CVE-2021 records published in October 2021
This page lists the 1,553 CVE-2021 records published in October 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 18 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 15810.2% of these records
- Listed in CISA KEV
- 181.2% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 432.8% of these records
- Exploit code
- 644.1% of these records
- Actionable vendor fix
- 1,32585.3% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in October 2021 have had from about 60 months to about 61 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-33259 | D-Link Dir-868lw missing authentication | 5.3v3.1 | 1.8% | 2021-10-31 | |
| CVE-2021-36808 | Sophos Secure Workspace race condition | 5.9CNA v3.1 | 0.3% | 2021-10-30 | Exploit codeFix |
| CVE-2021-41746 | Yonyou Turbocrm all versions SQL injection | 7.5v3.1 | 1.3% | 2021-10-29 | |
| CVE-2021-41676 | Pharmacy Point Of Sale System oretnom23 SQL injection | 9.8v3.1 | 1.5% | 2021-10-29 | |
| CVE-2021-41675 | E-Negosyo System Sourcecodester remote code execution | 7.2v3.1 | 3.1% | 2021-10-29 | |
| CVE-2021-41674 | E-Negosyo System Sourcecodester SQL injection | 9.8v3.1 | 1.7% | 2021-10-29 | |
| CVE-2021-41646 | Janobe Online Reviewer System Sourcecodester remote code execution | 9.8v3.1 | 7.0% | 2021-10-29 | Exploit code |
| CVE-2021-41645 | oretnom23 Budget and Expense Tracker System Sourcecodester remote code execution | 8.8v3.1 | 3.2% | 2021-10-29 | Exploit code |
| CVE-2021-41644 | oretnom23 Online Food Ordering System Sourcecodester remote code execution | 9.8v3.1 | 2.5% | 2021-10-29 | Exploit code |
| CVE-2021-41643 | Church Management System Sourcecodester remote code execution | 9.8v3.1 | 4.6% | 2021-10-29 | Exploit code |
| CVE-2021-41189 | DuraSpace DSpace privilege escalation | 7.2CNA v3.1 | 2.1% | 2021-10-29 | Fix |
| CVE-2021-41186 | fluentd ReDoS vulnerability in parser_apache2 | 5.9CNA v3.1 | 2.2% | 2021-10-29 | Fix |
| CVE-2021-39179 | SQL injection in DHIS2 Tracker API | 8.8CNA v3.1 | 1.9% | 2021-10-29 | Fix |
| CVE-2021-35237 | SolarWinds Kiwi Syslog Server clickjacking | 5.0CNA v3.1 | 1.0% | 2021-10-29 | Fix |
| CVE-2021-31862 | Sysaid cross-site scripting | 6.1v3.1 | 4.0% | 2021-10-29 | NucleiExploit codeFix |
| CVE-2021-31627 | Tendacn AC9 buffer overflow | 8.8v3.1 | 1.1% | 2021-10-29 | |
| CVE-2021-31624 | Tendacn AC9 buffer overflow | 8.8v3.1 | 1.1% | 2021-10-29 | |
| CVE-2021-25742 | Kubernetes ingress-nginx custom snippets information disclosure | 7.6CNA v3.1 | 2.1% | 2021-10-29 | Fix |
| CVE-2021-22038 | VMware InstallBuilder insufficient randomness | 8.8v3.1 | 1.0% | 2021-10-29 | Fix |
| CVE-2021-22037 | VMware InstallBuilder uncontrolled search path | 7.8v3.1 | 0.3% | 2021-10-29 | Fix |
| CVE-2021-3756 | Heap-based buffer overflow in hoene/Libmysofa | 9.8v3.1 | 1.1% | 2021-10-29 | Fix |
| CVE-2021-3662 | HP Enterprise LaserJet MFP cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-29 | Fix |
| CVE-2021-3441 | HP OfficeJet 7110 Wide Format ePrinter cross-site scripting | 4.8NVD v3.1 | 1.7% | 2021-10-29 | Exploit codeFix |
| CVE-2021-1123 | NVIDIA Virtual GPU Software improper locking | 5.5CNA v3.1 | 0.2% | 2021-10-29 | Fix |
| CVE-2021-1122 | NVIDIA Virtual GPU Software null pointer dereference | 5.5CNA v3.1 | 0.2% | 2021-10-29 | Fix |
| CVE-2021-1121 | NVIDIA Virtual GPU Software resource exhaustion | 5.5CNA v3.1 | 0.2% | 2021-10-29 | Fix |
| CVE-2021-1120 | NVIDIA Virtual GPU Software improper null termination | 7.0CNA v3.1 | 0.2% | 2021-10-29 | Fix |
| CVE-2021-1119 | NVIDIA Virtual GPU Software double free | 7.1CNA v3.1 | 0.3% | 2021-10-29 | Fix |
| CVE-2021-1118 | NVIDIA Virtual GPU Software execution with unnecessary privileges | 7.8CNA v3.1 | 0.4% | 2021-10-29 | Fix |
| CVE-2021-43057 | Linux kernel use-after-free | 7.8v3.1 | 0.5% | 2021-10-28 | Fix |
| CVE-2021-43056 | Linux kernel powerpc KVM book3s_hv vulnerability | 5.5v3.1 | 0.4% | 2021-10-28 | Fix |
| CVE-2021-41728 | SourceCodester NEWS247 Cms cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-28 | |
| CVE-2021-41194 | jupyterhub firstuseauthenticator improper access control in jupyterhub-firstuseauthenticator | 9.1CNA v3.1 | 1.4% | 2021-10-28 | Fix |
| CVE-2021-37915 | Grandstream HT801 gdb_debug_server setting vulnerability | 8.8v3.1 | 2.0% | 2021-10-28 | Fix |
| CVE-2021-37748 | Grandstream HT801 out-of-bounds write | 8.8v3.1 | 7.3% | 2021-10-28 | Exploit codeFix |
| CVE-2021-37254 | M-Files Web missing authentication | 7.5v3.1 | 1.3% | 2021-10-28 | Fix |
| CVE-2021-37002 | Memory out-of-bounds access vulnerability in some Huawei devices | 9.8v3.1 | 0.8% | 2021-10-28 | Fix |
| CVE-2021-37001 | Register tampering vulnerability in some Huawei devices | 7.5v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-36999 | Buffer overflow vulnerability in some Huawei devices | 7.8v3.1 | 0.9% | 2021-10-28 | Fix |
| CVE-2021-36998 | Huawei EMUI improper verification vulnerability in some devices | 5.3v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-36997 | Low memory error in some Huawei devices due to the unlimited size of images to be parsed | 5.3v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36996 | Improper verification vulnerability in some Huawei devices | 5.3v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-36995 | Unauthorized file access vulnerability in some Huawei phones | 7.5v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-36994 | Huawei EMUI race condition | 3.7v3.1 | 0.4% | 2021-10-28 | Fix |
| CVE-2021-36993 | Huawei EMUI memory leak | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36992 | Public key verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36991 | Unauthorized file access vulnerability in some Huawei devices due to unstandardized path input | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36990 | Vulnerability of tampering with the kernel in some Huawei phones | 9.8v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36989 | Kernel crash vulnerability in some Huawei phones | 9.8v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36988 | Input verification vulnerability in some Huawei phones | 7.5v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-36987 | Huawei EMUI race condition | 5.9v3.1 | 0.5% | 2021-10-28 | Fix |
| CVE-2021-36986 | Vulnerability of tampering with the kernel in some Huawei phones | 9.8v3.1 | 0.8% | 2021-10-28 | Fix |
| CVE-2021-36985 | Code injection vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-36551 | Tikiwiki Cms/groupware cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-28 | |
| CVE-2021-36550 | Tikiwiki Cms/groupware cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-28 | |
| CVE-2021-36548 | Monstra remote code execution | 9.8v3.1 | 3.3% | 2021-10-28 | |
| CVE-2021-36547 | Mara Cms remote code execution | 9.8v3.1 | 3.3% | 2021-10-28 | |
| CVE-2021-30840 | Apple tvOS arbitrary code execution | 7.8v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-30836 | Apple tvOS out-of-bounds read | 5.5v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-30834 | Apple tvOS logic flaw | 7.8v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-30833 | Apple macOS arbitrary file write | 5.5v3.1 | 42.7% | 2021-10-28 | Fix |
| CVE-2021-30831 | Apple tvOS out-of-bounds read | 5.5v3.1 | 0.9% | 2021-10-28 | Fix |
| CVE-2021-30824 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-30823 | Apple tvOS logic flaw | 6.5v3.1 | 2.2% | 2021-10-28 | Fix |
| CVE-2021-30821 | Apple macOS memory corruption | 7.8v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-30818 | Apple tvOS type confusion | 8.8v3.1 | 1.6% | 2021-10-28 | Fix |
| CVE-2021-30817 | Apple macOS insecure permissions | 5.5v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-30816 | Apple iOS and iPadOS information disclosure | 2.4v3.1 | 0.3% | 2021-10-28 | Fix |
| CVE-2021-30814 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-30813 | Apple macOS Login Window in Remote Desktop authentication bypass | 6.5v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-30809 | Apple tvOS use-after-free | 8.8v3.1 | 1.5% | 2021-10-28 | Exploit codeFix |
| CVE-2021-30808 | Apple iOS, iPadOS, tvOS and watchOS file system vulnerability | 5.5v3.1 | 0.8% | 2021-10-28 | Fix |
| CVE-2021-22491 | Input verification vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22490 | Permission verification vulnerability in some Huawei phones | 5.3v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-22488 | Unauthorized file access vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22487 | Out-of-bounds read vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22486 | Unstandardized field names in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22485 | SSID vulnerability with Wi-Fi network connections in Huawei devices | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22483 | IP address spoofing vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22482 | Uninitialized variable vulnerability in some Huawei devices | 5.3v3.1 | 0.5% | 2021-10-28 | Fix |
| CVE-2021-22481 | Verification errors in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22475 | Improper permission management vulnerability in some Huawei phones | 5.3v3.1 | 0.5% | 2021-10-28 | Fix |
| CVE-2021-22474 | Out-of-bounds memory access in some Huawei phones | 9.8v3.1 | 0.8% | 2021-10-28 | Fix |
| CVE-2021-22473 | Huawei EMUI improper authentication | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22472 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22471 | Huawei HarmonyOS null pointer dereference | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22470 | Huawei HarmonyOS recording trusted domain vulnerability | 7.8v3.1 | 0.2% | 2021-10-28 | |
| CVE-2021-22469 | Out-of-bounds memory read vulnerability in some Huawei phones | 7.1v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22468 | Huawei HarmonyOS information disclosure | 3.3v3.1 | 0.2% | 2021-10-28 | |
| CVE-2021-22467 | Huawei HarmonyOS improper input validation | 5.5v3.1 | 0.2% | 2021-10-28 | |
| CVE-2021-22466 | Huawei HarmonyOS use-after-free | 5.5v3.1 | 0.1% | 2021-10-28 | |
| CVE-2021-22465 | Huawei HarmonyOS out-of-bounds write | 5.5v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22464 | Huawei HarmonyOS out-of-bounds read | 3.3v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22463 | Huawei HarmonyOS use-after-free | 5.5v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22462 | Huawei HarmonyOS null pointer dereference | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22461 | Huawei HarmonyOS resource exhaustion | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22460 | Boot restriction bypass vulnerability in some Huawei phones | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22459 | Huawei HarmonyOS null pointer dereference | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22458 | Huawei HarmonyOS out-of-bounds read | 7.8v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22457 | Huawei HarmonyOS improper input validation | 3.3v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22456 | Huawei HarmonyOS kernel denial of service | 5.5v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22455 | Integer overflow vulnerability with the Always On Display (AOD) driver in some Huawei devices | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22454 | Huawei HarmonyOS external control of a configuration setting | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22453 | Huawei HarmonyOS out-of-bounds read | 3.3v3.1 | 0.1% | 2021-10-28 | |
| CVE-2021-22452 | Huawei HarmonyOS improper input validation | 5.5v3.1 | 0.2% | 2021-10-28 | |
| CVE-2021-22451 | Huawei HarmonyOS integer overflow | 7.8v3.1 | 0.2% | 2021-10-28 | Fix |
| CVE-2021-22450 | Memory leaks in some Huawei devices due to exceptions when freeing memory | 5.5v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22436 | Logic bypass vulnerability in some Huawei phones | 9.1v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22407 | There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. | 5.3v3.1 | 0.6% | 2021-10-28 | Fix |
| CVE-2021-22406 | Huawei EMUI remote DoS vulnerability with the MeeTime app | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22405 | Configuration defects in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22404 | Directory traversal vulnerability in Huawei phones | 5.3v3.1 | 0.9% | 2021-10-28 | Fix |
| CVE-2021-22403 | Vulnerability of hijacking unverified providers in some Huawei phones | 9.8v3.1 | 0.9% | 2021-10-28 | Fix |
| CVE-2021-22402 | DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22401 | Remote DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-22278 | Certificate verification vulnerability in Update Manager of PCM600 Engineering tool | 6.7CNA v3.1 | 0.1% | 2021-10-28 | Fix |
| CVE-2021-22097 | Deserialization of untrusted data in Spring AMQP | 6.5v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-22096 | Improper output neutralization for logs in Spring Framework | 4.3v3.1 | 1.4% | 2021-10-28 | Fix |
| CVE-2021-22047 | Exposure of resource to wrong sphere in Spring Data REST | 5.3v3.1 | 0.8% | 2021-10-28 | Fix |
| CVE-2021-22044 | Exposure of resource to wrong sphere in Spring Cloud OpenFeign | 7.5v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-3823 | Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode | 7.1CNA v3.1 | 1.1% | 2021-10-28 | Fix |
| CVE-2021-3745 | Unrestricted upload of file with dangerous type in flatcore/Flatcore-cms | 6.6NVD v3.1 | 1.1% | 2021-10-28 | |
| CVE-2021-3579 | Bitdefender Endpoint Security Tools incorrect default permissions | 7.8CNA v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-3576 | Bitdefender Endpoint Security Tools privilege escalation via SeImpersonatePrivilege | 7.8CNA v3.1 | 1.0% | 2021-10-28 | Fix |
| CVE-2021-1821 | Apple macOS logic flaw | 6.5v3.1 | 0.7% | 2021-10-28 | Fix |
| CVE-2021-41872 | Skyworthdigital Penguin Aurora Box 41502 denial of service | 7.5v3.1 | 1.2% | 2021-10-27 | |
| CVE-2021-41619 | gradle Enterprise code injection | 7.2v3.1 | 2.7% | 2021-10-27 | Fix |
| CVE-2021-41590 | Gradle Enterprise SMTP configuration test vulnerability | 5.3v3.1 | 0.8% | 2021-10-27 | Fix |
| CVE-2021-41589 | gradle Build Cache Node incorrect permission assignment | 9.8v3.1 | 2.4% | 2021-10-27 | Fix |
| CVE-2021-41191 | Redon-Tech Roblox-Purchasing-Hub API giving out files without key | 7.5CNA v3.1 | 1.4% | 2021-10-27 | Fix |
| CVE-2021-40125 | Cisco Adaptive Security Appliance and Firepower Threat Defense denial of service | 5.3CNA v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-40118 | Cisco Adaptive Security Appliance (ASA) Software stack-based buffer overflow | 8.6CNA v3.1 | 1.4% | 2021-10-27 | Fix |
| CVE-2021-40117 | Cisco Adaptive Security Appliance (ASA) Software denial of service | 8.6CNA v3.1 | 1.5% | 2021-10-27 | Fix |
| CVE-2021-40116 | Multiple Cisco Products Snort Rule denial of service | 8.6CNA v3.1 | 1.4% | 2021-10-27 | Fix |
| CVE-2021-40114 | Multiple Cisco Products Snort memory leak denial of service | 6.8CNA v3.1 | 2.4% | 2021-10-27 | Fix |
| CVE-2021-38450 | Trane Tracer code injection | 8.8NVD v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-38379 | Northern.tech Cfengine incorrect default permissions | 5.5v3.1 | 0.2% | 2021-10-27 | Fix |
| CVE-2021-37808 | PHPGurukul News Portal https://phpgurukul.com SQL injection | 5.9v3.1 | 1.8% | 2021-10-27 | |
| CVE-2021-37807 | PHPGurukul Online Shopping Portal https://phpgurukul.com SQL injection | 7.5v3.1 | 1.5% | 2021-10-27 | |
| CVE-2021-37806 | PHPGurukul Vehicle Parking Management System https://phpgurukul.com SQL injection | 5.9v3.1 | 1.8% | 2021-10-27 | |
| CVE-2021-37805 | PHPGurukul Vehicle Parking Management System Sourcecodeste stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-27 | |
| CVE-2021-37803 | Online Covid Vaccination Scheduler System Sourcecodester SQL injection | 8.1v3.1 | 1.6% | 2021-10-27 | |
| CVE-2021-37221 | Customer Relationship Management System Sourcecodester file upload | 8.8v3.1 | 1.1% | 2021-10-27 | |
| CVE-2021-37131 | ManageOne There is a CSV injection | 6.8v3.1 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-37130 | FusionCube Huawei path traversal | 7.5v3.1 | 0.9% | 2021-10-27 | Fix |
| CVE-2021-37129 | Huawei IPS Module some out-of-bounds write | 7.5v3.1 | 0.7% | 2021-10-27 | Fix |
| CVE-2021-37127 | iManager NetEco improper signature verification | 7.2v3.1 | 0.7% | 2021-10-27 | Fix |
| CVE-2021-37124 | Huawei PC Smart Full Scene There is a path traversal | 6.5v3.1 | 0.3% | 2021-10-27 | Fix |
| CVE-2021-37122 | Huawei CloudEngine 12800 There is a use-after-free | 6.5v3.1 | 0.3% | 2021-10-27 | Fix |
| CVE-2021-36756 | Northern.tech Cfengine improper certificate validation | 6.5v3.1 | 0.4% | 2021-10-27 | Fix |
| CVE-2021-35236 | SolarWinds Kiwi Syslog Server Missing Secure Flag from SSL Cookie | 3.1CNA v3.1 | 0.5% | 2021-10-27 | Fix |
| CVE-2021-35235 | SolarWinds Kiwi Syslog Server ASP.NET Debug Feature Enabled | 5.3CNA v3.1 | 1.3% | 2021-10-27 | Fix |
| CVE-2021-35233 | SolarWinds Kiwi Syslog Server HTTP TRACK and TRACE Methods Enabled | 5.3CNA v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-34794 | Cisco Adaptive Security Appliance (ASA) Software improper access control | 5.3CNA v3.1 | 0.9% | 2021-10-27 | Fix |
| CVE-2021-34793 | Cisco Adaptive Security Appliance (ASA) Software improper message integrity enforcement | 8.6CNA v3.1 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-34792 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software resource exhaustion | 8.6CNA v3.1 | 1.4% | 2021-10-27 | Fix |
| CVE-2021-34791 | Cisco Adaptive Security Appliance (ASA) Software improperly implemented security check | 4.7CNA v3.1 | 1.1% | 2021-10-27 | Fix |
| CVE-2021-34790 | Cisco Adaptive Security Appliance (ASA) Software improperly implemented security check | 4.7CNA v3.1 | 1.1% | 2021-10-27 | Fix |
| CVE-2021-34787 | Cisco Adaptive Security Appliance (ASA) Software permissive allowlist | 5.3CNA v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-34783 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software memory corruption | 8.6CNA v3.1 | 1.6% | 2021-10-27 | Fix |
| CVE-2021-34781 | Cisco Firepower Threat Defense Software SSH Connections denial of service | 8.6CNA v3.1 | 1.4% | 2021-10-27 | Fix |
| CVE-2021-34764 | Cisco Firepower Management Center software cross-site scripting and open redirect | 4.8CNA v3.1 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-34763 | Cisco Firepower Management Center software cross-site scripting and open redirect | 4.8CNA v3.1 | 0.5% | 2021-10-27 | Fix |
| CVE-2021-34762 | Cisco Firepower Management Center Software Authenticated directory traversal | 8.1CNA v3.1 | 2.0% | 2021-10-27 | Fix |
| CVE-2021-34761 | Cisco Firepower Threat Defense Software CLI arbitrary file write | 4.4CNA v3.1 | 0.2% | 2021-10-27 | Fix |
| CVE-2021-34756 | Cisco Firepower Threat Defense Software command injection | 6.7CNA v3.1 | 0.3% | 2021-10-27 | Fix |
| CVE-2021-34755 | Cisco Firepower Threat Defense Software command injection | 6.7CNA v3.1 | 0.3% | 2021-10-27 | Fix |
| CVE-2021-34754 | Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass vulnerabilities | 5.8CNA v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-34580 | Remote user enumeration in mymbCONNECT24, mbCONNECT24 | 7.5v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-32951 | Advantech WebAccess/NMS improper authentication | 5.3v3.1 | 0.9% | 2021-10-27 | Fix |
| CVE-2021-29868 | IBM i2 iBase insufficient session expiration | 4.0CNA v3.0 | 0.2% | 2021-10-27 | Fix |
| CVE-2021-29844 | IBM Engineering Workflow Management server-side request forgery | 5.4CNA v3.0 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-29786 | IBM Engineering Lifecycle Optimization cleartext storage of sensitive information | 6.5CNA v3.0 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-29774 | IBM Rational Collaborative Lifecycle Management privilege escalation | 7.5CNA v3.0 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-29713 | IBM Rational Collaborative Lifecycle Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-10-27 | Fix |
| CVE-2021-29673 | IBM Rational Team Concert cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-10-27 | Fix |
| CVE-2021-26610 | Godomall5 remote code execution | 8.8v3.1 | 0.5% | 2021-10-27 | |
| CVE-2021-25219 | ISC BIND 9 lame cache can be abused to severely degrade resolver performance | 5.3CNA v3.1 | 10.6% | 2021-10-27 | Fix |
| CVE-2021-22101 | Cloud Foundry Cloud Controller denial of service | 7.5v3.1 | 1.0% | 2021-10-27 | Fix |
| CVE-2021-20526 | IBM Planning Analytics incorrect permission assignment | 3.7CNA v3.0 | 1.1% | 2021-10-27 | Fix |
| CVE-2021-3906 | Unrestricted upload of file with dangerous type in bookstackapp/BookStack | 6.5v3.1 | 0.7% | 2021-10-27 | Fix |
| CVE-2021-3904 | Cross-site scripting (XSS) Stored in getgrav/grav | 5.4v3.1 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-3903 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.6% | 2021-10-27 | Fix |
| CVE-2021-3901 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 8.8v3.1 | 0.6% | 2021-10-27 | |
| CVE-2021-3900 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 6.5v3.1 | 0.6% | 2021-10-27 | |
| CVE-2021-1117 | NVIDIA GPU Display Driver improper array index validation | 4.7CNA v3.1 | 0.2% | 2021-10-27 | Fix |
| CVE-2021-1116 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.2% | 2021-10-27 | Fix |
| CVE-2021-1115 | NVIDIA GPU Display Driver null pointer dereference | 6.5CNA v3.1 | 0.2% | 2021-10-27 | Fix |
| CVE-2021-42343 | Workers for local Dask clusters mistakenly listened on public interfaces | 9.8v3.1 | 3.0% | 2021-10-26 | Fix |
| CVE-2021-41873 | Skyworth Penguin Aurora Box unauthorized access | 10.0v3.1 | 1.0% | 2021-10-26 | |
| CVE-2021-41866 | mybb cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-26 | Fix |
| CVE-2021-41308 | Atlassian Jira Server improper authorization | 6.5v3.1 | 1.0% | 2021-10-26 | Fix |
| CVE-2021-41307 | Atlassian Jira Server insecure direct object reference | 7.5v3.1 | 1.7% | 2021-10-26 | Fix |
| CVE-2021-41306 | Atlassian Jira Server insecure direct object reference | 7.5v3.1 | 1.6% | 2021-10-26 | Fix |
| CVE-2021-41305 | Atlassian Jira Server insecure direct object reference | 7.5v3.1 | 1.2% | 2021-10-26 | Fix |
| CVE-2021-41304 | Atlassian Jira Server cross-site scripting | 6.1v3.1 | 0.9% | 2021-10-26 | Fix |
| CVE-2021-41188 | shopware authenticated stored XSS in Administration | 5.7CNA v3.1 | 0.8% | 2021-10-26 | Fix |
| CVE-2021-41185 | kizniche Mycodo download file outside intended directory | 8.8CNA v3.1 | 1.4% | 2021-10-26 | Fix |
| CVE-2021-41184 | jquery-ui XSS in the `of` option of the `.position` util | 6.5CNA v3.1 | 40.8% | 2021-10-26 | Exploit codeFix |
| CVE-2021-41183 | jquery-ui XSS in `*Text` options of the Datepicker widget | 6.5CNA v3.1 | 8.5% | 2021-10-26 | Fix |
| CVE-2021-41182 | jquery-ui XSS in the `altField` option of the Datepicker widget | 6.5CNA v3.1 | 39.4% | 2021-10-26 | Fix |
| CVE-2021-41175 | pi-hole AdminLTE stored XSS in Client Groups Management (Authenticated) | 7.3CNA v3.1 | 0.9% | 2021-10-26 | Fix |
| CVE-2021-41173 | ethereum go-ethereum DoS via maliciously crafted p2p message | 5.7CNA v3.1 | 1.2% | 2021-10-26 | Fix |
| CVE-2021-41172 | Self-XSS in AS_Redis | 6.4CNA v3.1 | 1.0% | 2021-10-26 | Fix |
| CVE-2021-41158 | FreeSWITCH vulnerable to SIP digest leak for configured gateways | 5.8CNA v3.1 | 0.8% | 2021-10-26 | Fix |
| CVE-2021-41157 | FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default | 5.3CNA v3.1 | 1.7% | 2021-10-26 | Fix |
| CVE-2021-41078 | Nameko arbitrary code execution due to YAML deserialization | 7.8v3.1 | 1.5% | 2021-10-26 | Exploit codeFix |
| CVE-2021-40345 | Nagios XI command injection | 7.2v3.1 | 23.0% | 2021-10-26 | Exploit codeFix |
| CVE-2021-40344 | Nagios XI unrestricted file upload | 7.2v3.1 | 64.8% | 2021-10-26 | Fix |
| CVE-2021-40343 | Nagios XI incorrect permission assignment | 7.8v3.1 | 0.7% | 2021-10-26 | Fix |
| CVE-2021-37372 | Online Student Admission System unrestricted file upload | 8.8v3.1 | 3.4% | 2021-10-26 | |
| CVE-2021-37371 | Online Student Admission System SQL injection | 9.8v3.1 | 2.2% | 2021-10-26 | |
| CVE-2021-37364 | OpenClinic GA incorrect permission assignment | 7.8v3.1 | 1.3% | 2021-10-26 | |
| CVE-2021-37363 | Gestionale Open An insecure permissions | 7.8v3.1 | 1.6% | 2021-10-26 | |
| CVE-2021-35499 | TIBCO Nimbus stored cross-site scripting (XSS) | 8.0CNA v3.1 | 0.6% | 2021-10-26 | Fix |
| CVE-2021-34596 | CODESYS V2 runtime: Access of uninitialized pointer may result in denial of service | 6.5v3.1 | 0.9% | 2021-10-26 | Fix |
| CVE-2021-34595 | CODESYS V2 runtime: Out-of-bounds read or write access may result in denial of service | 8.1v3.1 | 0.9% | 2021-10-26 | Fix |
| CVE-2021-34593 | CODESYS V2 runtime: Unauthenticated invalid requests may result in denial of service | 7.5v3.1 | 2.7% | 2021-10-26 | Fix |
| CVE-2021-34586 | CODESYS V2 web server: Crafted requests could trigger a null pointer dereference (DoS) | 7.5v3.1 | 14.1% | 2021-10-26 | Fix |
| CVE-2021-34585 | CODESYS V2 web server request parser unchecked return value | 7.5v3.1 | 0.9% | 2021-10-26 | Fix |
| CVE-2021-34584 | CODESYS V2 web server: Crafted requests could trigger a buffer over-read (DoS) | 9.1v3.1 | 1.1% | 2021-10-26 | Fix |
| CVE-2021-34583 | CODESYS V2 web server: Crafted requests could trigger a heap-based buffer overflow (DoS) | 7.5v3.1 | 8.4% | 2021-10-26 | Fix |
| CVE-2021-26609 | WordPress Mangboard SQL-injection | 7.5v3.1 | 1.8% | 2021-10-26 | Fix |
| CVE-2021-26607 | TOBESOFT NEXACRO17 arbitrary command execution | 9.8v3.1 | 1.9% | 2021-10-26 | |
| CVE-2021-23877 | McAfee Total Protection (MTP) privilege escalation | 6.7CNA v3.1 | 0.4% | 2021-10-26 | Fix |
| CVE-2021-20837 | Six Apart Movable Type OS command injection | 9.8v3.1 | 88.1% | 2021-10-26 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2021-41179 | Nextcloud security-advisories Two-Factor Authentication not enforced for pages marked as public | 6.5CNA v3.1 | 1.2% | 2021-10-25 | Fix |
| CVE-2021-41178 | File Traversal affecting SVG files on Nextcloud Server | 8.8CNA v3.1 | 1.8% | 2021-10-25 | Fix |
| CVE-2021-41177 | Nextcloud security-advisories improper interaction frequency control | 8.1CNA v3.1 | 1.6% | 2021-10-25 | Fix |
| CVE-2021-41176 | Logout CSRF in Pterodactyl Panel | 4.3CNA v3.1 | 0.5% | 2021-10-25 | Fix |
| CVE-2021-41145 | FreeSWITCH susceptible to denial of service via SIP flooding | 8.6CNA v3.1 | 1.7% | 2021-10-25 | Fix |
| CVE-2021-41105 | FreeSWITCH susceptible to denial of service via invalid SRTP packets | 7.5CNA v3.1 | 2.5% | 2021-10-25 | Fix |
| CVE-2021-41035 | The Eclipse Foundation Eclipse OMR execution with unnecessary privileges | 9.8v3.1 | 1.8% | 2021-10-25 | Fix |
| CVE-2021-40865 | Apache Storm Unsafe Pre-authentication deserialization in Workers | 9.8v3.1 | 64.2% | 2021-10-25 | Exploit codeFix |
| CVE-2021-40527 | Onepeloton Peloton cleartext storage of sensitive information | 7.5v3.1 | 0.7% | 2021-10-25 | |
| CVE-2021-40526 | Onepeloton TTR01 Peleton incorrect buffer size calculation | 5.3v3.1 | 1.0% | 2021-10-25 | |
| CVE-2021-40371 | Gridprosoftware Request Management path traversal | 9.8v3.1 | 6.9% | 2021-10-25 | Fix |
| CVE-2021-39225 | Missing permission check on Deck API | 8.1CNA v3.1 | 1.3% | 2021-10-25 | Fix |
| CVE-2021-39224 | File path disclosure of shared files in OfficeOnline application | 3.5CNA v3.1 | 0.9% | 2021-10-25 | Fix |
| CVE-2021-39223 | File path disclosure of shared files in Richdocuments application | 4.8CNA v3.1 | 1.1% | 2021-10-25 | Fix |
| CVE-2021-39221 | Nextcloud Contacts stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2021-10-25 | Fix |
| CVE-2021-39220 | Bypass of image blocking in Nextcloud Mail | 3.5CNA v3.1 | 0.8% | 2021-10-25 | Fix |
| CVE-2021-38294 | Apache Storm Shell command injection vulnerability in Nimbus Thrift Server | 9.8v3.1 | 84.5% | 2021-10-25 | MetasploitExploit codeFix |
| CVE-2021-38260 | NXP Mcuxpresso Software Development Kit buffer overflow | 7.8v3.1 | 0.3% | 2021-10-25 | |
| CVE-2021-38258 | NXP Mcuxpresso Software Development Kit buffer overflow | 7.8v3.1 | 0.3% | 2021-10-25 | |
| CVE-2021-37624 | FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing | 7.5CNA v3.1 | 3.8% | 2021-10-25 | Exploit codeFix |
| CVE-2021-35231 | SolarWinds Kiwi Syslog Server unquoted path (SMB Login) | 6.7CNA v3.1 | 0.3% | 2021-10-25 | Fix |
| CVE-2021-34864 | Parallels Desktop privilege escalation | 8.8v3.1 | 0.2% | 2021-10-25 | |
| CVE-2021-34863 | D-Link DAP-2020 stack-based buffer overflow | 8.8v3.1 | 1.5% | 2021-10-25 | Fix |
| CVE-2021-34862 | D-Link DAP-2020 stack-based buffer overflow | 8.8v3.1 | 0.8% | 2021-10-25 | Fix |
| CVE-2021-34861 | D-Link DAP-2020 stack-based buffer overflow | 8.8v3.1 | 0.8% | 2021-10-25 | Fix |
| CVE-2021-34860 | D-Link DAP-2020 path traversal | 6.5v3.1 | 1.5% | 2021-10-25 | Fix |
| CVE-2021-34859 | TeamViewer memory corruption | 8.8v3.1 | 9.1% | 2021-10-25 | Fix |
| CVE-2021-34857 | Parallels Desktop out-of-bounds write | 8.8v3.1 | 0.3% | 2021-10-25 | Fix |
| CVE-2021-34856 | Parallels Desktop memory corruption | 8.8v3.1 | 0.3% | 2021-10-25 | Fix |
| CVE-2021-34855 | Parallels Desktop uninitialized resource use | 6.5v3.1 | 0.3% | 2021-10-25 | Fix |
| CVE-2021-34854 | Parallels Desktop excessive memory allocation | 7.8v3.1 | 0.3% | 2021-10-25 | Fix |
| CVE-2021-25977 | Piranha CMS stored XSS in Page Title | 5.4v3.1 | 0.7% | 2021-10-25 | Fix |
| CVE-2021-24885 | YOP Poll WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-10-25 | Fix |
| CVE-2021-24884 | Formidable Form Builder WordPress plugin unauthenticated stored cross-site scripting | 9.6NVD v3.1 | 3.1% | 2021-10-25 | Exploit codeFix |
| CVE-2021-24785 | Great Quotes WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | |
| CVE-2021-24779 | WP Debugging WordPress plugin unauthenticated Plugin's settings update | 6.5NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24774 | wpchill Check and Log Email email log viewer SQL injection | 7.2NVD v3.1 | 1.3% | 2021-10-25 | Fix |
| CVE-2021-24769 | Permalink Manager Lite WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.4% | 2021-10-25 | Fix |
| CVE-2021-24744 | WordPress Contact Forms by Cimatti plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24699 | Easy Media Download WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24662 | Game Server Status WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2021-10-25 | |
| CVE-2021-24653 | Cookie Bar WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24608 | Formidable Form Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-10-25 | Fix |
| CVE-2021-24544 | Responsive WordPress Slider plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-25 | |
| CVE-2021-24543 | jQuery Reply to Comment WordPress plugin CSRF to stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2021-10-25 | |
| CVE-2021-24515 | Video Gallery - Vimeo and YouTube Gallery WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24514 | Visual Form Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24489 | Request a Quote WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24487 | Sanskruti St-Daily-Tip default tip text setting cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2021-10-25 | |
| CVE-2021-24485 | Special Text Boxes WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24414 | YT Player WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-24381 | Ninja Forms Contact Form form field class name stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-21703 | PHP PHP-FPM memory access in root process leading to privilege escalation | 7.8CNA v3.1 | 1.4% | 2021-10-25 | Fix |
| CVE-2021-21319 | galette several stored XSS | 6.8CNA v3.1 | 0.9% | 2021-10-25 | Fix |
| CVE-2021-0941 | Android filter.c out-of-bounds read | 6.7v3.1 | 0.2% | 2021-10-25 | Fix |
| CVE-2021-0940 | Android TBD out-of-bounds write | 6.7v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0939 | Android passthru.c out-of-bounds read | 4.4v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0938 | Android compiler-clang.h information disclosure | 5.5v3.1 | 0.2% | 2021-10-25 | Fix |
| CVE-2021-0936 | Android f_accessory.c memory corruption | 7.8v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0935 | Android ip6_output.c out-of-bounds write | 6.7v3.1 | 0.2% | 2021-10-25 | Fix |
| CVE-2021-0663 | MT6779 heap-based buffer overflow in audio DSP driver | 6.7NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-0662 | MT6779 heap-based buffer overflow in audio DSP driver | 6.7NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-0661 | MT6779 heap-based buffer overflow in audio DSP driver | 6.7NVD v3.1 | 0.6% | 2021-10-25 | Fix |
| CVE-2021-0634 | MT6735 improper restriction of operations within the bounds of a memory buffer in display driver | 6.7NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0633 | MT6580 heap-based buffer overflow in display driver | 6.7NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0632 | MT6739 exposure of sensitive information to an unauthorized actor in wifi driver | 6.5NVD v3.1 | 0.3% | 2021-10-25 | Fix |
| CVE-2021-0631 | MT6761 buffer over-read in wifi driver | 7.5NVD v3.1 | 0.9% | 2021-10-25 | Fix |
| CVE-2021-0630 | MT6761 integer overflow or wraparound in wifi driver | 7.5NVD v3.1 | 0.9% | 2021-10-25 | Fix |
| CVE-2021-0625 | MT6762 improper restriction of operations within the bounds of a memory buffer in ccu | 6.7NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0618 | MT6739 out-of-bounds read in ape extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0617 | MT5522 out-of-bounds read in ape extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0616 | MT5522 out-of-bounds read in ape extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0615 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0614 | MT5522 out-of-bounds read in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0613 | MT5522 out-of-bounds read in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0414 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0413 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0412 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0411 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0410 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-0409 | MT5522 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-10-25 | Fix |
| CVE-2021-42840 | salesagility SuiteCRM unrestricted file upload | 8.8v3.1 | 58.9% | 2021-10-22 | MetasploitExploit codeFix |
| CVE-2021-42836 | Github.com/tidwall/Gjson Vulnerable to REDoS attack | 7.5v3.1 | 2.4% | 2021-10-22 | Fix |
| CVE-2021-42556 | Rasa X path traversal | 5.5v3.1 | 1.0% | 2021-10-22 | Exploit code |
| CVE-2021-42542 | Emerson WirelessHART Gateway backup folder structure path traversal | 8.8v3.1 | 1.5% | 2021-10-22 | Fix |
| CVE-2021-42540 | Emerson WirelessHART Gateway system configuration extraction write-what-where condition | 8.8v3.1 | 1.0% | 2021-10-22 | Fix |
| CVE-2021-42539 | Emerson WirelessHART Gateway system backup restore missing authentication | 8.8v3.1 | 0.8% | 2021-10-22 | Fix |
| CVE-2021-42538 | Emerson WirelessHART Gateway passphrase parameter OS command injection | 8.8v3.1 | 1.0% | 2021-10-22 | Fix |
| CVE-2021-42536 | Emerson WirelessHART Gateway global variables information disclosure | 6.5NVD v3.1 | 0.9% | 2021-10-22 | Fix |
| CVE-2021-42534 | Trane Building Automation Controllers cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-22 | Fix |
| CVE-2021-42258 | BQE BillQuick Web Suite SQL injection | 9.8v3.1 | 74.4% | 2021-10-22 | KEVNucleiMetasploitExploit codeFix |
| CVE-2021-42169 | Simple Payroll System With Dynamic Tax Bracket SQL injection | 9.8v3.1 | 2.8% | 2021-10-22 | |
| CVE-2021-41747 | Csdn App cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-22 | |
| CVE-2021-41745 | ShowDoc unrestricted file upload | 9.8v3.1 | 1.4% | 2021-10-22 | Fix |
| CVE-2021-41744 | Yonyou Ufida Product Lifecycle Management command injection | 9.8v3.1 | 1.5% | 2021-10-22 | |
| CVE-2021-41171 | Bypass bruteforce protection on login form in elabftw | 5.9CNA v3.1 | 1.9% | 2021-10-22 | Fix |
| CVE-2021-38485 | Emerson WirelessHART Gateway configuration restore feature improper input validation | 8.8v3.1 | 0.9% | 2021-10-22 | Fix |
| CVE-2021-38481 | AUVESY Versiondog scheduler service SQL injection | 9.8v3.1 | 1.0% | 2021-10-22 | Fix |
| CVE-2021-38479 | AUVESY Versiondog out-of-bounds write | 7.5v3.1 | 0.9% | 2021-10-22 | Fix |
| CVE-2021-38477 | AUVESY Versiondog external control of a file path | 9.8v3.1 | 1.2% | 2021-10-22 | Fix |
| CVE-2021-38475 | AUVESY Versiondog incorrect permission assignment | 8.8v3.1 | 0.9% | 2021-10-22 | Fix |
| CVE-2021-38473 | AUVESY Versiondog buffer overflow | 8.8v3.1 | 0.9% | 2021-10-22 | Fix |
| CVE-2021-38471 | AUVESY Versiondog unrestricted file upload | 9.1v3.1 | 1.1% | 2021-10-22 | Fix |
| CVE-2021-38469 | AUVESY Versiondog uncontrolled search path | 7.1NVD v3.1 | 0.6% | 2021-10-22 | Fix |
| CVE-2021-38467 | AUVESY Versiondog use-after-free | 8.1v3.1 | 0.8% | 2021-10-22 | Fix |
| CVE-2021-38465 | AUVESY Versiondog web installer resource exhaustion | 6.5NVD v3.1 | 0.8% | 2021-10-22 | Fix |
| CVE-2021-38463 | AUVESY Versiondog resource exhaustion | 8.1v3.1 | 0.8% | 2021-10-22 | Fix |
| CVE-2021-38461 | AUVESY Versiondog hard-coded cryptographic key | 8.2v3.1 | 0.5% | 2021-10-22 | Fix |
| CVE-2021-38459 | AUVESY Versiondog authentication bypass by replay | 9.8v3.1 | 1.0% | 2021-10-22 | Fix |
| CVE-2021-38457 | AUVESY Versiondog missing authentication | 9.8v3.1 | 1.3% | 2021-10-22 | Fix |
| CVE-2021-38455 | AUVESY Versiondog OS service improper input validation | 6.5NVD v3.1 | 0.8% | 2021-10-22 | Fix |
| CVE-2021-38453 | AUVESY Versiondog registry API vulnerability | 9.1v3.1 | 1.1% | 2021-10-22 | Fix |
| CVE-2021-38451 | AUVESY Versiondog CSC protocol out-of-bounds read | 5.7v3.1 | 0.7% | 2021-10-22 | Fix |
| CVE-2021-38449 | AUVESY Versiondog API vulnerability | 9.8v3.1 | 1.3% | 2021-10-22 | Fix |
| CVE-2021-36357 | Openpowerfoundation Skiboot incorrect numeric conversion | 9.8v3.1 | 1.2% | 2021-10-22 | |
| CVE-2021-35230 | Unquoted path vulnerability (SMB Login) in Kiwi CatTools | 6.7CNA v3.1 | 0.3% | 2021-10-22 | Fix |
| CVE-2021-34362 | Command injection vulnerability in Media Streaming add-on | 8.7CNA v3.1 | 1.3% | 2021-10-22 | Fix |
| CVE-2021-31835 | McAfee ePO cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-10-22 | Fix |
| CVE-2021-31834 | McAfee ePO cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-22 | Fix |
| CVE-2021-31682 | Automated Logic WebCTRL cross-site scripting | 6.1v3.1 | 10.5% | 2021-10-22 | NucleiExploit codeFix |
| CVE-2021-30359 | The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repai | 7.8NVD v3.1 | 3.9% | 2021-10-22 | Fix |
| CVE-2021-29835 | IBM Business Automation Workflow cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-10-22 | Fix |
| CVE-2021-0870 | Android race condition | 8.1v3.1 | 7.0% | 2021-10-22 | Fix |
| CVE-2021-0708 | Android ActivityManagerShellCommand.java privilege escalation | 7.8v3.1 | 0.2% | 2021-10-22 | Fix |
| CVE-2021-0706 | Android PluginManagerImpl.java denial of service | 5.5v3.1 | 0.1% | 2021-10-22 | Fix |
| CVE-2021-0705 | Android NotificationManagerService.java privilege escalation | 7.8v3.1 | 0.3% | 2021-10-22 | Fix |
| CVE-2021-0703 | Android init.cpp use-after-free | 6.8v3.1 | 0.1% | 2021-10-22 | Fix |
| CVE-2021-0702 | Android apexd.cpp information disclosure | 5.5v3.1 | 0.1% | 2021-10-22 | Fix |
| CVE-2021-0652 | Android VectorDrawable.java memory corruption | 7.8v3.1 | 0.2% | 2021-10-22 | Fix |
| CVE-2021-0651 | Android PackageItemInfo.java denial of service | 5.5v3.1 | 0.1% | 2021-10-22 | Fix |
| CVE-2021-0643 | Android SubscriptionController.java information disclosure | 5.5v3.1 | 0.1% | 2021-10-22 | Fix |
| CVE-2021-0483 | Android AAudioService use-after-free | 7.8v3.1 | 0.1% | 2021-10-22 | Fix |
| CVE-2021-42740 | Improper neutralization of special elements used in a command in Shell-quote | 9.8v3.1 | 4.2% | 2021-10-21 | Fix |
| CVE-2021-42716 | nothings Stb Image.h buffer overflow | 7.1v3.1 | 1.5% | 2021-10-21 | Fix |
| CVE-2021-42715 | nothings Stb Image.h infinite loop | 5.5v3.1 | 1.3% | 2021-10-21 | Fix |
| CVE-2021-42327 | Linux kernel out-of-bounds write | 6.7v3.1 | 0.9% | 2021-10-21 | Exploit codeFix |
| CVE-2021-42108 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.4% | 2021-10-21 | Fix |
| CVE-2021-42107 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.4% | 2021-10-21 | Fix |
| CVE-2021-42106 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.4% | 2021-10-21 | Fix |
| CVE-2021-42105 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.4% | 2021-10-21 | Fix |
| CVE-2021-42104 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.4% | 2021-10-21 | Fix |
| CVE-2021-42103 | Trend Micro Apex One An uncontrolled search path | 7.8v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-42102 | Trend Micro Apex One An uncontrolled search path | 7.8v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-42101 | Trend Micro Apex One An uncontrolled search path | 7.8v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-42097 | GNU Mailman cross-site request forgery | 8.0v3.1 | 1.3% | 2021-10-21 | Fix |
| CVE-2021-42096 | GNU Mailman missing brute-force protection | 4.3v3.1 | 1.3% | 2021-10-21 | Fix |
| CVE-2021-42012 | Trend Micro Apex One stack-based buffer overflow | 7.8v3.1 | 0.6% | 2021-10-21 | Fix |
| CVE-2021-42011 | Trend Micro Apex One An incorrect permission assignment | 7.8v3.1 | 0.3% | 2021-10-21 | Fix |
| CVE-2021-41792 | Alfresco Transform Services server-side request forgery | 5.3v3.1 | 0.9% | 2021-10-21 | Fix |
| CVE-2021-41791 | Alfresco Community Share cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-21 | |
| CVE-2021-41790 | Alfresco Content Services arbitrary code execution | 8.8v3.1 | 1.5% | 2021-10-21 | Fix |
| CVE-2021-41169 | Improper neutralization HTML tags in sulu/sulu | 6.2CNA v3.1 | 0.6% | 2021-10-21 | Fix |
| CVE-2021-41168 | Hash-Collision denial of service vulnerability in snudown | 6.5CNA v3.1 | 0.8% | 2021-10-21 | Fix |
| CVE-2021-41160 | Improper region checks in FreeRDP allow out of bound write to memory | 5.3CNA v3.1 | 1.7% | 2021-10-21 | Exploit codeFix |
| CVE-2021-41159 | Improper client input validation for FreeRDP gateway connections allows to overwrite memory | 5.8CNA v3.1 | 1.5% | 2021-10-21 | Fix |
| CVE-2021-41146 | Arbitrary command execution on Windows in qutebrowser | 8.8CNA v3.1 | 1.5% | 2021-10-21 | Fix |
| CVE-2021-41127 | Maliciously Crafted Model Archive can lead to arbitrary file write in Rasa | 7.3CNA v3.1 | 0.8% | 2021-10-21 | Fix |
| CVE-2021-40719 | Adobe Connect deserialization of untrusted data remote code execution | 9.8CNA v3.0 | 3.5% | 2021-10-21 | Fix |
| CVE-2021-40123 | Cisco Identity Services Engine web-based management interface incorrect privilege assignment | 4.3CNA v3.1 | 0.8% | 2021-10-21 | Fix |
| CVE-2021-40122 | Cisco Meeting Server Call Bridge denial of service | 5.9CNA v3.1 | 1.2% | 2021-10-21 | Fix |
| CVE-2021-40121 | Cisco Identity Services Engine cross-site scripting | 6.1CNA v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-39357 | Leaky Paywall Authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-21 | Fix |
| CVE-2021-39356 | Content Staging Authenticated stored cross-site scripting | 4.8v3.1 | 1.0% | 2021-10-21 | |
| CVE-2021-39354 | Easy Digital Downloads Authenticated reflected cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-21 | Fix |
| CVE-2021-39352 | Catch Themes Demo Import Admin+ arbitrary file upload | 7.2v3.1 | 55.7% | 2021-10-21 | MetasploitExploit codeFix |
| CVE-2021-39348 | LearnPress WordPress LMS plugin authenticated stored cross-site scripting | 4.8v3.1 | 5.0% | 2021-10-21 | Fix |
| CVE-2021-39328 | Simple Job Board Authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-21 | Fix |
| CVE-2021-39321 | Sassy Social Share PHP object injection | 8.8CNA v3.1 | 2.0% | 2021-10-21 | Fix |
| CVE-2021-39127 | Atlassian Jira Server missing authorization | 5.3v3.1 | 1.3% | 2021-10-21 | Fix |
| CVE-2021-39126 | Atlassian Jira Server cross-site request forgery | 6.5v3.1 | 0.7% | 2021-10-21 | Fix |
| CVE-2021-36869 | Ivory Search WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2021-10-21 | Fix |
| CVE-2021-35512 | Zoho ManageEngine Applications Manager server-side request forgery | 6.5v3.1 | 1.6% | 2021-10-21 | Fix |
| CVE-2021-35228 | Reflected cross-site scripting affecting SolarWinds: DPA | 5.5CNA v3.1 | 0.6% | 2021-10-21 | Fix |
| CVE-2021-35227 | Insecure Web Configuration for RabbitMQ Management plugin in SolarWinds ARM | 4.7CNA v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-35225 | Netpath Horizontal privilege escalation vulnerability: NPM | 5.0CNA v3.1 | 0.8% | 2021-10-21 | Fix |
| CVE-2021-34789 | Cisco Tetration stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-10-21 | Fix |
| CVE-2021-34760 | Cisco TelePresence Management Suite stored cross-site scripting | 4.8CNA v3.0 | 0.6% | 2021-10-21 | Fix |
| CVE-2021-34743 | Cisco Webex software application authorization bypass | 4.3CNA v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-34738 | Cisco Identity Services Engine cross-site scripting | 6.1CNA v3.1 | 0.6% | 2021-10-21 | Fix |
| CVE-2021-34736 | Cisco Integrated Management Controller GUI denial of service | 5.3CNA v3.1 | 1.3% | 2021-10-21 | Fix |
| CVE-2021-29883 | IBM Transformation Extender Advanced missing encryption | 4.3CNA v3.0 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-29873 | IBM FlashSystem 900 denial of service | 8.8CNA v3.0 | 1.5% | 2021-10-21 | Fix |
| CVE-2021-28975 | WP Mailster cross-site scripting | 6.1v3.1 | 0.9% | 2021-10-21 | |
| CVE-2021-28496 | Arista EOS BFD shared secret profile vulnerability | 5.7CNA v3.1 | 0.4% | 2021-10-21 | Fix |
| CVE-2021-27746 | "HCL Connections" cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-21 | Fix |
| CVE-2021-23139 | Trend Micro Worry-Free Business Security Trend Micro Apex One and null pointer dereference | 7.5v3.1 | 1.1% | 2021-10-21 | Fix |
| CVE-2021-22034 | VMware vRealize Operations Tenant App for VMware Cloud Director information disclosure | 7.5v3.1 | 1.0% | 2021-10-21 | Fix |
| CVE-2021-20120 | Arris SurfBoard SB8200 cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2021-10-21 | |
| CVE-2021-1529 | Cisco IOS XE SD-WAN Software command injection | 7.8CNA v3.1 | 0.3% | 2021-10-21 | Fix |
| CVE-2021-42771 | Directory traversal in Babel | 7.8v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-42766 | Proof-of-stake Ethereum denial of service | 9.1v3.1 | 1.0% | 2021-10-20 | |
| CVE-2021-42765 | Proof-of-stake Ethereum denial of service | 7.5v3.1 | 1.0% | 2021-10-20 | |
| CVE-2021-42764 | Proof-of-stake Ethereum denial of service | 9.1v3.1 | 1.0% | 2021-10-20 | |
| CVE-2021-42762 | WebKitGTK sandbox escape | 5.3v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-42739 | Linux kernel out-of-bounds write | 6.7v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-42299 | Microsoft Surface Pro 3 security feature bypass | 5.6CNA v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-41167 | Modern-async's `forEachSeries` and `forEachLimit` functions do not limit the number of requests | 7.5CNA v3.1 | 1.7% | 2021-10-20 | Fix |
| CVE-2021-41163 | discourse RCE via malicious SNS subscription payload | 10.0CNA v3.1 | 19.8% | 2021-10-20 | Emerging ThreatsFix |
| CVE-2021-41135 | cosmos-sdk authz Module Non-Determinism | 6.5CNA v3.1 | 1.7% | 2021-10-20 | Fix |
| CVE-2021-38896 | IBM Qradar Advisor cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-10-20 | Fix |
| CVE-2021-35666 | Oracle HTTP Server OSSL module component unauthorized data access | 5.9CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-35665 | Oracle Hyperion Financial Reporting Repository component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35662 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35661 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35660 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35659 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-35658 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35657 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35656 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35655 | Oracle Essbase Administration Services EAS console component information disclosure | 5.3CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-35654 | Oracle Essbase Administration Services EAS console component denial of service | 7.5CNA v3.1 | 1.6% | 2021-10-20 | Fix |
| CVE-2021-35653 | Oracle Essbase Administration Services EAS console component unauthorized data access | 7.7CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-35652 | Oracle Essbase Administration Services EAS console component takeover | 10.0CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35651 | Oracle Essbase Administration Services EAS console component unauthorized data access | 8.5CNA v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-35650 | Oracle Secure Global Desktop client component denial of service | 4.6CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-35649 | Oracle Secure Global Desktop Server component denial of service | 5.4CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35648 | Oracle MySQL Server FTS component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35647 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35646 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35645 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35644 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35643 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35642 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35641 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35640 | Oracle MySQL Server DDL component unauthorized data modification | 2.7CNA v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-35639 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.7% | 2021-10-20 | Fix |
| CVE-2021-35638 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.0% | 2021-10-20 | Fix |
| CVE-2021-35637 | Oracle MySQL Server PS component denial of service | 4.9CNA v3.1 | 2.0% | 2021-10-20 | Fix |
| CVE-2021-35636 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35635 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35634 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35633 | Oracle MySQL Server Logging component denial of service | 2.7CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35632 | Oracle MySQL Server Data Dictionary component denial of service | 4.4CNA v3.1 | 0.4% | 2021-10-20 | Fix |
| CVE-2021-35631 | Oracle MySQL Server GIS component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35630 | Oracle MySQL Server options component unauthorized data modification | 4.9CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35629 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.7% | 2021-10-20 | Fix |
| CVE-2021-35628 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35627 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2021-10-20 | Fix |
| CVE-2021-35626 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2021-10-20 | Fix |
| CVE-2021-35625 | Oracle MySQL Server Security Privileges component information disclosure | 2.7CNA v3.1 | 1.6% | 2021-10-20 | Fix |
| CVE-2021-35624 | Oracle MySQL Server Security Privileges component unauthorized data modification | 4.9CNA v3.1 | 1.4% | 2021-10-20 | Fix |
| CVE-2021-35623 | Oracle MySQL Server Security Roles component information disclosure | 2.7CNA v3.1 | 1.6% | 2021-10-20 | Fix |
| CVE-2021-35622 | Oracle MySQL Server Security Encryption component denial of service | 4.9CNA v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-35621 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 50.0% | 2021-10-20 | Fix |
| CVE-2021-35620 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35619 | Oracle Database takeover | 7.1CNA v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-35618 | Oracle MySQL Cluster General component denial of service | 1.8CNA v3.1 | 0.7% | 2021-10-20 | Fix |
| CVE-2021-35617 | Oracle WebLogic Server Coherence Container component takeover | 9.8CNA v3.1 | 2.1% | 2021-10-20 | Fix |
| CVE-2021-35616 | Oracle Supply Chain Transportation Management unauthorized data modification | 5.4CNA v3.1 | 28.0% | 2021-10-20 | Exploit codeFix |
| CVE-2021-35613 | Oracle MySQL Cluster General component denial of service | 3.7CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35612 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.7% | 2021-10-20 | Fix |
| CVE-2021-35611 | Oracle E-Business Suite Sales Offline template component denial of service | 4.3CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-35610 | Oracle MySQL Server Optimizer component unauthorized data modification | 7.1CNA v3.1 | 2.3% | 2021-10-20 | Fix |
| CVE-2021-35609 | Oracle PeopleSoft Enterprise PeopleTools SQR component unauthorized data access | 6.5CNA v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-35608 | Oracle MySQL Server Group Replication plugin component denial of service | 5.3CNA v3.1 | 2.2% | 2021-10-20 | Fix |
| CVE-2021-35607 | Oracle MySQL Server DML component denial of service | 6.5CNA v3.1 | 2.4% | 2021-10-20 | Fix |
| CVE-2021-35606 | Oracle PeopleSoft Enterprise CS Campus Community unauthorized data access | 5.7CNA v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-35604 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.5CNA v3.1 | 2.7% | 2021-10-20 | Fix |
| CVE-2021-35603 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component information disclosure | 3.7CNA v3.1 | 4.4% | 2021-10-20 | Fix |
| CVE-2021-35602 | Oracle MySQL Server options component unauthorized data modification | 5.0CNA v3.1 | 1.9% | 2021-10-20 | Fix |
| CVE-2021-35601 | Oracle PeopleSoft Enterprise CS SA Integration Pack unauthorized data access | 5.7CNA v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-35599 | Oracle Database Zero Downtime DB Migration to Cloud vulnerability | 8.2CNA v3.1 | 0.3% | 2021-10-20 | Fix |
| CVE-2021-35598 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 51.1% | 2021-10-20 | Fix |
| CVE-2021-35597 | Oracle MySQL Client C API component denial of service | 6.5CNA v3.1 | 2.6% | 2021-10-20 | Fix |
| CVE-2021-35596 | Oracle MySQL Server Error Handling component denial of service | 4.9CNA v3.1 | 2.5% | 2021-10-20 | Fix |
| CVE-2021-35595 | Oracle PeopleSoft Enterprise PeopleTools Business Interlink component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35594 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 51.1% | 2021-10-20 | Fix |
| CVE-2021-35593 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 51.1% | 2021-10-20 | Fix |
| CVE-2021-35592 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 52.5% | 2021-10-20 | Fix |
| CVE-2021-35591 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 2.5% | 2021-10-20 | Fix |
| CVE-2021-35590 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 88.5% | 2021-10-20 | Fix |
| CVE-2021-35589 | Oracle Solaris Device drivers component denial of service | 6.0CNA v3.1 | 0.3% | 2021-10-20 | Fix |
| CVE-2021-35588 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component denial of service | 3.1CNA v3.1 | 3.9% | 2021-10-20 | Fix |
| CVE-2021-35586 | Oracle Java SE, Oracle GraalVM Enterprise Edition ImageIO component denial of service | 5.3CNA v3.1 | 6.8% | 2021-10-20 | Fix |
| CVE-2021-35585 | Oracle E-Business Suite Incentive Compensation User interface component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-35584 | Oracle MySQL Cluster ndbcluster/plugin DDL component denial of service | 4.3CNA v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-35583 | Oracle MySQL Server Windows component denial of service | 7.5CNA v3.1 | 3.1% | 2021-10-20 | Fix |
| CVE-2021-35582 | Oracle E-Business Suite Applications Manager View Reports component unauthorized data modification | 6.5CNA v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-35581 | Oracle E-Business Suite Applications Manager View Reports component unauthorized data modification | 4.7CNA v3.1 | 0.7% | 2021-10-20 | Fix |
| CVE-2021-35580 | Oracle E-Business Suite Applications Manager View Reports component unauthorized data modification | 6.1CNA v3.1 | 0.7% | 2021-10-20 | Fix |
| CVE-2021-35578 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component denial of service | 5.3CNA v3.1 | 6.7% | 2021-10-20 | Fix |
| CVE-2021-35577 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.5% | 2021-10-20 | Fix |
| CVE-2021-35576 | Oracle Database Unified Audit vulnerability | 2.7CNA v3.1 | 1.4% | 2021-10-20 | Fix |
| CVE-2021-35575 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.1% | 2021-10-20 | Fix |
| CVE-2021-35574 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 2.0% | 2021-10-20 | Fix |
| CVE-2021-35573 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35572 | Oracle Outside In Technology Outside In Filters component denial of service | 7.5CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-35571 | Oracle PeopleSoft Enterprise CS Academic Advisement unauthorized data modification | 5.4CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-35570 | Oracle E-Business Suite Mobile Field Service Admin UI component unauthorized data access | 8.1CNA v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-35569 | Oracle E-Business Suite Applications Manager Diagnostics component unauthorized data access | 4.9CNA v3.1 | 1.1% | 2021-10-20 | Fix |
| CVE-2021-35568 | Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35567 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data access | 6.8CNA v3.1 | 2.9% | 2021-10-20 | Fix |
| CVE-2021-35566 | Oracle E-Business Suite Applications Manager Diagnostics component unauthorized data access | 8.1CNA v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-35565 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component denial of service | 5.3CNA v3.1 | 7.4% | 2021-10-20 | Fix |
| CVE-2021-35564 | Oracle Java SE, Oracle GraalVM Enterprise Edition Keytool component unauthorized data modification | 5.3CNA v3.1 | 5.6% | 2021-10-20 | Fix |
| CVE-2021-35563 | Oracle E-Business Suite Shipping Execution Workflow Events component unauthorized data access | 8.1CNA v3.1 | 1.6% | 2021-10-20 | Fix |
| CVE-2021-35562 | Oracle E-Business Suite Universal Work Queue unauthorized data access | 8.1CNA v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-35561 | Oracle Java SE, Oracle GraalVM Enterprise Edition utility component denial of service | 5.3CNA v3.1 | 6.9% | 2021-10-20 | Fix |
| CVE-2021-35560 | Oracle Java SE Deployment component takeover | 7.5CNA v3.1 | 4.8% | 2021-10-20 | Fix |
| CVE-2021-35559 | Oracle Java SE, Oracle GraalVM Enterprise Edition Swing component denial of service | 5.3CNA v3.1 | 15.9% | 2021-10-20 | Fix |
| CVE-2021-35558 | Oracle Database denial of service | 4.3CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35557 | Oracle Database denial of service | 4.3CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35556 | Oracle Java SE, Oracle GraalVM Enterprise Edition Swing component denial of service | 5.3CNA v3.1 | 8.5% | 2021-10-20 | Fix |
| CVE-2021-35554 | Oracle E-Business Suite Trade Management Quotes component information disclosure | 5.3CNA v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-35553 | Oracle PeopleSoft Enterprise CS Student Records unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-35552 | Oracle WebLogic Server Diagnostics component unauthorized data modification | 5.3CNA v3.1 | 1.1% | 2021-10-20 | Fix |
| CVE-2021-35551 | Oracle Database crash | 5.5CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-35550 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component unauthorized data access | 5.9CNA v3.1 | 7.4% | 2021-10-20 | Fix |
| CVE-2021-35549 | Oracle Solaris utility component unauthorized data modification | 3.9CNA v3.1 | 0.3% | 2021-10-20 | Fix |
| CVE-2021-35546 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 2.6% | 2021-10-20 | Fix |
| CVE-2021-35545 | Oracle VM VirtualBox Core component denial of service | 6.7CNA v3.1 | 0.4% | 2021-10-20 | Fix |
| CVE-2021-35543 | Oracle PeopleSoft Enterprise CC Common Application Objects unauthorized data access | 8.1CNA v3.1 | 1.1% | 2021-10-20 | Fix |
| CVE-2021-35542 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.4% | 2021-10-20 | Fix |
| CVE-2021-35541 | Oracle PeopleSoft Enterprise SCM Supplier portal component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2021-10-20 | Fix |
| CVE-2021-35540 | Oracle VM VirtualBox Core component denial of service | 5.5CNA v3.1 | 0.4% | 2021-10-20 | Fix |
| CVE-2021-35539 | Oracle Solaris Filesystem component denial of service | 6.5CNA v3.1 | 0.3% | 2021-10-20 | Fix |
| CVE-2021-35538 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.4% | 2021-10-20 | Fix |
| CVE-2021-35537 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.7% | 2021-10-20 | Fix |
| CVE-2021-35536 | Oracle E-Business Suite Deal Management Miscellaneous component unauthorized data access | 8.1CNA v3.1 | 1.1% | 2021-10-20 | Fix |
| CVE-2021-30316 | Qualcomm Snapdragon use of out-of-range pointer offset in Multimedia drivers | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30315 | Qualcomm Snapdragon use-after-free in Sensor Hardware Abstraction Layer | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30312 | Qualcomm Snapdragon improper authentication in WIGIG host | 7.5CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-30310 | Qualcomm Snapdragon improper input validation in WLAN | 7.5CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-30306 | Qualcomm Snapdragon buffer over-read in DSP services | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30305 | Qualcomm Snapdragon improper input validation in Linux Graphics | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30304 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-30302 | Qualcomm Snapdragon improper authentication in WLAN | 7.5CNA v3.1 | 0.7% | 2021-10-20 | Fix |
| CVE-2021-30297 | Qualcomm Snapdragon buffer copy without checking size of input in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30292 | Qualcomm Snapdragon incorrect calculation of buffer size in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30291 | Qualcomm Snapdragon incorrect calculation of buffer size in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30288 | Qualcomm Snapdragon stack-based buffer overflow in WLAN | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30258 | Qualcomm Snapdragon stack-based buffer overflow in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30257 | Qualcomm Snapdragon improper validation of array index in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-30256 | Qualcomm Snapdragon buffer copy without checking size of input in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-25972 | camaleon_cms camaleon CMS server-side request forgery (SSRF) in Media upload feature | 4.9v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-25971 | camaleon_cms camaleon CMS SVG file upload Creates DoS for Media upload feature | 4.3v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-25970 | camaleon_cms camaleon CMS insufficient session expiration after Password Change | 8.8v3.1 | 1.3% | 2021-10-20 | Fix |
| CVE-2021-25969 | camaleon_cms camaleon CMS stored cross-site scripting (XSS) in Comments | 6.1v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-23452 | x-assign prototype pollution | 9.8v3.1 | 1.6% | 2021-10-20 | |
| CVE-2021-21749 | MF971R out-of-bounds write | 9.8v3.1 | 1.6% | 2021-10-20 | Fix |
| CVE-2021-21748 | MF971R out-of-bounds write | 9.8v3.1 | 1.8% | 2021-10-20 | KCVFix |
| CVE-2021-21747 | MF971R cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-21746 | MF971R cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-21745 | MF971R cross-site request forgery | 4.3v3.1 | 55.7% | 2021-10-20 | NucleiKCVFix |
| CVE-2021-21744 | ZTE MF971R configuration file vulnerability | 7.5v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-21743 | MF971R CRLF injection | 4.3v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-2485 | Oracle E-Business Suite Trade Management Quotes component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-2484 | Oracle E-Business Suite Operations Intelligence unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-2483 | Oracle E-Business Suite Content Manager Content Item Manager component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2021-10-20 | Fix |
| CVE-2021-2482 | Oracle E-Business Suite Payables Invoice Approvals component unauthorized data access | 8.1CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-2481 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 2.4% | 2021-10-20 | Fix |
| CVE-2021-2480 | Oracle HTTP Server Web Listener component unauthorized data modification | 3.7CNA v3.1 | 0.8% | 2021-10-20 | Fix |
| CVE-2021-2479 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 2.6% | 2021-10-20 | Fix |
| CVE-2021-2478 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 3.3% | 2021-10-20 | Fix |
| CVE-2021-2477 | Oracle E-Business Suite Applications Framework Session Management component denial of service | 5.3CNA v3.1 | 1.5% | 2021-10-20 | Fix |
| CVE-2021-2476 | Oracle Supply Chain Transportation Management Authentication component information disclosure | 5.3CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-2475 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.4% | 2021-10-20 | Fix |
| CVE-2021-2474 | Oracle E-Business Suite Web Analytics Admin component unauthorized data access | 8.1CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-2471 | Oracle incorrect authorization in MySQL Connector Java | 5.9CNA v3.1 | 7.5% | 2021-10-20 | Exploit codeFix |
| CVE-2021-2461 | Oracle Communications Interactive Session Recorder unauthorized data modification | 8.3CNA v3.1 | 1.1% | 2021-10-20 | Fix |
| CVE-2021-2416 | Oracle Communications Session Border Controller Routing component denial of service | 4.9CNA v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-2414 | Oracle Communications Session Border Controller Routing component unauthorized data access | 6.8CNA v3.1 | 1.2% | 2021-10-20 | Fix |
| CVE-2021-2332 | Oracle Database LogMiner denial of service | 6.7CNA v3.1 | 0.9% | 2021-10-20 | Fix |
| CVE-2021-2137 | Oracle Enterprise Manager Base Platform Policy Framework component takeover | 8.8CNA v3.1 | 1.1% | 2021-10-20 | Fix |
| CVE-2021-1985 | Qualcomm Snapdragon buffer over-read in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1984 | Qualcomm Snapdragon integer overflow or wraparound in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1983 | Qualcomm Snapdragon integer overflow to buffer overflow in VR service | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1980 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-1977 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-1969 | Qualcomm Snapdragon information exposure in Neural Processing | 6.2CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1968 | Qualcomm Snapdragon information exposure in Neural Processing | 6.2CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1967 | Qualcomm Snapdragon stack-based buffer overflow in WLAN | 5.3CNA v3.1 | 0.1% | 2021-10-20 | Fix |
| CVE-2021-1966 | Qualcomm Snapdragon buffer copy without checking size of input in Display | 6.7CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1959 | Qualcomm Snapdragon untrusted pointer dereference in Data Modem | 7.8CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1949 | Qualcomm Snapdragon integer overflow or wraparound in Display | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1936 | Qualcomm Snapdragon null pointer dereference in Modem | 7.5CNA v3.1 | 0.6% | 2021-10-20 | Fix |
| CVE-2021-1932 | Qualcomm Snapdragon improper access control in QTEE | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1917 | Qualcomm Snapdragon null pointer dereference in DIAG | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-1913 | Qualcomm Snapdragon integer overflow or wraparound in Trust Zone | 8.4CNA v3.1 | 0.2% | 2021-10-20 | Fix |
| CVE-2021-42261 | Revisorlab Video Management System path traversal | 7.5v3.1 | 2.3% | 2021-10-19 | Exploit code |
| CVE-2021-41150 | Improper sanitization of delegated role names in tough | 8.2CNA v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-41149 | Improper sanitization of target names in tough | 8.2CNA v3.1 | 1.1% | 2021-10-19 | Fix |
| CVE-2021-41140 | discourse-reactions reactions leak for secure category topics and private messages | 5.3CNA v3.1 | 0.9% | 2021-10-19 | Fix |
| CVE-2021-41131 | Client metadata path-traversal in python-tuf | 7.5CNA v3.1 | 1.5% | 2021-10-19 | Fix |
| CVE-2021-39355 | Indeed Job Importer Authenticated stored cross-site scripting | 4.8v3.1 | 1.0% | 2021-10-19 | |
| CVE-2021-39343 | MPL-Publisher Self-publish your book and ebook authenticated stored cross-site scripting | 4.8v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-39329 | JobBoardWP Job Board Listings and Submissions Authenticated stored cross-site scripting | 4.8v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-38911 | IBM Cloud Pak for Security cleartext storage of sensitive information | 4.4CNA v3.0 | 0.5% | 2021-10-19 | Fix |
| CVE-2021-38486 | InHand Networks IR615 Router cloud portal improper authorization | 8.5v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-38484 | InHand Networks IR615 Router unrestricted file upload | 7.2NVD v3.1 | 2.8% | 2021-10-19 | Fix |
| CVE-2021-38482 | InHand Networks IR615 Router stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-38480 | InHand Networks IR615 Router management portal cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-38478 | InHand Networks IR615 Router traceroute diagnostic tool OS command injection | 9.1v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-38476 | InHand Networks IR615 Router authentication process vulnerability | 5.3v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-38474 | InHand Networks IR615 Router login page vulnerability | 9.8v3.1 | 0.7% | 2021-10-19 | Fix |
| CVE-2021-38472 | InHand Networks IR615 Router management portal clickjacking | 4.7v3.1 | 0.7% | 2021-10-19 | Fix |
| CVE-2021-38470 | InHand Networks IR615 Router ping diagnostic tool OS command injection | 9.1v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-38468 | InHand Networks IR615 Router cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-38466 | InHand Networks IR615 Router help page cross-site scripting | 6.1NVD v3.1 | 0.7% | 2021-10-19 | Fix |
| CVE-2021-38464 | InHand Networks IR615 Router inadequate encryption strength | 7.4v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-38462 | InHand Networks IR615 Router weak password requirements | 9.8v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-37137 | The Netty project Netty resource exhaustion | 7.5NVD v3.1 | 6.6% | 2021-10-19 | Fix |
| CVE-2021-37136 | The Netty project Netty Bzip2Decoder doesn't allow setting size restrictions for decompressed data | 7.5NVD v3.1 | 5.9% | 2021-10-19 | Fix |
| CVE-2021-36832 | Icegram WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-36512 | Synchro Bulletin Board System uninitialized resource use | 7.5v3.1 | 1.0% | 2021-10-19 | |
| CVE-2021-35323 | Bludit cross-site scripting | 6.1v3.1 | 5.6% | 2021-10-19 | NucleiExploit code |
| CVE-2021-33988 | Cross-site scripting in Microweber | 6.1v3.1 | 1.1% | 2021-10-19 | Fix |
| CVE-2021-32664 | Reflected XSS in Combodo/iTop | 8.1CNA v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-32663 | Unauthorized setup leads to SSRF in Combodo/iTop | 8.7CNA v3.1 | 1.5% | 2021-10-19 | Fix |
| CVE-2021-31386 | Juniper Networks Junos OS J-Web HTTP service protection mechanism failure | 5.3CNA v3.1 | 0.7% | 2021-10-19 | Fix |
| CVE-2021-31385 | Juniper Junos OS J-Web path traversal | 8.8CNA v3.1 | 1.5% | 2021-10-19 | Fix |
| CVE-2021-31384 | Juniper Junos OS J-Web management interface missing authorization | 7.2CNA v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-31383 | Juniper Junos OS routing protocol daemon stack-based buffer overflow | 7.5CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31382 | Juniper Junos OS firewall filter assignment race condition | 6.5CNA v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-31381 | Juniper Networks SRC Series JBoss Application Server configuration weakness | 6.5CNA v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-31380 | Juniper Networks SRC Series JBoss Application Server configuration weakness | 5.3CNA v3.1 | 1.1% | 2021-10-19 | Fix |
| CVE-2021-31379 | Juniper Networks Junos OS MAP-E automatic tunneling mechanism incorrect behavior order | 7.5CNA v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-31378 | Juniper Junos OS General Authentication Service daemon denial of service | 6.8CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31377 | Junos OS: A local authenticated attacker can cause RPD to core | 5.5CNA v3.1 | 0.2% | 2021-10-19 | Fix |
| CVE-2021-31376 | Juniper Networks Junos OS Packet Forwarding Engine manager improper input validation | 7.5CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31375 | Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed | 7.2CNA v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-31374 | Juniper Networks Junos OS routing process daemon out-of-bounds write | 7.5CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31373 | Junos OS: SRX Series: Persistent XSS vulnerability in J-Web | 8.0CNA v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-31372 | Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root | 8.8CNA v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-31371 | Juniper Networks Junos OS internal communications subnet information disclosure | 5.3CNA v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-31370 | Juniper Networks Junos OS Packet Forwarding Engine incomplete denylist | 6.5CNA v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-31369 | Juniper Networks Junos OS MS-MPC/MS-MIC services resource exhaustion | 5.3CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31368 | Juniper Networks Junos OS kernel resource exhaustion | 7.5CNA v3.1 | 1.1% | 2021-10-19 | Fix |
| CVE-2021-31367 | Juniper Networks Junos OS Packet Forwarding Engine memory leak | 6.5CNA v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-31366 | Juniper Networks Junos OS authd unchecked return value | 6.5CNA v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-31365 | Juniper Networks Junos OS An resource exhaustion | 6.5CNA v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-31364 | Juniper Networks Junos OS flow daemon race condition | 5.9CNA v3.1 | 0.7% | 2021-10-19 | Fix |
| CVE-2021-31363 | Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a denial of service | 6.5CNA v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-31362 | Juniper Networks Junos OS RPD protection mechanism failure | 6.5CNA v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-31361 | Juniper Networks Junos OS VXLAN packet processing vulnerability | 5.3CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31360 | Junos OS and Junos OS Evolved: Denial of service vulnerability in local file processing | 7.1CNA v3.1 | 0.2% | 2021-10-19 | Fix |
| CVE-2021-31359 | Junos OS and Junos OS Evolved: Local privilege escalation | 7.8CNA v3.1 | 0.2% | 2021-10-19 | Fix |
| CVE-2021-31358 | Junos OS Evolved: Shell-injection vulnerabilities in evo_sftp UI wrapper script | 7.8CNA v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-31357 | Junos OS Evolved: Shell-injection vulnerabilities in evo_tcpdump UI wrapper script | 7.8CNA v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-31356 | Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts | 7.8CNA v3.1 | 0.9% | 2021-10-19 | Fix |
| CVE-2021-31355 | Junos OS: Stored cross-site scripting (XSS) vulnerability in captive portal | 8.0CNA v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-31354 | Juniper Networks Junos OS Juniper Agile License client out-of-bounds read | 7.1CNA v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-31353 | Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update | 7.5CNA v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-31352 | SRC Series: NETCONF over SSH allows negotiation of weak ciphers | 5.3CNA v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-31351 | Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset | 7.5CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-31350 | Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET) | 7.5CNA v3.1 | 0.9% | 2021-10-19 | Fix |
| CVE-2021-31349 | Session Smart Router: Authentication bypass | 9.8CNA v3.1 | 1.7% | 2021-10-19 | Fix |
| CVE-2021-30850 | Apple macOS and tvOS file system improper access control | 5.5v3.1 | 0.9% | 2021-10-19 | Fix |
| CVE-2021-30849 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.9% | 2021-10-19 | Fix |
| CVE-2021-30848 | Apple Safari out-of-bounds write | 7.8v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-30847 | Apple macOS arbitrary code execution | 7.8v3.1 | 3.0% | 2021-10-19 | Fix |
| CVE-2021-30846 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.4% | 2021-10-19 | Fix |
| CVE-2021-30845 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-30844 | Apple macOS memory leak | 7.5v3.1 | 1.8% | 2021-10-19 | Fix |
| CVE-2021-30843 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-30842 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-30841 | Apple macOS arbitrary code execution | 7.8v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-30838 | Apple iOS and iPadOS memory corruption | 7.8v3.1 | 1.2% | 2021-10-19 | Fix |
| CVE-2021-30837 | Apple tvOS arbitrary code execution | 7.8v3.1 | 1.7% | 2021-10-19 | Fix |
| CVE-2021-30835 | Apple tvOS arbitrary code execution | 7.8v3.1 | 3.1% | 2021-10-19 | Fix |
| CVE-2021-30832 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.4% | 2021-10-19 | Fix |
| CVE-2021-30830 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2021-10-19 | Fix |
| CVE-2021-30829 | Apple macOS URI parsing vulnerability | 7.8v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-30828 | Apple macOS arbitrary file read | 5.5v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-30827 | Apple macOS improper preservation of permissions | 7.8v3.1 | 0.2% | 2021-10-19 | Fix |
| CVE-2021-30826 | Apple iOS and iPadOS logic flaw | 7.5v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-30825 | Apple iOS and iPadOS arbitrary code execution | 7.8v3.1 | 0.5% | 2021-10-19 | Fix |
| CVE-2021-30820 | Apple iOS and iPadOS logic flaw | 9.8v3.1 | 2.3% | 2021-10-19 | Fix |
| CVE-2021-30819 | Apple iOS and iPadOS out-of-bounds read | 5.5v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-30815 | Apple iOS and iPadOS lock screen information disclosure | 2.4v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-30811 | Apple watchOS information disclosure | 5.5v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-30810 | Apple tvOS missing authorization | 4.3v3.1 | 0.5% | 2021-10-19 | Fix |
| CVE-2021-30807 | Apple Multiple Products memory corruption | 7.8v3.1 | 28.8% | 2021-10-19 | KEVExploit codeFix |
| CVE-2021-30358 | Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent. | 7.2NVD v3.1 | 27.5% | 2021-10-19 | Fix |
| CVE-2021-29912 | IBM Cloud Pak for Security cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-10-19 | Fix |
| CVE-2021-27001 | NetApp Clustered Data ONTAP Compliance-mode WORM data vulnerability | 5.5v3.1 | 0.3% | 2021-10-19 | Fix |
| CVE-2021-26589 | HPE Superdome Flex Server incorrect permission assignment | 6.1v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-25968 | OpenCMS stored cross-site scripting (XSS) in Sitemap | 5.4v3.1 | 0.5% | 2021-10-19 | |
| CVE-2021-20836 | OMRON CX-Supervisor out-of-bounds read | 6.5v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-3889 | bfabiszewski/libmobi out-of-range pointer offset | 8.1v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-3888 | bfabiszewski/libmobi out-of-range pointer offset | 8.1v3.1 | 1.3% | 2021-10-19 | Fix |
| CVE-2021-3879 | Cross-site scripting (XSS) Stored in snipe/Snipe-IT | 5.4v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-3872 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.5% | 2021-10-19 | Fix |
| CVE-2021-3869 | Improper restriction of XML external entity reference in stanfordnlp/Corenlp | 7.5v3.1 | 1.4% | 2021-10-19 | Fix |
| CVE-2021-3863 | Cross-site scripting (XSS) Generic in snipe/Snipe-IT | 6.1v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-3858 | Cross-site request forgery (CSRF) in snipe/Snipe-IT | 8.8v3.1 | 0.5% | 2021-10-19 | Fix |
| CVE-2021-3851 | Open redirect in firefly-iii/firefly-iii | 5.4v3.1 | 0.6% | 2021-10-19 | Fix |
| CVE-2021-3846 | Unrestricted upload of file with dangerous type in firefly-iii/firefly-iii | 8.8v3.1 | 0.8% | 2021-10-19 | Fix |
| CVE-2021-3746 | libtpms memory corruption | 6.5NVD v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-3455 | zephyrproject-rtos Zephyr disconnecting L2CAP channel right after invalid ATT request leads freeze | 4.3CNA v3.1 | 1.1% | 2021-10-19 | |
| CVE-2021-3454 | zephyrproject-rtos Zephyr Truncated L2CAP K-frame causes assertion failure | 4.3CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-0299 | Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet | 7.5CNA v3.1 | 1.0% | 2021-10-19 | Fix |
| CVE-2021-0298 | Juniper Networks Junos OS Evolved 'show chassis pic' command race condition | 4.7CNA v3.1 | 0.2% | 2021-10-19 | Fix |
| CVE-2021-0297 | Juniper Junos OS Evolved TCP MD5 authentication vulnerability | 6.5CNA v3.1 | 0.7% | 2021-10-19 | Fix |
| CVE-2021-0296 | CTPView: HSTS not being enforced on CTPView server | 7.4CNA v3.1 | 0.5% | 2021-10-19 | Fix |
| CVE-2021-42650 | portainer cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-18 | |
| CVE-2021-42576 | bluemonday SELECT, STYLE and OPTION element sanitization vulnerability | 9.8v3.1 | 1.6% | 2021-10-18 | Fix |
| CVE-2021-42575 | Policies not properly enforced in OWASP Java HTML Sanitizer | 9.8v3.1 | 3.1% | 2021-10-18 | Fix |
| CVE-2021-42566 | Myfactory FMS cross-site scripting | 6.1v3.1 | 5.8% | 2021-10-18 | NucleiExploit code |
| CVE-2021-42565 | Myfactory FMS cross-site scripting | 6.1v3.1 | 5.8% | 2021-10-18 | NucleiExploit code |
| CVE-2021-42098 | Devolutions Remote Desktop Manager incorrect default permissions | 8.8v3.1 | 1.6% | 2021-10-18 | Fix |
| CVE-2021-42055 | ASUS UX582LR incorrect default permissions | 6.8v3.1 | 0.3% | 2021-10-18 | Fix |
| CVE-2021-41991 | strongSwan integer overflow | 7.5v3.1 | 5.2% | 2021-10-18 | Fix |
| CVE-2021-41990 | strongSwan integer overflow | 7.5v3.1 | 6.5% | 2021-10-18 | Fix |
| CVE-2021-41971 | Apache Superset possible SQL injection when template processing is enabled | 8.8v3.1 | 1.8% | 2021-10-18 | Fix |
| CVE-2021-41611 | squid-cache squid improper certificate validation | 7.5v3.1 | 2.9% | 2021-10-18 | Fix |
| CVE-2021-41156 | anuko timetracker reflected XSS | 6.8CNA v3.1 | 0.5% | 2021-10-18 | Fix |
| CVE-2021-41155 | Enalean tuleap SQL injection in CVS revisions browser | 8.8CNA v3.1 | 1.5% | 2021-10-18 | Fix |
| CVE-2021-41154 | Enalean tuleap SQL injection in the SVN core commits browser | 8.8CNA v3.1 | 1.5% | 2021-10-18 | Fix |
| CVE-2021-41153 | rust-blockchain evm specification non-compliance in JUMPI | 8.7CNA v3.1 | 1.0% | 2021-10-18 | Fix |
| CVE-2021-41152 | OpenOLAT path traversal in Folder component leading to local file inclusion | 7.7CNA v3.1 | 1.2% | 2021-10-18 | Fix |
| CVE-2021-41151 | Path traversal in @backstage/plugin-scaffolder-backend | 6.8CNA v3.1 | 1.3% | 2021-10-18 | Fix |
| CVE-2021-38562 | bestpractical Request Tracker observable discrepancy | 7.5v3.1 | 1.8% | 2021-10-18 | Fix |
| CVE-2021-38442 | FATEK Automation WinProladder project file parser vulnerability | 7.8v3.1 | 1.0% | 2021-10-18 | |
| CVE-2021-38440 | FATEK Automation WinProladder out-of-bounds read | 3.3v3.1 | 0.6% | 2021-10-18 | |
| CVE-2021-38438 | FATEK Automation WinProladder use-after-free | 7.8v3.1 | 1.0% | 2021-10-18 | |
| CVE-2021-38436 | FATEK Automation WinProladder project file parser memory corruption | 7.8v3.1 | 1.0% | 2021-10-18 | |
| CVE-2021-38434 | FATEK Automation WinProladder project file parser vulnerability | 7.8v3.1 | 1.0% | 2021-10-18 | |
| CVE-2021-38430 | FATEK Automation WinProladder project file parser stack-based buffer overflow | 7.8v3.1 | 1.0% | 2021-10-18 | |
| CVE-2021-38426 | FATEK Automation WinProladder project file parser out-of-bounds write | 7.8v3.1 | 1.0% | 2021-10-18 | |
| CVE-2021-38389 | Advantech WebAccess stack-based buffer overflow | 9.8v3.1 | 10.4% | 2021-10-18 | Fix |
| CVE-2021-38297 | Go WASM function invocation buffer overflow | 9.8v3.1 | 10.3% | 2021-10-18 | Exploit codeFix |
| CVE-2021-36513 | signalwire freeswitch missing resource initialization | 7.5v3.1 | 1.9% | 2021-10-18 | Fix |
| CVE-2021-36097 | OTRS ticket locking incorrect privilege assignment | 3.5CNA v3.1 | 0.5% | 2021-10-18 | Fix |
| CVE-2021-33023 | Advantech WebAccess heap-based buffer overflow | 9.8v3.1 | 2.3% | 2021-10-18 | Fix |
| CVE-2021-32609 | Apache Superset XSS vulnerability on Explore page | 5.4v3.1 | 1.7% | 2021-10-18 | Fix |
| CVE-2021-29878 | IBM Business Automation Workflow cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-10-18 | Fix |
| CVE-2021-24760 | Gutenberg PDF Viewer Block WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-24754 | MainWP Child Reports WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.4% | 2021-10-18 | Fix |
| CVE-2021-24752 | Multiple plugins from CatchThemes Unauthorised Plugin's Setting Change | 5.7NVD v3.1 | 0.4% | 2021-10-18 | Fix |
| CVE-2021-24743 | Podcast Subscribe Buttons WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24740 | Tutor LMS WordPress plugin Multiple Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24736 | Shared Files WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24735 | Compact WP Audio Player WordPress plugin setting Change via CSRF | 6.5NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24734 | Compact WP Audio Player WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-24732 | dearhive DearFlip shortcode class attribute stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-24702 | LearnPress WordPress plugin Multiple Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-24684 | PDF Light Viewer WordPress plugin authenticated command injection | 8.8NVD v3.1 | 4.3% | 2021-10-18 | Fix |
| CVE-2021-24677 | Find My Blocks WordPress plugin Private post Titles disclosure | 5.3NVD v3.1 | 1.3% | 2021-10-18 | Fix |
| CVE-2021-24675 | One User Avatar WordPress plugin Avatar update via CSRF | 6.5NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24672 | One User Avatar WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-24642 | Scroll Baner WordPress plugin CSRF to RCE | 6.5NVD v3.1 | 0.6% | 2021-10-18 | |
| CVE-2021-24622 | emarket-design Customer Service Software and Support Ticket System stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24617 | GamePress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-10-18 | |
| CVE-2021-24615 | Wechat Reward WordPress plugin CSRF to stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2021-10-18 | |
| CVE-2021-24612 | Sociable WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-18 | |
| CVE-2021-24595 | WP Cookie Choice WordPress plugin CSRF to stored cross-site scripting | 6.5NVD v3.1 | 0.5% | 2021-10-18 | |
| CVE-2021-24516 | PlanSo Forms WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-18 | |
| CVE-2021-24416 | StreamCast WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-18 | Fix |
| CVE-2021-24415 | Polo Video Gallery WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-18 | |
| CVE-2021-24413 | Easy Twitter Feed WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-24412 | Html5 Audio Player WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-10-18 | Fix |
| CVE-2021-23449 | Prototype pollution in vm2 | 10.0v3.1 | 3.6% | 2021-10-18 | Fix |
| CVE-2021-22961 | GlassWire code injection | 9.8v3.1 | 1.7% | 2021-10-18 | |
| CVE-2021-22942 | https://github.com/rails/rails open redirect in ActionPack | 6.1v3.1 | 1.7% | 2021-10-18 | Fix |
| CVE-2021-21797 | Nitro Pro JavaScript implementation double free | 7.8v3.1 | 15.0% | 2021-10-18 | |
| CVE-2021-21796 | Nitro Pro JavaScript implementation use-after-free | 7.8v3.1 | 15.8% | 2021-10-18 | |
| CVE-2021-42336 | Huachu Digital Technology Co.,Ltd. Easytest improper authorization | 4.3CNA v3.1 | 0.8% | 2021-10-15 | Fix |
| CVE-2021-42335 | Huachu Digital Technology Co.,Ltd. Easytest stored XSS | 5.4CNA v3.1 | 0.6% | 2021-10-15 | Fix |
| CVE-2021-42334 | Huachu Digital Technology Co.,Ltd. Easytest SQL injection-2 | 8.8v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-42333 | Huachu Digital Technology Co.,Ltd. Easytest SQL injection-1 | 8.8CNA v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-42332 | ShinHer Information Co., LTD. ShinHer StudyOnline System improper authorization-3 | 4.3CNA v3.1 | 0.8% | 2021-10-15 | Fix |
| CVE-2021-42331 | ShinHer Information Co., LTD. ShinHer StudyOnline System improper authorization-2 | 5.4CNA v3.1 | 0.6% | 2021-10-15 | Fix |
| CVE-2021-42330 | ShinHer Information Co., LTD. ShinHer StudyOnline System improper authorization-1 | 8.1NVD v3.1 | 1.0% | 2021-10-15 | Fix |
| CVE-2021-42329 | ShinHer Information Co., LTD. ShinHer StudyOnline System stored XSS | 5.4CNA v3.1 | 0.6% | 2021-10-15 | Fix |
| CVE-2021-41320 | Iongroup Wallstreet Suite technical user has hard-coded credentials | 5.5v3.1 | 0.2% | 2021-10-15 | Fix |
| CVE-2021-41148 | Enalean tuleap the update of the CI job targeted by a widget is vulnerable to blind SQL injections | 8.8CNA v3.1 | 1.5% | 2021-10-15 | Fix |
| CVE-2021-41147 | Enalean tuleap SQL injection in the planning edition panel | 7.2CNA v3.1 | 1.9% | 2021-10-15 | Fix |
| CVE-2021-40999 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 1.9% | 2021-10-15 | |
| CVE-2021-40998 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 2.9% | 2021-10-15 | |
| CVE-2021-40997 | Aruba ClearPass Policy Manager authentication bypass | 9.8v3.1 | 1.8% | 2021-10-15 | |
| CVE-2021-40996 | Aruba ClearPass Policy Manager authentication bypass | 9.8v3.1 | 1.8% | 2021-10-15 | |
| CVE-2021-40995 | Aruba ClearPass Policy Manager command injection | 6.3v3.1 | 1.2% | 2021-10-15 | |
| CVE-2021-40994 | Aruba ClearPass Policy Manager command injection | 6.3v3.1 | 1.2% | 2021-10-15 | |
| CVE-2021-40993 | Aruba ClearPass Policy Manager SQL injection | 8.1v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-40992 | Aruba ClearPass Policy Manager SQL injection | 7.2v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-40991 | Aruba ClearPass Policy Manager information disclosure | 7.2v3.1 | 1.3% | 2021-10-15 | Fix |
| CVE-2021-40990 | Aruba ClearPass Policy Manager information disclosure | 6.5v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-40989 | Aruba ClearPass Policy Manager privilege escalation | 7.8v3.1 | 0.2% | 2021-10-15 | Fix |
| CVE-2021-40988 | Aruba ClearPass Policy Manager path traversal | 7.2v3.1 | 3.9% | 2021-10-15 | Fix |
| CVE-2021-40987 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 2.9% | 2021-10-15 | |
| CVE-2021-40986 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 2.9% | 2021-10-15 | |
| CVE-2021-40731 | Adobe Acrobat Reader DC JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 8.3% | 2021-10-15 | Fix |
| CVE-2021-40730 | Adobe Acrobat Reader DC JPEG2000 Parsing use-after-free information disclosure | 3.3CNA v3.0 | 3.9% | 2021-10-15 | Fix |
| CVE-2021-40729 | Adobe Acrobat Reader DC PDF out-of-bound read vulnerability information disclosure | 3.3CNA v3.1 | 4.3% | 2021-10-15 | Fix |
| CVE-2021-40728 | Adobe Acrobat Reader DC use-after-free arbitrary code execution | 7.8CNA v3.1 | 54.6% | 2021-10-15 | Fix |
| CVE-2021-40724 | Adobe Acrobat Reader Android Abritrary code execution | 7.8CNA v3.1 | 3.6% | 2021-10-15 | Exploit codeFix |
| CVE-2021-40721 | Adobe Connect reflected cross-site scripting | 6.1CNA v3.1 | 1.0% | 2021-10-15 | Fix |
| CVE-2021-40720 | Adobe Ops-CLI ops CLI deserialization of untrusted data leads to Abritrary code execution | 9.8CNA v3.1 | 9.5% | 2021-10-15 | Fix |
| CVE-2021-39864 | Adobe Commerce cross-site request forgery (CSRF) could lead to Unauthorized Cart Addition | 6.5CNA v3.1 | 1.6% | 2021-10-15 | Fix |
| CVE-2021-39349 | Author Bio Box Authenticated stored cross-site scripting | 4.8v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-39345 | HAL authenticated stored cross-site scripting | 4.8v3.1 | 1.0% | 2021-10-15 | Fix |
| CVE-2021-39344 | KJM Admin Notices Authenticated stored cross-site scripting | 4.8v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-39338 | MyBB Cross-Poster Authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-15 | Fix |
| CVE-2021-39337 | job-portal authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-15 | Fix |
| CVE-2021-39336 | Job Manager Authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-15 | |
| CVE-2021-39335 | WpGenius Job Listing Authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-15 | Fix |
| CVE-2021-39334 | Job Board Vanila Plugin Authenticated stored cross-site scripting | 4.8v3.1 | 0.9% | 2021-10-15 | Fix |
| CVE-2021-39332 | Bzmngr Business Manager stored cross-site scripting | 4.8v3.1 | 0.5% | 2021-10-15 | Fix |
| CVE-2021-38432 | FATEK Automation Communication Server stack-based buffer overflow | 9.8v3.1 | 1.9% | 2021-10-15 | |
| CVE-2021-38431 | Advantech WebAccess/SCADA missing authorization | 4.3v3.1 | 0.7% | 2021-10-15 | Fix |
| CVE-2021-37739 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 2.9% | 2021-10-15 | Fix |
| CVE-2021-37738 | Aruba ClearPass Policy Manager missing authorization | 7.5v3.1 | 1.3% | 2021-10-15 | Fix |
| CVE-2021-37737 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 1.1% | 2021-10-15 | Fix |
| CVE-2021-37736 | Aruba ClearPass Policy Manager authentication bypass | 9.8v3.1 | 1.6% | 2021-10-15 | Fix |
| CVE-2021-29745 | IBM Cognos Analytics New Job page vulnerability | 5.4CNA v3.0 | 1.0% | 2021-10-15 | Fix |
| CVE-2021-29679 | IBM Cognos Analytics code injection | 8.8CNA v3.0 | 2.0% | 2021-10-15 | Fix |
| CVE-2021-28021 | stb function buffer overflow | 7.8v3.1 | 1.4% | 2021-10-15 | Fix |
| CVE-2021-27561 | Yealink Device Management server-side request forgery (SSRF) | 9.8v3.1 | 82.9% | 2021-10-15 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-3881 | Out-of-bounds read in bfabiszewski/Libmobi | 9.8v3.1 | 1.2% | 2021-10-15 | |
| CVE-2021-3878 | Improper restriction of XML external entity reference in stanfordnlp/Corenlp | 9.8v3.1 | 1.9% | 2021-10-15 | Fix |
| CVE-2021-3875 | Heap-based buffer overflow in Vim/Vim | 5.5NVD v3.1 | 1.5% | 2021-10-15 | Fix |
| CVE-2021-3874 | Path traversal in bookstackapp/BookStack | 6.5v3.1 | 1.2% | 2021-10-15 | Fix |
| CVE-2021-42369 | Zucchetti Imagicle Uc Suite SQL injection | 8.8NVD v3.1 | 1.1% | 2021-10-14 | Fix |
| CVE-2021-42342 | Embedthis GoAhead unrestricted file upload | 9.8NVD v3.1 | 59.5% | 2021-10-14 | Exploit code |
| CVE-2021-42341 | Openrc memory corruption | 7.5v3.1 | 2.1% | 2021-10-14 | |
| CVE-2021-42340 | Apache Tomcat DoS via memory leak with WebSocket connections | 7.5v3.1 | 11.0% | 2021-10-14 | Fix |
| CVE-2021-42228 | Kindsoft Kind Editor cross-site request forgery in kindeditor | 8.8v3.1 | 1.0% | 2021-10-14 | |
| CVE-2021-42227 | Kindsoft Kind Editor cross-site scripting in kindeditor | 6.1v3.1 | 0.9% | 2021-10-14 | |
| CVE-2021-41142 | Enalean tuleap XSS via the name of a deleted attachment | 5.4CNA v3.1 | 0.7% | 2021-10-14 | Fix |
| CVE-2021-41132 | omero-web inconsistent input sanitisation leads to XSS vectors | 9.8CNA v3.1 | 1.0% | 2021-10-14 | Fix |
| CVE-2021-40854 | AnyDesk improper privilege management | 7.8v3.1 | 0.2% | 2021-10-14 | Fix |
| CVE-2021-38346 | Brizy Authenticated unrestricted file upload and path traversal | 8.8CNA v3.1 | 1.7% | 2021-10-14 | Fix |
| CVE-2021-38345 | Brizy and incorrect authorization checks allowing Post modification | 6.5NVD v3.1 | 0.8% | 2021-10-14 | Fix |
| CVE-2021-38344 | Brizy Authenticated stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-14 | Fix |
| CVE-2021-38295 | Apache CouchDB privilege escalation vulnerability when using HTML attachments | 7.3v3.1 | 2.5% | 2021-10-14 | Exploit codeFix |
| CVE-2021-37933 | Huntflow Enterprise /account/login LDAP injection | 7.5v3.1 | 1.5% | 2021-10-14 | |
| CVE-2021-36389 | Yellowfinbi Yellowfin insecure direct object reference | 7.5v3.1 | 3.1% | 2021-10-14 | Fix |
| CVE-2021-36388 | Yellowfinbi Yellowfin insecure direct object reference | 7.5v3.1 | 3.2% | 2021-10-14 | Fix |
| CVE-2021-36387 | Yellowfinbi Yellowfin insecure direct object reference | 5.4v3.1 | 1.5% | 2021-10-14 | Fix |
| CVE-2021-33179 | Nagios XI cross-site scripting | 6.1v3.1 | 11.7% | 2021-10-14 | Fix |
| CVE-2021-33178 | Nagvis path traversal | 6.5v3.1 | 1.9% | 2021-10-14 | Fix |
| CVE-2021-33177 | Nagios XI SQL injection | 8.8v3.1 | 9.8% | 2021-10-14 | Fix |
| CVE-2021-32571 | Ericsson Operations Support System-radio And Core incomplete cleanup | 4.9v3.1 | 0.9% | 2021-10-14 | |
| CVE-2021-32569 | Ericsson Operations Support System-radio And Core cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-14 | |
| CVE-2021-22964 | https://github.com/fastify/fastify-static DOS and open redirect with user input | 8.8v3.1 | 1.0% | 2021-10-14 | Fix |
| CVE-2021-22963 | URL redirection to untrusted site (open redirect) in fastify-static | 6.1v3.1 | 1.2% | 2021-10-14 | Fix |
| CVE-2021-20599 | Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remo | 9.1CNA v3.1 | 1.4% | 2021-10-14 | Fix |
| CVE-2021-3882 | Sensitive Cookie in HTTPS Session without Secure attribute in LedgerSMB/LedgerSMB | 6.8v3.1 | 1.1% | 2021-10-14 | Fix |
| CVE-2021-42224 | PHPGurukul Ifsc Code Finder SQL injection | 9.8v3.1 | 2.3% | 2021-10-13 | |
| CVE-2021-42223 | PHPGurukul Online DJ Booking Management System cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-13 | |
| CVE-2021-41363 | Microsoft Intune management extension security feature bypass | 4.2CNA v3.1 | 0.5% | 2021-10-13 | Fix |
| CVE-2021-41361 | Microsoft Windows Active Directory Federation Server spoofing | 5.4CNA v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-41357 | Microsoft Win32k privilege escalation | 7.8CNA v3.1 | 1.6% | 2021-10-13 | KEVFix |
| CVE-2021-41355 | NET Core and Visual Studio information disclosure | 5.7CNA v3.1 | 20.3% | 2021-10-13 | Fix |
| CVE-2021-41354 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-41353 | Microsoft Dynamics 365 (on-premises) spoofing | 5.4CNA v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-41352 | Microsoft System Center 2016 Operations Manager SCOM information disclosure | 7.5CNA v3.1 | 2.9% | 2021-10-13 | Fix |
| CVE-2021-41350 | Microsoft Exchange Server spoofing | 6.5CNA v3.1 | 1.9% | 2021-10-13 | Fix |
| CVE-2021-41348 | Microsoft Exchange Server elevation of privilege | 8.0CNA v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-41347 | Microsoft Windows AppX Deployment service elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-41346 | Microsoft Windows console window host security feature bypass | 5.3CNA v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-41345 | Microsoft Windows storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-41344 | Microsoft SharePoint server remote code execution | 8.1CNA v3.1 | 6.5% | 2021-10-13 | Fix |
| CVE-2021-41343 | Microsoft Windows Fast FAT File System driver information disclosure | 5.5CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-41342 | Microsoft Windows MSHTML Platform remote code execution | 6.8CNA v3.1 | 1.6% | 2021-10-13 | Fix |
| CVE-2021-41340 | Microsoft Windows Graphics component remote code execution | 7.8CNA v3.1 | 2.0% | 2021-10-13 | Fix |
| CVE-2021-41339 | Microsoft DWM Core library elevation of privilege | 4.7CNA v3.1 | 0.5% | 2021-10-13 | Fix |
| CVE-2021-41338 | Microsoft Windows AppContainer Firewall Rules security feature bypass | 5.5CNA v3.1 | 3.3% | 2021-10-13 | Exploit codeFix |
| CVE-2021-41337 | Microsoft Windows active Directory security feature bypass | 4.9CNA v3.1 | 1.6% | 2021-10-13 | Fix |
| CVE-2021-41336 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-41335 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.4% | 2021-10-13 | Fix |
| CVE-2021-41334 | Microsoft Windows Desktop Bridge elevation of privilege | 7.0CNA v3.1 | 0.4% | 2021-10-13 | Fix |
| CVE-2021-41332 | Microsoft Windows Print Spooler information disclosure | 6.5CNA v3.1 | 2.7% | 2021-10-13 | Fix |
| CVE-2021-41331 | Microsoft Windows Media Audio Decoder remote code execution | 7.8CNA v3.1 | 2.0% | 2021-10-13 | Fix |
| CVE-2021-41330 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 2.0% | 2021-10-13 | Fix |
| CVE-2021-41139 | anuko timetracker reflected XSS vulnerability in time.php | 8.1CNA v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-41138 | Validity check missing in Frontier | 5.3CNA v3.1 | 1.4% | 2021-10-13 | Fix |
| CVE-2021-41137 | minio bypassing policy restrictions on regular users | 8.8CNA v3.1 | 1.3% | 2021-10-13 | |
| CVE-2021-41075 | Zoho ManageEngine OpManager SQL injection | 9.8v3.1 | 3.4% | 2021-10-13 | Fix |
| CVE-2021-40843 | Proofpoint Insider Threat Management Server deserialization of untrusted data | 7.3v3.1 | 0.5% | 2021-10-13 | Fix |
| CVE-2021-40842 | Proofpoint Insider Threat Management Server SQL injection | 9.8v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-40732 | Adobe XMP Toolkit SDK null pointer dereference | 6.1CNA v3.1 | 2.4% | 2021-10-13 | Fix |
| CVE-2021-40493 | Zoho ManageEngine OpManager SQL injection | 9.8v3.1 | 50.2% | 2021-10-13 | Fix |
| CVE-2021-40489 | Microsoft Windows storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-40488 | Microsoft Windows storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-40487 | Microsoft SharePoint server remote code execution | 8.1CNA v3.1 | 48.2% | 2021-10-13 | Fix |
| CVE-2021-40486 | Microsoft Word remote code execution | 7.8CNA v3.1 | 6.0% | 2021-10-13 | Fix |
| CVE-2021-40485 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.7% | 2021-10-13 | Fix |
| CVE-2021-40484 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.4% | 2021-10-13 | Fix |
| CVE-2021-40483 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.4% | 2021-10-13 | Fix |
| CVE-2021-40482 | Microsoft SharePoint server information disclosure | 5.3CNA v3.1 | 2.3% | 2021-10-13 | Fix |
| CVE-2021-40481 | Microsoft Office Visio remote code execution | 7.1CNA v3.1 | 5.9% | 2021-10-13 | Fix |
| CVE-2021-40480 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 5.7% | 2021-10-13 | Fix |
| CVE-2021-40479 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2021-10-13 | Fix |
| CVE-2021-40478 | Microsoft Windows storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-40477 | Microsoft Windows Event Tracing elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-40476 | Microsoft Windows AppContainer elevation of privilege | 7.5CNA v3.1 | 2.4% | 2021-10-13 | Fix |
| CVE-2021-40475 | Microsoft Windows Cloud Files Mini Filter driver information disclosure | 5.5CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-40474 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2021-10-13 | Fix |
| CVE-2021-40473 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2021-10-13 | Fix |
| CVE-2021-40472 | Microsoft Excel information disclosure | 5.5CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-40471 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2021-10-13 | Fix |
| CVE-2021-40470 | Microsoft Windows DirectX Graphics Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-40469 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 7.6% | 2021-10-13 | Fix |
| CVE-2021-40468 | Microsoft Windows Bind Filter driver information disclosure | 5.5CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-40467 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-10-13 | Fix |
| CVE-2021-40466 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-40465 | Microsoft Windows Text Shaping remote code execution | 7.8CNA v3.1 | 2.5% | 2021-10-13 | Fix |
| CVE-2021-40464 | Microsoft Windows Nearby Sharing elevation of privilege | 8.0CNA v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-40463 | Microsoft Windows Network Address Translation (NAT) denial of service | 7.7CNA v3.1 | 2.6% | 2021-10-13 | Fix |
| CVE-2021-40462 | Microsoft Windows Media Foundation Dolby Digital Atmos Decoders remote code execution | 7.8CNA v3.1 | 2.5% | 2021-10-13 | Fix |
| CVE-2021-40461 | Microsoft Windows Hyper-V remote code execution | 8.0CNA v3.1 | 1.4% | 2021-10-13 | Fix |
| CVE-2021-40460 | Microsoft Windows Remote Procedure Call Runtime security feature bypass | 6.5CNA v3.1 | 1.6% | 2021-10-13 | Fix |
| CVE-2021-40457 | Microsoft Dynamics 365 Customer Engagement cross-site scripting | 7.4CNA v3.1 | 1.6% | 2021-10-13 | Fix |
| CVE-2021-40456 | Microsoft Windows AD FS security feature bypass | 5.3CNA v3.1 | 2.3% | 2021-10-13 | Fix |
| CVE-2021-40455 | Microsoft Windows Installer spoofing | 5.5CNA v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-40454 | Microsoft Windows Rich Text Edit Control information disclosure | 5.5CNA v3.1 | 0.5% | 2021-10-13 | Fix |
| CVE-2021-40450 | Microsoft Win32k privilege escalation | 7.8CNA v3.1 | 1.6% | 2021-10-13 | KEVFix |
| CVE-2021-40449 | Microsoft Windows Win32k privilege escalation | 7.8CNA v3.1 | 81.9% | 2021-10-13 | KEVExploit codeFix |
| CVE-2021-40443 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-39304 | Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. | 7.5v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-38672 | Microsoft Windows Hyper-V remote code execution | 8.0CNA v3.1 | 1.1% | 2021-10-13 | Fix |
| CVE-2021-38663 | Microsoft Windows exFAT file system information disclosure | 5.5CNA v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-38662 | Microsoft Windows Fast FAT File System driver information disclosure | 5.5CNA v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-36970 | Microsoft Windows Print Spooler spoofing | 8.8CNA v3.1 | 3.1% | 2021-10-13 | Fix |
| CVE-2021-36953 | Microsoft Windows TCP/IP denial of service | 7.5CNA v3.1 | 5.0% | 2021-10-13 | Fix |
| CVE-2021-35498 | TIBCO EBX Insecure Login Mechanism | 9.8CNA v3.1 | 1.3% | 2021-10-13 | Fix |
| CVE-2021-34814 | Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass. | 7.5v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-34453 | Microsoft Exchange Server denial of service | 7.5CNA v3.1 | 2.8% | 2021-10-13 | Fix |
| CVE-2021-33609 | Denial of service in DataCommunicator class in Vaadin 8 | 4.3CNA v3.1 | 0.9% | 2021-10-13 | Fix |
| CVE-2021-26442 | Microsoft Windows HTTP.sys elevation of privilege | 7.0CNA v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-26441 | Microsoft Windows storage Spaces controller elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-10-13 | Fix |
| CVE-2021-26427 | Microsoft Exchange Server remote code execution | 9.0CNA v3.1 | 0.9% | 2021-10-13 | Fix |
| CVE-2021-26318 | AMD All supported processors Side-channels Related to the x86 PREFETCH Instruction | 4.7v3.1 | 0.3% | 2021-10-13 | Fix |
| CVE-2021-22036 | VMware vRealize Orchestrator open redirect | 6.5v3.1 | 0.9% | 2021-10-13 | Fix |
| CVE-2021-22035 | VMware vRealize Log Insight injection | 4.3v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-22033 | VMware vRealize Operations server-side request forgery | 2.7v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20834 | Nike App handler for custom URL scheme vulnerability improper authorization | 6.1v3.1 | 1.2% | 2021-10-13 | Fix |
| CVE-2021-20833 | SODA SNKRDUNK Market Place App improper certificate validation | 7.4v3.1 | 0.5% | 2021-10-13 | Fix |
| CVE-2021-20832 | InBody Japan InBody App information disclosure | 5.3v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-20831 | Mario Valney OG Tags cross-site request forgery | 8.8v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-20807 | Cybozu Remote Service management screen cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-20806 | Cybozu Remote Service open redirect | 6.1v3.1 | 0.8% | 2021-10-13 | Fix |
| CVE-2021-20805 | Cybozu Remote Service management screen cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20804 | Cybozu Remote Service denial of service | 6.5v3.1 | 1.1% | 2021-10-13 | Fix |
| CVE-2021-20803 | Cybozu Remote Service incorrect authorization | 5.4v3.1 | 0.7% | 2021-10-13 | Fix |
| CVE-2021-20802 | Cybozu Remote Service HTTP header injection | 5.3v3.1 | 1.0% | 2021-10-13 | Fix |
| CVE-2021-20801 | Cybozu Remote Service XML external entity injection | 6.5v3.1 | 1.1% | 2021-10-13 | Fix |
| CVE-2021-20800 | Cybozu Remote Service management screen cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20799 | Cybozu Remote Service management screen cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20798 | Cybozu Remote Service management screen cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20797 | Cybozu Remote Service cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20796 | Cybozu Remote Service management screen path traversal | 6.5v3.1 | 1.5% | 2021-10-13 | Fix |
| CVE-2021-20795 | Cybozu Remote Service management screen cross-site request forgery | 8.8v3.1 | 0.6% | 2021-10-13 | Fix |
| CVE-2021-20131 | ManageEngine ADManager Plus Build 7111 unrestricted file upload | 8.8NVD v3.1 | 16.8% | 2021-10-13 | |
| CVE-2021-20130 | ManageEngine ADManager Plus Build 7111 unrestricted file upload | 8.8NVD v3.1 | 32.5% | 2021-10-13 | |
| CVE-2021-20129 | Draytek VigorConnect An information disclosure | 7.5NVD v3.1 | 1.7% | 2021-10-13 | |
| CVE-2021-20128 | Draytek VigorConnect cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-13 | |
| CVE-2021-20127 | Draytek VigorConnect arbitrary file deletion | 8.1NVD v3.1 | 1.1% | 2021-10-13 | |
| CVE-2021-20126 | Draytek VigorConnect cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2021-10-13 | |
| CVE-2021-20125 | Draytek VigorConnect arbitrary file upload | 9.8NVD v3.1 | 3.9% | 2021-10-13 | |
| CVE-2021-20124 | Draytek VigorConnect path traversal | 7.5NVD v3.1 | 96.3% | 2021-10-13 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-20123 | Draytek VigorConnect path traversal | 7.5NVD v3.1 | 90.2% | 2021-10-13 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-3057 | GlobalProtect App: Buffer overflow vulnerability when Connecting to portal or Gateway | 8.1CNA v3.1 | 1.4% | 2021-10-13 | Fix |
| CVE-2021-42326 | Redmine activity views vulnerability | 5.3v3.1 | 1.2% | 2021-10-12 | Fix |
| CVE-2021-42325 | Froxlor SQL injection | 9.8v3.1 | 11.8% | 2021-10-12 | Exploit codeFix |
| CVE-2021-42009 | Apache Traffic Control Traffic Ops Email injection | 4.3v3.1 | 2.8% | 2021-10-12 | Fix |
| CVE-2021-41546 | Siemens RUGGEDCOM ROX MX5000 resource exhaustion | 7.5v3.1 | 1.0% | 2021-10-12 | Fix |
| CVE-2021-41136 | Inconsistent interpretation of HTTP requests (HTTP request smuggling) in puma | 3.7CNA v3.1 | 1.2% | 2021-10-12 | Fix |
| CVE-2021-40618 | OS4ED Opensis An SQL injection | 9.8v3.1 | 1.4% | 2021-10-12 | |
| CVE-2021-40500 | SAP Business Objects Business Intelligence Platform (Crystal Reports) XML external entity injection | 7.5v3.1 | 1.3% | 2021-10-12 | Fix |
| CVE-2021-40499 | SAP NetWeaver Application Server for ABAP code injection | 9.8v3.1 | 1.2% | 2021-10-12 | Fix |
| CVE-2021-40498 | SAP SuccessFactors Mobile Application denial of service | 5.5v3.1 | 0.2% | 2021-10-12 | Fix |
| CVE-2021-40497 | SAP BusinessObjects Analysis information disclosure | 5.3v3.1 | 0.9% | 2021-10-12 | Fix |
| CVE-2021-40496 | SAP NetWeaver AS ABAP and ABAP Platform resource exposure | 4.3v3.1 | 1.0% | 2021-10-12 | Fix |
| CVE-2021-40495 | SAP NetWeaver AS ABAP and ABAP Platform There are multiple denial of service | 5.3v3.1 | 1.1% | 2021-10-12 | Fix |
| CVE-2021-40292 | Dzzoffice cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-12 | |
| CVE-2021-39184 | electron sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API | 6.8CNA v3.1 | 1.1% | 2021-10-12 | Fix |
| CVE-2021-38915 | IBM Data Risk Manager cleartext storage of sensitive information | 5.3CNA v3.0 | 0.5% | 2021-10-12 | Fix |
| CVE-2021-38862 | IBM Data Risk Manager inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-10-12 | Fix |
| CVE-2021-38460 | Moxa MXview Network Management Software path traversal | 7.5v3.1 | 1.8% | 2021-10-12 | Fix |
| CVE-2021-38458 | Moxa MXview Network Management Software path traversal | 9.8v3.1 | 1.8% | 2021-10-12 | Fix |
| CVE-2021-38456 | Moxa MXview Network Management Software hard-coded password | 9.8v3.1 | 1.2% | 2021-10-12 | Fix |