021-09-08 | Fix |
| CVE-2021-30654 | Apple GarageBand information disclosure | 5.5v3.1 | 0.2% | 2021-09-08 | Fix |
| CVE-2021-30653 | Apple tvOS arbitrary code execution | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-30652 | Apple tvOS race condition | 7.0v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-30605 | Microsoft Windows ChromeOS Readiness tool installer inappropriate implementation | 7.8v3.1 | 0.1% | 2021-09-08 | Fix |
| CVE-2021-28701 | Xen grant table v2 status pages race condition | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-28581 | Adobe Creative Cloud Desktop privilege escalation | 7.3CNA v3.0 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-28580 | Medium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code execution | 8.8CNA v3.1 | 8.5% | 2021-09-08 | Fix |
| CVE-2021-28571 | Adobe After Effects improper neutralization of special elements could lead to remote code execution | 8.3CNA v3.1 | 3.9% | 2021-09-08 | Fix |
| CVE-2021-28569 | Adobe Media Encoder VOB file parsing out-of-bounds read could lead to information disclosure | 4.3CNA v3.1 | 3.2% | 2021-09-08 | Fix |
| CVE-2021-28568 | Adobe Genuine services insecure file permission could lead to privilege escalation | 5.8CNA v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-28567 | Adobe Magento improper authorization vulnerability in the customers module | 5.0CNA v3.0 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-28566 | Adobe Magento information disclosure | 3.7CNA v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-23404 | sqlite-web cross-site request forgery (CSRF) | 8.8v3.1 | 0.5% | 2021-09-08 | |
| CVE-2021-22004 | Improper authentication in SaltStack Salt | 6.4v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-21996 | Exposure of resource to wrong sphere in Salt | 7.5v3.1 | 3.5% | 2021-09-08 | Fix |
| CVE-2021-21897 | Ribbonsoft DL_Dxf::handleLWPolylineData functionality code execution | 8.8v3.1 | 2.9% | 2021-09-08 | Fix |
| CVE-2021-21105 | Adobe Illustrator memory corruption vulnerability could lead to remote code execution | 8.8CNA v3.1 | 8.0% | 2021-09-08 | Fix |
| CVE-2021-21104 | Adobe Illustrator memory corruption vulnerability could lead to remote code execution | 8.8CNA v3.1 | 6.6% | 2021-09-08 | Fix |
| CVE-2021-21103 | Adobe Illustrator memory corruption vulnerability could lead to information disclosure | 4.3CNA v3.1 | 4.5% | 2021-09-08 | Fix |
| CVE-2021-3055 | PAN-OS: XML external entity (XXE) Reference vulnerability in the PAN-OS Web interface | 6.5CNA v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-3054 | PAN-OS: Unsigned code execution during Plugin Installation race condition | 7.2CNA v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-3053 | PAN-OS: Exceptional Condition denial of service (DoS) | 7.5CNA v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-3052 | PAN-OS: Reflected cross-site scripting (XSS) in Web interface | 8.0CNA v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-3051 | Cortex XSOAR: Authentication bypass in SAML Authentication | 8.1CNA v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-3049 | Cortex XSOAR: Improper authorization of Incident Investigations | 2.6CNA v3.1 | 0.5% | 2021-09-08 | Fix |
| CVE-2021-1972 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 9.8CNA v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-1930 | Qualcomm Snapdragon out-of-bounds read | 5.5CNA v3.1 | 0.1% | 2021-09-08 | Fix |
| CVE-2021-1929 | Qualcomm Snapdragon Permissions, Privileges and Access Controls in Android | 6.2CNA v3.1 | 0.2% | 2021-09-08 | Fix |
| CVE-2021-1928 | Qualcomm Snapdragon buffer over-read in Boot | 4.6CNA v3.1 | 0.1% | 2021-09-08 | Fix |
| CVE-2021-1923 | Qualcomm Snapdragon incorrect type conversion or cast in Trusted application | 7.8CNA v3.1 | 0.2% | 2021-09-08 | Fix |
| CVE-2021-1920 | Qualcomm Snapdragon integer underflow in Data Modem | 9.8CNA v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-1919 | Qualcomm Snapdragon integer underflow in Data Modem | 9.8CNA v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-1916 | Qualcomm Snapdragon integer overflow to buffer overflow in Data Modem | 9.8CNA v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-1914 | Qualcomm Snapdragon loop with unreachable exit condition in Modem | 7.5CNA v3.1 | 0.6% | 2021-09-08 | Fix |
| CVE-2021-1904 | Qualcomm Snapdragon information exposure in Kernel | 6.2CNA v3.1 | 0.5% | 2021-09-08 | Fix |
| CVE-2021-1885 | Apple tvOS out-of-bounds read | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-1884 | Apple tvOS race condition | 5.9v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-1883 | Apple tvOS out-of-bounds write | 5.5v3.1 | 2.0% | 2021-09-08 | Fix |
| CVE-2021-1882 | Apple tvOS out-of-bounds write | 9.8v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-1881 | Apple tvOS out-of-bounds read | 7.8v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-1880 | Apple watchOS arbitrary code execution | 7.8v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-1878 | Apple macOS integer overflow | 6.5v3.1 | 1.8% | 2021-09-08 | Fix |
| CVE-2021-1877 | Apple iOS and iPadOS out-of-bounds read | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1876 | Apple macOS use-after-free | 8.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-1875 | Apple tvOS double free | 7.8v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-1874 | Apple iOS and iPadOS logic flaw | 8.8v3.1 | 1.9% | 2021-09-08 | Fix |
| CVE-2021-1873 | Apple macOS Accessibility TCC permissions information disclosure | 6.5v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-1872 | Apple watchOS logic flaw | 4.3v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-1868 | Apple tvOS improper privilege management | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1867 | Apple macOS out-of-bounds read | 8.8v3.1 | 1.9% | 2021-09-08 | Fix |
| CVE-2021-1865 | Apple iOS and iPadOS cleartext storage of sensitive information | 5.0v3.1 | 0.5% | 2021-09-08 | Fix |
| CVE-2021-1864 | Apple tvOS use-after-free | 9.8v3.1 | 2.2% | 2021-09-08 | Fix |
| CVE-2021-1863 | Apple iOS and iPadOS improper authentication | 2.4v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1862 | Apple iOS and iPadOS Siri search vulnerability | 2.4v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1861 | Apple macOS cache occupancy vulnerability | 4.3v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-1860 | Apple tvOS improper initialization | 6.5v3.1 | 1.5% | 2021-09-08 | Fix |
| CVE-2021-1859 | Apple macOS logic flaw | 7.5v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-1858 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-1857 | Apple iCloud improper initialization | 6.5v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-1855 | Apple macOS logic flaw | 6.5v3.1 | 0.8% | 2021-09-08 | Fix |
| CVE-2021-1854 | Apple iOS and iPadOS incorrect authorization | 4.3v3.1 | 0.7% | 2021-09-08 | Fix |
| CVE-2021-1853 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1852 | Apple iOS and iPadOS out-of-bounds read | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1851 | Apple tvOS improper privilege management | 8.8v3.1 | 2.2% | 2021-09-08 | Fix |
| CVE-2021-1849 | Apple tvOS improper signature verification | 7.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-1848 | Apple iOS and iPadOS app switcher information disclosure | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1847 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-1846 | Apple tvOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-1843 | Apple tvOS arbitrary code execution | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-1841 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-1840 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1839 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1838 | Apple iOS and iPadOS arbitrary code execution | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-1837 | Apple iOS and iPadOS improper certificate validation | 5.3v3.1 | 0.5% | 2021-09-08 | Fix |
| CVE-2021-1836 | Apple tvOS improper privilege management | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1835 | Apple iOS and iPadOS missing authorization | 4.6v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1834 | Apple macOS out-of-bounds write | 9.8v3.1 | 3.0% | 2021-09-08 | Fix |
| CVE-2021-1833 | Apple iOS and iPadOS privilege escalation | 7.8v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-1832 | Apple tvOS incorrect default permissions | 5.5v3.1 | 0.9% | 2021-09-08 | Fix |
| CVE-2021-1831 | Apple iOS and iPadOS incorrect default permissions | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-1830 | Apple iOS and iPadOS out-of-bounds read | 5.5v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-1829 | Apple macOS type confusion | 9.8v3.1 | 2.3% | 2021-09-08 | Fix |
| CVE-2021-1828 | Apple macOS out-of-bounds write | 7.1v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-1826 | Apple tvOS cross-site scripting | 6.1v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-1825 | Apple Safari cross-site scripting | 6.1v3.1 | 1.4% | 2021-09-08 | Fix |
| CVE-2021-1824 | Apple macOS entitlements vulnerability | 4.4v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1822 | Apple tvOS logic flaw | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1820 | Apple tvOS improper initialization | 6.5v3.1 | 1.3% | 2021-09-08 | Fix |
| CVE-2021-1817 | Apple tvOS out-of-bounds write | 8.8v3.1 | 1.9% | 2021-09-08 | Fix |
| CVE-2021-1816 | Apple tvOS buffer overflow | 7.8v3.1 | 1.6% | 2021-09-08 | Fix |
| CVE-2021-1815 | Apple tvOS path traversal | 5.5v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-1814 | Apple watchOS arbitrary code execution | 7.8v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-1813 | Apple tvOS improper privilege management | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-1812 | Apple iOS and iPadOS logic flaw | 7.8v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-1811 | Apple iCloud logic flaw | 6.5v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-1810 | Apple macOS logic flaw | 5.5v3.1 | 1.2% | 2021-09-08 | Fix |
| CVE-2021-1809 | Apple tvOS out-of-bounds write | 7.5v3.1 | 1.8% | 2021-09-08 | Fix |
| CVE-2021-1808 | Apple tvOS out-of-bounds write | 7.5v3.1 | 1.7% | 2021-09-08 | Fix |
| CVE-2021-1807 | Apple watchOS arbitrary file write | 5.5v3.1 | 0.3% | 2021-09-08 | Fix |
| CVE-2021-1784 | Apple macOS DiskArbitration insecure permissions | 7.5v3.1 | 2.0% | 2021-09-08 | Fix |
| CVE-2021-1770 | Apple tvOS arbitrary code execution buffer overflow | 9.8v3.1 | 2.8% | 2021-09-08 | Fix |
| CVE-2021-1762 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-09-08 | Fix |
| CVE-2021-1740 | Apple tvOS path traversal | 5.5v3.1 | 1.0% | 2021-09-08 | Fix |
| CVE-2021-1739 | Apple tvOS path traversal | 5.5v3.1 | 0.4% | 2021-09-08 | Fix |
| CVE-2021-40540 | Ulfius URI logger vulnerability | 9.8v3.1 | 2.6% | 2021-09-07 | Fix |
| CVE-2021-40539 | Zoho ManageEngine ADSelfService Plus authentication bypass | 9.8NVD v3.1 | 99.0% | 2021-09-07 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-40143 | HTTP header injection in Sonatype Nexus Repository | 8.2v3.1 | 2.3% | 2021-09-07 | Fix |
| CVE-2021-39503 | Phpmywind code injection | 7.2v3.1 | 2.8% | 2021-09-07 | |
| CVE-2021-39501 | EyouCMS open redirect | 6.1v3.1 | 3.6% | 2021-09-07 | Nuclei |
| CVE-2021-39500 | EyouCMS path traversal | 7.5v3.1 | 1.5% | 2021-09-07 | |
| CVE-2021-39499 | EyouCMS Users in Qiong ICP cross-site scripting | 6.1v3.1 | 1.2% | 2021-09-07 | |
| CVE-2021-39497 | EyouCMS server-side request forgery | 9.8v3.1 | 2.4% | 2021-09-07 | |
| CVE-2021-39496 | EyouCMS cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-07 | |
| CVE-2021-39285 | Versa Director cross-site scripting | 6.1v3.1 | 0.8% | 2021-09-07 | |
| CVE-2021-39279 | Moxa Oncell G3470a-lte-eu-t OS command injection | 8.8v3.1 | 4.6% | 2021-09-07 | |
| CVE-2021-39278 | Moxa Oncell G3470a-lte-eu-t cross-site scripting | 6.1v3.1 | 0.9% | 2021-09-07 | |
| CVE-2021-39263 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-39262 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39261 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-39260 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39259 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39258 | Tuxera NTFS-3G out-of-bounds read | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39257 | Tuxera NTFS-3G uncontrolled recursion | 5.5v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39256 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-39255 | Tuxera NTFS-3G out-of-bounds read | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39254 | Tuxera NTFS-3G integer overflow | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39253 | Tuxera NTFS-3G out-of-bounds read | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39252 | Tuxera NTFS-3G out-of-bounds read | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39251 | Tuxera NTFS-3G null pointer dereference | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-39199 | Cross-site scripting via unsafe defaults in remark-html | 10.0CNA v3.1 | 1.1% | 2021-09-07 | Fix |
| CVE-2021-39197 | Cross-site request forgery in better_errors | 6.3CNA v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-39196 | pcapture REST API improper authentication | 7.7CNA v3.1 | 1.3% | 2021-09-07 | Fix |
| CVE-2021-39195 | Server-side request forgery vulnerability in Misskey | 7.7CNA v3.1 | 1.1% | 2021-09-07 | Fix |
| CVE-2021-39194 | Denial of service while parsing polymorphic input with tagged polymorphism style in kaml | 4.3CNA v3.1 | 1.7% | 2021-09-07 | Fix |
| CVE-2021-38841 | Simple Water Refilling Station Management System remote code execution | 8.8v3.1 | 4.1% | 2021-09-07 | |
| CVE-2021-38840 | Simple Water Refilling Station Management System SQL injection | 9.8v3.1 | 2.5% | 2021-09-07 | |
| CVE-2021-38707 | Cliniccases stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-38706 | Cliniccases SQL injection | 8.8v3.1 | 1.0% | 2021-09-07 | Fix |
| CVE-2021-38705 | Cliniccases cross-site request forgery | 8.8v3.1 | 0.8% | 2021-09-07 | Fix |
| CVE-2021-38704 | Cliniccases Multiple reflected cross-site scripting | 6.1v3.1 | 3.5% | 2021-09-07 | NucleiFix |
| CVE-2021-38698 | HashiCorp Consul missing authorization | 6.5v3.1 | 1.5% | 2021-09-07 | Fix |
| CVE-2021-38617 | Eigentech Natural Language Processing privilege escalation | 8.8v3.1 | 1.4% | 2021-09-07 | |
| CVE-2021-38616 | In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in a PATCH request. A guest user could modify other users' profiles and much more. | 8.8v3.1 | 1.3% | 2021-09-07 | |
| CVE-2021-38615 | In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information. | 8.1v3.1 | 0.9% | 2021-09-07 | |
| CVE-2021-38142 | Barco Mirrorop Windows Sender cleartext transmission of sensitive information | 8.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-38123 | Network Automation Micro Focus open redirect | 6.1v3.1 | 0.6% | 2021-09-07 | |
| CVE-2021-37733 | Aruba SD-WAN Software and Gateways path traversal | 4.9v3.1 | 1.2% | 2021-09-07 | Fix |
| CVE-2021-37731 | Aruba SD-WAN Software and Gateways path traversal | 6.2v3.1 | 0.3% | 2021-09-07 | Fix |
| CVE-2021-37729 | Aruba SD-WAN Software and Gateways path traversal | 6.5v3.1 | 1.0% | 2021-09-07 | Fix |
| CVE-2021-37728 | Aruba Operating System Software path traversal | 6.5v3.1 | 1.1% | 2021-09-07 | Fix |
| CVE-2021-37725 | Aruba SD-WAN Software and Gateways cross-site request forgery | 8.1v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-37724 | Aruba Operating System Software command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37723 | Aruba Operating System Software command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37722 | Aruba SD-WAN Software and Gateways command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37721 | Aruba SD-WAN Software and Gateways command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37720 | Aruba SD-WAN Software and Gateways command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37719 | Aruba SD-WAN Software and Gateways command injection | 7.2v3.1 | 2.9% | 2021-09-07 | Fix |
| CVE-2021-37718 | Aruba SD-WAN Software and Gateways command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37717 | Aruba SD-WAN Software and Gateways command injection | 7.2v3.1 | 3.1% | 2021-09-07 | Fix |
| CVE-2021-37716 | Aruba SD-WAN Software and Gateways buffer overflow | 9.8v3.1 | 2.4% | 2021-09-07 | Fix |
| CVE-2021-37631 | Circle can be accessed by non-Circle members in Nextcloud Deck | 6.5CNA v3.1 | 1.3% | 2021-09-07 | Fix |
| CVE-2021-37630 | Secret Circle can be joined without approval in Nextcloud Circles | 6.5CNA v3.1 | 1.2% | 2021-09-07 | Fix |
| CVE-2021-37629 | Lack of ratelimit on Richdocuments OCS endpoint in Nextcloud | 5.3CNA v3.1 | 1.4% | 2021-09-07 | Fix |
| CVE-2021-37628 | File Drop can be bypassed using Richdocuments app in Nextcloud | 7.5CNA v3.1 | 2.1% | 2021-09-07 | Fix |
| CVE-2021-37219 | HashiCorp Consul privilege escalation | 8.8v3.1 | 1.1% | 2021-09-07 | Fix |
| CVE-2021-37218 | Privilege escalation in HashiCorp Nomad | 8.8v3.1 | 0.7% | 2021-09-07 | Fix |
| CVE-2021-37145 | Poly CX5100 authenticated Telnet connection command injection | 7.2v3.1 | 2.0% | 2021-09-07 | Fix |
| CVE-2021-36717 | Synerion TimeNet directory traversal | 7.5v3.1 | 0.9% | 2021-09-07 | |
| CVE-2021-36696 | Deskpro cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-07 | |
| CVE-2021-36163 | Apache Dubbo unsafe deserialization in providers using the Hessian protocol | 9.8v3.1 | 3.3% | 2021-09-07 | Fix |
| CVE-2021-36162 | Apache Dubbo unprotected yaml deserialization cause RCE | 8.8v3.1 | 2.3% | 2021-09-07 | Fix |
| CVE-2021-35949 | ownCloud incorrect authorization | 5.3v3.1 | 0.9% | 2021-09-07 | Fix |
| CVE-2021-35948 | ownCloud session fixation | 5.4v3.1 | 0.7% | 2021-09-07 | Fix |
| CVE-2021-35947 | ownCloud information disclosure through error messages | 5.3v3.1 | 1.3% | 2021-09-07 | Fix |
| CVE-2021-35946 | ownCloud improper privilege management | 9.8v3.1 | 1.5% | 2021-09-07 | Fix |
| CVE-2021-35269 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-35268 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-35267 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-35266 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-34150 | Bluetrum AB5301A Bluetooth Classic LMP packet handling vulnerability | 6.5v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-34149 | Ti Cc256xcqfn-em deadlock | 6.5v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-34148 | Cypress CYW20735B1 denial of service | 6.5v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-34147 | Cypress CYW20735B1 crash | 6.5v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-34146 | Cypress CYW20735B1 denial of service | 6.5v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-34145 | Cypress CYW20735B1 denial of service | 5.3v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-34144 | The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMP_SCO_Link_Request packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inqu | 6.5v3.1 | 0.7% | 2021-09-07 | |
| CVE-2021-34143 | Zh-jieli AC6936 deadlock | 6.5v3.1 | 0.7% | 2021-09-07 | |
| CVE-2021-33831 | Th-wildau Covid-19 Contact Tracing resource exhaustion | 6.5v3.1 | 2.0% | 2021-09-07 | Exploit codeFix |
| CVE-2021-33599 | A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti | 5.5v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-33484 | Onyaktech Comments Pro hard-coded credentials | 7.5v3.1 | 0.9% | 2021-09-07 | |
| CVE-2021-33483 | Onyaktech Comments Pro cross-site scripting | 5.4v3.1 | 0.6% | 2021-09-07 | |
| CVE-2021-33289 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-33287 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-33286 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-33285 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-32802 | Nextcloud Server image preview generation inclusion of untrusted functionality | 9.3CNA v3.1 | 2.6% | 2021-09-07 | Fix |
| CVE-2021-32801 | Exceptions may have logged Encryption-at-Rest key content in Nextcloud Server | 5.5CNA v3.1 | 0.2% | 2021-09-07 | Fix |
| CVE-2021-32800 | Bypass of Two Factor Authentication in Nextcloud Server | 8.1CNA v3.1 | 1.8% | 2021-09-07 | Fix |
| CVE-2021-32782 | Cross-site scripting in Nextcloud Circles | 5.8CNA v3.1 | 0.8% | 2021-09-07 | Fix |
| CVE-2021-32766 | Nextcloud Text app can disclose existence of folders in File Drop link share | 5.3CNA v3.1 | 1.3% | 2021-09-07 | Fix |
| CVE-2021-31786 | Actions-semi ATS2815 improper locking | 6.5v3.1 | 0.4% | 2021-09-07 | |
| CVE-2021-31785 | Actions-semi ATS2815 improper locking | 6.5v3.1 | 0.4% | 2021-09-07 | |
| CVE-2021-31613 | Zh-jieli AC6901 crash | 6.5v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-31612 | Zh-jieli AC6901 deadlock | 6.5v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-31611 | Zh-jieli AC6901 improper locking | 5.7v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-31610 | Bluetrum AB5376T deadlock | 6.5v3.1 | 0.6% | 2021-09-07 | Fix |
| CVE-2021-31609 | iWRAP Bluetooth Classic LMP packet handling denial of service | 6.5v3.1 | 0.4% | 2021-09-07 | Fix |
| CVE-2021-28155 | JBL TUNE500BT denial of service | 6.5v3.1 | 0.5% | 2021-09-07 | Fix |
| CVE-2021-28139 | espressif esp-idf arbitrary code execution | 8.8v3.1 | 1.4% | 2021-09-07 | Fix |
| CVE-2021-28136 | espressif esp-idf out-of-bounds write | 6.5v3.1 | 0.9% | 2021-09-07 | Fix |
| CVE-2021-28135 | espressif esp-idf denial of service | 6.5v3.1 | 0.9% | 2021-09-07 | |
| CVE-2021-27022 | Puppet Enterprise sensitive information in log files | 4.9v3.1 | 0.9% | 2021-09-07 | Fix |
| CVE-2021-40532 | Telegram Web K Alpha document extension handling vulnerability | 9.8v3.1 | 1.1% | 2021-09-06 | |
| CVE-2021-40531 | Sketch unrestricted file upload | 9.8v3.1 | 32.8% | 2021-09-06 | Exploit codeFix |
| CVE-2021-40530 | Cryptopp Crypto++ weak cryptographic algorithm | 5.9v3.1 | 1.2% | 2021-09-06 | Fix |
| CVE-2021-40529 | Mozilla Thunderbird weak cryptographic algorithm | 5.9v3.1 | 1.5% | 2021-09-06 | Fix |
| CVE-2021-40528 | GnuPG Libgcrypt weak cryptographic algorithm | 5.9v3.1 | 1.4% | 2021-09-06 | Fix |
| CVE-2021-36744 | Trend Micro Security (Consumer) link following | 7.8v3.1 | 0.5% | 2021-09-06 | Fix |
| CVE-2021-36096 | ((OTRS)) Community Edition support Bundle includes S/Mime and PGP secret or PIN | 5.2CNA v3.1 | 0.4% | 2021-09-06 | Fix |
| CVE-2021-36095 | ((OTRS)) Community Edition user enumeration issue using lost password feature | 5.3CNA v3.1 | 0.9% | 2021-09-06 | Fix |
| CVE-2021-36094 | ((OTRS)) Community Edition XSS attack in appointment edit popup screen | 5.7CNA v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-36093 | ((OTRS)) Community Edition DoS attack using PostMaster filters | 5.3CNA v3.1 | 1.1% | 2021-09-06 | Fix |
| CVE-2021-32568 | Deserialization of untrusted data in zmister2016/Mrdoc | 7.8v3.1 | 0.8% | 2021-09-06 | Fix |
| CVE-2021-25737 | Kubernetes Holes in EndpointSlice Validation Enable Host Network Hijack | 2.7CNA v3.1 | 1.3% | 2021-09-06 | Fix |
| CVE-2021-25735 | Kubernetes validating Admission Webhook does not observe some previous fields | 6.5CNA v3.1 | 5.5% | 2021-09-06 | Exploit codeFix |
| CVE-2021-24611 | Keywords and Meta WordPress plugin CSRF to stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.3% | 2021-09-06 | Fix |
| CVE-2021-24603 | Site Reviews WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24601 | WPFront Notification Bar WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24599 | Email Encoder WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-09-06 | Fix |
| CVE-2021-24591 | Highlight WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24590 | Cookie Notice and Consent Banner for GDPR and CCPA Compliance WordPress plugin stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24588 | SMS Alert Order Notifications WooCommerce authenticated cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-09-06 | Fix |
| CVE-2021-24568 | AddToAny WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24517 | Stop Spammers Security WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24513 | Form Builder WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-24435 | Titan Framework WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.7% | 2021-09-06 | NucleiFix |
| CVE-2021-24395 | Embed Youtube Video WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-06 | |
| CVE-2021-24394 | Easy Testimonial Manager WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-06 | |
| CVE-2021-24393 | Comment Highlighter WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-06 | |
| CVE-2021-24392 | WordPress Membership SwiftCloud.io plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-06 | |
| CVE-2021-24391 | Cashtomer WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.6% | 2021-09-06 | |
| CVE-2021-24390 | Alipay WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 1.5% | 2021-09-06 | |
| CVE-2021-24303 | JiangQie Official Website Mini Program WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.6% | 2021-09-06 | Fix |
| CVE-2021-24006 | Fortinet FortiManager improper access control | 6.3CNA v3.1 | 1.0% | 2021-09-06 | Exploit codeFix |
| CVE-2021-3770 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.7% | 2021-09-06 | Fix |
| CVE-2021-3768 | Cross-site scripting (XSS) Stored in bookstackapp/BookStack | 5.4v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-3767 | Cross-site scripting (XSS) Stored in bookstackapp/BookStack | 5.4v3.1 | 0.6% | 2021-09-06 | Fix |
| CVE-2021-3766 | Prototype pollution in vincit/Objection.js | 9.8v3.1 | 1.5% | 2021-09-06 | Fix |
| CVE-2021-40524 | pure-ftpd unrestricted file upload | 7.5v3.1 | 4.3% | 2021-09-05 | NucleiFix |
| CVE-2021-40523 | Contiki-os Contiki improper check for exceptional conditions | 7.5v3.1 | 1.0% | 2021-09-05 | |
| CVE-2021-40516 | weechat out-of-bounds read | 7.5v3.1 | 1.6% | 2021-09-05 | Fix |
| CVE-2021-23439 | file-upload-with-preview cross-site scripting (XSS) | 6.1v3.1 | 0.9% | 2021-09-05 | Fix |
| CVE-2021-40509 | Jforum cross-site scripting | 5.4v3.1 | 1.0% | 2021-09-04 | Fix |
| CVE-2021-40494 | AdaptiveScale Lxdui Hard-coded JWT Secret Key | 9.8v3.1 | 1.7% | 2021-09-03 | |
| CVE-2021-40492 | gibbonedu gibbon multiple pages in version reflected cross-site scripting | 6.1NVD v3.1 | 2.3% | 2021-09-03 | |
| CVE-2021-40491 | GNU InetUtils insufficient verification of data authenticity | 6.5v3.1 | 1.0% | 2021-09-03 | Fix |
| CVE-2021-40490 | Linux kernel race condition | 7.0v3.1 | 0.3% | 2021-09-03 | Fix |
| CVE-2021-39193 | paritytech frontier transaction validity oversight in pallet-ethereum | 5.3CNA v3.1 | 1.2% | 2021-09-03 | Fix |
| CVE-2021-39192 | TryGhost Ghost privilege escalation: All users can access Admin-level API keys | 6.5CNA v3.1 | 1.0% | 2021-09-03 | Fix |
| CVE-2021-39191 | URL redirection to untrusted site (open redirect) in mod_auth_openidc | 4.7CNA v3.1 | 1.7% | 2021-09-03 | Fix |
| CVE-2021-30624 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30623 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.0% | 2021-09-03 | Fix |
| CVE-2021-30622 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30621 | Microsoft Edge (Chromium-based) authentication bypass by spoofing | 6.5NVD v3.1 | 3.5% | 2021-09-03 | Fix |
| CVE-2021-30620 | Microsoft Edge (Chromium-based) insufficient policy enforcement | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30619 | Microsoft Edge (Chromium-based) authentication bypass by spoofing | 6.5NVD v3.1 | 3.5% | 2021-09-03 | Fix |
| CVE-2021-30618 | Microsoft Edge (Chromium-based) inappropriate implementation | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30617 | Chromium Blink vulnerability | 6.5NVD v3.1 | 3.7% | 2021-09-03 | Fix |
| CVE-2021-30616 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30615 | Microsoft Edge (Chromium-based) information disclosure | 6.5NVD v3.1 | 5.6% | 2021-09-03 | Fix |
| CVE-2021-30614 | Microsoft Edge (Chromium-based) out-of-bounds write | 8.8NVD v3.1 | 4.5% | 2021-09-03 | Fix |
| CVE-2021-30613 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30612 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 2.8% | 2021-09-03 | Fix |
| CVE-2021-30611 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 2.8% | 2021-09-03 | Fix |
| CVE-2021-30610 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30609 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30608 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30607 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-30606 | Microsoft Edge (Chromium-based) use-after-free | 8.8NVD v3.1 | 4.1% | 2021-09-03 | Fix |
| CVE-2021-23437 | Pillow regular expression denial of service (ReDoS) | 7.5v3.1 | 3.2% | 2021-09-03 | Fix |
| CVE-2021-39322 | Easy Social Icons WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 2.3% | 2021-09-02 | NucleiFix |
| CVE-2021-39187 | parse-community parse-server crash server with query parameter | 7.5CNA v3.1 | 1.8% | 2021-09-02 | Fix |
| CVE-2021-38642 | Microsoft Edge for iOS spoofing | 6.1CNA v3.1 | 1.2% | 2021-09-02 | Fix |
| CVE-2021-38641 | Microsoft Edge for Android spoofing | 6.1CNA v3.1 | 1.2% | 2021-09-02 | Fix |
| CVE-2021-38314 | Gutenberg Template Library and Redux Framework sensitive information disclosure | 5.3v3.1 | 29.0% | 2021-09-02 | NucleiExploit codeFix |
| CVE-2021-38312 | Redux.io Gutenberg Template Library and Redux Framework REST API endpoints incorrect authorization | 6.5NVD v3.1 | 1.3% | 2021-09-02 | Fix |
| CVE-2021-36930 | Microsoft Edge (Chromium-based) elevation of privilege | 5.3CNA v3.1 | 1.1% | 2021-09-02 | Fix |
| CVE-2021-36019 | Adobe After Effects PDF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.3% | 2021-09-02 | Fix |
| CVE-2021-36018 | Adobe After Effects PDF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.3% | 2021-09-02 | Fix |
| CVE-2021-36017 | Adobe After Effects PDF File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 3.0% | 2021-09-02 | Fix |
| CVE-2021-35996 | Adobe After Effects memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 3.2% | 2021-09-02 | Fix |
| CVE-2021-35995 | Adobe After Effects MP4 File Parsing uninitialized variable information disclosure | 3.3CNA v3.1 | 2.3% | 2021-09-02 | Fix |
| CVE-2021-35994 | Adobe After Effects JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.2% | 2021-09-02 | Fix |
| CVE-2021-35993 | Adobe After Effects PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.0% | 2021-09-02 | Fix |
| CVE-2021-34765 | Cisco Nexus Insights Authenticated information disclosure | 4.3CNA v3.1 | 0.9% | 2021-09-02 | Fix |
| CVE-2021-34759 | Cisco Identity Services Engine cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-09-02 | Fix |
| CVE-2021-34746 | Cisco Enterprise NFV Infrastructure Software authentication bypass | 9.8CNA v3.1 | 17.7% | 2021-09-02 | Fix |
| CVE-2021-34733 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager information disclosure | 5.5CNA v3.1 | 0.2% | 2021-09-02 | Fix |
| CVE-2021-34732 | Cisco Prime Collaboration Provisioning cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-09-02 | Fix |
| CVE-2021-34436 | The Eclipse Foundation Eclipse Theia path traversal | 9.8v3.1 | 2.2% | 2021-09-02 | |
| CVE-2021-33938 | openSUSE libsolv function prune_to_recommended in src/policy.c buffer overflow | 7.5v3.1 | 1.4% | 2021-09-02 | Fix |
| CVE-2021-33930 | openSUSE libsolv buffer overflow | 7.5v3.1 | 1.5% | 2021-09-02 | Fix |
| CVE-2021-33929 | openSUSE libsolv function pool_disabled_solvable in src/repo.h buffer overflow | 7.5v3.1 | 1.4% | 2021-09-02 | Fix |
| CVE-2021-33928 | openSUSE libsolv function pool_installable in src/repo.h buffer overflow | 7.5v3.1 | 1.5% | 2021-09-02 | Fix |
| CVE-2021-31798 | CyberArk Credential Provider insufficient entropy | 4.4v3.1 | 0.4% | 2021-09-02 | |
| CVE-2021-31797 | CyberArk Credential Provider insufficient entropy | 5.1v3.1 | 0.3% | 2021-09-02 | |
| CVE-2021-31796 | CyberArk Credential Provider weak cryptographic algorithm | 7.5v3.1 | 1.8% | 2021-09-02 | Exploit code |
| CVE-2021-28565 | Adobe Acrobat Reader out-of-bounds read could lead to information exposure | 4.3CNA v3.1 | 3.9% | 2021-09-02 | Fix |
| CVE-2021-28564 | Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution | 8.8CNA v3.1 | 3.5% | 2021-09-02 | Fix |
| CVE-2021-28561 | Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution | 8.8CNA v3.1 | 3.3% | 2021-09-02 | Fix |
| CVE-2021-28560 | Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution | 8.8CNA v3.1 | 66.9% | 2021-09-02 | Fix |
| CVE-2021-28559 | Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation | 5.3CNA v3.1 | 1.6% | 2021-09-02 | Fix |
| CVE-2021-28558 | Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution | 8.8CNA v3.0 | 10.4% | 2021-09-02 | Fix |
| CVE-2021-28557 | Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure | 4.3CNA v3.1 | 1.8% | 2021-09-02 | Fix |
| CVE-2021-28555 | Adobe Acrobat Reader out-of-bounds read could lead to information disclosure | 6.5CNA v3.0 | 2.8% | 2021-09-02 | Fix |
| CVE-2021-28553 | Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution | 8.8CNA v3.0 | 3.5% | 2021-09-02 | Fix |
| CVE-2021-28550 | Adobe Acrobat and Reader use-after-free | 9.6CNA v3.0 | 51.9% | 2021-09-02 | KEVKCVFix |
| CVE-2021-27578 | Apache Zeppelin cross-site scripting in markdown interpreter | 6.1v3.1 | 3.2% | 2021-09-02 | Fix |
| CVE-2021-26439 | Microsoft Edge for Android information disclosure | 4.6CNA v3.1 | 2.9% | 2021-09-02 | Fix |
| CVE-2021-26436 | Microsoft Edge (Chromium-based) elevation of privilege | 6.1CNA v3.1 | 2.8% | 2021-09-02 | Fix |
| CVE-2021-22793 | AccuSine PCS+ / PFV+ and AccuSine PCSn information disclosure | 7.2v3.1 | 1.0% | 2021-09-02 | Fix |
| CVE-2021-22792 | Modicon M580 CPU null pointer dereference | 7.5v3.1 | 0.9% | 2021-09-02 | Fix |
| CVE-2021-22791 | Modicon M580 CPU out-of-bounds write | 6.5v3.1 | 0.8% | 2021-09-02 | Fix |
| CVE-2021-22790 | Modicon M580 CPU out-of-bounds read | 6.5v3.1 | 0.8% | 2021-09-02 | Fix |
| CVE-2021-22789 | Modicon M580 CPU memory corruption | 6.5v3.1 | 0.8% | 2021-09-02 | Fix |
| CVE-2021-22775 | GP-Pro EX uncontrolled search path | 7.8v3.1 | 0.3% | 2021-09-02 | Fix |
| CVE-2021-22704 | Harmony/HMI Products Configured by Vijeo Designer path traversal | 9.1v3.1 | 1.3% | 2021-09-02 | Fix |
| CVE-2021-22525 | NetIQ Access Manager information disclosure | 5.5v3.1 | 0.2% | 2021-09-02 | |
| CVE-2021-21086 | Adobe Reader CoolType arbitrary Stack Manipulation | 7.8CNA v3.1 | 4.7% | 2021-09-02 | Exploit codeFix |
| CVE-2021-3758 | Server-side request forgery (SSRF) in bookstackapp/BookStack | 6.5v3.1 | 0.8% | 2021-09-02 | Fix |
| CVE-2021-3757 | Prototype pollution in immerjs/immer | 9.8v3.1 | 1.7% | 2021-09-02 | Fix |
| CVE-2021-40387 | Kaseya Unitrends Backup Software remote code execution | 8.8v3.1 | 2.4% | 2021-09-01 | |
| CVE-2021-40385 | Kaseya Unitrends Backup Software privilege escalation | 8.8v3.1 | 1.1% | 2021-09-01 | |
| CVE-2021-40382 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access. | 7.5v3.1 | 22.7% | 2021-09-01 | Exploit code |
| CVE-2021-40381 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allows video access. | 7.5v3.1 | 22.7% | 2021-09-01 | Exploit code |
| CVE-2021-40380 | An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials. | 7.5v3.1 | 22.7% | 2021-09-01 | Exploit code |
| CVE-2021-40379 | Comprotech IP570 missing authorization | 7.5v3.1 | 21.6% | 2021-09-01 | Exploit code |
| CVE-2021-40378 | Comprotech IP570 missing authorization | 8.1v3.1 | 15.0% | 2021-09-01 | Exploit code |
| CVE-2021-40353 | OS4ED Opensis version SQL injection | 9.8v3.1 | 2.9% | 2021-09-01 | Exploit code |
| CVE-2021-40352 | openemr insecure direct object reference | 6.5v3.1 | 9.7% | 2021-09-01 | Exploit codeFix |
| CVE-2021-40350 | Christiedigital Dwu850-gs improper authentication | 9.8v3.1 | 1.6% | 2021-09-01 | |
| CVE-2021-39847 | Adobe XMP Toolkit SDK stack-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.0 | 5.4% | 2021-09-01 | Fix |
| CVE-2021-39817 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-39816 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-39379 | OS4ED Opensis A SQL injection | 9.8v3.1 | 3.7% | 2021-09-01 | Exploit code |
| CVE-2021-39378 | OS4ED Opensis A SQL injection | 9.8v3.1 | 22.7% | 2021-09-01 | Exploit code |
| CVE-2021-39377 | OS4ED Opensis A SQL injection | 9.8v3.1 | 3.6% | 2021-09-01 | Exploit code |
| CVE-2021-39373 | Samsung Drive Manager insufficiently protected credentials | 7.8v3.1 | 0.3% | 2021-09-01 | |
| CVE-2021-39320 | underConstruction WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 2.3% | 2021-09-01 | NucleiFix |
| CVE-2021-39186 | Improper input validation in GlobalNewFiles | 4.3CNA v3.1 | 1.0% | 2021-09-01 | |
| CVE-2021-39185 | http4s default CORS config allows any origin with credentials | 9.1CNA v3.1 | 0.6% | 2021-09-01 | Fix |
| CVE-2021-39181 | OpenOLAT unsafe deserialization of User Data using XStream | 8.8CNA v3.1 | 1.9% | 2021-09-01 | Fix |
| CVE-2021-39170 | pimcore improper encoding or escaping of output in Asset Metadata component | 8.0CNA v3.1 | 1.2% | 2021-09-01 | Fix |
| CVE-2021-39166 | pimcore improper neutralization of Text-Values in Object Version Preview | 8.0CNA v3.1 | 0.8% | 2021-09-01 | Fix |
| CVE-2021-39119 | Atlassian Jira Server incorrect authorization | 5.3v3.1 | 0.8% | 2021-09-01 | Fix |
| CVE-2021-39115 | Atlassian Jira Service Desk Server static code injection | 7.2v3.1 | 4.5% | 2021-09-01 | Exploit codeFix |
| CVE-2021-39109 | Path traversal in Atlasboard | 7.5v3.1 | 1.7% | 2021-09-01 | Fix |
| CVE-2021-38703 | Kpn Experia Wifi remote code execution | 8.8v3.1 | 4.3% | 2021-09-01 | Fix |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk authentication bypass | 9.8v3.1 | 99.8% | 2021-09-01 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-37151 | CyberArk Identity observable discrepancy | 5.3v3.1 | 0.9% | 2021-09-01 | |
| CVE-2021-36235 | Ivanti Workspace Control privilege escalation | 7.8v3.1 | 0.7% | 2021-09-01 | Fix |
| CVE-2021-36079 | Adobe Bridge SGI File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 4.3% | 2021-09-01 | Fix |
| CVE-2021-36078 | Adobe Bridge PDF File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36077 | Adobe Bridge SVG file memory corruption could lead to application denial of service | 5.5CNA v3.1 | 2.3% | 2021-09-01 | Fix |
| CVE-2021-36076 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36075 | Adobe Bridge buffer overflow leads to arbitrary code execution | 7.8CNA v3.1 | 7.6% | 2021-09-01 | Fix |
| CVE-2021-36074 | Adobe Bridge PDF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.4% | 2021-09-01 | Fix |
| CVE-2021-36073 | Adobe Bridge SGI File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 7.6% | 2021-09-01 | Fix |
| CVE-2021-36072 | Adobe Bridge SGI File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.1% | 2021-09-01 | Fix |
| CVE-2021-36071 | Adobe Bridge PNG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.4% | 2021-09-01 | Fix |
| CVE-2021-36070 | Adobe Media Encoder SVG parser vulnerability | 7.8CNA v3.1 | 4.1% | 2021-09-01 | Fix |
| CVE-2021-36069 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36068 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36067 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36066 | Adobe Photoshop U3D File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.0% | 2021-09-01 | Fix |
| CVE-2021-36065 | Adobe Photoshop heap-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 5.7% | 2021-09-01 | Fix |
| CVE-2021-36064 | Adobe XMP Toolkit SDK SVG_Adapter ParseFullNS buffer underflow | 7.8CNA v3.1 | 2.7% | 2021-09-01 | Fix |
| CVE-2021-36063 | Adobe Connect reflected cross-site scripting via isTabletDeviceHTML parameter | 5.4CNA v3.1 | 1.4% | 2021-09-01 | Fix |
| CVE-2021-36062 | Adobe Connect reflected cross-site scripting via campaign-id parameter | 5.4CNA v3.1 | 1.4% | 2021-09-01 | Fix |
| CVE-2021-36061 | Adobe Connect pbMode parameter vulnerability | 5.4CNA v3.1 | 1.6% | 2021-09-01 | Fix |
| CVE-2021-36059 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36058 | Adobe XMP Toolkit SDK integer overflow vulnerability could result in application denial of service | 5.5CNA v3.1 | 1.9% | 2021-09-01 | Fix |
| CVE-2021-36057 | Adobe XMP Toolkit SDK write-what-where condition could lead to Local application denial of service | 4.0CNA v3.0 | 0.6% | 2021-09-01 | Fix |
| CVE-2021-36056 | Adobe XMP Toolkit SDK heap-based buffer overflow could lead to arbitrary code execution | 5.5CNA v3.1 | 4.4% | 2021-09-01 | Fix |
| CVE-2021-36055 | Adobe XMP Toolkit SDK use-after-free | 7.8CNA v3.1 | 2.7% | 2021-09-01 | Fix |
| CVE-2021-36054 | Adobe XMP Toolkit SDK buffer overflow | 3.3CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36053 | Adobe XMP Toolkit SDK out-of-bounds read | 3.3CNA v3.1 | 2.0% | 2021-09-01 | Fix |
| CVE-2021-36052 | Adobe XMP Toolkit XMPToolkit SDK ImportTIFF_CheckStandardMapping memory corruption | 7.8CNA v3.1 | 3.2% | 2021-09-01 | Fix |
| CVE-2021-36050 | Adobe XMP Toolkit SDK heap-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.0 | 5.4% | 2021-09-01 | Fix |
| CVE-2021-36049 | Adobe Bridge memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-09-01 | Fix |
| CVE-2021-36048 | Adobe XMP Toolkit SDK improper input validation could lead to arbitrary code execution | 7.8CNA v3.1 | 2.7% | 2021-09-01 | Fix |
| CVE-2021-36047 | Adobe XMP Toolkit SDK improper input validation could lead to arbitrary code execution | 7.8CNA v3.1 | 2.7% | 2021-09-01 | Fix |
| CVE-2021-36046 | Adobe XMP Toolkit SDK TIFF_MemoryReader::SortIFD function memory corruption | 7.8CNA v3.0 | 2.5% | 2021-09-01 | Fix |
| CVE-2021-36045 | Adobe XMP Toolkit SDK out-of-bounds read | 3.3CNA v3.1 | 1.9% | 2021-09-01 | Fix |
| CVE-2021-36044 | Adobe Magento Commerce GraphQL improper input validation could lead to denial of service | 7.5CNA v3.1 | 2.0% | 2021-09-01 | Fix |
| CVE-2021-36043 | Adobe Magento Commerce Authenticated Blind SSRF could lead to remote code execution | 8.0CNA v3.1 | 1.9% | 2021-09-01 | Fix |
| CVE-2021-36042 | Adobe Magento executes code via the API file option upload extension | 9.1CNA v3.1 | 2.5% | 2021-09-01 | Fix |
| CVE-2021-36041 | Adobe Magento Commerce improper input validation could lead to remote code execution | 9.1CNA v3.1 | 2.4% | 2021-09-01 | Fix |
| CVE-2021-36040 | Adobe Magento Commerce improper input validation could lead to remote code execution | 9.1CNA v3.1 | 2.9% | 2021-09-01 | Fix |
| CVE-2021-36039 | Adobe Magento discloses sensitive information | 6.5CNA v3.1 | 1.7% | 2021-09-01 | Fix |
| CVE-2021-36038 | Adobe Magento discloses sensitive information via the Multishipping module | 6.5CNA v3.1 | 1.8% | 2021-09-01 | Fix |
| CVE-2021-36037 | Adobe Magento Commerce improper authorization vulnerability could lead to information exposure | 6.5CNA v3.1 | 1.8% | 2021-09-01 | Fix |
| CVE-2021-36035 | Adobe Magento Commerce Stock Media improper input validation could lead to remote code execution | 9.1CNA v3.1 | 2.8% | 2021-09-01 | Fix |
| CVE-2021-36034 | Adobe Magento Commerce improper input validation could lead to remote code execution | 9.1CNA v3.1 | 2.4% | 2021-09-01 | Fix |
| CVE-2021-36033 | Adobe Magento XML injection vulnerability in the widgets module | 9.1CNA v3.1 | 3.1% | 2021-09-01 | Fix |
| CVE-2021-36032 | Adobe Magento is affected by an improper input validation | 8.3CNA v3.1 | 2.2% | 2021-09-01 | Fix |
| CVE-2021-36031 | Adobe Magento path traversal vulnerability via the `theme[preview_image]` parameter | 7.2CNA v3.1 | 3.1% | 2021-09-01 | Fix |
| CVE-2021-36030 | Adobe Magento allows attackers to alter the price of items | 7.5CNA v3.1 | 2.3% | 2021-09-01 | Fix |
| CVE-2021-36029 | Adobe Magento Commerce improper authorization vulnerability could lead to remote code execution | 9.1CNA v3.1 | 2.5% | 2021-09-01 | Fix |
| CVE-2021-36028 | Adobe Magento Commerce XML injection vulnerability could lead to remote code execution | 9.1CNA v3.1 | 2.9% | 2021-09-01 | Fix |
| CVE-2021-36027 | Adobe Magento Commerce stored cross-site scripting | 6.5CNA v3.1 | 1.4% | 2021-09-01 | Fix |
| CVE-2021-36026 | Adobe Magento Commerce stored cross-site scripting | 6.5CNA v3.1 | 1.7% | 2021-09-01 | Fix |
| CVE-2021-36025 | Adobe Magento Commerce improper input validation | 9.1CNA v3.1 | 2.8% | 2021-09-01 | Fix |
| CVE-2021-36024 | Adobe Magento Commerce improper neutralization of special elements used in a command | 9.1CNA v3.1 | 2.9% | 2021-09-01 | Fix |
| CVE-2021-36022 | Adobe Magento XML injection vulnerability in the Widgets Update Layout | 9.1CNA v3.1 | 3.4% | 2021-09-01 | Fix |
| CVE-2021-36020 | Adobe Magento XML injection vulnerability in the City field | 8.2CNA v3.1 | 2.7% | 2021-09-01 | Fix |
| CVE-2021-36012 | Adobe Magento Commerce Gift Card business logic error | 6.5CNA v3.1 | 2.0% | 2021-09-01 | Fix |
| CVE-2021-36002 | Adobe Captivate insecure permissions | 5.0CNA v3.1 | 0.5% | 2021-09-01 | Fix |
| CVE-2021-35508 | Terarecon Aquariusnet incorrect permission assignment | 8.8v3.1 | 1.5% | 2021-09-01 | |
| CVE-2021-35238 | SolarWinds Orion Platform stored XSS through URL POST parameter in CreateExternalWebsite | 4.8CNA v3.1 | 1.1% | 2021-09-01 | Fix |
| CVE-2021-35218 | SolarWinds Patch Manager chart endpoint deserialization of untrusted data remote code execution | 8.9CNA v3.1 | 76.4% | 2021-09-01 | Fix |
| CVE-2021-35216 | SolarWinds Patch Manager Orion Platform integration module deserialization of untrusted data | 8.9CNA v3.1 | 81.4% | 2021-09-01 | Fix |
| CVE-2021-35215 | SolarWinds Orion Platform ActionPluginBaseView deserialization of untrusted data RCE | 8.9CNA v3.1 | 69.7% | 2021-09-01 | Exploit codeFix |
| CVE-2021-34435 | Remote code execution in Eclipse Theia | 8.8v3.1 | 0.6% | 2021-09-01 | Fix |
| CVE-2021-33582 | Cyrus IMAP algorithmic complexity | 7.5v3.1 | 3.1% | 2021-09-01 | Fix |
| CVE-2021-30355 | Amazon Kindle e-reader improper privilege management | 8.6NVD v3.1 | 6.9% | 2021-09-01 | |
| CVE-2021-30354 | Amazon Kindle e-reader integer overflow to buffer overflow | 8.6NVD v3.1 | 8.4% | 2021-09-01 | |
| CVE-2021-29853 | IBM Planning Analytics Local unchecked return value | 4.3CNA v3.0 | 0.8% | 2021-09-01 | Fix |
| CVE-2021-29852 | IBM Planning Analytics Local cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-09-01 | Fix |
| CVE-2021-29851 | IBM Planning Analytics Local information disclosure | 4.3CNA v3.0 | 1.1% | 2021-09-01 | Fix |
| CVE-2021-23438 | mpath prototype pollution | 9.8v3.1 | 1.7% | 2021-09-01 | Fix |
| CVE-2021-23436 | immer prototype pollution | 9.8v3.1 | 1.8% | 2021-09-01 | Fix |
| CVE-2021-23428 | elFinder.NetCore directory traversal | 9.8v3.1 | 1.7% | 2021-09-01 | |
| CVE-2021-23427 | elFinder.NetCore arbitrary file write via Archive Extraction (Zip Slip) | 9.8v3.1 | 1.4% | 2021-09-01 | |
| CVE-2021-23426 | Proto prototype pollution | 7.5v3.1 | 0.9% | 2021-09-01 |