CVE-2021 records published in October 2021
Page two of two: records 1,001 to 1,553 of the 1,553 published in October 2021, newest first. The first page carries the figures for October 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-38454 | Moxa MXview Network Management Software path traversal | 10.0v3.1 | 15.8% | 2021-10-12 | Emerging ThreatsFix |
| CVE-2021-38452 | Moxa MXview Network Management Software path traversal | 9.1v3.1 | 1.7% | 2021-10-12 | Fix |
| CVE-2021-38183 | SAP NetWeaver cross-site scripting | 6.1v3.1 | 0.7% | 2021-10-12 | Fix |
| CVE-2021-38181 | SAP NetWeaver AS ABAP and ABAP Platform denial of service | 7.5v3.1 | 1.1% | 2021-10-12 | Fix |
| CVE-2021-38180 | SAP Business One CSV injection | 9.8v3.1 | 2.1% | 2021-10-12 | Fix |
| CVE-2021-38179 | SAP Business One Admin UI debug function vulnerability | 4.9v3.1 | 0.8% | 2021-10-12 | Fix |
| CVE-2021-38178 | SAP NetWeaver AS ABAP and ABAP Platform software logistics system vulnerability | 8.8v3.1 | 1.3% | 2021-10-12 | Fix |
| CVE-2021-37735 | HPE Aruba Instant (IAP) format string | 5.3v3.1 | 1.3% | 2021-10-12 | Fix |
| CVE-2021-37734 | HPE Aruba Instant (IAP) path traversal | 6.5v3.1 | 1.0% | 2021-10-12 | Fix |
| CVE-2021-37732 | HPE Aruba Instant (IAP) OS command injection | 7.2v3.1 | 3.1% | 2021-10-12 | Fix |
| CVE-2021-37730 | HPE Aruba Instant (IAP) OS command injection | 7.2v3.1 | 3.1% | 2021-10-12 | Fix |
| CVE-2021-37727 | HPE Aruba Instant (IAP) OS command injection | 7.2v3.1 | 3.1% | 2021-10-12 | Fix |
| CVE-2021-37726 | HPE Aruba Instant (IAP) buffer overflow | 9.8v3.1 | 2.4% | 2021-10-12 | Fix |
| CVE-2021-37199 | Siemens SINUMERIK 808D heap-based buffer overflow | 7.5v3.1 | 1.1% | 2021-10-12 | Fix |
| CVE-2021-35496 | TIBCO JasperReports XML Eternal Entity (XXE) | 7.5CNA v3.1 | 0.6% | 2021-10-12 | Fix |
| CVE-2021-35495 | TIBCO JasperReports FTP Password exposed | 9.0CNA v3.1 | 0.8% | 2021-10-12 | Fix |
| CVE-2021-35494 | TIBCO JasperReports unauthorized access to temporary object | 5.7CNA v3.1 | 0.5% | 2021-10-12 | Fix |
| CVE-2021-35214 | SolarWinds Pingdom insufficient session expiration | 4.8CNA v3.1 | 1.8% | 2021-10-12 | Fix |
| CVE-2021-33736 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 1.2% | 2021-10-12 | Fix |
| CVE-2021-33735 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 1.2% | 2021-10-12 | Fix |
| CVE-2021-33734 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 27.7% | 2021-10-12 | Fix |
| CVE-2021-33733 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 15.4% | 2021-10-12 | Fix |
| CVE-2021-33732 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 27.7% | 2021-10-12 | Fix |
| CVE-2021-33731 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 46.6% | 2021-10-12 | Fix |
| CVE-2021-33730 | Siemens SINEC NMS SQL injection | 7.2v3.1 | 27.7% | 2021-10-12 | Fix |
| CVE-2021-33729 | Siemens SINEC NMS SQL injection | 8.8v3.1 | 2.4% | 2021-10-12 | Fix |
| CVE-2021-33728 | Siemens SINEC NMS deserialization of untrusted data | 7.2v3.1 | 1.6% | 2021-10-12 | Fix |
| CVE-2021-33727 | Siemens SINEC NMS information disclosure | 6.5v3.1 | 0.9% | 2021-10-12 | Fix |
| CVE-2021-33726 | Siemens SINEC NMS path traversal | 7.5v3.1 | 1.2% | 2021-10-12 | Fix |
| CVE-2021-33725 | Siemens SINEC NMS path traversal | 9.1v3.1 | 1.0% | 2021-10-12 | Fix |
| CVE-2021-33724 | Siemens SINEC NMS path traversal | 9.1v3.1 | 1.0% | 2021-10-12 | Fix |
| CVE-2021-33723 | Siemens SINEC NMS improper authorization | 6.5v3.1 | 0.6% | 2021-10-12 | Fix |
| CVE-2021-33722 | Siemens SINEC NMS path traversal | 4.9v3.1 | 0.9% | 2021-10-12 | Fix |
| CVE-2021-29645 | Hitachi JP1/IT Desktop Management 2 local privilege escalation | 7.8v3.1 | 0.2% | 2021-10-12 | Fix |
| CVE-2021-29644 | Hitachi JP1/IT Desktop Management 2 integer overflow | 9.8v3.1 | 2.5% | 2021-10-12 | Fix |
| CVE-2021-27395 | Siemens SIMATIC Process Historian 2013 and earlier missing authentication | 8.1v3.1 | 0.8% | 2021-10-12 | Fix |
| CVE-2021-27003 | Clustered Data ONTAP clickjacking | 4.7v3.1 | 0.6% | 2021-10-12 | Fix |
| CVE-2021-25634 | The Document Foundation LibreOffice Timestamp Manipulation with Signature Wrapping | 7.5v3.1 | 0.7% | 2021-10-12 | Fix |
| CVE-2021-21941 | Anker pushMuxer CreatePushThread functionality use-after-free | 9.0v3.1 | 1.7% | 2021-10-12 | |
| CVE-2021-21940 | Anker pushMuxer processRtspInfo functionality heap-based buffer overflow | 10.0v3.1 | 1.3% | 2021-10-12 | |
| CVE-2021-20031 | SonicWall SonicOS open redirect | 6.1v3.1 | 13.0% | 2021-10-12 | NucleiExploit codeFix |
| CVE-2021-3671 | samba way null pointer dereference | 6.5NVD v3.1 | 2.1% | 2021-10-12 | Fix |
| CVE-2021-3330 | zephyrproject-rtos Zephyr out-of-bounds write | 7.1CNA v3.1 | 0.6% | 2021-10-12 | |
| CVE-2021-3323 | Integer underflow in 6LoWPAN IPHC Header Uncompression in Zephyr | 8.3CNA v3.1 | 0.9% | 2021-10-12 | |
| CVE-2021-3322 | Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr | 6.5CNA v3.1 | 0.5% | 2021-10-12 | |
| CVE-2021-3321 | Integer underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal | 7.5CNA v3.1 | 0.8% | 2021-10-12 | |
| CVE-2021-42260 | Tinyxml infinite loop | 7.5NVD v3.1 | 3.3% | 2021-10-11 | Fix |
| CVE-2021-42257 | check_smart device path check improper input validation | 7.1v3.1 | 0.4% | 2021-10-11 | |
| CVE-2021-42252 | Linux kernel Aspeed LPC control driver vulnerability | 7.8v3.1 | 0.4% | 2021-10-11 | Fix |
| CVE-2021-42139 | Deno Standard Modules code injection | 9.8v3.1 | 2.1% | 2021-10-11 | Fix |
| CVE-2021-42137 | zammad incorrect authorization | 5.3v3.1 | 0.8% | 2021-10-11 | Fix |
| CVE-2021-42135 | Incorrect privilege assignment in HashiCorp Vault | 8.1v3.1 | 0.8% | 2021-10-11 | Fix |
| CVE-2021-42134 | Cross-site scripting in Django-unicorn | 6.1v3.1 | 0.7% | 2021-10-11 | Fix |
| CVE-2021-41832 | Apache OpenOffice Content Manipulation with Certificate Validation Attack | 7.5v3.1 | 1.3% | 2021-10-11 | Fix |
| CVE-2021-41831 | Apache OpenOffice Timestamp Manipulation with Signature Wrapping | 5.3v3.1 | 1.5% | 2021-10-11 | Fix |
| CVE-2021-41830 | Apache OpenOffice Double Certificate Attack | 7.5v3.1 | 1.4% | 2021-10-11 | Fix |
| CVE-2021-41801 | MediaWiki ReplaceText extension improper access control | 8.8v3.1 | 1.2% | 2021-10-11 | Fix |
| CVE-2021-41800 | MediaWiki allows a denial of service | 5.3v3.1 | 1.8% | 2021-10-11 | Fix |
| CVE-2021-41799 | mediawiki resource exhaustion | 7.5v3.1 | 1.7% | 2021-10-11 | Fix |
| CVE-2021-41798 | mediawiki cross-site scripting | 6.1v3.1 | 1.3% | 2021-10-11 | Fix |
| CVE-2021-41117 | juliangruber keypair insecure random number generation | 8.7CNA v3.1 | 3.1% | 2021-10-11 | Fix |
| CVE-2021-41055 | Gajim denial of service | 7.5v3.1 | 1.6% | 2021-10-11 | Fix |
| CVE-2021-40889 | Adobe CMSUno code execution | 9.8v3.1 | 1.8% | 2021-10-11 | |
| CVE-2021-40888 | ProjectSend cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-11 | |
| CVE-2021-40887 | Adobe Projectsend path traversal | 9.8v3.1 | 2.4% | 2021-10-11 | |
| CVE-2021-40886 | Adobe Projectsend path traversal | 6.5v3.1 | 1.4% | 2021-10-11 | |
| CVE-2021-40884 | ProjectSend missing authorization | 8.1v3.1 | 1.0% | 2021-10-11 | |
| CVE-2021-40617 | OS4ED Opensis An SQL injection | 9.8v3.1 | 5.2% | 2021-10-11 | Exploit code |
| CVE-2021-40543 | OS4ED Opensis SQL injection | 9.8v3.1 | 1.1% | 2021-10-11 | |
| CVE-2021-40542 | OS4ED Opensis cross-site scripting | 6.1v3.1 | 3.2% | 2021-10-11 | Nuclei |
| CVE-2021-40541 | PHPFusion cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-11 | |
| CVE-2021-40239 | Miniftpd latest version buffer overflow | 9.8v3.1 | 1.4% | 2021-10-11 | |
| CVE-2021-40191 | Dzzoffice cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-11 | |
| CVE-2021-40189 | PHPFusion unrestricted file upload | 7.2v3.1 | 1.8% | 2021-10-11 | |
| CVE-2021-40188 | PHPFusion unrestricted file upload | 7.2v3.1 | 1.3% | 2021-10-11 | |
| CVE-2021-39317 | AccessPress Themes Authenticated Malicious file upload | 8.8v3.1 | 1.7% | 2021-10-11 | Fix |
| CVE-2021-37123 | Hero-CT060 There is an improper authentication | 9.8v3.1 | 0.8% | 2021-10-11 | Fix |
| CVE-2021-35060 | Openwaygroup WAY4 information disclosure through error messages | 5.3v3.1 | 0.8% | 2021-10-11 | Fix |
| CVE-2021-35059 | Openwaygroup WAY4 cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-32028 | PostgreSQL information disclosure | 6.5NVD v3.1 | 1.6% | 2021-10-11 | Fix |
| CVE-2021-29006 | rConfig path traversal | 6.5v3.1 | 5.5% | 2021-10-11 | Nuclei |
| CVE-2021-29005 | rConfig incorrect default permissions | 8.8v3.1 | 2.2% | 2021-10-11 | |
| CVE-2021-29004 | rConfig SQL injection | 8.8v3.1 | 2.1% | 2021-10-11 | |
| CVE-2021-27665 | Johnson Controls exacqVision Server integer overflow | 7.5CNA v3.1 | 1.6% | 2021-10-11 | Fix |
| CVE-2021-27664 | Johnson Controls exacqVision Web Service improper privilege management | 9.8CNA v3.1 | 1.6% | 2021-10-11 | Fix |
| CVE-2021-27002 | NetApp Cloud Manager web proxy information disclosure | 7.5v3.1 | 1.4% | 2021-10-11 | Fix |
| CVE-2021-26588 | HPE 3PAR StoreServ, Primera and Alletra 9000 storage array firmware remote code execution | 9.8v3.1 | 1.8% | 2021-10-11 | Fix |
| CVE-2021-25738 | Kubernetes Java Client code exec via yaml parsing | 6.7CNA v3.1 | 0.5% | 2021-10-11 | Fix |
| CVE-2021-25633 | The Document Foundation LibreOffice Content Manipulation with Double Certificate Attack | 7.5v3.1 | 0.7% | 2021-10-11 | Fix |
| CVE-2021-24737 | Comments - wpDiscuz WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24720 | GeoDirectory WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.9% | 2021-10-11 | Fix |
| CVE-2021-24719 | Enfold WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 3.0% | 2021-10-11 | Exploit codeFix |
| CVE-2021-24712 | Appointment Hour Booking WordPress Booking plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24711 | Software License Manager WordPress plugin arbitrary Domain deletion via CSRF | 8.8NVD v3.1 | 0.7% | 2021-10-11 | Fix |
| CVE-2021-24709 | Weather Effect WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24691 | Quiz And Survey Master WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24690 | Chained Quiz WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24683 | Weather Effect WordPress plugin CSRF to stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2021-10-11 | Fix |
| CVE-2021-24681 | Duplicate Page WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.9% | 2021-10-11 | NucleiFix |
| CVE-2021-24656 | Simple Social Media Share Buttons WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24651 | Poll Maker WordPress plugin unauthenticated Time based SQL injection | 7.5NVD v3.1 | 1.6% | 2021-10-11 | Fix |
| CVE-2021-24577 | Coming Soon and Maintenance Mode WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24576 | Easy Accordion WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.6% | 2021-10-11 | Fix |
| CVE-2021-24563 | Frontend Uploader WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 26.3% | 2021-10-11 | Emerging ThreatsExploit code |
| CVE-2021-24546 | EditorsKit WordPress plugin Contributor+ arbitrary PHP code execution | 8.8NVD v3.1 | 1.8% | 2021-10-11 | Fix |
| CVE-2021-24545 | WP HTML Author Bio WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 1.8% | 2021-10-11 | Exploit code |
| CVE-2021-23448 | config-handler prototype pollution | 9.8v3.1 | 1.2% | 2021-10-11 | Fix |
| CVE-2021-22263 | GitLab improper privilege management | 5.5CNA v3.1 | 1.1% | 2021-10-11 | Fix |
| CVE-2021-20122 | Adobe The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware command injection | 7.2NVD v3.1 | 6.5% | 2021-10-11 | |
| CVE-2021-20121 | Telus Wi-Fi Hub (PRV65B444A-S-TS) arbitrary file read | 4.0NVD v3.1 | 0.5% | 2021-10-11 | |
| CVE-2021-0583 | Android BluetoothPairingDialog privilege escalation | 7.3v3.1 | 0.1% | 2021-10-11 | Fix |
| CVE-2021-25966 | OrchardCore Users Orchard Core CMS Improper Session Termination after Password Change | 8.8v3.1 | 1.1% | 2021-10-10 | |
| CVE-2021-42112 | Cross-site scripting in LimeSurvey | 6.1v3.1 | 1.5% | 2021-10-08 | Fix |
| CVE-2021-42109 | VITEC Exterity Avediaserver insecure default initialization | 9.8v3.1 | 1.7% | 2021-10-08 | |
| CVE-2021-41976 | Tad Uploader improper authorization | 5.3v3.1 | 1.0% | 2021-10-08 | Fix |
| CVE-2021-41975 | Tad TadTools improper authorization | 9.1v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-41974 | Tad Book3 improper authorization | 9.1v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-41947 | Intelliants Subrion CMS SQL injection | 7.2v3.1 | 1.2% | 2021-10-08 | |
| CVE-2021-41920 | WebTareas SQL injection | 7.5v3.1 | 1.7% | 2021-10-08 | |
| CVE-2021-41919 | WebTareas unrestricted file upload | 8.8v3.1 | 2.4% | 2021-10-08 | |
| CVE-2021-41918 | WebTareas cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-08 | |
| CVE-2021-41917 | WebTareas cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-08 | |
| CVE-2021-41916 | WebTareas cross-site request forgery | 8.8v3.1 | 0.8% | 2021-10-08 | |
| CVE-2021-41825 | Verint Workforce Optimization cross-site scripting | 5.3v3.1 | 1.1% | 2021-10-08 | Fix |
| CVE-2021-41802 | HashiCorp Vault privilege escalation | 5.4v3.1 | 0.6% | 2021-10-08 | Fix |
| CVE-2021-41568 | Tad Web improper authorization | 6.5v3.1 | 1.0% | 2021-10-08 | Fix |
| CVE-2021-41567 | Tad Uploader stored XSS | 6.1v3.1 | 0.6% | 2021-10-08 | Fix |
| CVE-2021-41566 | Tad TadTools arbitrary file upload | 9.8v3.1 | 2.0% | 2021-10-08 | Fix |
| CVE-2021-41565 | Tad TadTools reflected XSS | 6.1v3.1 | 0.7% | 2021-10-08 | Fix |
| CVE-2021-41564 | Tad Honor improper authorization | 6.5v3.1 | 1.0% | 2021-10-08 | Fix |
| CVE-2021-41563 | Tad Book3 stored XSS | 6.1v3.1 | 0.6% | 2021-10-08 | Fix |
| CVE-2021-41133 | flatpak sandbox bypass via recent VFS-manipulating syscalls | 8.8CNA v3.1 | 0.4% | 2021-10-08 | Fix |
| CVE-2021-40832 | F-Secure Atlant AVRDL unpacking module denial of service | 6.5v3.1 | 0.6% | 2021-10-08 | Fix |
| CVE-2021-37976 | Google Chromium information disclosure | 6.5v3.1 | 19.9% | 2021-10-08 | KEVKCVFix |
| CVE-2021-37975 | Google Chromium V8 use-after-free | 8.8v3.1 | 34.9% | 2021-10-08 | KEVFix |
| CVE-2021-37974 | Google Chrome Safebrowsing use-after-free | 8.8v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-37973 | Google Chromium Portals use-after-free | 9.6v3.1 | 11.7% | 2021-10-08 | KEVKCVFix |
| CVE-2021-37972 | Google Chrome libjpeg-turbo out-of-bounds read | 8.8v3.1 | 1.8% | 2021-10-08 | Fix |
| CVE-2021-37971 | Google Chrome Web Browser UI incorrect security UI | 4.3v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-37970 | Google Chrome File System API use-after-free | 8.8v3.1 | 1.5% | 2021-10-08 | Fix |
| CVE-2021-37969 | Google Chrome Google Updater inappropriate implementation | 7.8v3.1 | 0.9% | 2021-10-08 | Fix |
| CVE-2021-37968 | Google Chrome Background Fetch API inappropriate implementation | 4.3v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-37967 | Google Chrome Background Fetch API inappropriate implementation | 4.3v3.1 | 0.8% | 2021-10-08 | Fix |
| CVE-2021-37966 | Google Chrome Compositing inappropriate implementation | 4.3v3.1 | 0.7% | 2021-10-08 | Fix |
| CVE-2021-37965 | Google Chrome Background Fetch API inappropriate implementation | 4.3v3.1 | 1.2% | 2021-10-08 | Fix |
| CVE-2021-37964 | Google Chrome ChromeOS Networking inappropriate implementation | 3.3v3.1 | 0.5% | 2021-10-08 | Fix |
| CVE-2021-37963 | Google Chrome DevTools side-channel information leak | 4.3v3.1 | 1.2% | 2021-10-08 | Fix |
| CVE-2021-37962 | Google Chrome Performance Manager use-after-free | 8.8v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-37961 | Google Chrome Tab Strip use-after-free | 8.8v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-37959 | Google Chrome Task Manager use-after-free | 8.8v3.1 | 0.9% | 2021-10-08 | Fix |
| CVE-2021-37958 | Google Chrome Navigation inappropriate implementation | 5.4v3.1 | 1.0% | 2021-10-08 | Fix |
| CVE-2021-37957 | Google Chrome WebGPU use-after-free | 8.8v3.1 | 1.2% | 2021-10-08 | Fix |
| CVE-2021-37956 | Google Chrome Offline use use-after-free | 8.8v3.1 | 1.2% | 2021-10-08 | Fix |
| CVE-2021-36767 | Digi Realport weak password hash | 9.8v3.1 | 0.7% | 2021-10-08 | |
| CVE-2021-35979 | Digi Realport missing authentication | 8.1v3.1 | 0.9% | 2021-10-08 | |
| CVE-2021-35977 | Digi Realport buffer overflow | 9.8v3.1 | 1.6% | 2021-10-08 | |
| CVE-2021-33603 | F-Secure Atlant AVPACK module denial of service | 6.5v3.1 | 0.6% | 2021-10-08 | Fix |
| CVE-2021-32029 | PostgreSQL information disclosure | 6.5NVD v3.1 | 1.5% | 2021-10-08 | Fix |
| CVE-2021-30633 | Google Chromium Indexed DB API use-after-free | 9.6v3.1 | 33.2% | 2021-10-08 | KEVKCVFix |
| CVE-2021-30632 | Google Chromium V8 out-of-bounds write | 8.8v3.1 | 63.2% | 2021-10-08 | KEVExploit codeKCVFix |
| CVE-2021-30630 | Google Chrome Blink inappropriate implementation | 4.3v3.1 | 0.7% | 2021-10-08 | Fix |
| CVE-2021-30629 | Google Chrome Permissions use-after-free | 8.8v3.1 | 0.9% | 2021-10-08 | Fix |
| CVE-2021-30628 | Google Chrome ANGLE stack-based buffer overflow | 8.8v3.1 | 1.0% | 2021-10-08 | Fix |
| CVE-2021-30627 | Google Chrome Blink layout type confusion | 8.8v3.1 | 0.9% | 2021-10-08 | Fix |
| CVE-2021-30626 | Google Chrome ANGLE out-of-bounds access | 8.8v3.1 | 1.0% | 2021-10-08 | Fix |
| CVE-2021-30625 | Google Chrome Selection API use-after-free | 8.8v3.1 | 10.1% | 2021-10-08 | Fix |
| CVE-2021-29906 | IBM App Connect Enterprise Certified Container information disclosure | 5.1CNA v3.0 | 0.2% | 2021-10-08 | Fix |
| CVE-2021-25271 | Sophos HitmanPro arbitrary file write | 6.0v3.1 | 0.2% | 2021-10-08 | Fix |
| CVE-2021-25270 | Sophos HitmanPro.Alert arbitrary code execution | 6.7v3.1 | 0.3% | 2021-10-08 | Fix |
| CVE-2021-20600 | Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V resource exhaustion | 5.9v3.1 | 2.4% | 2021-10-08 | Fix |
| CVE-2021-3312 | Alkacon OpenCMS XML external entity Reference in org.OpenCMS:opencms-core | 6.5v3.1 | 1.3% | 2021-10-08 | Fix |
| CVE-2021-42095 | NetSarang Xshell crash | 7.5v3.1 | 1.0% | 2021-10-07 | Fix |
| CVE-2021-42094 | zammad command injection | 9.8v3.1 | 1.9% | 2021-10-07 | Fix |
| CVE-2021-42093 | Zammad trigger execution vulnerability | 7.2v3.1 | 1.3% | 2021-10-07 | Fix |
| CVE-2021-42092 | zammad cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-07 | Fix |
| CVE-2021-42091 | zammad server-side request forgery | 9.1v3.1 | 1.1% | 2021-10-07 | Fix |
| CVE-2021-42090 | zammad deserialization of untrusted data | 9.8v3.1 | 2.3% | 2021-10-07 | Fix |
| CVE-2021-42089 | zammad information disclosure | 7.5v3.1 | 1.1% | 2021-10-07 | Fix |
| CVE-2021-42088 | zammad cross-site scripting | 6.1v3.1 | 0.6% | 2021-10-07 | Fix |
| CVE-2021-42087 | Zammad API vulnerability | 4.9v3.1 | 0.9% | 2021-10-07 | Fix |
| CVE-2021-42086 | Zammad account settings privilege escalation | 8.8v3.1 | 1.1% | 2021-10-07 | Fix |
| CVE-2021-42085 | zammad cross-site scripting | 5.4v3.1 | 0.5% | 2021-10-07 | Fix |
| CVE-2021-42084 | zammad infinite loop | 6.5v3.1 | 0.9% | 2021-10-07 | Fix |
| CVE-2021-42071 | Visual-Tools Dvr VX16 OS command injection | 9.8v3.1 | 69.9% | 2021-10-07 | NucleiExploit code |
| CVE-2021-42054 | accel-ppp out-of-bounds read | 7.5v3.1 | 1.1% | 2021-10-07 | |
| CVE-2021-42053 | Cross-site scripting in Unicorn framework | 5.4v3.1 | 2.5% | 2021-10-07 | Exploit codeFix |
| CVE-2021-42013 | Apache HTTP Server path traversal | 9.8NVD v3.1 | 100.0% | 2021-10-07 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-41865 | HashiCorp Nomad denial of service | 6.5v3.1 | 1.0% | 2021-10-07 | Fix |
| CVE-2021-41794 | Open5GS buffer overflow | 7.5v3.1 | 1.2% | 2021-10-07 | |
| CVE-2021-41770 | Ping Identity PingFederate XML external entity injection | 7.5NVD v3.1 | 1.0% | 2021-10-07 | |
| CVE-2021-41130 | Google Extensible Service Proxy X-Endpoint-API-UserInfo header vulnerability | 6.4CNA v3.1 | 0.4% | 2021-10-07 | Fix |
| CVE-2021-41115 | Regular expression denial of service in Zulip | 4.3CNA v3.1 | 1.7% | 2021-10-07 | Fix |
| CVE-2021-40978 | Directory traversal in Mkdocs | 7.5v3.1 | 14.8% | 2021-10-07 | NucleiExploit codeFix |
| CVE-2021-40726 | Adobe Acrobat Reader DC AcroForm field use-after-free remote code execution | 7.8CNA v3.0 | 5.3% | 2021-10-07 | Fix |
| CVE-2021-40725 | Adobe Acrobat Reader DC AcroForm listbox use-after-free remote code execution | 7.8CNA v3.0 | 5.3% | 2021-10-07 | Fix |
| CVE-2021-40439 | Apache OpenOffice billion laughs | 6.5v3.1 | 3.9% | 2021-10-07 | Fix |
| CVE-2021-38298 | Zoho ManageEngine ADManager Plus XML external entity injection | 9.8v3.1 | 2.6% | 2021-10-07 | Fix |
| CVE-2021-37931 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 9.2% | 2021-10-07 | Fix |
| CVE-2021-37930 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 9.2% | 2021-10-07 | Fix |
| CVE-2021-37929 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 9.2% | 2021-10-07 | Fix |
| CVE-2021-37928 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 9.2% | 2021-10-07 | Fix |
| CVE-2021-37926 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 73.6% | 2021-10-07 | Fix |
| CVE-2021-37924 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 10.6% | 2021-10-07 | Fix |
| CVE-2021-37923 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 10.6% | 2021-10-07 | Fix |
| CVE-2021-37922 | Zoho ManageEngine ADManager Plus path traversal | 5.3v3.1 | 2.3% | 2021-10-07 | Fix |
| CVE-2021-37921 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 10.6% | 2021-10-07 | Fix |
| CVE-2021-37920 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 10.6% | 2021-10-07 | Fix |
| CVE-2021-37919 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 10.6% | 2021-10-07 | Fix |
| CVE-2021-37918 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 73.6% | 2021-10-07 | Fix |
| CVE-2021-37762 | Zoho ManageEngine ADManager Plus unrestricted file upload | 9.8v3.1 | 7.8% | 2021-10-07 | Fix |
| CVE-2021-36150 | Cross-site scripting in SilverStripe Framework | 6.1v3.1 | 0.9% | 2021-10-07 | Fix |
| CVE-2021-35067 | Meross MSG100 authentication bypass by replay | 8.1v3.1 | 0.9% | 2021-10-07 | |
| CVE-2021-33903 | LANCOM Systems LCOS SNMPv3 access vulnerability | 8.8v3.1 | 1.1% | 2021-10-07 | |
| CVE-2021-32172 | Maianscriptworld Maian Cart missing authorization | 9.8v3.1 | 66.4% | 2021-10-07 | NucleiExploit code |
| CVE-2021-29700 | IBM Sterling B2B Integrator information disclosure | 4.3CNA v3.0 | 0.9% | 2021-10-07 | Fix |
| CVE-2021-28661 | SilverStripe GraphQL Server permission checker not inherited by query subclass | 4.3v3.1 | 0.8% | 2021-10-07 | Fix |
| CVE-2021-28129 | DEB packaging for Apache OpenOffice installed with a non-root userid and groupid | 7.8v3.1 | 0.5% | 2021-10-07 | Fix |
| CVE-2021-26557 | Octopus Deploy Octopus Tentacle untrusted search path | 7.8v3.1 | 0.3% | 2021-10-07 | Fix |
| CVE-2021-26556 | Octopus Deploy Octopus Server untrusted search path | 7.8v3.1 | 0.3% | 2021-10-07 | Fix |
| CVE-2021-23447 | teddy cross-site scripting (XSS) | 6.1v3.1 | 1.1% | 2021-10-07 | Fix |
| CVE-2021-22958 | Server-side request forgery vulnerability in concrete5 | 9.8v3.1 | 1.2% | 2021-10-07 | Fix |
| CVE-2021-22930 | Node.js Node use-after-free | 9.8v3.1 | 37.3% | 2021-10-07 | Fix |
| CVE-2021-20584 | IBM Sterling File Gateway arbitrary file upload | 6.5CNA v3.0 | 1.4% | 2021-10-07 | Fix |
| CVE-2021-20571 | IBM Sterling B2B Integrator cross-site scripting | 4.9CNA v3.0 | 0.5% | 2021-10-07 | Fix |
| CVE-2021-20561 | IBM Sterling File Gateway cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-10-07 | Fix |
| CVE-2021-20552 | IBM Sterling File Gateway information disclosure through error messages | 4.3CNA v3.0 | 1.0% | 2021-10-07 | Fix |
| CVE-2021-20489 | IBM Sterling File Gateway cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2021-10-07 | Fix |
| CVE-2021-20481 | IBM Sterling File Gateway cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-10-07 | Fix |
| CVE-2021-20473 | IBM Sterling File Gateway insufficient session expiration | 6.3CNA v3.0 | 0.5% | 2021-10-07 | Fix |
| CVE-2021-20376 | IBM Sterling File Gateway observable discrepancy | 4.3CNA v3.0 | 0.7% | 2021-10-07 | Fix |
| CVE-2021-20375 | IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567. | 6.5CNA v3.0 | 0.8% | 2021-10-07 | Fix |
| CVE-2021-20372 | IBM Sterling File Gateway improper permissions | 4.3CNA v3.0 | 1.2% | 2021-10-07 | Fix |
| CVE-2021-3834 | Integria IMS vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 0.6% | 2021-10-07 | Fix |
| CVE-2021-3833 | Integria IMS incorrect authorization | 9.8v3.1 | 1.1% | 2021-10-07 | Fix |
| CVE-2021-3832 | Integria IMS remote code execution | 9.8v3.1 | 2.3% | 2021-10-07 | Fix |
| CVE-2021-42044 | mediawiki cross-site scripting | 4.8v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-42043 | mediawiki cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-06 | Fix |
| CVE-2021-42042 | mediawiki cross-site scripting | 4.8v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-42041 | mediawiki cross-site scripting | 6.1v3.1 | 1.0% | 2021-10-06 | Fix |
| CVE-2021-42040 | mediawiki infinite loop | 7.5v3.1 | 1.2% | 2021-10-06 | Fix |
| CVE-2021-41129 | Authentication bypass in Pterodactyl | 8.1CNA v3.1 | 1.8% | 2021-10-06 | Fix |
| CVE-2021-41128 | CSV injection vulnerability in Hygeia | 9.1CNA v3.1 | 1.3% | 2021-10-06 | Fix |
| CVE-2021-41126 | octobercms october Deleted Admin can Sign in to Admin interface | 7.2CNA v3.1 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-41125 | HTTP authentication credential leak to target websites in scrapy | 5.7CNA v3.1 | 1.3% | 2021-10-06 | Fix |
| CVE-2021-41121 | Memory corruption in Vyper | 7.5CNA v3.1 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-39351 | WP Bannerize - authenticated SQL injection | 6.5NVD v3.1 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-39350 | FolioVision FV Flowplayer Video Player stats.php reflected cross-site scripting | 6.1v3.1 | 2.2% | 2021-10-06 | NucleiFix |
| CVE-2021-38925 | IBM Sterling B2B Integrator inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-10-06 | Fix |
| CVE-2021-38923 | IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162. | 8.0CNA v3.0 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-36178 | Fortinet FortiSDNConnector A insufficiently protected credentials | 4.3CNA v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-36175 | Fortinet FortiWebManager cross-site scripting | 4.1CNA v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-36170 | Fortinet FortiManager, FortiAnalyzer insufficiently protected credentials | 3.2CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-34788 | Cisco AnyConnect Secure Mobility Client time-of-check time-of-use race condition | 7.0CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-34782 | Cisco DNA Center information disclosure | 4.3CNA v3.1 | 0.8% | 2021-10-06 | Fix |
| CVE-2021-34780 | Cisco Small Business 220 Series Smart Switches Link Layer Discovery protocol vulnerabilities | 4.3CNA v3.1 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-34779 | Cisco Small Business 220 Series Smart Switches Link Layer Discovery protocol vulnerabilities | 4.3CNA v3.1 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-34778 | Cisco Small Business 220 Series Smart Switches Link Layer Discovery protocol vulnerabilities | 4.3CNA v3.1 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-34777 | Cisco Small Business 220 Series Smart Switches Link Layer Discovery protocol vulnerabilities | 4.3CNA v3.1 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-34776 | Cisco Small Business 220 Series Smart Switches Link Layer Discovery protocol vulnerabilities | 4.3CNA v3.1 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-34775 | Cisco Small Business 220 Series Smart Switches Link Layer Discovery protocol vulnerabilities | 4.3CNA v3.1 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-34772 | Cisco Orbital open redirect | 4.7CNA v3.1 | 1.0% | 2021-10-06 | Fix |
| CVE-2021-34766 | Cisco Smart Software Manager privilege escalation | 5.4CNA v3.1 | 1.0% | 2021-10-06 | Fix |
| CVE-2021-34758 | Cisco TelePresence Collaboration Endpoint and RoomOS software denial of service | 4.4CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-34757 | Cisco Business 220 Series Smart Switches Static Key and Password vulnerabilities | 4.9CNA v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-34748 | Cisco Intersight Virtual Appliance command injection | 8.8CNA v3.1 | 2.7% | 2021-10-06 | Fix |
| CVE-2021-34744 | Cisco Business 220 Series Smart Switches Static Key and Password vulnerabilities | 4.9CNA v3.1 | 0.7% | 2021-10-06 | Fix |
| CVE-2021-34742 | Cisco Vision Dynamic Signage Director reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-10-06 | Fix |
| CVE-2021-34735 | Cisco Ata 190 Series Analog Telephone Adapter Software vulnerabilities | 8.8CNA v3.1 | 1.9% | 2021-10-06 | Fix |
| CVE-2021-34711 | Cisco IP Phone software arbitrary file read | 5.5CNA v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-34710 | Cisco Ata 190 Series Analog Telephone Adapter Software vulnerabilities | 8.8CNA v3.1 | 2.6% | 2021-10-06 | Fix |
| CVE-2021-34706 | Cisco Identity Services Engine XML external entity injection | 6.4CNA v3.1 | 0.7% | 2021-10-06 | Fix |
| CVE-2021-34702 | Cisco Identity Services Engine sensitive information disclosure | 4.3CNA v3.1 | 0.9% | 2021-10-06 | Fix |
| CVE-2021-34698 | Cisco Web Security Appliance Proxy service denial of service | 8.6CNA v3.1 | 1.4% | 2021-10-06 | Fix |
| CVE-2021-33602 | A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. The vulnerability can be exploited remotely by an attacker. A successful attack will result in Denial-of-Service of | 5.3v3.1 | 0.6% | 2021-10-06 | |
| CVE-2021-29908 | IBM Virtualization Engine TS7700 3957-VED missing authentication | 9.1CNA v3.0 | 2.1% | 2021-10-06 | Fix |
| CVE-2021-29903 | IBM Sterling B2B Integrator SQL injection | 6.3CNA v3.0 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-29855 | IBM Sterling B2B Integrator cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-29837 | IBM Sterling B2B Integrator cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-29836 | IBM Sterling B2B Integrator cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-29798 | IBM Sterling B2B Integrator SQL injection | 6.3CNA v3.0 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-29764 | IBM Sterling B2B Integrator cross-site scripting | 6.4CNA v3.0 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-29761 | IBM Sterling B2B Integrator information disclosure | 4.3CNA v3.0 | 0.7% | 2021-10-06 | Fix |
| CVE-2021-29760 | IBM Sterling B2B Integrator dashboard interface vulnerability | 5.4CNA v3.0 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-29758 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169. | 4.3CNA v3.0 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-28702 | Xen improper privilege management | 7.6v3.1 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-25499 | Samsung Mobile Galaxy Store improper authorization | 7.1CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-25498 | Samsung Mobile Samsung Notes maetd_eco_cb_mode of libSPenBase library buffer overflow | 7.3CNA v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-25497 | Samsung Mobile Samsung Notes maetd_cpy_slice of libSPenBase library buffer overflow | 7.3CNA v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-25496 | Samsung Mobile Samsung Notes maetd_dec_slice of libSPenBase library buffer overflow | 7.3CNA v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-25495 | Samsung Mobile Samsung Notes libSPenBase library heap-based buffer overflow | 7.3CNA v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-25494 | Samsung Mobile Samsung Notes libSPenBase library buffer overflow | 4.0CNA v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-25493 | Samsung Mobile Samsung Notes out-of-bounds read | 4.0CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-25492 | Samsung Mobile Samsung Notes out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-25491 | Samsung Mobile Devices null pointer dereference | 2.3CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25490 | Samsung Mobile Devices improper authentication | 6.0CNA v3.1 | 0.8% | 2021-10-06 | Fix |
| CVE-2021-25489 | Samsung Mobile Devices improper input validation | 3.3CNA v3.1 | 0.5% | 2021-10-06 | KEVFix |
| CVE-2021-25488 | Samsung Mobile Devices out-of-bounds read | 5.5CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25487 | Samsung Mobile Devices out-of-bounds read | 7.3CNA v3.1 | 0.6% | 2021-10-06 | KEVFix |
| CVE-2021-25486 | Samsung Mobile Devices information disclosure | 2.5CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25485 | Samsung Mobile Devices FactoryAirCommnadManger path traversal | 7.5CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-25484 | Samsung Mobile Devices InputManagerService improper authentication | 4.0CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25483 | Samsung Mobile Devices out-of-bounds read | 4.0CNA v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-25482 | Samsung Mobile Devices CMFA framework SQL injection | 5.9CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25481 | Samsung Exynos An improper error handling | 6.4CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25480 | Samsung Mobile Devices authentication bypass by replay | 4.4CNA v3.1 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-25479 | Samsung Exynos possible heap-based buffer overflow | 7.2CNA v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-25478 | Samsung Exynos possible stack-based buffer overflow | 7.2CNA v3.1 | 0.6% | 2021-10-06 | Fix |
| CVE-2021-25477 | Samsung Mobile Devices double free in Modem LTE RRC | 4.4CNA v3.1 | 0.5% | 2021-10-06 | Fix |
| CVE-2021-25476 | Samsung Mobile Devices Widevine TA log information disclosure | 4.1CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25475 | Samsung Mobile Devices DSP kernel driver heap-based buffer overflow | 3.9CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25474 | Samsung Mobile Devices improper exception handling | 4.4CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25473 | Samsung Mobile Devices improper exception handling | 4.4CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25472 | Samsung Mobile Devices BluetoothSettingsProvider improper access control | 4.0CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25471 | Samsung Mobile Devices denial of service | 3.7CNA v3.1 | 0.4% | 2021-10-06 | Fix |
| CVE-2021-25470 | Samsung Mobile Devices code injection | 7.9CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25469 | Samsung Mobile Devices Widevine trustlet stack-based buffer overflow | 6.0CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25468 | Samsung Mobile Devices improper input validation | 4.4CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-25467 | Samsung Mobile Devices buffer overflow | 5.3CNA v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-24021 | Fortinet FortiAnalyzer cross-site scripting | 4.3CNA v3.1 | 0.7% | 2021-10-06 | Fix |
| CVE-2021-24019 | Fortinet FortiClientEMS insufficient session expiration | 8.1CNA v3.1 | 3.9% | 2021-10-06 | Exploit codeFix |
| CVE-2021-21684 | Stored XSS vulnerability in Jenkins Git Plugin | 6.1v3.1 | 1.2% | 2021-10-06 | Fix |
| CVE-2021-21683 | Path traversal vulnerability on Windows in Jenkins | 6.5v3.1 | 2.2% | 2021-10-06 | Fix |
| CVE-2021-21682 | Improper handling of equivalent directory names on Windows in Jenkins | 4.3v3.1 | 1.0% | 2021-10-06 | Fix |
| CVE-2021-20264 | containers/openjdk incorrect privilege assignment | 7.8NVD v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-3848 | Trend Micro Apex One An arbitrary file write | 5.5v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-1594 | Cisco Identity Services Engine privilege escalation | 7.5CNA v3.1 | 1.4% | 2021-10-06 | Fix |
| CVE-2021-1534 | Cisco Email Security Appliance URL Filtering Bypass vulnerability | 5.8CNA v3.1 | 1.1% | 2021-10-06 | Fix |
| CVE-2021-0695 | Android xt_qtaguid.c out-of-bounds read | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0693 | Android HeapDumpProvider.java information disclosure | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0692 | Android FirstScreenBroadcast.java privilege escalation | 7.8v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0691 | Android code execution | 6.7v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0690 | Android ih264d_parse_pslice.c out-of-bounds write | 6.5v3.1 | 0.8% | 2021-10-06 | Fix |
| CVE-2021-0689 | Android SkSwizzler_opts.h out-of-bounds read | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0688 | Android PhoneWindowManager.java privilege escalation | 7.0v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-0687 | Android Layout.java denial of service | 5.0v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0686 | Android RoleManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0685 | Android ParsedIntentInfo.java deserialization of untrusted data | 7.8v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-0684 | Android TouchInputMapper.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0683 | Android ActivityManagerShellCommand.java privilege escalation | 7.8v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-0682 | Android NotificationManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0681 | Android exposure of sensitive information to an unauthorized actor in system properties | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0680 | Android exposure of sensitive information to an unauthorized actor in system properties | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0644 | Android SubscriptionController.java information disclosure | 5.5v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0636 | Google Android AVI file parser vulnerability | 7.8v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-0635 | Google Android FLV file parser vulnerability | 7.8v3.1 | 0.3% | 2021-10-06 | Fix |
| CVE-2021-0598 | Android ConfirmConnectActivity.java privilege escalation | 7.3v3.1 | 0.1% | 2021-10-06 | Fix |
| CVE-2021-0595 | Android RootWindowContainer.java privilege escalation | 7.8v3.1 | 0.2% | 2021-10-06 | Fix |
| CVE-2021-42008 | Linux kernel out-of-bounds write | 7.8v3.1 | 1.6% | 2021-10-05 | Exploit codeFix |
| CVE-2021-41773 | Apache HTTP Server path traversal | 9.8NVD v3.1 | 100.0% | 2021-10-05 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-41555 | Archibus Web Central cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-05 | |
| CVE-2021-41554 | Archibus Web Central missing authorization | 8.8v3.1 | 0.9% | 2021-10-05 | |
| CVE-2021-41553 | Archibus Web Central session fixation | 9.8v3.1 | 1.2% | 2021-10-05 | |
| CVE-2021-41524 | Apache HTTP Server null pointer dereference in h2 fuzzing | 7.5v3.1 | 25.0% | 2021-10-05 | Fix |
| CVE-2021-41286 | Omikron Multicash improper authentication | 7.8v3.1 | 0.2% | 2021-10-05 | |
| CVE-2021-41124 | Splash authentication credentials potentially leaked to target websites in scrapy-splash | 7.4CNA v3.1 | 1.1% | 2021-10-05 | Fix |
| CVE-2021-41122 | Bounds check missing for decimal args in Vyper | 4.3CNA v3.1 | 0.8% | 2021-10-05 | Fix |
| CVE-2021-41120 | Unauthorized access to Credit card form in Sylius/paypal-plugin | 7.5CNA v3.1 | 1.5% | 2021-10-05 | Fix |
| CVE-2021-41116 | Command injection in composer on Windows | 8.2CNA v3.1 | 2.8% | 2021-10-05 | Fix |
| CVE-2021-41114 | HTTP host header injection in Request Handling in TYPO3 | 4.8CNA v3.1 | 1.2% | 2021-10-05 | Fix |
| CVE-2021-41113 | Cross-Site-Request-Forgery in Backend URI Handling in TYPO3 | 8.8CNA v3.1 | 0.6% | 2021-10-05 | Fix |
| CVE-2021-39894 | GitLab server-side request forgery | 5.4CNA v3.1 | 0.6% | 2021-10-05 | Fix |
| CVE-2021-39893 | GitLab missing authorization | 5.3CNA v3.1 | 1.3% | 2021-10-05 | Fix |
| CVE-2021-39891 | GitLab improper removal of sensitive information | 5.9CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-39889 | GitLab insecure direct object reference | 4.3CNA v3.1 | 0.8% | 2021-10-05 | Fix |
| CVE-2021-39888 | GitLab issue and merge request templates information disclosure | 4.3CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-39887 | GitLab stored cross-site scripting | 7.3CNA v3.1 | 0.9% | 2021-10-05 | Fix |
| CVE-2021-39886 | GitLab incorrect default permissions | 2.6CNA v3.1 | 0.6% | 2021-10-05 | Fix |
| CVE-2021-39884 | GitLab private group access endpoint vulnerability | 4.3CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-39882 | GitLab cleartext transmission of sensitive information | 5.3CNA v3.1 | 0.6% | 2021-10-05 | Fix |
| CVE-2021-39881 | GitLab OAuth client scope name spoofing | 3.5CNA v3.1 | 0.9% | 2021-10-05 | Fix |
| CVE-2021-39880 | GitLab apollo_upload_server has denial of service | 6.5CNA v3.1 | 1.8% | 2021-10-05 | Fix |
| CVE-2021-39878 | GitLab Jira integration reflected cross-site scripting | 5.8CNA v3.1 | 0.8% | 2021-10-05 | Fix |
| CVE-2021-39875 | GitLab pending invitations endpoint vulnerability | 5.3CNA v3.1 | 1.2% | 2021-10-05 | Fix |
| CVE-2021-39872 | GitLab improper authentication | 6.5CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-39870 | GitLab repo by URL import setting vulnerability | 4.3CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-39869 | GitLab project export information disclosure | 6.5CNA v3.1 | 1.3% | 2021-10-05 | Fix |
| CVE-2021-39867 | GitLab server-side request forgery | 6.5CNA v3.1 | 0.9% | 2021-10-05 | Fix |
| CVE-2021-39866 | GitLab project deletion process business logic error | 5.4CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-39226 | Grafana authentication bypass | 9.8CNA v3.1 | 99.9% | 2021-10-05 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-37223 | Nagios XI server-side request forgery | 6.5v3.1 | 5.0% | 2021-10-05 | Fix |
| CVE-2021-35506 | Afian FileRun cross-site scripting | 6.1v3.1 | 0.7% | 2021-10-05 | |
| CVE-2021-35505 | Afian FileRun remote code execution | 7.2v3.1 | 2.8% | 2021-10-05 | |
| CVE-2021-35504 | Afian FileRun remote code execution | 7.2v3.1 | 3.2% | 2021-10-05 | |
| CVE-2021-35503 | Afian FileRun cross-site scripting | 6.1v3.1 | 0.7% | 2021-10-05 | |
| CVE-2021-35497 | TIBCO FTL unvalidated SAN in client certificates | 7.5CNA v3.1 | 0.4% | 2021-10-05 | Fix |
| CVE-2021-35492 | Wowza Streaming Engine resource exhaustion | 6.5v3.1 | 3.3% | 2021-10-05 | Exploit codeFix |
| CVE-2021-35491 | Wowza Streaming Engine cross-site request forgery | 8.1v3.1 | 0.9% | 2021-10-05 | Fix |
| CVE-2021-33849 | Zoho CRM Lead Magnet cross-site scripting | 5.4v3.1 | 1.1% | 2021-10-05 | Fix |
| CVE-2021-31988 | Axis Communications AXIS OS improper syntax validation | 8.8v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-31987 | Axis Communications AXIS OS improper syntax validation | 7.5v3.1 | 0.9% | 2021-10-05 | Fix |
| CVE-2021-31986 | Axis Communications AXIS OS heap-based buffer overflow | 6.8v3.1 | 0.8% | 2021-10-05 | Emerging ThreatsFix |
| CVE-2021-22264 | GitLab invited group membership vulnerability | 6.8CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-22262 | GitLab all missing authorization | 5.4CNA v3.1 | 0.7% | 2021-10-05 | Fix |
| CVE-2021-22261 | GitLab Jira integration in all stored cross-site scripting | 7.3CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-22258 | GitLab project import and export information disclosure | 4.3CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-22257 | GitLab user.keys route vulnerability | 5.3CNA v3.1 | 0.9% | 2021-10-05 | Fix |
| CVE-2021-3625 | Buffer overflow in Zephyr USB DFU DNLOAD | 9.6CNA v3.1 | 2.3% | 2021-10-05 | Exploit code |
| CVE-2021-3581 | Buffer access with incorrect length value in Zephyr | 7.0CNA v3.1 | 0.3% | 2021-10-05 | Fix |
| CVE-2021-3510 | Zephyr JSON decoder incorrectly decodes array of array | 7.5CNA v3.1 | 1.0% | 2021-10-05 | Fix |
| CVE-2021-3436 | Zephyr Bluetooth bonding vulnerability | 4.3CNA v3.1 | 1.0% | 2021-10-05 | |
| CVE-2021-3319 | zephyrproject-rtos Zephyr DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses | 6.5CNA v3.1 | 0.9% | 2021-10-05 | |
| CVE-2021-42006 | Gclib GffLine::GffLine in gff.cpp out-of-bounds access | 8.8v3.1 | 1.1% | 2021-10-04 | Fix |
| CVE-2021-41878 | Hkurl I-panel Administration System reflected cross-site scripting | 6.1v3.1 | 9.9% | 2021-10-04 | NucleiExploit code |
| CVE-2021-41869 | salesagility SuiteCRM privilege escalation | 8.8v3.1 | 1.6% | 2021-10-04 | Fix |
| CVE-2021-41868 | Remote unauthenticated attackers able to upload files in Onionshare | 9.8v3.1 | 2.4% | 2021-10-04 | Fix |
| CVE-2021-41867 | Information disclosure vulnerability in OnionShare | 5.3v3.1 | 1.8% | 2021-10-04 | Fix |
| CVE-2021-41861 | Telegram self-destructing photos feature vulnerability | 3.3v3.1 | 0.3% | 2021-10-04 | Fix |
| CVE-2021-41651 | Hotel Management System blind SQL injection | 7.5v3.1 | 2.4% | 2021-10-04 | Exploit code |
| CVE-2021-41596 | salesagility SuiteCRM path traversal | 5.3v3.1 | 1.8% | 2021-10-04 | Fix |
| CVE-2021-41595 | salesagility SuiteCRM path traversal | 5.3v3.1 | 1.8% | 2021-10-04 | Fix |
| CVE-2021-41593 | Lightning Network Daemon resource exhaustion | 8.6v3.1 | 1.9% | 2021-10-04 | Fix |
| CVE-2021-41592 | Elementsproject C-lightning resource exhaustion | 9.4v3.1 | 1.5% | 2021-10-04 | Fix |
| CVE-2021-41591 | Acinq Eclair resource exhaustion | 9.4v3.1 | 1.7% | 2021-10-04 | Fix |
| CVE-2021-41579 | Laquisscada SCADA path traversal | 7.8v3.1 | 1.3% | 2021-10-04 | Exploit code |
| CVE-2021-41578 | mySCADA myDESIGNER path traversal | 7.8v3.1 | 10.4% | 2021-10-04 | |
| CVE-2021-41530 | Forcepoint Next Generation Firewall HTTP User Response vulnerability | 7.5v3.1 | 0.9% | 2021-10-04 | Fix |
| CVE-2021-41511 | Lodging Reservation Management System SQL injection | 9.8v3.1 | 3.3% | 2021-10-04 | Exploit code |
| CVE-2021-41322 | VVX 400 and VVX 410 password reset process vulnerability | 8.8v3.1 | 1.7% | 2021-10-04 | Fix |
| CVE-2021-41285 | Micron Ballistix Memory Overview Display Utility privilege escalation | 7.8v3.1 | 0.6% | 2021-10-04 | |
| CVE-2021-41123 | surveysolutions exposure of sensitive information to an unauthorized actor in WB.UI.Headquarters.dll | 5.3CNA v3.1 | 0.9% | 2021-10-04 | Fix |
| CVE-2021-41118 | ReDoS in DynamicPageList3 | 5.3CNA v3.1 | 1.2% | 2021-10-04 | Fix |
| CVE-2021-41103 | containerd insufficiently restricted permissions on plugin directories | 5.9CNA v3.0 | 0.5% | 2021-10-04 | Fix |
| CVE-2021-41100 | Account takeover when having only access to a user's short lived token in wire-server | 7.4CNA v3.1 | 0.9% | 2021-10-04 | Fix |
| CVE-2021-41099 | Integer overflow issue with strings in Redis | 7.5CNA v3.1 | 3.6% | 2021-10-04 | Fix |
| CVE-2021-41094 | Mandatory encryption at rest can be bypassed (UI) in Wire app | 4.2CNA v3.1 | 0.2% | 2021-10-04 | Fix |
| CVE-2021-41093 | wireapp wire-ios account takeover when having only access to a user's short lived token | 7.4CNA v3.1 | 1.5% | 2021-10-04 | Fix |
| CVE-2021-41092 | Docker CLI leaks private registry credentials to registry-1.Docker.io | 5.4CNA v3.1 | 1.7% | 2021-10-04 | Fix |
| CVE-2021-41091 | moby insufficiently restricted permissions on data directory in Docker Engine | 6.3CNA v3.1 | 2.8% | 2021-10-04 | Exploit codeFix |
| CVE-2021-41089 | moby `docker cp` allows unexpected chmod of host files | 2.8CNA v3.1 | 0.3% | 2021-10-04 | Fix |
| CVE-2021-40683 | Akamai Enterprise Application Access unquoted search path | 7.8v3.1 | 0.4% | 2021-10-04 | Fix |
| CVE-2021-40325 | Cobbler allows authorization bypass for modification of settings | 7.5v3.1 | 1.4% | 2021-10-04 | Fix |
| CVE-2021-40324 | Cobbler allows arbitrary file write operations via upload_log_data | 7.5v3.1 | 68.6% | 2021-10-04 | Emerging ThreatsFix |
| CVE-2021-40323 | cobbler code injection | 9.8v3.1 | 86.8% | 2021-10-04 | NucleiEmerging ThreatsFix |
| CVE-2021-39900 | GitLab information disclosure | 2.0CNA v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-39899 | GitLab weak password recovery | 2.9CNA v3.1 | 0.3% | 2021-10-04 | Fix |
| CVE-2021-39896 | GitLab user impersonation feature vulnerability | 3.8CNA v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-39885 | GitLab stored cross-site scripting | 8.7CNA v3.1 | 1.0% | 2021-10-04 | Fix |
| CVE-2021-39883 | GitLab all versions improper authorization | 4.3CNA v3.1 | 0.8% | 2021-10-04 | Fix |
| CVE-2021-39879 | GitLab all versions missing authentication | 2.2CNA v3.1 | 0.4% | 2021-10-04 | Fix |
| CVE-2021-39877 | GitLab resource exhaustion | 7.7CNA v3.1 | 1.0% | 2021-10-04 | Fix |
| CVE-2021-39874 | In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands. | 4.3CNA v3.1 | 1.0% | 2021-10-04 | Fix |
| CVE-2021-39873 | GitLab error response content spoofing | 4.3CNA v3.1 | 0.9% | 2021-10-04 | Fix |
| CVE-2021-39871 | GitLab Bitbucket Server import setting vulnerability | 4.3CNA v3.1 | 0.9% | 2021-10-04 | Fix |
| CVE-2021-39868 | GitLab incorrect permission assignment | 4.3CNA v3.1 | 0.9% | 2021-10-04 | Fix |
| CVE-2021-39486 | Gila CMS stored cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-04 | |
| CVE-2021-39433 | Biqsdrive version local file inclusion | 7.5NVD v3.1 | 8.7% | 2021-10-04 | Nuclei |
| CVE-2021-39347 | Stripe for WooCommerce missing authorization Controls to Financial Account Hijacking | 4.3CNA v3.1 | 0.7% | 2021-10-04 | Fix |
| CVE-2021-38823 | IceHrm insufficient session expiration | 9.8v3.1 | 1.5% | 2021-10-04 | |
| CVE-2021-38822 | IceHrm multiple pages stored cross-site scripting | 5.4v3.1 | 0.7% | 2021-10-04 | |
| CVE-2021-38618 | Gfos Workforce Management authentication bypass | 8.1v3.1 | 1.0% | 2021-10-04 | |
| CVE-2021-38400 | Boston Scientific Zoom Latitude Model 3120 programmer/recorder/monitor weak password hash | 6.8v3.1 | 0.1% | 2021-10-04 | Fix |
| CVE-2021-38398 | Reliance on component that is not Updateable for Boston Scientific Zoom Latitude | 6.8v3.1 | 0.4% | 2021-10-04 | Fix |
| CVE-2021-38396 | Missing Support Integrity Check for Boston Scientific Zoom Latitude | 6.8v3.1 | 0.2% | 2021-10-04 | Fix |
| CVE-2021-38394 | An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted. | 6.4v3.1 | 0.2% | 2021-10-04 | Fix |
| CVE-2021-38392 | Improper access control for Boston Scientific Zoom Latitude | 7.6v3.1 | 0.3% | 2021-10-04 | Fix |
| CVE-2021-37777 | Gila CMS insecure direct object reference | 7.5v3.1 | 1.7% | 2021-10-04 | |
| CVE-2021-37333 | Booking Core insufficient session expiration | 9.8v3.1 | 1.5% | 2021-10-04 | |
| CVE-2021-37331 | Booking Core insecure direct object reference | 5.3v3.1 | 1.0% | 2021-10-04 | |
| CVE-2021-37330 | Booking Core cross-site scripting | 5.4v3.1 | 0.6% | 2021-10-04 | |
| CVE-2021-36850 | Media File Renamer Auto and Manual Rename WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2021-10-04 | Fix |
| CVE-2021-36051 | Adobe XMP Toolkit SDK buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 5.8% | 2021-10-04 | Fix |
| CVE-2021-35296 | Ptcl Hg150-ub improper authentication | 9.8v3.1 | 2.0% | 2021-10-04 | Exploit code |
| CVE-2021-32765 | Integer overflow to buffer overflow in Hiredis | 8.8CNA v3.1 | 2.1% | 2021-10-04 | Fix |
| CVE-2021-32762 | redis integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms | 7.5CNA v3.1 | 2.6% | 2021-10-04 | Fix |
| CVE-2021-32687 | Integer overflow issue with intsets in Redis | 7.5CNA v3.1 | 4.1% | 2021-10-04 | Fix |
| CVE-2021-32675 | DoS vulnerability in Redis | 7.5CNA v3.1 | 16.1% | 2021-10-04 | Fix |
| CVE-2021-32672 | Redis Lua debugger out-of-bounds read | 5.3CNA v3.1 | 1.8% | 2021-10-04 | Fix |
| CVE-2021-32628 | redis vulnerability in handling large ziplists | 7.5CNA v3.1 | 13.5% | 2021-10-04 | Fix |
| CVE-2021-32627 | Integer overflow issue with Streams in Redis | 7.5CNA v3.1 | 3.9% | 2021-10-04 | Fix |
| CVE-2021-32626 | Lua scripts can overflow the heap-based Lua stack in Redis | 7.5CNA v3.1 | 16.2% | 2021-10-04 | Fix |
| CVE-2021-25964 | Stored cross-site scripting (XSS) in Calibre-Web via Description field in Metadata | 5.4v3.1 | 0.5% | 2021-10-04 | |
| CVE-2021-24687 | Modern Events Calendar Lite WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-24679 | Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-10-04 | Fix |
| CVE-2021-24678 | CM Tooltip Glossary WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-24676 | Better Find and Replace WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-10-04 | Fix |
| CVE-2021-24673 | Appointment Hour Booking WordPress plugin authenticated stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-24654 | User Registration WordPress plugin low privilege stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-24465 | Meow Gallery WordPress plugin Contributor+ SQL injection | 8.1NVD v3.1 | 1.2% | 2021-10-04 | Fix |
| CVE-2021-23858 | Rexroth IndraMotion MLC L25 information disclosure | 8.6CNA v3.1 | 1.2% | 2021-10-04 | Fix |
| CVE-2021-23857 | Bosch Rexroth IndraMotion MLC login routine authentication bypass | 10.0CNA v3.1 | 1.2% | 2021-10-04 | Fix |
| CVE-2021-23856 | Rexroth IndraMotion MLC L20, L40 reflected cross-site-scripting | 10.0CNA v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-23855 | Rexroth IndraMotion MLC IndraMotion XLC information disclosure | 8.6CNA v3.1 | 0.6% | 2021-10-04 | Fix |
| CVE-2021-22557 | Google code execution in SLO Generator via YAML Payload | 5.3CNA v3.1 | 1.6% | 2021-10-04 | Exploit codeFix |
| CVE-2021-22259 | GitLab denial of service | 4.3CNA v3.1 | 1.0% | 2021-10-04 | Fix |
| CVE-2021-21706 | PHP ZipArchive::extractTo may extract outside of destination dir | 5.3CNA v3.1 | 1.4% | 2021-10-04 | Fix |
| CVE-2021-21705 | PHP incorrect URL validation in FILTER_VALIDATE_URL | 4.3CNA v3.1 | 2.1% | 2021-10-04 | Fix |
| CVE-2021-21704 | PHP multiple vulnerabilities in Firebird client extension | 5.0CNA v3.1 | 1.8% | 2021-10-04 | Fix |
| CVE-2021-41864 | Linux kernel integer overflow | 7.8v3.1 | 0.4% | 2021-10-02 | Fix |
| CVE-2021-41862 | Expression injection in AviatorScript | 9.8v3.1 | 1.9% | 2021-10-02 | |
| CVE-2021-38109 | Coreldraw 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-02 | |
| CVE-2021-38108 | Corel Wordperfect 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-02 | |
| CVE-2021-38107 | Coreldraw 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-02 | |
| CVE-2021-41847 | 3xlogic Infinias Access Control insecure direct object reference | 8.8v3.1 | 1.6% | 2021-10-01 | Fix |
| CVE-2021-41845 | Thycotic Secret Server ThycoticCentrify SQL injection | 6.5v3.1 | 0.7% | 2021-10-01 | Fix |
| CVE-2021-41649 | Online Shopping System Advanced SQL injection | 9.8v3.1 | 51.8% | 2021-10-01 | NucleiExploit code |
| CVE-2021-41648 | Online Shopping System Advanced SQL injection | 7.5v3.1 | 10.0% | 2021-10-01 | NucleiExploit code |
| CVE-2021-41647 | Online Food Ordering Web App SQL injection | 9.1v3.1 | 2.0% | 2021-10-01 | Exploit code |
| CVE-2021-41467 | Cross-site scripting in application/controllers/dropbox.php in JustWriting | 6.1v3.1 | 3.6% | 2021-10-01 | Nuclei |
| CVE-2021-41465 | Concrete5-legacy concrete/elements/collection_theme.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-41464 | Concrete5-legacy concrete/elements/collection_add.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-41463 | Concrete5-legacy cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-41462 | Concrete5-legacy concrete/elements/collection_add.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-41461 | Concrete5-legacy concrete/elements/collection_add.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-41459 | GPAC MP4BOX There is a stack-based buffer overflow | 7.5v3.1 | 1.3% | 2021-10-01 | Fix |
| CVE-2021-41457 | GPAC MP4BOX There is a stack-based buffer overflow | 7.5v3.1 | 1.2% | 2021-10-01 | Fix |
| CVE-2021-41456 | GPAC MP4BOX There is a stack-based buffer overflow | 7.5v3.1 | 1.2% | 2021-10-01 | Fix |
| CVE-2021-41110 | common-workflow-language cwlviewer deserialization of untrusted data | 9.1CNA v3.1 | 2.8% | 2021-10-01 | Fix |
| CVE-2021-40975 | Ecommerce-CodeIgniter-Bootstrap cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | |
| CVE-2021-40973 | spotweb templates/installer/step-004.inc.php cross-site scripting | 6.1v3.1 | 2.3% | 2021-10-01 | Nuclei |
| CVE-2021-40972 | spotweb templates/installer/step-004.inc.php cross-site scripting | 6.1v3.1 | 2.3% | 2021-10-01 | Nuclei |
| CVE-2021-40971 | spotweb templates/installer/step-004.inc.php cross-site scripting | 6.1v3.1 | 2.2% | 2021-10-01 | Nuclei |
| CVE-2021-40970 | spotweb templates/installer/step-004.inc.php cross-site scripting | 6.1v3.1 | 2.2% | 2021-10-01 | Nuclei |
| CVE-2021-40969 | spotweb templates/installer/step-004.inc.php cross-site scripting | 6.1v3.1 | 2.2% | 2021-10-01 | Nuclei |
| CVE-2021-40968 | spotweb templates/installer/step-004.inc.php cross-site scripting | 6.1v3.1 | 2.2% | 2021-10-01 | Nuclei |
| CVE-2021-40960 | Galera Webtemplate path traversal | 9.8v3.1 | 9.8% | 2021-10-01 | Nuclei |
| CVE-2021-40928 | Glimmrtv Flextv index.php cross-site scripting | 6.1v3.1 | 0.7% | 2021-10-01 | |
| CVE-2021-40927 | Alfred Spotify Mini Player callback.php in Spotify-for-Alfred cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | |
| CVE-2021-40926 | Cross-site scripting in demos/demo.mysqli.php in getID3 | 6.1v3.1 | 1.0% | 2021-10-01 | Fix |
| CVE-2021-40925 | Faveohelpdesk Faveo dompdf/dompdf/www/demo.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | |
| CVE-2021-40924 | pixeline Bugs install/index.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | |
| CVE-2021-40923 | pixeline Bugs install/index.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | |
| CVE-2021-40922 | pixeline Bugs install/index.php cross-site scripting | 6.1v3.1 | 0.8% | 2021-10-01 | |
| CVE-2021-40921 | Detector _contactform.inc.php cross-site scripting | 6.1v3.1 | 0.7% | 2021-10-01 | |
| CVE-2021-38675 | Stored XSS vulnerability in Image2PDF | 5.4CNA v3.1 | 0.6% | 2021-10-01 | Fix |
| CVE-2021-38110 | Corel Wordperfect 2020 out-of-bounds write | 7.8v3.1 | 2.0% | 2021-10-01 | |
| CVE-2021-38106 | Corel Presentations 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-01 | |
| CVE-2021-38105 | Corel Presentations 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-01 | |
| CVE-2021-38104 | Corel Presentations 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-01 | |
| CVE-2021-38103 | Corel Presentations 2020 out-of-bounds write | 7.8v3.1 | 2.2% | 2021-10-01 | |
| CVE-2021-38102 | Corel Presentations 2020 out-of-bounds read | 5.5v3.1 | 1.5% | 2021-10-01 | |
| CVE-2021-38101 | Corel Photopaint 2020 out-of-bounds write | 7.8v3.1 | 2.0% | 2021-10-01 | |
| CVE-2021-38100 | Corel Photopaint 2020 out-of-bounds write | 7.8v3.1 | 2.0% | 2021-10-01 | |
| CVE-2021-38099 | Corel Photopaint 2020 out-of-bounds write | 7.8v3.1 | 2.2% | 2021-10-01 | |
| CVE-2021-38098 | Corel PDF Fusion out-of-bounds write | 7.8v3.1 | 2.3% | 2021-10-01 | |
| CVE-2021-38097 | Corel PDF Fusion out-of-bounds write | 7.8v3.1 | 2.7% | 2021-10-01 | |
| CVE-2021-38096 | Corel PDF Fusion out-of-bounds write | 7.8v3.1 | 3.0% | 2021-10-01 | |
| CVE-2021-36309 | Dell Enterprise SONiC OS plaintext password storage | 7.1CNA v3.1 | 0.6% | 2021-10-01 | Fix |
| CVE-2021-36298 | Dell Isilon InsightIQ weak cryptographic algorithm | 8.1CNA v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-35297 | Scalabium Dbase Viewer buffer overflow | 7.8v3.1 | 1.3% | 2021-10-01 | |
| CVE-2021-34356 | Stored XSS vulnerability in Photo Station | 7.6CNA v3.1 | 0.6% | 2021-10-01 | Fix |
| CVE-2021-34355 | Stored XSS vulnerability in Photo Station | 7.6CNA v3.1 | 0.6% | 2021-10-01 | Fix |
| CVE-2021-34354 | Stored cross-site scripting vulnerability in Photo Station | 7.6CNA v3.1 | 0.6% | 2021-10-01 | Fix |
| CVE-2021-34352 | Command injection vulnerability in QVR | 7.2CNA v3.1 | 1.5% | 2021-10-01 | Fix |
| CVE-2021-33626 | Siemens Ruggedcom APR1808 inclusion of untrusted functionality | 7.8v3.1 | 0.3% | 2021-10-01 | Fix |
| CVE-2021-29110 | Esri Portal for ArcGIS stored cross-site scripting | 5.4CNA v3.0 | 0.7% | 2021-10-01 | Fix |
| CVE-2021-29109 | A reflected XSS vulnerability in Esri Portal for ArcGIS | 6.1CNA v3.0 | 0.7% | 2021-10-01 | Fix |
| CVE-2021-29108 | Esri Portal for ArcGIS organization-specific logins privilege escalation | 8.8CNA v3.1 | 0.8% | 2021-10-01 | Fix |
| CVE-2021-23893 | Privilege escalation vulnerability in McAfee Drive Encryption (MDE) | 8.8CNA v3.1 | 0.1% | 2021-10-01 | Fix |
| CVE-2021-3825 | Missing authorization Checks in LiderAhenk | 7.5NVD v3.1 | 1.6% | 2021-10-01 | Fix |
| CVE-2021-3747 | MacOS version of Multipass incorrect owner for application directory | 8.8CNA v3.1 | 0.2% | 2021-10-01 | Fix |
| CVE-2021-3710 | Apport info disclosure via path traversal bug in read_file | 6.5CNA v3.1 | 0.5% | 2021-10-01 | Fix |
| CVE-2021-3709 | Apport file permission bypass through emacs byte compilation errors | 6.5CNA v3.1 | 0.5% | 2021-10-01 | Fix |
| CVE-2021-3626 | Canonical Multipass Windows localhost control socket vulnerability | 8.8CNA v3.1 | 0.2% | 2021-10-01 | Fix |