CVE-2021 records published in November 2021
This page lists the 1,367 CVE-2021 records published in November 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 18013.2% of these records
- Listed in CISA KEV
- 110.8% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 443.2% of these records
- Exploit code
- 564.1% of these records
- Actionable vendor fix
- 1,17285.7% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in November 2021 have had from about 59 months to about 60 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-44230 | PortSwigger Burp Suite incorrect permission assignment | 6.5v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-43998 | HashiCorp Vault incorrect permission assignment for critical resource | 6.5v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-43790 | Bytecode Alliance Lucet lucet-runtime instance use-after-free | 8.5CNA v3.1 | 1.6% | 2021-11-30 | |
| CVE-2021-43771 | Trend Micro Antivirus improper access control | 7.8v3.1 | 0.3% | 2021-11-30 | Fix |
| CVE-2021-43319 | Zoho ManageEngine Network Configuration Manager command injection | 9.8v3.1 | 21.4% | 2021-11-30 | Fix |
| CVE-2021-43296 | Zoho Manageengine Supportcenter Plus server-side request forgery | 7.5v3.1 | 3.4% | 2021-11-30 | |
| CVE-2021-43295 | Zoho Manageengine Supportcenter Plus cross-site scripting | 6.1v3.1 | 2.7% | 2021-11-30 | |
| CVE-2021-43294 | Zoho Manageengine Supportcenter Plus cross-site scripting | 6.1v3.1 | 1.0% | 2021-11-30 | |
| CVE-2021-43284 | Govicture WR1200 hard-coded credentials | 7.8v3.1 | 0.4% | 2021-11-30 | |
| CVE-2021-43283 | Govicture WR1200 OS command injection | 8.8v3.1 | 5.4% | 2021-11-30 | |
| CVE-2021-43282 | Govicture WR1200 hard-coded credentials | 6.5v3.1 | 0.6% | 2021-11-30 | |
| CVE-2021-43202 | JetBrains TeamCity X-Frame-Options header vulnerability | 9.8v3.1 | 1.1% | 2021-11-30 | Fix |
| CVE-2021-42564 | Cryptshare Server confidential messages open redirect | 5.4v3.1 | 0.7% | 2021-11-30 | |
| CVE-2021-42545 | Insufficient session expiration in TopEase | 9.1v3.1 | 1.1% | 2021-11-30 | Fix |
| CVE-2021-42544 | Lack of Rate limiting in Authentication in TopEase | 9.8v3.1 | 1.4% | 2021-11-30 | Fix |
| CVE-2021-42123 | Missing Upload Filter in TopEase | 8.8v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-42122 | Denial of service via Invalid object attribute in TopEase | 4.3v3.1 | 0.7% | 2021-11-30 | Fix |
| CVE-2021-42121 | Denial of service via Invalid Date Format in TopEase | 4.3v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-42120 | Missing Character Length (denial of service) in TopEase | 6.5v3.1 | 1.1% | 2021-11-30 | Fix |
| CVE-2021-42119 | Stored XSS in Search function in TopEase | 5.4NVD v3.1 | 0.5% | 2021-11-30 | Fix |
| CVE-2021-42118 | Stored XSS in TopEase | 5.4NVD v3.1 | 0.7% | 2021-11-30 | Fix |
| CVE-2021-42117 | UI redressing in TopEase | 5.4v3.1 | 0.7% | 2021-11-30 | Fix |
| CVE-2021-42116 | Unauthorized Menu Item Access in TopEase | 4.3v3.1 | 0.8% | 2021-11-30 | Fix |
| CVE-2021-42115 | Missing HTTPOnly flag on sensitive cookie in TopEase | 9.1v3.1 | 1.2% | 2021-11-30 | Fix |
| CVE-2021-42099 | Zoho ManageEngine M365 Manager Plus unrestricted file upload | 9.8v3.1 | 6.5% | 2021-11-30 | Fix |
| CVE-2021-41679 | OS4ED Opensis version SQL injection | 9.8v3.1 | 1.3% | 2021-11-30 | |
| CVE-2021-41678 | OS4ED Opensis version SQL injection | 9.8v3.1 | 1.3% | 2021-11-30 | |
| CVE-2021-41677 | OS4ED Opensis version SQL injection | 9.8v3.1 | 1.3% | 2021-11-30 | |
| CVE-2021-41256 | Intent URI permissions manipulation in Nextcloud news-android | 5.8CNA v3.1 | 1.1% | 2021-11-30 | Fix |
| CVE-2021-40101 | Concrete CMS incorrect permission assignment | 7.2v3.1 | 2.6% | 2021-11-30 | Exploit codeKCVFix |
| CVE-2021-39000 | IBM MQ Appliance information disclosure | 5.9CNA v3.0 | 0.7% | 2021-11-30 | Fix |
| CVE-2021-38999 | IBM MQ Appliance information disclosure | 5.1CNA v3.0 | 0.2% | 2021-11-30 | Fix |
| CVE-2021-38967 | IBM MQ Appliance code injection | 8.2CNA v3.0 | 0.3% | 2021-11-30 | Fix |
| CVE-2021-38958 | IBM MQ Appliance denial of service | 5.1CNA v3.0 | 0.2% | 2021-11-30 | Fix |
| CVE-2021-36330 | Dell EMC Streaming Data Platform insufficient session expiration | 8.1CNA v3.1 | 1.2% | 2021-11-30 | Fix |
| CVE-2021-36329 | Dell EMC Streaming Data Platform insecure direct object reference | 6.5CNA v3.1 | 0.7% | 2021-11-30 | Fix |
| CVE-2021-36328 | Dell EMC Streaming Data Platform sensitive query strings | 8.8CNA v3.0 | 0.9% | 2021-11-30 | Fix |
| CVE-2021-36327 | Dell EMC Streaming Data Platform server-side request forgery | 5.3CNA v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-36326 | Dell EMC Streaming Data Platform user interface vulnerability | 6.5CNA v3.1 | 1.2% | 2021-11-30 | Fix |
| CVE-2021-31787 | Actions-semi ATS2815 resource exhaustion | 6.5v3.1 | 0.5% | 2021-11-30 | Fix |
| CVE-2021-26612 | Tobesoft Nexacro platform arbitrary file creation | 9.8v3.1 | 1.2% | 2021-11-30 | |
| CVE-2021-25987 | Hexo Vulnerable to XSS | 4.6v3.1 | 0.3% | 2021-11-30 | Fix |
| CVE-2021-22095 | Deserialization of untrusted data in Spring AMQP | 6.5v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-4026 | Improper access control in bookstackapp/BookStack | 4.3v3.1 | 0.9% | 2021-11-30 | Fix |
| CVE-2021-3769 | OS command injection in ohmyzsh/ohmyzsh | 9.8v3.1 | 0.9% | 2021-11-30 | Fix |
| CVE-2021-3727 | OS command injection in ohmyzsh/ohmyzsh | 9.8v3.1 | 1.0% | 2021-11-30 | Fix |
| CVE-2021-3726 | OS command injection in ohmyzsh/ohmyzsh | 9.8v3.1 | 0.8% | 2021-11-30 | Fix |
| CVE-2021-3725 | OS command injection in ohmyzsh/ohmyzsh | 8.8v3.1 | 1.1% | 2021-11-30 | Fix |
| CVE-2021-44429 | Vercot Serva buffer overflow | 7.5v3.1 | 1.9% | 2021-11-29 | |
| CVE-2021-44428 | Ipuptime Pinkie buffer overflow | 7.5v3.1 | 2.9% | 2021-11-29 | |
| CVE-2021-44427 | SQL injection in RosarioSIS | 9.8v3.1 | 50.6% | 2021-11-29 | NucleiFix |
| CVE-2021-44203 | Acronis Cyber Protect 15 stored cross-site scripting (XSS) was possible in protection plan details | 5.4v3.1 | 0.5% | 2021-11-29 | Fix |
| CVE-2021-44202 | Acronis Cyber Protect 15 stored cross-site scripting (XSS) was possible in activity details | 5.4v3.1 | 0.5% | 2021-11-29 | Fix |
| CVE-2021-44201 | Acronis Cyber Protect 15 cross-site scripting (XSS) was possible in notification pop-ups | 6.1v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-44200 | Acronis Cyber Protect 15 self cross-site scripting (XSS) was possible on devices page | 5.4v3.1 | 0.5% | 2021-11-29 | Fix |
| CVE-2021-44199 | Acronis Cyber Protect 15 DLL hijacking could lead to denial of service | 5.5v3.1 | 0.2% | 2021-11-29 | Fix |
| CVE-2021-44198 | Acronis Cyber Protect 15 DLL hijacking could lead to local privilege escalation | 7.8v3.1 | 0.2% | 2021-11-29 | Fix |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus remote code execution | 9.8v3.1 | 93.3% | 2021-11-29 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-43788 | NodeBB path traversal in translator module of NobeBB | 5.0CNA v3.1 | 25.8% | 2021-11-29 | Emerging ThreatsFix |
| CVE-2021-43787 | NodeBB XSS via prototype pollution | 9.0CNA v3.1 | 1.3% | 2021-11-29 | Fix |
| CVE-2021-43786 | NodeBB API token verification can be bypassed | 9.8CNA v3.1 | 2.4% | 2021-11-29 | Fix |
| CVE-2021-43783 | Path traversal in @backstage/plugin-scaffolder-backend | 8.5CNA v3.1 | 1.2% | 2021-11-29 | Fix |
| CVE-2021-43698 | Phpwhois cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-29 | |
| CVE-2021-43697 | Workerman-thinkphp-redis cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-29 | |
| CVE-2021-43696 | twmap cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-29 | |
| CVE-2021-43695 | Issabel PBX cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-29 | |
| CVE-2021-43693 | VestaCP Vesta Control Panel file inclusion | 9.8v3.1 | 1.2% | 2021-11-29 | |
| CVE-2021-43692 | Youtube-php-mirroring cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-29 | |
| CVE-2021-43691 | Tripexpress path traversal | 9.8v3.1 | 1.5% | 2021-11-29 | |
| CVE-2021-42365 | Asgaros Forums Authenticated stored XSS | 4.8v3.1 | 0.7% | 2021-11-29 | Fix |
| CVE-2021-42364 | Stetic cross-site request forgery to stored cross-site scripting | 8.8CNA v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-42358 | Contact Form With Captcha cross-site request forgery to reflected cross-site scripting | 8.8CNA v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-39995 | eCNS280_TD out-of-bounds read | 6.5v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-38283 | Wipro Holmes missing authentication | 7.5v3.1 | 2.4% | 2021-11-29 | |
| CVE-2021-38147 | Wipro Holmes missing authentication | 7.5v3.1 | 53.0% | 2021-11-29 | Nuclei |
| CVE-2021-34800 | Acronis Agent sensitive information could be logged | 7.5v3.1 | 1.0% | 2021-11-29 | Fix |
| CVE-2021-32061 | S3Scanner allows directory traversal | 5.3v3.1 | 1.6% | 2021-11-29 | Fix |
| CVE-2021-24927 | My Calendar WordPress plugin Subscriber+ reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-24918 | Smash Balloon Social Post Feed WordPress plugin arbitrary plugin settings update to stored XSS | 5.4NVD v3.1 | 0.7% | 2021-11-29 | Fix |
| CVE-2021-24915 | Contest Gallery user export feature SQL injection | 9.8NVD v3.1 | 11.5% | 2021-11-29 | NucleiFix |
| CVE-2021-24908 | wpchill Check and Log Email email log viewer reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-11-29 | Fix |
| CVE-2021-24899 | Media-Tags WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-29 | |
| CVE-2021-24889 | Ninja Forms WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2021-11-29 | Fix |
| CVE-2021-24883 | Popup Anything WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.8% | 2021-11-29 | Fix |
| CVE-2021-24876 | Registrations for The Events Calendar WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.2% | 2021-11-29 | NucleiFix |
| CVE-2021-24860 | BSK PDF Manager WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2021-11-29 | Fix |
| CVE-2021-24842 | Bulk Datetime Change WordPress plugin missing authorisation | 5.4NVD v3.1 | 0.7% | 2021-11-29 | Fix |
| CVE-2021-24822 | Stylish Cost Calculator WordPress plugin Subscriber+ Unauthorised AJAX Calls to stored XSS | 5.4NVD v3.1 | 0.3% | 2021-11-29 | Fix |
| CVE-2021-24811 | Shop Page WP WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-24768 | WP RSS Aggregator WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-24755 | myCred WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.4% | 2021-11-29 | Fix |
| CVE-2021-24751 | GenerateBlocks WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-24749 | URL Shortify WordPress plugin arbitrary Link/Group deletion via CSRF | 4.3NVD v3.1 | 0.5% | 2021-11-29 | Fix |
| CVE-2021-24748 | Email Before Download WordPress plugin Admin+ SQL injection | 8.8NVD v3.1 | 1.4% | 2021-11-29 | Fix |
| CVE-2021-24745 | About Author Box WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-29 | Fix |
| CVE-2021-21707 | PHP special characters break path parsing in XML functions | 5.3CNA v3.1 | 26.0% | 2021-11-29 | Exploit codeFix |
| CVE-2021-3802 | udisks2 kernel panic | 4.2NVD v3.1 | 0.8% | 2021-11-29 | Fix |
| CVE-2021-44094 | ZrLog unrestricted file upload | 7.8v3.1 | 1.4% | 2021-11-28 | |
| CVE-2021-44093 | ZrLog unrestricted file upload | 9.8v3.1 | 2.5% | 2021-11-28 | |
| CVE-2021-4020 | Cross-site scripting (XSS) Stored in meetecho/janus-gateway | 5.4NVD v3.1 | 0.8% | 2021-11-27 | Fix |
| CVE-2021-44225 | Keepalived D-Bus interface improper access control | 5.4v3.1 | 1.1% | 2021-11-26 | Fix |
| CVE-2021-43785 | Cross-site scripting vulnerability in @joeattardi/emoji-button | 7.6CNA v3.1 | 1.0% | 2021-11-26 | Fix |
| CVE-2021-43776 | XSS vulnerability in @backstage/plugin-auth-backend | 7.4CNA v3.1 | 0.7% | 2021-11-26 | Fix |
| CVE-2021-41279 | BaserCMS zip file upload path traversal | 7.7CNA v3.1 | 1.6% | 2021-11-26 | Fix |
| CVE-2021-41243 | baserproject basercms OS command injection vulnerability and potential Zip Slip | 9.1CNA v3.1 | 2.2% | 2021-11-26 | Fix |
| CVE-2021-40833 | F-Secure Atlant UPX unpacking module denial of service | 5.5v3.1 | 0.4% | 2021-11-26 | Fix |
| CVE-2021-38686 | QNAP Systems QVR improper authentication vulnerability in VioStor | 8.8CNA v3.1 | 1.0% | 2021-11-26 | Fix |
| CVE-2021-38685 | QNAP Systems QVR command injection vulnerability in VioStor | 9.8CNA v3.1 | 1.5% | 2021-11-26 | Fix |
| CVE-2021-36919 | Awesome Support WordPress plugin Multiple authenticated reflected cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2021-11-26 | Fix |
| CVE-2021-36843 | Floating Social Media Icon WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2021-11-26 | |
| CVE-2021-36807 | Sophos SG UTM SQL injection | 8.8CNA v3.1 | 1.5% | 2021-11-26 | Fix |
| CVE-2021-35533 | Specially Crafted IEC 60870-5-104 Packet vulnerability in RTU500 series | 7.5CNA v3.1 | 1.0% | 2021-11-26 | Fix |
| CVE-2021-26615 | bandisoft ARK library integer overflow | 8.8v3.1 | 0.6% | 2021-11-26 | |
| CVE-2021-26611 | HejHome IP Camera use of hard-coded credentials | 9.8v3.1 | 1.1% | 2021-11-26 | |
| CVE-2021-25269 | Sophos Intercept X Advanced unquoted search path | 4.4CNA v3.1 | 0.3% | 2021-11-26 | Fix |
| CVE-2021-23654 | html-to-csv improper input validation | 9.8v3.1 | 1.2% | 2021-11-26 | |
| CVE-2021-44223 | WordPress arbitrary code execution | 9.8v3.1 | 29.0% | 2021-11-25 | Fix |
| CVE-2021-44219 | Gin-Vue-Admin before 2.4.6 mishandles a SQL database. | 9.8v3.1 | 1.3% | 2021-11-24 | |
| CVE-2021-44140 | Apache JSPWiki arbitrary file deletion on logout | 9.1v3.1 | 6.2% | 2021-11-24 | Fix |
| CVE-2021-43780 | Server-side request forgery (SSRF) in Redash | 6.8CNA v3.1 | 1.0% | 2021-11-24 | |
| CVE-2021-43778 | Path traversal in GLPI barcode plugin | 9.1CNA v3.1 | 52.7% | 2021-11-24 | NucleiExploit codeFix |
| CVE-2021-43777 | Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce) | 6.8CNA v3.1 | 0.3% | 2021-11-24 | |
| CVE-2021-43268 | Wind River Vxworks double free | 6.5v3.1 | 0.8% | 2021-11-24 | Fix |
| CVE-2021-43221 | Microsoft Edge (Chromium-based) remote code execution | 4.2CNA v3.1 | 1.1% | 2021-11-24 | Fix |
| CVE-2021-43220 | Microsoft Edge for iOS spoofing | 3.1CNA v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-43211 | Microsoft Windows 10 Update Assistant elevation of privilege | 5.5CNA v3.1 | 0.9% | 2021-11-24 | Fix |
| CVE-2021-42308 | Microsoft Edge (Chromium-based) spoofing | 3.1CNA v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-42306 | Microsoft Azure Active Directory information disclosure | 8.1CNA v3.1 | 3.3% | 2021-11-24 | Fix |
| CVE-2021-42297 | Microsoft Windows 10 Update Assistant elevation of privilege | 5.0CNA v3.1 | 1.4% | 2021-11-24 | Fix |
| CVE-2021-41270 | CSV injection in Symfony | 6.5CNA v3.1 | 1.4% | 2021-11-24 | Fix |
| CVE-2021-41268 | Cookie persistence after password changes in symfony/security-bundle | 6.5CNA v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-41267 | Webcache Poisoning in symfony/http-kernel | 6.5CNA v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-41192 | getredash redash insecure default configuration | 8.1CNA v3.1 | 8.1% | 2021-11-24 | Nuclei |
| CVE-2021-40369 | Apache JSPWiki XSS vulnerability on Denounce plugin | 6.1v3.1 | 3.3% | 2021-11-24 | Fix |
| CVE-2021-38873 | IBM Planning Analytics CSV injection | 6.8CNA v3.0 | 1.8% | 2021-11-24 | Fix |
| CVE-2021-36917 | Hide My WP premium WordPress plugin unauthenticated plugin deactivation vulnerability | 7.5v3.1 | 1.9% | 2021-11-24 | Fix |
| CVE-2021-36916 | Hide My WP premium WordPress plugin unauthenticated SQL injection (SQLi) | 9.8v3.1 | 1.8% | 2021-11-24 | Fix |
| CVE-2021-34424 | Process memory exposure in Zoom Client and other products | 5.3CNA v3.0 | 1.7% | 2021-11-24 | Fix |
| CVE-2021-34423 | Buffer overflow in Zoom client and other products | 7.3CNA v3.0 | 3.3% | 2021-11-24 | Fix |
| CVE-2021-32037 | MongoDB Server user may trigger invariant when allowed to send commands directly to shards | 6.5CNA v3.1 | 1.2% | 2021-11-24 | Fix |
| CVE-2021-31822 | Octopus Deploy Octopus Tentacle incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-24 | Fix |
| CVE-2021-28709 | Xen improper exception handling | 7.8v3.1 | 0.3% | 2021-11-24 | Fix |
| CVE-2021-28708 | Xen populate-on-demand memory management vulnerability | 8.8v3.1 | 0.3% | 2021-11-24 | Fix |
| CVE-2021-28707 | Xen populate-on-demand memory management vulnerability | 8.8v3.1 | 0.3% | 2021-11-24 | Fix |
| CVE-2021-28706 | Xen resource exhaustion | 8.6v3.1 | 2.1% | 2021-11-24 | Fix |
| CVE-2021-28705 | Xen improper exception handling | 7.8v3.1 | 0.3% | 2021-11-24 | Fix |
| CVE-2021-28704 | Xen populate-on-demand memory management vulnerability | 8.8v3.1 | 0.3% | 2021-11-24 | Fix |
| CVE-2021-22957 | UniFi Protect application configuration weakness | 8.8v3.1 | 0.9% | 2021-11-24 | Fix |
| CVE-2021-22049 | VMware vCenter Server and VMware Cloud Foundation server-side request forgery | 9.8v3.1 | 1.7% | 2021-11-24 | Fix |
| CVE-2021-21980 | VMware vCenter Server and VMware Cloud Foundation arbitrary file read | 7.5NVD v3.1 | 4.7% | 2021-11-24 | Exploit codeFix |
| CVE-2021-20850 | Alfasado PowerCMS XMLRPC API OS command injection | 9.8v3.1 | 1.5% | 2021-11-24 | Fix |
| CVE-2021-20848 | Cross-site scripting in github.com/schollz/rwtxt | 6.1v3.1 | 0.9% | 2021-11-24 | Fix |
| CVE-2021-20846 | Delite Studio Push Notifications for WordPress (Lite) cross-site request forgery | 8.8v3.1 | 0.7% | 2021-11-24 | Fix |
| CVE-2021-20845 | XML-Sitemaps Unlimited Sitemap Generator cross-site request forgery | 8.8v3.1 | 0.5% | 2021-11-24 | Fix |
| CVE-2021-20844 | Yamaha RTX830 improper neutralization | 5.7v3.1 | 0.9% | 2021-11-24 | Fix |
| CVE-2021-20843 | Yamaha RTX830 inclusion of untrusted functionality | 5.4v3.1 | 0.7% | 2021-11-24 | Fix |
| CVE-2021-20842 | EC-CUBE cross-site request forgery (CSRF) | 6.5v3.1 | 0.5% | 2021-11-24 | Fix |
| CVE-2021-20841 | EC-CUBE improper access control in Management screen | 6.5v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-20840 | SaasProject Booking Package cross-site scripting | 6.1v3.1 | 1.2% | 2021-11-24 | Fix |
| CVE-2021-20835 | Mercari Android App 'Mercari (Merpay) improper authorization | 7.5v3.1 | 1.6% | 2021-11-24 | Fix |
| CVE-2021-3554 | Bitdefender Endpoint Security Tools improper access control vulnerability in the patchesUpdate API | 9.0CNA v3.1 | 2.1% | 2021-11-24 | Fix |
| CVE-2021-3553 | Bitdefender Endpoint Security Tools EPPUpdateService server-side request forgery | 5.3CNA v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-3552 | Bitdefender Endpoint Security Tools EPPUpdateService component server-side request forgery | 5.3CNA v3.1 | 1.3% | 2021-11-24 | Fix |
| CVE-2021-43775 | Arbitrary file reading vulnerability in Aim | 8.6CNA v3.1 | 1.9% | 2021-11-23 | Fix |
| CVE-2021-43019 | Adobe Creative Cloud incorrect permission assignment privilege escalation | 7.8CNA v3.0 | 2.2% | 2021-11-23 | Fix |
| CVE-2021-42785 | Buffer overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer | 9.8v3.1 | 2.3% | 2021-11-23 | Fix |
| CVE-2021-42784 | OS command injection in debug_fcgi in D-Link Dwr-932c E1 Firmware | 9.8v3.1 | 7.1% | 2021-11-23 | Fix |
| CVE-2021-42783 | Missing authentication in debug_post_set.cgi in D-Link Dwr-932c E1 Firmware | 9.8v3.1 | 3.8% | 2021-11-23 | Fix |
| CVE-2021-41281 | Path traversal in Matrix Synapse | 7.5CNA v3.1 | 1.6% | 2021-11-23 | Fix |
| CVE-2021-40831 | Improper certificate management in AWS IoT Device SDK v2 | 7.2v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-40830 | Inconsistent CA override function behavior within AWS IoT Device SDKs on Unix systems | 8.8v3.1 | 0.4% | 2021-11-23 | Fix |
| CVE-2021-40829 | TLS hostname validation issues within AWS IoT Device SDKs on macOS | 8.8v3.1 | 0.4% | 2021-11-23 | Fix |
| CVE-2021-40828 | TLS hostname validation issues within AWS IoT Device SDKs on Windows | 8.8v3.1 | 0.4% | 2021-11-23 | Fix |
| CVE-2021-39976 | CloudEngine 5800 privilege escalation | 7.8v3.1 | 0.2% | 2021-11-23 | Fix |
| CVE-2021-38980 | IBM Security Key Lifecycle Manager information disclosure through error messages | 2.7CNA v3.0 | 1.2% | 2021-11-23 | Fix |
| CVE-2021-38891 | IBM Connect:Direct Web Services inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-38890 | IBM Connect:Direct Web Services missing brute-force protection | 5.9CNA v3.0 | 1.6% | 2021-11-23 | Fix |
| CVE-2021-38875 | IBM MQ denial of service | 6.5CNA v3.0 | 1.0% | 2021-11-23 | Fix |
| CVE-2021-38004 | Google Chrome Autofill insufficient policy enforcement | 4.3v3.1 | 0.8% | 2021-11-23 | Fix |
| CVE-2021-38003 | Google Chromium V8 memory corruption | 8.8v3.1 | 38.6% | 2021-11-23 | KEVExploit codeKCVFix |
| CVE-2021-38002 | Google Chrome Web Transport use-after-free | 9.6v3.1 | 0.9% | 2021-11-23 | Fix |
| CVE-2021-38001 | Google Chrome V8 type confusion | 8.8v3.1 | 26.7% | 2021-11-23 | Exploit codeFix |
| CVE-2021-38000 | Google Chromium Intents improper input validation | 6.1v3.1 | 4.9% | 2021-11-23 | KEVFix |
| CVE-2021-37999 | Google Chrome New Tab page improper input validation | 6.1v3.1 | 0.9% | 2021-11-23 | Fix |
| CVE-2021-37998 | Google Chrome Garbage Collection use-after-free | 8.8v3.1 | 0.9% | 2021-11-23 | Fix |
| CVE-2021-37997 | Google Chrome Sign-In use-after-free | 8.8v3.1 | 0.9% | 2021-11-23 | Fix |
| CVE-2021-37102 | FusionCompute CMA service module command injection | 8.8v3.1 | 0.9% | 2021-11-23 | Fix |
| CVE-2021-37036 | FusionCompute There is an information disclosure | 5.5v3.1 | 0.2% | 2021-11-23 | Fix |
| CVE-2021-37035 | Remote DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37034 | Unstandardized field names in some Huawei phones | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37033 | Huawei EMUI injection attack vulnerability with the MeeTime app | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37032 | Huawei EMUI Digital Balance feature vulnerability | 5.3v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37031 | Remote DoS vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37030 | Huawei EMUI improper permission vulnerability in some smart charging devices | 7.5v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-37029 | Identity verification vulnerability in some Huawei devices | 5.3v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-37026 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37025 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37024 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37023 | Huawei HarmonyOS There is a improper access control | 6.5v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-37022 | Huawei HarmonyOS There is a heap-based buffer overflow | 9.8v3.1 | 0.9% | 2021-11-23 | Fix |
| CVE-2021-37019 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37018 | Huawei HarmonyOS crash | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37017 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37016 | Huawei HarmonyOS There is a out-of-bounds read | 9.1v3.1 | 0.8% | 2021-11-23 | Fix |
| CVE-2021-37015 | Huawei HarmonyOS There is a out-of-bounds read | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37013 | Huawei HarmonyOS There is a improper input validation | 5.3v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-37012 | Huawei HarmonyOS crash | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37010 | Huawei HarmonyOS There is a information disclosure | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37009 | Multi-user settings vulnerability in the system components of some Huawei devices | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37008 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37007 | Huawei HarmonyOS There is a out-of-bounds read | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37006 | Huawei HarmonyOS There is a improper preservation of permissions | 7.5v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-37005 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37004 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-37003 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-36335 | Dell CloudLink improper input validation | 4.3CNA v3.1 | 1.2% | 2021-11-23 | Fix |
| CVE-2021-36334 | Dell CloudLink CSV injection | 5.9CNA v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-36333 | Dell CloudLink buffer overflow | 5.5CNA v3.1 | 0.2% | 2021-11-23 | Fix |
| CVE-2021-36332 | Dell CloudLink open redirect | 5.4CNA v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-36314 | Dell CloudLink arbitrary file write | 7.1CNA v3.1 | 1.2% | 2021-11-23 | Fix |
| CVE-2021-36313 | Dell CloudLink OS command injection | 9.1CNA v3.1 | 2.1% | 2021-11-23 | Fix |
| CVE-2021-36312 | Dell CloudLink hard-coded password | 9.1CNA v3.1 | 1.1% | 2021-11-23 | Fix |
| CVE-2021-36311 | Dell NetWorker improper authorization | 6.0CNA v3.1 | 0.2% | 2021-11-23 | Fix |
| CVE-2021-36301 | Integrated Dell Remote Access Controller (iDRAC) stack-based buffer overflow | 5.9CNA v3.1 | 27.7% | 2021-11-23 | Fix |
| CVE-2021-36300 | Integrated Dell Remote Access Controller (iDRAC) SQL injection | 6.5CNA v3.1 | 33.3% | 2021-11-23 | Fix |
| CVE-2021-36299 | Integrated Dell Remote Access Controller (iDRAC) SQL injection | 7.1CNA v3.1 | 29.6% | 2021-11-23 | Fix |
| CVE-2021-35052 | Kaspersky Password Manager improper privilege management | 7.8NVD v3.1 | 0.3% | 2021-11-23 | Fix |
| CVE-2021-35033 | A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the device, | 7.8CNA v3.1 | 0.4% | 2021-11-23 | Fix |
| CVE-2021-31852 | Cross-site scripting vulnerability in Policy Auditor | 6.1CNA v3.1 | 0.8% | 2021-11-23 | Fix |
| CVE-2021-31851 | Cross-site scripting vulnerability in Policy Auditor | 6.1CNA v3.1 | 0.8% | 2021-11-23 | Fix |
| CVE-2021-25986 | Django-wiki stored cross-site scripting (XSS) in Notifications Section | 5.4v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-24894 | Reviews Plus WordPress plugin Subscriber+ Reviews DoS | 6.5NVD v3.1 | 1.5% | 2021-11-23 | Fix |
| CVE-2021-24892 | Advanced Forms WordPress plugin Subscriber+ arbitrary user email Address update via IDOR | 8.8NVD v3.1 | 1.9% | 2021-11-23 | Fix |
| CVE-2021-24891 | Elementor WordPress plugin DOM cross-site-scripting | 6.1NVD v3.1 | 25.1% | 2021-11-23 | NucleiExploit codeFix |
| CVE-2021-24888 | ImageBoss WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-24882 | Slideshow Gallery WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-24877 | MainWP Child WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2021-11-23 | Fix |
| CVE-2021-24875 | eCommerce Product Catalog for WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.7% | 2021-11-23 | NucleiFix |
| CVE-2021-24873 | Tutor LMS WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-11-23 | Fix |
| CVE-2021-24830 | Advanced Access Manager WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-11-23 | Fix |
| CVE-2021-24812 | BetterLinks WordPress plugin Admin+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-24729 | Logo Showcase with Slick Slider WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-24713 | Video Lessons Manager Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-24703 | Download WordPress plugin Subscriber+ arbitrary plugin activation | 5.7NVD v3.1 | 0.4% | 2021-11-23 | Fix |
| CVE-2021-24700 | Forminator WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-23 | Fix |
| CVE-2021-24668 | MAZ Loader WordPress plugin arbitrary Loader deletion via CSRF | 4.3NVD v3.1 | 0.5% | 2021-11-23 | Fix |
| CVE-2021-24644 | Images to WebP WordPress plugin authenticated local file inclusion | 7.5NVD v3.1 | 4.9% | 2021-11-23 | NucleiFix |
| CVE-2021-24641 | Images to WebP WordPress plugin Multiple cross-site request forgery (CSRF) | 8.1NVD v3.1 | 0.5% | 2021-11-23 | Fix |
| CVE-2021-22410 | iMaster NCE-Fabric There is a cross-site scripting | 5.4v3.1 | 0.3% | 2021-11-23 | Fix |
| CVE-2021-22356 | IPS Module weak cryptographic algorithm | 5.9v3.1 | 0.4% | 2021-11-23 | Fix |
| CVE-2021-21561 | Dell PowerScale OneFS sensitive information in log files | 7.8CNA v3.1 | 0.2% | 2021-11-23 | Fix |
| CVE-2021-20601 | GOT2000 series GT27 model improper input validation | 7.5v3.1 | 2.3% | 2021-11-23 | |
| CVE-2021-3672 | c-ares cross-site scripting | 5.6NVD v3.1 | 2.8% | 2021-11-23 | Fix |
| CVE-2021-44150 | transloadit Tusdotnet inadequate encryption strength | 7.5v3.1 | 0.5% | 2021-11-22 | |
| CVE-2021-44147 | Claris FileMaker Pro XML external entity injection | 5.5v3.1 | 1.1% | 2021-11-22 | Fix |
| CVE-2021-44144 | Asterix heap-based buffer overflow | 9.1v3.1 | 1.1% | 2021-11-22 | Fix |
| CVE-2021-44143 | isync out-of-bounds write | 9.8v3.1 | 3.7% | 2021-11-22 | Fix |
| CVE-2021-44079 | wazuh command injection | 9.8v3.1 | 3.3% | 2021-11-22 | |
| CVE-2021-43582 | Opendesign Drawings SDK use-after-free | 7.8v3.1 | 1.3% | 2021-11-22 | Fix |
| CVE-2021-43581 | Opendesign Prc SDK out-of-bounds read | 8.8v3.1 | 1.2% | 2021-11-22 | Fix |
| CVE-2021-43560 | Moodle insecure direct object reference (IDOR) in a calendar web service | 5.3NVD v3.1 | 1.0% | 2021-11-22 | Fix |
| CVE-2021-43559 | Moodle contains CSRF | 8.8NVD v3.1 | 0.6% | 2021-11-22 | Fix |
| CVE-2021-43558 | Cross-site scripting in Moodle | 6.1NVD v3.1 | 0.9% | 2021-11-22 | Fix |
| CVE-2021-43557 | Apache APISIX path traversal in request_uri variable | 7.5v3.1 | 12.7% | 2021-11-22 | Exploit codeFix |
| CVE-2021-43016 | Adobe InCopy null pointer dereference application denial of service | 5.5CNA v3.1 | 2.1% | 2021-11-22 | Fix |
| CVE-2021-43015 | Adobe InCopy GIF File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2021-11-22 | Fix |
| CVE-2021-42738 | Adobe Prelude MXF File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2021-11-22 | Fix |
| CVE-2021-42737 | Adobe Prelude WAV File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2021-11-22 | Fix |
| CVE-2021-42733 | Adobe Bridge null pointer dereference could lead to application denial of service | 5.5CNA v3.1 | 1.4% | 2021-11-22 | Fix |
| CVE-2021-42727 | Adobe Bridge buffer overflow arbitrary code execution | 7.8CNA v3.1 | 39.4% | 2021-11-22 | Fix |
| CVE-2021-42707 | WECON PLC Editor project file parser out-of-bounds write | 7.8v3.1 | 0.9% | 2021-11-22 | |
| CVE-2021-42705 | WECON PLC Editor project file parser stack-based buffer overflow | 7.8v3.1 | 1.0% | 2021-11-22 | |
| CVE-2021-40775 | Adobe Prelude SVG File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 1.8% | 2021-11-22 | Fix |
| CVE-2021-40774 | Adobe Prelude null pointer dereference application denial of service | 5.5CNA v3.1 | 1.2% | 2021-11-22 | Fix |
| CVE-2021-40773 | Adobe Prelude null pointer dereference application denial of service | 5.5CNA v3.1 | 1.2% | 2021-11-22 | Fix |
| CVE-2021-40772 | Adobe Prelude M4A File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 1.8% | 2021-11-22 | Fix |
| CVE-2021-40771 | Adobe Prelude WAV File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 1.8% | 2021-11-22 | Fix |
| CVE-2021-40770 | Adobe Prelude M4A File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2021-11-22 | Fix |
| CVE-2021-38448 | Trane Symbio improper control of generation of code | 7.6v3.1 | 0.3% | 2021-11-22 | |
| CVE-2021-38378 | Open-Xchange OX App Suite information disclosure | 4.3v3.1 | 1.2% | 2021-11-22 | |
| CVE-2021-38377 | Open-Xchange OX App Suite insufficient randomness | 6.1v3.1 | 1.1% | 2021-11-22 | |
| CVE-2021-38376 | Open-Xchange OX App Suite improper authentication | 5.3v3.1 | 1.4% | 2021-11-22 | |
| CVE-2021-38375 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 1.3% | 2021-11-22 | |
| CVE-2021-38374 | Open-Xchange OX App Suite cross-site scripting | 5.4v3.1 | 1.2% | 2021-11-22 | |
| CVE-2021-38146 | Wipro Holmes path traversal | 7.5v3.1 | 11.7% | 2021-11-22 | Nuclei |
| CVE-2021-33495 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 1.1% | 2021-11-22 | |
| CVE-2021-33494 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 1.1% | 2021-11-22 | |
| CVE-2021-33493 | Open-Xchange OX App Suite code injection | 6.0v3.1 | 0.5% | 2021-11-22 | |
| CVE-2021-33492 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 1.1% | 2021-11-22 | |
| CVE-2021-33491 | Open-Xchange OX App Suite path traversal | 6.5v3.1 | 2.4% | 2021-11-22 | |
| CVE-2021-33490 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 1.3% | 2021-11-22 | |
| CVE-2021-33489 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 1.3% | 2021-11-22 | |
| CVE-2021-33488 | Open-Xchange OX App Suite improper input validation | 6.1v3.1 | 1.1% | 2021-11-22 | |
| CVE-2021-32004 | GateManager does not enforce strict hostname matching for web server | 3.7CNA v3.1 | 0.6% | 2021-11-22 | Fix |
| CVE-2021-26614 | IpTime C200 IP camera remote code execution | 9.8v3.1 | 2.5% | 2021-11-22 | |
| CVE-2021-23732 | docker-cli-js arbitrary code execution | 9.0v3.1 | 1.8% | 2021-11-22 | Fix |
| CVE-2021-23718 | ssrf-agent server-side request forgery (SSRF) | 7.5v3.1 | 1.6% | 2021-11-22 | Fix |
| CVE-2021-23673 | pekeupload cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2021-11-22 | |
| CVE-2021-3943 | Moodle vulnerable to RCE via unsafe deserialization | 9.8NVD v3.1 | 2.5% | 2021-11-22 | Fix |
| CVE-2021-3935 | PgBouncer SQL injection | 8.1NVD v3.1 | 1.1% | 2021-11-22 | Fix |
| CVE-2021-28710 | Xen improper privilege management | 8.8v3.1 | 0.3% | 2021-11-21 | Fix |
| CVE-2021-38681 | Reflected XSS vulnerability in Ragic Cloud DB | 5.4NVD v3.1 | 0.7% | 2021-11-20 | Fix |
| CVE-2021-36340 | Dell Secure Connect Gateway (SCG) sensitive information in log files | 7.8CNA v3.1 | 0.3% | 2021-11-20 | Fix |
| CVE-2021-36322 | Dell Networking X-Series host header injection | 6.1CNA v3.1 | 0.9% | 2021-11-20 | Fix |
| CVE-2021-36321 | Dell Networking X-Series improper input validation | 7.5CNA v3.1 | 1.3% | 2021-11-20 | Fix |
| CVE-2021-36320 | Dell Networking X-Series insufficient entropy | 7.5CNA v3.1 | 1.2% | 2021-11-20 | Fix |
| CVE-2021-36319 | Dell Networking OS10 improper initialization | 3.3CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-36310 | Dell Networking OS10 resource exhaustion | 4.9CNA v3.1 | 0.8% | 2021-11-20 | Fix |
| CVE-2021-36308 | Dell Networking OS authentication bypass | 5.9CNA v3.1 | 3.3% | 2021-11-20 | Fix |
| CVE-2021-36307 | Dell Networking OS improper privilege management | 8.8CNA v3.1 | 0.9% | 2021-11-20 | Fix |
| CVE-2021-36306 | Dell Networking OS improper authentication | 8.1CNA v3.1 | 3.7% | 2021-11-20 | Fix |
| CVE-2021-34400 | NVIDIA GPU and Tegra hardware information disclosure | 4.1CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-34399 | NVIDIA GPU and Tegra hardware information disclosure | 4.1CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-34358 | CSRF vulnerability in QmailAgent | 6.8CNA v3.1 | 0.4% | 2021-11-20 | Fix |
| CVE-2021-23219 | NVIDIA GPU and Tegra hardware information disclosure | 4.1CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-23217 | NVIDIA GPU and Tegra hardware code execution | 7.5CNA v3.1 | 0.3% | 2021-11-20 | Fix |
| CVE-2021-23201 | NVIDIA GPU and Tegra hardware information disclosure | 7.5CNA v3.1 | 0.3% | 2021-11-20 | Fix |
| CVE-2021-1125 | NVIDIA GPU and Tegra hardware privilege escalation | 4.1CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-1105 | NVIDIA GPU and Tegra hardware information disclosure | 4.1CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-1088 | NVIDIA GPU and Tegra hardware improper access control | 4.1CNA v3.1 | 0.2% | 2021-11-20 | Fix |
| CVE-2021-44038 | quagga link following | 7.8v3.1 | 0.8% | 2021-11-19 | Fix |
| CVE-2021-44037 | Team Password Manager weak password recovery | 7.5v3.1 | 0.8% | 2021-11-19 | Fix |
| CVE-2021-44036 | Team Password Manager cross-site request forgery | 8.8v3.1 | 0.4% | 2021-11-19 | Fix |
| CVE-2021-44033 | Ionic Identity Vault missing brute-force protection | 6.8v3.1 | 0.5% | 2021-11-19 | Fix |
| CVE-2021-44026 | Roundcube Webmail SQL injection | 9.8v3.1 | 69.9% | 2021-11-19 | KEVExploit codeKCVFix |
| CVE-2021-44025 | Roundcube Webmail cross-site scripting | 6.1v3.1 | 1.1% | 2021-11-19 | Fix |
| CVE-2021-43555 | mySCADA myDESIGNER project file import path traversal | 7.8v3.1 | 38.0% | 2021-11-19 | Fix |
| CVE-2021-43409 | WPO365 login Wordpress plugin persistent cross-site scripting | 6.1NVD v3.1 | 1.0% | 2021-11-19 | Fix |
| CVE-2021-43408 | Duplicate Post WordPress Plugin SQL injection | 8.8v3.1 | 9.5% | 2021-11-19 | Exploit codeFix |
| CVE-2021-42744 | Philips MRI and 3T information exposure | 5.5v3.1 | 0.3% | 2021-11-19 | Fix |
| CVE-2021-42363 | Preview E-Mails for WooCommerce reflected cross-site scripting | 6.1CNA v3.1 | 1.2% | 2021-11-19 | Fix |
| CVE-2021-42338 | 4MOSAn GCB Doctor improper authorization | 9.8CNA v3.1 | 5.8% | 2021-11-19 | Fix |
| CVE-2021-42254 | BeyondTrust Privilege Management insecure permissions | 7.8v3.1 | 0.3% | 2021-11-19 | |
| CVE-2021-41569 | Sas/intrnet inclusion of untrusted functionality | 7.5v3.1 | 7.8% | 2021-11-19 | NucleiFix |
| CVE-2021-41532 | Unauthenticated access to Ozone Recon HTTP endpoints | 5.3v3.1 | 2.3% | 2021-11-19 | Fix |
| CVE-2021-41436 | ASUS Gt-ax11000 web application in ASUS ROG Rapture HTTP request smuggling | 7.5v3.1 | 4.6% | 2021-11-19 | Fix |
| CVE-2021-41435 | ASUS Gt-ax11000 CAPTCHA protection in ASUS ROG Rapture missing brute-force protection | 9.8v3.1 | 6.0% | 2021-11-19 | Fix |
| CVE-2021-41280 | OS command injection in Sharetribe Go | 9.8CNA v3.1 | 3.4% | 2021-11-19 | Fix |
| CVE-2021-41278 | EdgeX Foundry App Functions SDK AES transform weak cryptographic algorithm | 5.4CNA v3.0 | 0.4% | 2021-11-19 | Fix |
| CVE-2021-40391 | Gerbv drill format T-code tool number functionality out-of-bounds write | 9.8v3.1 | 2.9% | 2021-11-19 | Fix |
| CVE-2021-40131 | Cisco Common Services Platform Collector stored cross-site scripting | 5.5CNA v3.1 | 0.7% | 2021-11-19 | Fix |
| CVE-2021-40130 | Cisco Common Services Platform Collector Improper Logging Restriction vulnerability | 4.9CNA v3.1 | 1.1% | 2021-11-19 | Fix |
| CVE-2021-40129 | Cisco Common Services Platform Collector SQL injection | 4.9CNA v3.1 | 1.1% | 2021-11-19 | Fix |
| CVE-2021-39929 | Wireshark Bluetooth DHT dissector uncontrolled recursion | 7.5CNA v3.1 | 3.8% | 2021-11-19 | Fix |
| CVE-2021-39926 | Wireshark Bluetooth HCI_ISO dissector buffer overflow | 7.5CNA v3.1 | 7.8% | 2021-11-19 | Fix |
| CVE-2021-39925 | Wireshark Bluetooth SDP dissector buffer overflow | 7.5CNA v3.1 | 8.1% | 2021-11-19 | Fix |
| CVE-2021-39924 | Wireshark excessive iteration | 7.5CNA v3.1 | 5.3% | 2021-11-19 | Fix |
| CVE-2021-39923 | Wireshark excessive iteration | 7.5CNA v3.1 | 1.6% | 2021-11-19 | Fix |
| CVE-2021-39922 | Wireshark C12.22 dissector buffer overflow | 7.5CNA v3.1 | 5.6% | 2021-11-19 | Fix |
| CVE-2021-39921 | Wireshark Modbus dissector null pointer dereference | 7.5CNA v3.1 | 3.4% | 2021-11-19 | Fix |
| CVE-2021-39353 | Easy Registration Forms cross-site request forgery to stored cross-site scripting | 8.8CNA v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-39236 | Apache Ozone owners of the S3 tokens are not validated | 8.8v3.1 | 2.5% | 2021-11-19 | Fix |
| CVE-2021-39235 | Apache Ozone access mode of block tokens are not enforced | 6.5v3.1 | 1.5% | 2021-11-19 | Fix |
| CVE-2021-39234 | Apache Ozone raw block data can be read bypassing ACL/authorization | 6.8v3.1 | 1.4% | 2021-11-19 | Fix |
| CVE-2021-39233 | Apache Ozone container-related datanode operations can be called without authorization | 9.1v3.1 | 2.3% | 2021-11-19 | Fix |
| CVE-2021-39232 | Apache Ozone missing admin check for SCM related admin commands | 8.8v3.1 | 1.6% | 2021-11-19 | Fix |
| CVE-2021-39231 | Apache Ozone missing authentication/authorization on internal RPC endpoints | 9.1v3.1 | 2.3% | 2021-11-19 | Fix |
| CVE-2021-39198 | oroinc crm the disqualify lead action may be executed without CSRF token check | 4.2CNA v3.1 | 0.3% | 2021-11-19 | Fix |
| CVE-2021-37592 | OISF suricata out-of-bounds write | 9.8v3.1 | 1.6% | 2021-11-19 | Fix |
| CVE-2021-36884 | Backup Migration WordPress plugin authenticated persistent cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2021-11-19 | Fix |
| CVE-2021-36372 | Apache Ozone original block tokens are persisted and can be retrieved | 9.8v3.1 | 2.4% | 2021-11-19 | Fix |
| CVE-2021-36003 | Adobe Audition MP4 File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.0% | 2021-11-19 | Fix |
| CVE-2021-33850 | Microsoft Clarity There is a cross-site scripting | 5.4v3.1 | 1.5% | 2021-11-19 | Fix |
| CVE-2021-29329 | Moddable resource exhaustion | 7.8v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-29328 | Moddable out-of-bounds read | 7.1v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-29327 | Moddable out-of-bounds write | 7.8v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-29326 | Moddable out-of-bounds write | 7.8v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-29325 | Moddable out-of-bounds write | 7.8v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-29324 | Moddable resource exhaustion | 7.8v3.1 | 0.7% | 2021-11-19 | |
| CVE-2021-29323 | Moddable out-of-bounds write | 5.5v3.1 | 0.6% | 2021-11-19 | |
| CVE-2021-26262 | Philips MRI and 3T improper access control | 5.5v3.1 | 0.7% | 2021-11-19 | Fix |
| CVE-2021-26248 | Philips MRI and 3T Incorrect Ownership Assignment | 5.5v3.1 | 0.2% | 2021-11-19 | Fix |
| CVE-2021-23433 | algoliasearch-helper prototype pollution | 9.8v3.1 | 1.6% | 2021-11-19 | Fix |
| CVE-2021-22970 | Server-side request forgery in Concrete CMS | 7.5v3.1 | 1.4% | 2021-11-19 | Fix |
| CVE-2021-22969 | Server-side request forgery in Concrete CMS | 5.3v3.1 | 0.8% | 2021-11-19 | Fix |
| CVE-2021-22968 | Improper file handling in concrete5/core | 7.2v3.1 | 3.1% | 2021-11-19 | Fix |
| CVE-2021-22967 | Exposure of sensitive information in concrete5/core | 7.5v3.1 | 1.1% | 2021-11-19 | Fix |
| CVE-2021-22966 | Improper privilege management in Concrete CMS | 8.8v3.1 | 0.9% | 2021-11-19 | Fix |
| CVE-2021-22965 | Pulse Connect Secure denial of service | 7.5v3.1 | 2.1% | 2021-11-19 | Fix |
| CVE-2021-22951 | Password exposure in concrete5/core | 7.5v3.1 | 1.1% | 2021-11-19 | Fix |
| CVE-2021-22053 | Spring Cloud Netflix code injection in spring-cloud-netflix-hystrix-dashboard | 8.8NVD v3.1 | 13.2% | 2021-11-19 | NucleiExploit codeFix |
| CVE-2021-22030 | GPDB (Greenplum database) sensitive information in log files | 6.5v3.1 | 1.0% | 2021-11-19 | Fix |
| CVE-2021-22028 | gpfdist (Greenplum) path traversal | 9.1v3.1 | 2.4% | 2021-11-19 | Fix |
| CVE-2021-21900 | LibreCAD dxfRW::processLType functionality code execution | 8.8v3.1 | 2.5% | 2021-11-19 | Fix |
| CVE-2021-21899 | LibreCAD dwgCompressor::copyCompBytes21 functionality code execution | 8.8v3.1 | 2.7% | 2021-11-19 | Fix |
| CVE-2021-21898 | LibreCAD dwgCompressor::decompress18 functionality code execution | 8.8v3.1 | 2.5% | 2021-11-19 | Fix |
| CVE-2021-3976 | Cross-site request forgery (CSRF) in kevinpapst/kimai2 | 6.5v3.1 | 0.4% | 2021-11-19 | Fix |
| CVE-2021-3974 | vim/vim use-after-free | 7.8NVD v3.1 | 1.4% | 2021-11-19 | Fix |
| CVE-2021-3973 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.8% | 2021-11-19 | Fix |
| CVE-2021-3968 | Heap-based buffer overflow in Vim/Vim | 8.0NVD v3.1 | 2.2% | 2021-11-19 | Fix |
| CVE-2021-3963 | Cross-site request forgery (CSRF) in kevinpapst/kimai2 | 4.3v3.1 | 0.4% | 2021-11-19 | Fix |
| CVE-2021-3962 | ImageMagick use-after-free | 7.8NVD v3.1 | 6.0% | 2021-11-19 | Fix |
| CVE-2021-3961 | Cross-site scripting (XSS) Stored in snipe/Snipe-IT | 5.4NVD v3.1 | 0.8% | 2021-11-19 | Fix |
| CVE-2021-3957 | Cross-site request forgery (CSRF) in kevinpapst/kimai2 | 4.3v3.1 | 0.4% | 2021-11-19 | Fix |
| CVE-2021-3950 | Cross-site scripting (XSS) Stored in django-helpdesk/django-helpdesk | 5.4NVD v3.1 | 0.8% | 2021-11-19 | Fix |
| CVE-2021-3920 | Cross-site scripting (XSS) Stored in getgrav/grav-plugin-admin | 5.4v3.1 | 1.3% | 2021-11-19 | Fix |
| CVE-2021-43669 | HTTP request smuggling in github.com/hyperledger/fabric | 7.5v3.1 | 1.1% | 2021-11-18 | Fix |
| CVE-2021-43668 | Denial of service in Go-Ethereum | 5.5v3.1 | 0.3% | 2021-11-18 | Fix |
| CVE-2021-43667 | Null pointer dereference in HyperLedger Fabric | 7.5v3.1 | 1.3% | 2021-11-18 | Fix |
| CVE-2021-43549 | OSIsoft PI Web API cross-site scripting | 4.8v3.1 | 0.7% | 2021-11-18 | |
| CVE-2021-43017 | Adobe Creative Cloud DLL hijacking Local Application denial of service | 4.2CNA v3.1 | 1.2% | 2021-11-18 | Fix |
| CVE-2021-42525 | Adobe Animate SVG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.7% | 2021-11-18 | Fix |
| CVE-2021-42524 | Adobe Animate BMP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.7% | 2021-11-18 | Fix |
| CVE-2021-42272 | Adobe Animate GIF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.7% | 2021-11-18 | Fix |
| CVE-2021-42271 | Adobe Animate BMP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.7% | 2021-11-18 | Fix |
| CVE-2021-42270 | Adobe Animate BMP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.7% | 2021-11-18 | Fix |
| CVE-2021-42269 | Adobe Animate FLA File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 4.0% | 2021-11-18 | Fix |
| CVE-2021-42268 | Adobe Animate FLA File Parsing null pointer dereference application denial of service | 5.5CNA v3.1 | 1.8% | 2021-11-18 | Fix |
| CVE-2021-42267 | Adobe Animate FLA File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.6% | 2021-11-18 | Fix |
| CVE-2021-42266 | Adobe Animate FLA File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.5% | 2021-11-18 | Fix |
| CVE-2021-40761 | Adobe After Effects null pointer dereference application denial of service | 5.5CNA v3.1 | 1.4% | 2021-11-18 | Fix |
| CVE-2021-40760 | Adobe After Effects M4A File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2021-11-18 | Fix |
| CVE-2021-40759 | Adobe After Effects M4A File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2021-11-18 | Fix |
| CVE-2021-40758 | Adobe After Effects WAV File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2021-11-18 | Fix |
| CVE-2021-40757 | Adobe After Effects MXF File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.1% | 2021-11-18 | Fix |
| CVE-2021-40756 | Adobe After Effects null pointer dereference application denial of service | 5.5CNA v3.1 | 1.4% | 2021-11-18 | Fix |
| CVE-2021-40755 | Adobe After Effects SGI File Parsing memory corruption arbitrary code execution | 7.8CNA v3.1 | 2.1% | 2021-11-18 | Fix |
| CVE-2021-40754 | Adobe After Effects WAV File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 2.2% | 2021-11-18 | Fix |
| CVE-2021-40753 | Adobe After Effects SVG File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 2.2% | 2021-11-18 | Fix |
| CVE-2021-40752 | Adobe After Effects M4A File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 2.2% | 2021-11-18 | Fix |
| CVE-2021-40751 | Adobe After Effects M4A File Parsing memory corruption arbitrary code execution | 7.8CNA v3.0 | 2.2% | 2021-11-18 | Fix |
| CVE-2021-40733 | Adobe Animate memory corruption could lead to arbitrary code execution | 7.8CNA v3.0 | 2.6% | 2021-11-18 | Fix |
| CVE-2021-39928 | Wireshark IEEE null pointer dereference | 7.5CNA v3.1 | 5.9% | 2021-11-18 | Fix |
| CVE-2021-39920 | Wireshark IPPUSB dissector null pointer dereference | 7.5CNA v3.1 | 3.3% | 2021-11-18 | Fix |
| CVE-2021-37939 | Kibana sensitive data disclosure | 2.7v3.1 | 0.4% | 2021-11-18 | Fix |
| CVE-2021-37938 | Elastic Kibana improper privilege management | 4.3v3.1 | 0.7% | 2021-11-18 | Fix |
| CVE-2021-37322 | GNU GCC use-after-free | 7.8v3.1 | 0.9% | 2021-11-18 | Fix |
| CVE-2021-36909 | WP Reset PRO Premium WordPress plugin authenticated Database reset vulnerability | 8.1v3.1 | 1.8% | 2021-11-18 | Fix |
| CVE-2021-36908 | WP Reset PRO Premium WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.7% | 2021-11-18 | Fix |
| CVE-2021-35535 | Hitachi Energy Relion 670 Series Insufficient Security Control vulnerability | 8.1CNA v3.1 | 0.7% | 2021-11-18 | Fix |
| CVE-2021-35534 | Hitachi Energy Relion 670 Series Insufficient Security Control vulnerability | 7.2CNA v3.1 | 1.8% | 2021-11-18 | Fix |
| CVE-2021-27026 | Puppet Enterprise, Puppet Connect sensitive information in log files | 4.4v3.1 | 0.2% | 2021-11-18 | Fix |
| CVE-2021-27025 | Puppet Enterprise, Puppet Agent denial of service | 6.5v3.1 | 1.1% | 2021-11-18 | Fix |
| CVE-2021-27024 | A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0 | 8.1v3.1 | 0.8% | 2021-11-18 | Fix |
| CVE-2021-27023 | Unsafe HTTP Redirect in Puppet Agent and Puppet Server | 9.8v3.1 | 1.3% | 2021-11-18 | Fix |
| CVE-2021-23197 | Gallagher Command Centre unquoted search path | 5.2CNA v3.1 | 0.3% | 2021-11-18 | Fix |
| CVE-2021-23193 | Gallagher Command Centre information disclosure | 8.1CNA v3.1 | 0.7% | 2021-11-18 | Fix |
| CVE-2021-23167 | Gallagher Command Centre SMTP client improper certificate validation | 8.1CNA v3.1 | 0.4% | 2021-11-18 | Fix |
| CVE-2021-23162 | Gallagher Command Centre Mobile Connect improper input validation | 7.7CNA v3.1 | 0.4% | 2021-11-18 | Fix |
| CVE-2021-23155 | Gallagher Command Centre Mobile Client improper input validation | 9.0CNA v3.1 | 0.5% | 2021-11-18 | Fix |
| CVE-2021-23146 | Gallagher Command Centre PIV verification vulnerability | 7.1CNA v3.1 | 0.9% | 2021-11-18 | Fix |
| CVE-2021-0672 | Android exposure of sensitive information to an unauthorized actor in Browser app | 5.5v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0671 | MT6853 apusys memory corruption | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0670 | MT6853 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0669 | MT6853 use-after-free in apusys | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0668 | MT6873 improper check or handling of exceptional conditions in apusys | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0667 | MT6873 use-after-free in apusys | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0666 | MT6873 out-of-bounds read in apusys | 4.4NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0665 | MT6873 out-of-bounds read in apusys | 4.4NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0664 | MT6765 improper restriction of operations within the bounds of a memory buffer in ccu | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0659 | MT6853 out-of-bounds read in apusys | 4.4NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0658 | MT6873 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0657 | MT6873 stack-based buffer overflow in apusys | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0656 | MT6853 use-after-free in edma driver | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0655 | MT6873 improper restriction of operations within the bounds of a memory buffer in mdlactl driver | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0629 | MT6873 improper restriction of operations within the bounds of a memory buffer in mdlactl driver | 6.7NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0624 | MT6580 out-of-bounds read in flv extractor | 5.5NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0623 | MT5522 out-of-bounds read in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0622 | MT5522 out-of-bounds read in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0621 | MT5522 out-of-bounds read in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0620 | MT5522 out-of-bounds read in asf extractor | 5.5NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-0619 | MT6739 out-of-bounds read in ape extractor | 5.5NVD v3.1 | 0.1% | 2021-11-18 | Fix |
| CVE-2021-43997 | Amazon FreeRTOS privilege escalation | 7.8v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-43996 | Incorrect Access Control in Ignition | 9.8v3.1 | 1.7% | 2021-11-17 | Fix |
| CVE-2021-43979 | open-policy-agent Gatekeeper incorrect control flow | 5.3v3.1 | 1.0% | 2021-11-17 | Fix |
| CVE-2021-43977 | SmarterTools SmarterMail cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-43976 | Linux kernel denial of service | 4.6v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-43975 | Linux kernel out-of-bounds write | 6.7NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-43553 | OSIsoft PI Vision AF attribute Limits property incorrect authorization | 4.3v3.1 | 0.5% | 2021-11-17 | |
| CVE-2021-43551 | OSIsoft PI Vision display cross-site scripting | 5.4v3.1 | 0.6% | 2021-11-17 | |
| CVE-2021-43337 | SchedMD Slurm SlurmDBD job script access control vulnerability | 6.5v3.1 | 1.2% | 2021-11-17 | Fix |
| CVE-2021-42956 | Zoho Manageengine Remote Access Plus Server improper privilege management | 8.8v3.1 | 0.6% | 2021-11-17 | |
| CVE-2021-42955 | Zoho Manageengine Remote Access Plus incorrect permission assignment | 7.8v3.1 | 0.4% | 2021-11-17 | |
| CVE-2021-42954 | Zoho Manageengine Remote Access Plus incorrect permission assignment | 7.8v3.1 | 0.4% | 2021-11-17 | |
| CVE-2021-42362 | WordPress Popular Posts authenticated arbitrary file upload | 8.8CNA v3.1 | 79.8% | 2021-11-17 | MetasploitExploit codeFix |
| CVE-2021-42361 | Contact Form Email Authenticated stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-42360 | Brainstorm Force Starter Templates block import AJAX action stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-42250 | Apache Superset possible log injection | 6.5v3.1 | 1.8% | 2021-11-17 | Fix |
| CVE-2021-41931 | Recruitment Management System SQL injection | 9.8v3.1 | 1.3% | 2021-11-17 | |
| CVE-2021-41277 | Metabase GeoJSON API local file inclusion | 10.0CNA v3.1 | 97.2% | 2021-11-17 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-41275 | spree_auth_devise authentication bypass by CSRF Weakness | 9.3CNA v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-41274 | solidusio solidus_auth_devise authentication bypass by CSRF Weakness | 9.3CNA v3.1 | 0.7% | 2021-11-17 | Fix |
| CVE-2021-41273 | Pterodactyl Panel test email and node auto-deployment endpoints cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-41190 | opencontainers distribution-spec clarify Content-Type handling in OCI spec | 3.0CNA v3.1 | 2.2% | 2021-11-17 | Fix |
| CVE-2021-41165 | ckeditor4 HTML comments vulnerability allowing to execute JavaScript code | 8.2CNA v3.1 | 1.6% | 2021-11-17 | Fix |
| CVE-2021-41164 | CKEditor 4 Advanced Content Filter cross-site scripting | 8.2CNA v3.1 | 1.3% | 2021-11-17 | Fix |
| CVE-2021-40745 | Adobe Campaign path traversal leads to information exposure | 7.5CNA v3.1 | 3.7% | 2021-11-17 | Fix |
| CVE-2021-38959 | IBM SPSS Statistics out-of-bounds write | 6.2CNA v3.0 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-35528 | Hitachi Energy Retail Operations improper access control | 7.2CNA v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-33481 | gocr stack-based buffer overflow | 7.8NVD v3.1 | 1.2% | 2021-11-17 | Fix |
| CVE-2021-33480 | gocr image context correction use-after-free | 5.5NVD v3.1 | 1.1% | 2021-11-17 | Fix |
| CVE-2021-33479 | gocr stack-based buffer overflow | 7.8NVD v3.1 | 1.2% | 2021-11-17 | Fix |
| CVE-2021-33118 | Intel(R) Serial IO driver for Intel(R) NUC 11 Gen software installer for the improper access control | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33106 | Intel(R) Safestring Library integer overflow | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33098 | Intel(R) Ethernet ixgbe driver improper input validation | 5.5v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-33097 | Intel(R) SGX Crypto API Toolkit time-of-check time-of-use race condition | 6.6v3.1 | 0.5% | 2021-11-17 | Fix |
| CVE-2021-33095 | Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack installer for the unquoted search path | 7.8v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-33094 | Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack insecure inherited permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33093 | Intel(R) NUC M15 Laptop Kit Serial IO driver pack installer for the insecure inherited permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33092 | Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33091 | Intel(R) NUC M15 Laptop Kit audio driver pack installer for the insecure inherited permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33090 | Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33089 | Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE improper access control | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33088 | Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33087 | Intel(R) NUC M15 Laptop Kit Management Engine driver pack installer for the improper authentication | 5.5v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33086 | Intel(R) NUCs firmware for some out-of-bounds write | 5.5v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33073 | Intel(R) Distribution of OpenVINOâ„¢ Toolkit resource exhaustion | 5.5v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33071 | Intel(R) oneAPI Rendering Toolkit installer for the incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33063 | Intel(R) RealSense(TM) D400 Series UWP driver uncontrolled search path | 7.8v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-33062 | Intel(R) VTune(TM) Profiler software installer for the incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33059 | Intel(R) Administrative Tools for Intel(R) Network Adapters improper input validation | 6.7v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-33058 | version improper access control | 7.8v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-32600 | Fortinet FortiOS An information disclosure | 5.0CNA v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-32234 | SmarterTools SmarterMail remote code execution | 9.8v3.1 | 2.1% | 2021-11-17 | Fix |
| CVE-2021-29861 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085. | 6.2CNA v3.0 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-29860 | IBM AIX libc.a library information disclosure | 6.2CNA v3.0 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-24856 | Shared Files WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-11-17 | Fix |
| CVE-2021-24854 | QR Redirector WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-24853 | QR Redirector WordPress plugin Subscriber+ arbitrary QR redirect Response Status update | 4.3NVD v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-24852 | MouseWheel Smooth Scroll WordPress plugin Plugin's setting update via CSRF | 6.5NVD v3.1 | 0.5% | 2021-11-17 | Fix |
| CVE-2021-24851 | Insert Pages WordPress plugin Contributor+ arbitrary Posts/Pages access | 4.3NVD v3.1 | 0.9% | 2021-11-17 | Fix |
| CVE-2021-24850 | Insert Pages WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-24847 | SEO Redirection WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.4% | 2021-11-17 | Fix |
| CVE-2021-24841 | Helpful WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2021-11-17 | Fix |
| CVE-2021-24834 | YOP Poll WordPress plugin Author+ stored cross-site scripting via options Module | 5.4NVD v3.1 | 1.5% | 2021-11-17 | Fix |
| CVE-2021-24833 | YOP Poll WordPress plugin Author+ stored cross-site scripting via Preview Module | 5.4NVD v3.1 | 1.1% | 2021-11-17 | Fix |
| CVE-2021-24815 | Paypal Donation WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-24804 | Simple JWT Login WordPress plugin arbitrary settings update to site takeover via CSRF | 8.8NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-24802 | Colorful Categories WordPress plugin arbitrary Colors update via CSRF | 6.5NVD v3.1 | 0.5% | 2021-11-17 | Fix |
| CVE-2021-24796 | My Tickets WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.2% | 2021-11-17 | Fix |
| CVE-2021-24787 | Client Invoicing by Sprout Invoices WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-17 | Fix |
| CVE-2021-24776 | WP Performance Score Booster WordPress plugin settings Change via CSRF | 4.3NVD v3.1 | 0.5% | 2021-11-17 | Fix |
| CVE-2021-24772 | Stream WordPress plugin Admin+ SQL injection | 8.8NVD v3.1 | 1.6% | 2021-11-17 | Fix |
| CVE-2021-24758 | Email Log WordPress plugin Admin+ SQL injection | 8.8NVD v3.1 | 1.3% | 2021-11-17 | Fix |
| CVE-2021-24598 | Testimonial Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-11-17 | Fix |
| CVE-2021-3939 | Canonical accountsservice SetLanguage D-Bus method vulnerability | 7.8CNA v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0200 | Intel(R) Ethernet 700 Series Controllers firmware out-of-bounds write | 6.7v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0199 | Intel(R) Ethernet Network Controller E810 firmware for the improper input validation | 4.4v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0198 | Intel(R) Ethernet Network Controller E810 firmware for the improper access control | 4.4v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0197 | Intel(R) Ethernet Network Controller E810 firmware for the protection mechanism failure | 4.4v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0186 | Intel(R) SGX SDK applications compiled for SGX2 enabled processors improper input validation | 6.7v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-0182 | Intel(R) HAXM software resource exhaustion | 6.2v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-0180 | Intel(R) HAXM software resource exhaustion | 8.4v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-0158 | Intel(R) Processors BIOS firmware for some improper input validation | 6.7NVD v3.1 | 3.0% | 2021-11-17 | Fix |
| CVE-2021-0157 | Intel(R) Processors BIOS firmware for some insufficient control flow management | 6.7NVD v3.1 | 3.1% | 2021-11-17 | Fix |
| CVE-2021-0152 | Intel Wireless Bluetooth and Killer Bluetooth products installer improper signature verification | 5.5v3.1 | 0.1% | 2021-11-17 | Fix |
| CVE-2021-0151 | Intel Wireless Bluetooth and Killer Bluetooth installer improper access control | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0148 | Intel(R) SSD DC sensitive information in log files | 4.4v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0146 | Intel(R) processors which privilege escalation | 6.8NVD v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0135 | Intel(R) Ethernet Diagnostic Driver improper input validation | 6.7v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0121 | Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers installer for some improper access control | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0120 | Intel(R) Graphics DCH Drivers installer for some improper initialization | 5.5v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0110 | Intel(R) Thunderbolt(TM) Windows DCH Drivers some improper access control | 5.5v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0096 | Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN improper authentication | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0082 | Intel(R) PROSet/Wireless WiFi in Windows 10 software installer uncontrolled search path | 7.8v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-0079 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 improper input validation | 6.5v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0078 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 improper input validation | 8.1v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0075 | Intel PROSet/Wireless WiFi and Killer WiFi firmware out-of-bounds write | 5.5v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0071 | Intel(R) PROSet/Wireless WiFi in UEFI firmware for some improper input validation | 8.8v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0069 | Intel PROSet/Wireless WiFi and Killer WiFi firmware improper input validation | 6.5v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0065 | Intel(R) PROSet/Wireless WiFi software installer incorrect default permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0064 | Intel(R) PROSet/Wireless WiFi software installer insecure inherited permissions | 7.8v3.1 | 0.2% | 2021-11-17 | Fix |
| CVE-2021-0063 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 improper input validation | 6.5v3.1 | 0.4% | 2021-11-17 | Fix |
| CVE-2021-0053 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 improper initialization | 5.7v3.1 | 0.3% | 2021-11-17 | Fix |
| CVE-2021-0013 | Intel(R) EMA improper input validation | 7.5v3.1 | 0.9% | 2021-11-17 | Fix |
| CVE-2021-43362 | MedData HBYS remote SQL injection | 9.8v3.1 | 0.6% | 2021-11-16 | Fix |
| CVE-2021-43361 | MedData HBYS remote SQL injection | 9.8v3.1 | 0.6% | 2021-11-16 | Fix |
| CVE-2021-43048 | TIBCO PartnerExpress Interior Server and Gateway Server clickjacking | 9.8CNA v3.1 | 1.3% | 2021-11-16 | Fix |
| CVE-2021-43047 | TIBCO PartnerExpress cross-site scripting | 9.0CNA v3.1 | 1.0% | 2021-11-16 | Fix |
| CVE-2021-43046 | TIBCO PartnerExpress Session Token in URL | 7.5CNA v3.1 | 1.0% | 2021-11-16 | Fix |
| CVE-2021-43013 | Adobe Media Encoder memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 2.0% | 2021-11-16 | Fix |
| CVE-2021-43012 | Adobe Prelude M4A file memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 2.1% | 2021-11-16 | Fix |
| CVE-2021-43011 | Adobe Prelude M4A file memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 2.1% | 2021-11-16 | Fix |
| CVE-2021-42731 | Adobe InDesign buffer overflow could lead to remote code execution | 7.8CNA v3.1 | 5.2% | 2021-11-16 | Fix |
| CVE-2021-42726 | Adobe Bridge memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 2.3% | 2021-11-16 | Fix |
| CVE-2021-42725 | Adobe Bridge memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2021-11-16 | Fix |
| CVE-2021-42723 | Adobe Bridge out-of-bounds read could lead to arbitrary code execution | 7.8CNA v3.1 | 2.5% | 2021-11-16 | Fix |
| CVE-2021-42721 | Adobe Bridge use-after-free could lead to arbitrary code execution | 7.8CNA v3.1 | 3.7% | 2021-11-16 | Fix |
| CVE-2021-42337 | Cashier Accounting Management System salary query function improper authorization | 4.3v3.1 | 0.9% | 2021-11-16 | Fix |
| CVE-2021-42114 | Micron ddr4_sdram improper input validation | 8.3NVD v3.1 | 3.0% | 2021-11-16 | |
| CVE-2021-41258 | getkirby kirby cross-site scripting (XSS) from image block content in the site frontend | 7.3CNA v3.1 | 0.8% | 2021-11-16 | Fix |
| CVE-2021-41252 | getkirby kirby cross-site scripting (XSS) from writer field content in the site frontend | 7.3CNA v3.1 | 0.9% | 2021-11-16 | Fix |
| CVE-2021-38949 | IBM MQ cleartext storage of sensitive information | 6.2CNA v3.0 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-38882 | IBM Spectrum Scale audit logging vulnerability | 4.4CNA v3.0 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-37580 | Apache ShenYu Admin bypass JWT authentication | 9.8v3.1 | 41.9% | 2021-11-16 | NucleiExploit codeFix |
| CVE-2021-26338 | AMD 2nd Gen AMD EPYC™ improper access control | 7.5v3.1 | 0.9% | 2021-11-16 | Fix |
| CVE-2021-26337 | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests. | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26336 | AMD Ryzen™ Series memory corruption | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26335 | AMD Ryzen™ Series improper signature verification | 7.8v3.1 | 0.3% | 2021-11-16 | |
| CVE-2021-26331 | AMD 1st Gen AMD EPYC™ arbitrary code execution | 7.8v3.1 | 0.3% | 2021-11-16 | Fix |
| CVE-2021-26330 | AMD 1st Gen AMD EPYC™ heap-based buffer overflow | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26329 | AMD 1st Gen AMD EPYC™ improper length parameter handling | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26327 | AMD 3rd Gen AMD EPYC™ improper input validation | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26326 | AMD 3rd Gen AMD EPYC™ improper initialization | 7.8v3.1 | 0.3% | 2021-11-16 | Fix |
| CVE-2021-26325 | AMD 3rd Gen AMD EPYC™ SNP_GUEST_REQUEST command improper input validation | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26323 | AMD 3rd Gen AMD EPYC™ improper input validation | 7.8v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26322 | AMD 1st Gen AMD EPYC™ key management weakness | 7.5v3.1 | 1.0% | 2021-11-16 | Fix |
| CVE-2021-26321 | AMD 1st Gen AMD EPYC™ denial of service | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26320 | AMD 1st Gen AMD EPYC™ improper certificate validation | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26315 | AMD 3rd Gen AMD EPYC™ insufficient verification of data authenticity | 7.8v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-26312 | AMD EPYC™ Processors improper initialization | 5.5v3.1 | 0.2% | 2021-11-16 | Fix |
| CVE-2021-25985 | FactorJS insufficient session expiration leads to a local account takeover | 9.8v3.1 | 0.8% | 2021-11-16 | |
| CVE-2021-25984 | FactorJS stored cross-site scripting (XSS) in Post Reply Functionality | 6.1v3.1 | 0.7% | 2021-11-16 | |
| CVE-2021-25983 | FactorJS reflected cross-site scripting (XSS) in Tags and Categories Functionality | 6.1v3.1 | 0.7% | 2021-11-16 | |
| CVE-2021-25982 | FactorJS reflected cross-site scripting (XSS) in Search Functionality | 6.1v3.1 | 0.7% | 2021-11-16 | |
| CVE-2021-25976 | Piranha CMS Site-wide cross-site request forgery (CSRF) | 8.1v3.1 | 0.4% | 2021-11-16 | Fix |
| CVE-2021-25965 | Calibre-Web admin account takeover via cross-site request forgery (CSRF) | 8.8v3.1 | 0.5% | 2021-11-16 | |
| CVE-2021-25940 | ArangoDB insufficient session expiration after Password Change | 8.0v3.1 | 0.8% | 2021-11-16 | Fix |
| CVE-2021-3958 | SQL injection vulnerability in Ipack SCADA Software | 9.8v3.1 | 14.5% | 2021-11-16 | Fix |
| CVE-2021-43620 | Improper input validation in Fruity | 7.5v3.1 | 1.3% | 2021-11-15 | Fix |
| CVE-2021-43618 | Gmplib Gmp integer overflow | 7.5NVD v3.1 | 4.5% | 2021-11-15 | Fix |
| CVE-2021-43574 | Atmail cross-site scripting | 6.1v3.1 | 2.4% | 2021-11-15 | NucleiFix |
| CVE-2021-43495 | Alquistai Alquist path traversal | 7.5v3.1 | 9.1% | 2021-11-15 | Nuclei |
| CVE-2021-42839 | Grand Vice info Co. Webopac7 arbitrary file upload | 8.8CNA v3.1 | 2.4% | 2021-11-15 | Fix |
| CVE-2021-42838 | Grand Vice info Co. Webopac7 reflected XSS | 6.1CNA v3.1 | 0.6% | 2021-11-15 | Fix |
| CVE-2021-42706 | Advantech WebAccess/HMI Designer use-after-free | 7.8v3.1 | 0.3% | 2021-11-15 | Fix |
| CVE-2021-42703 | Advantech WebAccess HMI Designer cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-15 | Fix |
| CVE-2021-42580 | oretnom23 Online Learning System SQL injection | 9.8v3.1 | 10.0% | 2021-11-15 | Exploit code |
| CVE-2021-42386 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.7% | 2021-11-15 | Fix |
| CVE-2021-42385 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.8% | 2021-11-15 | Fix |
| CVE-2021-42384 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.7% | 2021-11-15 | Fix |
| CVE-2021-42383 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.2% | 2021-11-15 | Fix |
| CVE-2021-42382 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.8% | 2021-11-15 | Fix |
| CVE-2021-42381 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.8% | 2021-11-15 | Fix |
| CVE-2021-42380 | BusyBox A use-after-free | 7.2NVD v3.1 | 3.1% | 2021-11-15 | Fix |
| CVE-2021-42379 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.8% | 2021-11-15 | Fix |
| CVE-2021-42378 | BusyBox A use-after-free | 7.2NVD v3.1 | 2.7% | 2021-11-15 | Fix |
| CVE-2021-42377 | BusyBox denial of service | 9.8NVD v3.1 | 3.6% | 2021-11-15 | Fix |
| CVE-2021-42376 | BusyBox A null pointer dereference | 5.5NVD v3.1 | 0.4% | 2021-11-15 | Fix |
| CVE-2021-42375 | BusyBox denial of service | 5.5NVD v3.1 | 0.4% | 2021-11-15 | Fix |
| CVE-2021-42374 | BusyBox out-of-bounds read | 5.3NVD v3.1 | 0.6% | 2021-11-15 | Fix |
| CVE-2021-42373 | BusyBox A null pointer dereference | 5.5NVD v3.1 | 0.4% | 2021-11-15 | Fix |
| CVE-2021-41951 | Montala ResourceSpace cross-site scripting | 6.1v3.1 | 77.9% | 2021-11-15 | NucleiFix |
| CVE-2021-41950 | Montala ResourceSpace path traversal | 9.1v3.1 | 74.9% | 2021-11-15 | |
| CVE-2021-41765 | Montala ResourceSpace pages/edit_fields/9_ajax/add_keyword.php SQL injection | 9.8v3.1 | 67.8% | 2021-11-15 | |
| CVE-2021-41289 | ASUS P453UJ improper restriction of operations within the bounds of a memory buffer | 7.1NVD v3.1 | 0.2% | 2021-11-15 | Fix |
| CVE-2021-41271 | Cache poisoning via maliciously-formed request in discourse | 4.8CNA v3.1 | 1.0% | 2021-11-15 | Fix |
| CVE-2021-41269 | Unauthenticated remote code injection in cron-utils | 10.0CNA v3.1 | 4.3% | 2021-11-15 | Fix |
| CVE-2021-41266 | Authentication bypass issue in the Operator Console | 8.6CNA v3.1 | 48.1% | 2021-11-15 | NucleiFix |
| CVE-2021-41263 | Secure/signed cookies share secrets between sites in rails_multisite | 8.3CNA v3.1 | 0.6% | 2021-11-15 | Fix |
| CVE-2021-41244 | Cross organization admin control in Grafana | 9.1CNA v3.1 | 2.9% | 2021-11-15 | Fix |
| CVE-2021-39222 | Nextcloud Talk stored cross-site scripting | 6.4CNA v3.1 | 1.1% | 2021-11-15 | Fix |
| CVE-2021-38984 | IBM Security Key Lifecycle Manager inadequate encryption strength | 3.7CNA v3.0 | 0.6% | 2021-11-15 | Fix |
| CVE-2021-38983 | IBM Security Key Lifecycle Manager inadequate encryption strength | 4.4CNA v3.0 | 0.9% | 2021-11-15 | Fix |
| CVE-2021-38982 | IBM Security Key Lifecycle Manager cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-11-15 | Fix |
| CVE-2021-38981 | IBM Security Key Lifecycle Manager information disclosure through error messages | 5.3CNA v3.0 | 1.4% | 2021-11-15 | Fix |
| CVE-2021-38979 | IBM Security Key Lifecycle Manager weak password hash | 4.4CNA v3.0 | 0.7% | 2021-11-15 | Fix |
| CVE-2021-38978 | IBM Security Key Lifecycle Manager cleartext transmission of sensitive information | 5.9CNA v3.0 | 0.9% | 2021-11-15 | Fix |
| CVE-2021-38977 | IBM Security Key Lifecycle Manager missing encryption | 3.1CNA v3.0 | 0.5% | 2021-11-15 | Fix |
| CVE-2021-38976 | IBM Security Key Lifecycle Manager insufficiently protected credentials | 6.2CNA v3.0 | 0.2% | 2021-11-15 | Fix |
| CVE-2021-38975 | IBM Security Key Lifecycle Manager information disclosure | 4.3CNA v3.0 | 1.0% | 2021-11-15 | Fix |
| CVE-2021-38974 | IBM Security Key Lifecycle Manager denial of service | 5.4CNA v3.0 | 1.0% | 2021-11-15 | Fix |
| CVE-2021-34992 | Orckestra C1 CMS deserialization of untrusted data | 8.8v3.1 | 4.1% | 2021-11-15 | Fix |
| CVE-2021-34991 | NETGEAR R6400v2 stack-based buffer overflow | 8.8v3.1 | 5.7% | 2021-11-15 | Emerging ThreatsFix |
| CVE-2021-22959 | Node.js Node HTTP request smuggling | 6.5v3.1 | 2.9% | 2021-11-15 | Fix |
| CVE-2021-43617 | Laravel framework unrestricted file upload | 9.8v3.1 | 19.8% | 2021-11-14 | Exploit codeFix |
| CVE-2021-43391 | Opendesign Drawings Software Development Kit out-of-bounds read | 7.8v3.1 | 1.6% | 2021-11-14 | Fix |
| CVE-2021-43390 | Opendesign Drawings Software Development Kit out-of-bounds write | 7.8v3.1 | 1.6% | 2021-11-14 | Fix |
| CVE-2021-43336 | Opendesign Drawings Software Development Kit out-of-bounds write | 7.8v3.1 | 1.6% | 2021-11-14 | Fix |
| CVE-2021-43280 | Opendesign Drawings Software Development Kit stack-based buffer overflow | 7.8v3.1 | 1.8% | 2021-11-14 | Fix |
| CVE-2021-43279 | Opendesign Oda Prc Software Development Kit An out-of-bounds write | 7.8v3.1 | 1.3% | 2021-11-14 | Fix |
| CVE-2021-43278 | Opendesign Drawings Software Developemnt Kit An out-of-bounds read | 7.8v3.1 | 0.8% | 2021-11-14 | Fix |
| CVE-2021-43277 | Opendesign Oda Prc Software Development Kit An out-of-bounds read | 7.8v3.1 | 0.8% | 2021-11-14 | Fix |
| CVE-2021-43276 | Opendesign Oda Viewer Open Design Alliance out-of-bounds read | 7.8v3.1 | 0.8% | 2021-11-14 | Fix |
| CVE-2021-43275 | Opendesign Drawings Software Development Kit use-after-free | 7.8v3.1 | 0.9% | 2021-11-14 | Fix |
| CVE-2021-43274 | Opendesign Drawings Software Development Kit Open Design Alliance Drawings SDK use-after-free | 7.8v3.1 | 0.9% | 2021-11-14 | Fix |
| CVE-2021-43273 | Opendesign Drawings SDK out-of-bounds read | 3.3v3.1 | 1.4% | 2021-11-14 | Fix |
| CVE-2021-43272 | Opendesign Oda Viewer Open Design Alliance improper exception handling | 9.8v3.1 | 3.5% | 2021-11-14 | Fix |
| CVE-2021-41057 | Wibu CodeMeter Runtime link following | 7.1v3.1 | 0.3% | 2021-11-14 | Fix |
| CVE-2021-26795 | Talariax Sendquick Alert Plus Server Admin /appliance/shiftmgn.php SQL injection | 8.8v3.1 | 1.5% | 2021-11-14 | |
| CVE-2021-43616 | NPM insufficient verification of data authenticity | 9.8v3.1 | 2.5% | 2021-11-13 | Exploit codeFix |
| CVE-2021-41653 | TP-Link Tl-wr840n code injection | 9.8v3.1 | 75.9% | 2021-11-13 | NucleiEmerging ThreatsExploit code |
| CVE-2021-38684 | Buffer overflow vulnerability in Multimedia Console | 8.1CNA v3.1 | 1.3% | 2021-11-13 | Fix |
| CVE-2021-34357 | Reflected XSS vulnerability in QmailAgent | 6.9CNA v3.1 | 0.7% | 2021-11-13 | Fix |
| CVE-2021-3945 | Cross-site scripting (XSS) Stored in django-helpdesk/django-helpdesk | 6.1NVD v3.1 | 1.0% | 2021-11-13 | Fix |
| CVE-2021-3938 | Cross-site scripting (XSS) Generic in snipe/Snipe-IT | 5.4v3.1 | 0.5% | 2021-11-13 | Fix |
| CVE-2021-3932 | Cross-site request forgery (CSRF) in area17/Twill | 4.3v3.1 | 0.4% | 2021-11-13 | Fix |
| CVE-2021-3931 | Cross-site request forgery (CSRF) in snipe/Snipe-IT | 4.3v3.1 | 0.4% | 2021-11-13 | |
| CVE-2021-3921 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 4.3v3.1 | 0.4% | 2021-11-13 | Fix |
| CVE-2021-3918 | Prototype pollution in kriszyp/Json-schema | 9.8v3.1 | 3.6% | 2021-11-13 | Fix |
| CVE-2021-3915 | Unrestricted upload of file with dangerous type in bookstackapp/BookStack | 5.7NVD v3.1 | 1.0% | 2021-11-13 | Fix |
| CVE-2021-3776 | Cross-site request forgery (CSRF) in star7th/ShowDoc | 5.4v3.1 | 0.4% | 2021-11-13 | Fix |
| CVE-2021-3775 | Cross-site request forgery (CSRF) in star7th/ShowDoc | 5.4v3.1 | 0.4% | 2021-11-13 | |
| CVE-2021-3683 | Cross-site request forgery (CSRF) in star7th/ShowDoc | 6.5v3.1 | 0.4% | 2021-11-13 | |
| CVE-2021-43611 | Linphone Belle-sip improper resource release | 7.5v3.1 | 1.2% | 2021-11-12 | |
| CVE-2021-43610 | Linphone Belle-sip HTTP request smuggling | 7.5v3.1 | 1.2% | 2021-11-12 | |
| CVE-2021-43578 | Jenkins Squash TM Publisher Plugin agent-to-controller message handling arbitrary file write | 8.1v3.1 | 1.1% | 2021-11-12 | Fix |
| CVE-2021-43577 | XXE vulnerability in Jenkins OWASP Dependency-Check Plugin | 7.1v3.1 | 1.0% | 2021-11-12 | Fix |
| CVE-2021-43576 | XXE vulnerability in Jenkins POM2CONFIG Plugin | 6.5v3.1 | 2.4% | 2021-11-12 | Fix |
| CVE-2021-43496 | Clustering path traversal | 7.5v3.1 | 15.7% | 2021-11-12 | Nuclei |
| CVE-2021-43494 | Codingforentrepreneurs Opencv REST API path traversal | 7.5v3.1 | 3.2% | 2021-11-12 | |
| CVE-2021-43493 | Servermanagement path traversal | 7.5v3.1 | 2.4% | 2021-11-12 | |
| CVE-2021-43492 | Alquistai Alquist path traversal | 7.5v3.1 | 4.0% | 2021-11-12 | |
| CVE-2021-43332 | GNU Mailman insufficiently protected credentials | 6.5v3.1 | 1.1% | 2021-11-12 | Fix |
| CVE-2021-43331 | GNU Mailman cross-site scripting | 6.1v3.1 | 1.3% | 2021-11-12 | Fix |
| CVE-2021-42775 | Broadcom Emulex HBA Manager remote firmware download feature vulnerability | 9.1v3.1 | 1.0% | 2021-11-12 | Fix |
| CVE-2021-42774 | Broadcom Emulex Hba Manager buffer overflow | 9.8v3.1 | 2.4% | 2021-11-12 | Fix |
| CVE-2021-42773 | Broadcom Emulex HBA Manager GetDumpFile command information disclosure | 7.5v3.1 | 1.0% | 2021-11-12 | Fix |
| CVE-2021-42563 | Ni Service Locator There is an unquoted search path | 7.8v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-41972 | Apache Superset credentials leak | 6.5v3.1 | 1.4% | 2021-11-12 | Fix |
| CVE-2021-41264 | OpenZeppelin Contracts UUPSUpgradeable improper initialization | 9.8CNA v3.1 | 1.5% | 2021-11-12 | Fix |
| CVE-2021-41254 | fluxcd kustomize-controller privilege escalation to cluster admin on multi-tenant environments | 8.8CNA v3.1 | 1.8% | 2021-11-12 | Fix |
| CVE-2021-41229 | Memory leak in BlueZ | 4.3CNA v3.1 | 1.2% | 2021-11-12 | Fix |
| CVE-2021-39303 | Jamf server-side request forgery | 9.8v3.1 | 1.7% | 2021-11-12 | Fix |
| CVE-2021-38985 | IBM Security Key Lifecycle Manager improper input validation | 4.3CNA v3.0 | 0.6% | 2021-11-12 | Fix |
| CVE-2021-38973 | IBM Security Key Lifecycle Manager improper input validation | 2.4CNA v3.0 | 0.6% | 2021-11-12 | Fix |
| CVE-2021-38972 | IBM Security Key Lifecycle Manager improper input validation | 4.3CNA v3.0 | 0.6% | 2021-11-12 | Fix |
| CVE-2021-37910 | ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 improper authentication | 5.3v3.1 | 2.1% | 2021-11-12 | Exploit codeFix |
| CVE-2021-36325 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-36324 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-36323 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-36315 | Dell PowerScale Nodes privilege escalation | 6.8CNA v3.1 | 0.3% | 2021-11-12 | Fix |
| CVE-2021-36305 | Dell PowerScale OneFS improper synchronization | 6.5CNA v3.1 | 0.8% | 2021-11-12 | Fix |
| CVE-2021-30321 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 9.8CNA v3.1 | 0.8% | 2021-11-12 | Fix |
| CVE-2021-30284 | Qualcomm Snapdragon information exposure in Modem | 7.5CNA v3.1 | 0.6% | 2021-11-12 | Fix |
| CVE-2021-30266 | Qualcomm Snapdragon use-after-free in WLAN | 6.7CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-30265 | Qualcomm Snapdragon information exposure in Modem | 6.7CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-30264 | Qualcomm Snapdragon use-after-free in Modem | 6.7CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-30263 | Qualcomm Snapdragon use-after-free in Modem | 6.7CNA v3.1 | 0.1% | 2021-11-12 | Fix |
| CVE-2021-30259 | Qualcomm Snapdragon improper input validation in Audio | 7.8CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-30255 | Qualcomm Snapdragon improper validation of array index in RFA | 7.8CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-30254 | Qualcomm Snapdragon improper validation of array index in Modem | 7.8CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-21701 | XXE vulnerability in Jenkins Performance Plugin | 6.5v3.1 | 1.7% | 2021-11-12 | Fix |
| CVE-2021-21700 | Stored XSS vulnerability in Jenkins Scriptler Plugin | 5.4v3.1 | 0.7% | 2021-11-12 | Fix |
| CVE-2021-21699 | Stored XSS vulnerability in Jenkins Active Choices Plugin | 5.4v3.1 | 88.5% | 2021-11-12 | Fix |
| CVE-2021-21528 | Dell PowerScale OneFS directory listing | 7.5CNA v3.1 | 1.0% | 2021-11-12 | Fix |
| CVE-2021-3934 | OS command injection in ohmyzsh/ohmyzsh | 7.5v3.1 | 0.6% | 2021-11-12 | |
| CVE-2021-3843 | Lenovo ThinkPad BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2021-11-12 | Fix |
| CVE-2021-3840 | Antilles uncontrolled search path | 8.8CNA v3.1 | 2.0% | 2021-11-12 | Fix |
| CVE-2021-3793 | Motorola Binatone Hubble Cameras unprotected alternate path | 6.5CNA v3.1 | 0.7% | 2021-11-12 | Fix |
| CVE-2021-3792 | Motorola Binatone Hubble Cameras cleartext transmission of sensitive information | 5.3CNA v3.1 | 0.5% | 2021-11-12 | Fix |
| CVE-2021-3791 | Motorola Binatone Hubble Cameras sensitive information in log files | 6.5CNA v3.1 | 0.4% | 2021-11-12 | Fix |
| CVE-2021-3790 | Motorola Binatone Hubble Cameras local web server of some Motorola-branded buffer overflow | 6.5CNA v3.1 | 0.4% | 2021-11-12 | Fix |
| CVE-2021-3789 | Motorola Binatone Hubble Cameras insufficiently protected credentials | 4.2CNA v3.1 | 0.1% | 2021-11-12 | Fix |
| CVE-2021-3788 | Motorola Binatone Hubble Cameras some Motorola-branded exposed debug interface | 6.8CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-3787 | Motorola Binatone Hubble Cameras plaintext password storage | 6.4CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-3786 | Lenovo Notebook and ThinkPad BIOS information disclosure | 4.4CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-3723 | IBM System x 3550 M3 OS command injection | 7.2CNA v3.1 | 1.9% | 2021-11-12 | |
| CVE-2021-3720 | Lenovo Legion Phone Pro (L79031) incorrect default permissions | 5.5CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-3719 | Lenovo ThinkCentre and ThinkStation BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2021-11-12 | Fix |
| CVE-2021-3718 | Lenovo ThinkPad BIOS denial of service | 4.3CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-3599 | Lenovo ThinkPad BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2021-11-12 | Fix |
| CVE-2021-3577 | Motorola Binatone Hubble Cameras OS command injection | 8.8CNA v3.1 | 60.2% | 2021-11-12 | NucleiFix |
| CVE-2021-3519 | Lenovo Desktop BIOS improper authentication | 6.4CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-1982 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2021-11-12 | Fix |
| CVE-2021-1981 | Qualcomm Snapdragon buffer over-read in Modem | 7.5CNA v3.1 | 0.6% | 2021-11-12 | Fix |
| CVE-2021-1979 | Qualcomm Snapdragon stack-based buffer overflow in RFA tools | 7.8CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-1975 | Qualcomm Snapdragon out-of-bounds write | 9.8CNA v3.1 | 0.9% | 2021-11-12 | Fix |
| CVE-2021-1973 | Qualcomm Snapdragon untrusted pointer dereference in RFA | 7.8CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-1924 | Qualcomm Snapdragon observable discrepancy | 9.0CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-1921 | Qualcomm Snapdragon time-of-check time-of-use race condition in Kernel | 7.8CNA v3.1 | 0.1% | 2021-11-12 | Fix |
| CVE-2021-1912 | Qualcomm Snapdragon integer overflow or wraparound in Trust Zone | 8.4CNA v3.1 | 0.2% | 2021-11-12 | Fix |
| CVE-2021-1903 | Qualcomm Snapdragon improper authorization in WLAN | 5.3CNA v3.1 | 0.5% | 2021-11-12 | Fix |
| CVE-2021-43573 | Realtek RTL8195AM buffer overflow | 9.8v3.1 | 1.1% | 2021-11-11 | |
| CVE-2021-43397 | LiquidFiles insufficiently protected credentials | 8.8v3.1 | 3.7% | 2021-11-11 | Fix |
| CVE-2021-43350 | LDAP filter injection vulnerability in Traffic Ops | 9.8v3.1 | 4.4% | 2021-11-11 | Fix |
| CVE-2021-42847 | Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files. | 9.8v3.1 | 70.3% | 2021-11-11 | MetasploitExploit codeFix |
| CVE-2021-42002 | Zoho ManageEngine ADManager Plus file upload | 9.8v3.1 | 7.2% | 2021-11-11 | Fix |
| CVE-2021-41833 | Zoho Manageengine PATCH Connect Plus unrestricted file upload | 9.8v3.1 | 7.8% | 2021-11-11 | Fix |
| CVE-2021-41081 | Zoho ManageEngine Network Configuration Manager SQL injection | 9.8v3.1 | 63.1% | 2021-11-11 | Exploit codeFix |
| CVE-2021-41080 | Zoho ManageEngine Network Configuration Manager SQL injection | 9.8v3.1 | 4.4% | 2021-11-11 | Fix |
| CVE-2021-34422 | Path traversal of file names in Keybase Client for Windows | 7.2CNA v3.1 | 1.4% | 2021-11-11 | Fix |
| CVE-2021-34421 | Retained exploded messages in Keybase Clients for Android and iOS | 3.7CNA v3.1 | 0.7% | 2021-11-11 | Fix |
| CVE-2021-34420 | Zoom Windows installation executable signature bypass | 4.7CNA v3.1 | 0.4% | 2021-11-11 | Fix |
| CVE-2021-34419 | HTML injection in Zoom Linux client | 3.7CNA v3.1 | 0.6% | 2021-11-11 | Fix |
| CVE-2021-34418 | Pre-auth null pointer crash in on-premise web console | 4.0CNA v3.1 | 0.6% | 2021-11-11 | Fix |
| CVE-2021-34417 | Authenticated remote command execution with root privileges via web console in MMR | 7.9CNA v3.1 | 1.2% | 2021-11-11 | Fix |
| CVE-2021-26558 | Apache ShardingSphere-UI deserialization of untrusted data | 7.5v3.1 | 2.4% | 2021-11-11 | Fix |
| CVE-2021-25980 | Talkyard Host-header injection leads to account takeover | 8.8v3.1 | 1.2% | 2021-11-11 | |
| CVE-2021-3912 | OctoRPKI crashes when processing GZIP bomb returned via malicious repository | 4.2CNA v3.1 | 0.9% | 2021-11-11 | Fix |
| CVE-2021-3911 | Misconfigured IP address field in ROA leads to OctoRPKI crash | 4.2CNA v3.1 | 0.9% | 2021-11-11 | Fix |
| CVE-2021-3910 | NUL character in ROA causes OctoRPKI to crash | 4.4CNA v3.1 | 1.3% | 2021-11-11 | Fix |
| CVE-2021-3909 | Infinite open connection causes OctoRPKI to hang forever | 4.4CNA v3.1 | 1.6% | 2021-11-11 | Fix |
| CVE-2021-3908 | Infinite certificate chain depth results in OctoRPKI running forever | 5.9CNA v3.1 | 0.7% | 2021-11-11 | Fix |
| CVE-2021-3907 | Cloudflare octorpki arbitrary filepath traversal via URI injection | 7.4CNA v3.1 | 4.2% | 2021-11-11 | Fix |
| CVE-2021-43564 | Job Fair unrestricted access to predictable file paths in hov/jobfair | 7.5v3.1 | 1.0% | 2021-11-10 | Fix |
| CVE-2021-43563 | An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The Access Control in the bundled media browser is broken, which allows an unauthenticated attacker to perform requests to the pixx.io API for the configured API user. This allows an attacker to | 8.8v3.1 | 1.0% | 2021-11-10 | Fix |
| CVE-2021-43562 | Pixx.io server-side request forgery | 8.8v3.1 | 1.3% | 2021-11-10 | Fix |
| CVE-2021-43561 | Pega-sus Google For Jobs cross-site scripting in pegasus/google-for-jobs | 5.4v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-43523 | uClibC-ng cross-site scripting | 9.6v3.1 | 3.2% | 2021-11-10 | Fix |
| CVE-2021-43209 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 6.8% | 2021-11-10 | Fix |
| CVE-2021-43208 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 4.3% | 2021-11-10 | Fix |
| CVE-2021-43136 | Forma LMS An authentication bypass | 9.8v3.1 | 15.7% | 2021-11-10 | Exploit code |
| CVE-2021-42323 | Microsoft Azure RTOS information disclosure | 3.3CNA v3.1 | 1.4% | 2021-11-10 | Fix |
| CVE-2021-42322 | Microsoft Visual Studio Code elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-42321 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 91.7% | 2021-11-10 | KEVMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-42319 | Visual Studio elevation of privilege | 4.7CNA v3.1 | 0.6% | 2021-11-10 | Fix |
| CVE-2021-42316 | Microsoft Dynamics 365 On-Premises remote code execution | 8.8CNA v3.1 | 2.3% | 2021-11-10 | Fix |
| CVE-2021-42305 | Microsoft Exchange Server spoofing | 6.5CNA v3.1 | 7.9% | 2021-11-10 | Fix |
| CVE-2021-42304 | Microsoft Azure RTOS elevation of privilege | 6.6CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-42303 | Microsoft Azure RTOS elevation of privilege | 6.6CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-42302 | Microsoft Azure RTOS elevation of privilege | 6.6CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-42301 | Microsoft Azure RTOS information disclosure | 3.3CNA v3.1 | 1.1% | 2021-11-10 | Fix |
| CVE-2021-42300 | Microsoft Azure Sphere tampering | 6.0CNA v3.1 | 0.6% | 2021-11-10 | Fix |
| CVE-2021-42298 | Microsoft Defender remote code execution | 7.8CNA v3.1 | 5.8% | 2021-11-10 | Fix |
| CVE-2021-42296 | Microsoft Word remote code execution | 7.8CNA v3.1 | 1.1% | 2021-11-10 | Fix |
| CVE-2021-42292 | Microsoft Excel security feature bypass | 7.8CNA v3.1 | 43.0% | 2021-11-10 | KEVFix |
| CVE-2021-42291 | Microsoft Windows active Directory Domain services elevation of privilege | 7.5CNA v3.1 | 4.2% | 2021-11-10 | Fix |
| CVE-2021-42288 | Microsoft Windows Hello security feature bypass | 5.7CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-42287 | Microsoft Active Directory Domain services privilege escalation | 7.5CNA v3.1 | 77.2% | 2021-11-10 | KEVExploit codeKCVFix |
| CVE-2021-42286 | Microsoft Windows Core Shell SI host Extension Framework for Composable Shell elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-42285 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-42284 | Microsoft Windows Hyper-V denial of service | 6.8CNA v3.1 | 3.7% | 2021-11-10 | Fix |
| CVE-2021-42283 | Microsoft Windows NTFS elevation of privilege | 8.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-42282 | Microsoft Windows active Directory Domain services elevation of privilege | 7.5CNA v3.1 | 4.1% | 2021-11-10 | Fix |
| CVE-2021-42280 | Microsoft Windows Feedback Hub elevation of privilege | 5.5CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-42279 | Microsoft ChakraCore Chakra Scripting Engine memory corruption | 4.2CNA v3.1 | 2.3% | 2021-11-10 | Fix |
| CVE-2021-42278 | Microsoft Active Directory Domain services privilege escalation | 7.5CNA v3.1 | 73.3% | 2021-11-10 | KEVExploit codeKCVFix |
| CVE-2021-42277 | Microsoft Visual Studio 2015 Update 3 Diagnostics Hub Standard Collector elevation of privilege | 5.5CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-42276 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 2.5% | 2021-11-10 | Fix |
| CVE-2021-42275 | Microsoft COM for Windows remote code execution | 8.8CNA v3.1 | 2.1% | 2021-11-10 | Fix |
| CVE-2021-42274 | Microsoft Windows Hyper-V Discrete Device Assignment (DDA) denial of service | 6.8CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-42111 | RCDevs OpenOTP Token PIN storage vulnerability | 5.5v3.1 | 0.2% | 2021-11-10 | |
| CVE-2021-42062 | SAP ERP HCM (Portugal) missing authorization | 4.3v3.1 | 0.6% | 2021-11-10 | Fix |
| CVE-2021-41427 | Beeline Smart Box cross-site scripting | 6.1v3.1 | 1.0% | 2021-11-10 | Fix |
| CVE-2021-41426 | Beeline Smart Box cross-site request forgery | 8.8v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-41379 | Microsoft Windows Installer privilege escalation | 5.5CNA v3.1 | 19.5% | 2021-11-10 | KEVFix |
| CVE-2021-41378 | Microsoft Windows NTFS remote code execution | 7.8CNA v3.1 | 1.6% | 2021-11-10 | Fix |
| CVE-2021-41377 | Microsoft Windows Fast FAT File System driver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-41376 | Microsoft Azure Sphere information disclosure | 2.3CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-41375 | Microsoft Azure Sphere information disclosure | 4.4CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-41374 | Microsoft Azure Sphere information disclosure | 6.7CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-41373 | Microsoft FSLogix information disclosure | 5.5CNA v3.1 | 0.8% | 2021-11-10 | Fix |
| CVE-2021-41372 | Microsoft Power BI Report Server spoofing | 7.6CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-41371 | Microsoft Windows Remote Desktop Protocol (RDP) information disclosure | 4.4CNA v3.1 | 1.6% | 2021-11-10 | Fix |
| CVE-2021-41370 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-41368 | Microsoft Access remote code execution | 6.1CNA v3.1 | 4.9% | 2021-11-10 | Fix |
| CVE-2021-41367 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-41366 | Microsoft Windows Credential Security Support Provider Protocol (CredSSP) elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-41356 | Microsoft Windows denial of service | 7.5CNA v3.1 | 3.0% | 2021-11-10 | Fix |
| CVE-2021-41351 | Microsoft Edge (Chrome based) spoofing on IE Mode | 4.3CNA v3.1 | 3.9% | 2021-11-10 | Fix |
| CVE-2021-41349 | Microsoft Exchange Server spoofing | 6.5CNA v3.1 | 93.5% | 2021-11-10 | NucleiExploit codeFix |
| CVE-2021-41038 | Improper Verification of Communication Channel in @Theia/plugin-ext | 6.1v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-40873 | Softing Uatoolkit Embedded double free | 7.5v3.1 | 1.3% | 2021-11-10 | Fix |
| CVE-2021-40872 | Softing Uatoolkit Embedded type confusion | 7.5v3.1 | 1.5% | 2021-11-10 | Fix |
| CVE-2021-40871 | Softing OPC type confusion | 7.5v3.1 | 1.3% | 2021-11-10 | Fix |
| CVE-2021-40521 | Airangel Hsmx-app-1000 remote code execution | 9.8v3.1 | 4.3% | 2021-11-10 | |
| CVE-2021-40520 | Airangel Hsmx-app-1000 weak password requirements | 9.8v3.1 | 1.1% | 2021-11-10 | |
| CVE-2021-40519 | Airangel Hsmx-app-1000 hard-coded credentials | 10.0v3.1 | 1.1% | 2021-11-10 | |
| CVE-2021-40518 | Airangel Hsmx-app-1000 cross-site request forgery | 6.5v3.1 | 0.4% | 2021-11-10 | |
| CVE-2021-40517 | Airangel Hsmx-app-1000 cross-site scripting | 5.4v3.1 | 0.5% | 2021-11-10 | |
| CVE-2021-40504 | SAP NetWeaver AS for ABAP and ABAP Platform incorrect authorization | 4.9v3.1 | 0.6% | 2021-11-10 | Fix |
| CVE-2021-40503 | SAP Gui For Windows information disclosure | 7.8v3.1 | 0.2% | 2021-11-10 | Fix |
| CVE-2021-40502 | SAP Commerce missing authorization | 8.8v3.1 | 0.8% | 2021-11-10 | Fix |
| CVE-2021-40501 | SAP ABAP Platform Kernel missing authorization | 8.1v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-40442 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2021-11-10 | Fix |
| CVE-2021-39474 | Ubee Interactive UBC1319 OS command injection | 7.2v3.1 | 1.9% | 2021-11-10 | Fix |
| CVE-2021-38887 | IBM InfoSphere Information Server information disclosure | 4.3CNA v3.0 | 0.8% | 2021-11-10 | Fix |
| CVE-2021-38666 | Microsoft Remote Desktop client remote code execution | 8.8CNA v3.1 | 15.1% | 2021-11-10 | Exploit codeFix |
| CVE-2021-38665 | Microsoft Remote Desktop protocol client information disclosure | 7.4CNA v3.1 | 7.0% | 2021-11-10 | Fix |
| CVE-2021-38631 | Microsoft Windows Remote Desktop Protocol (RDP) information disclosure | 4.4CNA v3.1 | 1.9% | 2021-11-10 | Fix |
| CVE-2021-37158 | Opengamepanel OS command injection | 8.8v3.1 | 2.3% | 2021-11-10 | |
| CVE-2021-37157 | Opengamepanel cleartext storage of sensitive information | 8.8v3.1 | 1.3% | 2021-11-10 | |
| CVE-2021-36957 | Microsoft Windows Desktop Bridge elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-11-10 | Fix |
| CVE-2021-34598 | Phoenix Contact: FL MGUARD lack of memory release in remote logging functionality | 7.5CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-34582 | Phoenix Contact: FL MGUARD XSS through web-based management and REST API | 4.8v3.1 | 0.3% | 2021-11-10 | Fix |
| CVE-2021-33816 | Dolibarr remote PHP code execution | 9.8v3.1 | 3.8% | 2021-11-10 | Fix |
| CVE-2021-33618 | Dolibarr ERP and CRM contain XSS | 6.1v3.1 | 79.3% | 2021-11-10 | Fix |
| CVE-2021-32023 | BlackBerry Protect message broker elevation of privilege | 7.8v3.1 | 0.3% | 2021-11-10 | Fix |
| CVE-2021-32022 | BlackBerry Protect CEF RPC server vulnerability | 5.5v3.1 | 0.3% | 2021-11-10 | Fix |
| CVE-2021-32021 | BlackBerry Protect message broker denial of service | 7.8v3.1 | 0.3% | 2021-11-10 | Fix |
| CVE-2021-31853 | MDE DLL search order hijacking | 7.8CNA v3.1 | 0.2% | 2021-11-10 | Fix |
| CVE-2021-26444 | Microsoft Azure RTOS information disclosure | 3.3CNA v3.1 | 1.6% | 2021-11-10 | Fix |
| CVE-2021-26443 | Microsoft Virtual Machine Bus (VMBus) remote code execution | 9.0CNA v3.1 | 1.7% | 2021-11-10 | Fix |
| CVE-2021-25975 | Publify stored cross-site scripting (XSS) due to unrestricted file upload | 5.4v3.1 | 0.6% | 2021-11-10 | Fix |
| CVE-2021-25974 | Publify stored cross-site scripting (XSS) in Editor | 5.4v3.1 | 0.6% | 2021-11-10 | Fix |
| CVE-2021-22870 | Path traversal in GitHub Enterprise Server hosted pages leads to unauthorized file read access | 6.5v3.1 | 1.1% | 2021-11-10 | Fix |
| CVE-2021-22048 | VMware vCenter Server and VMware Cloud Foundation privilege escalation | 8.8v3.1 | 10.0% | 2021-11-10 | Fix |
| CVE-2021-3572 | Improper input validation in pip | 5.7NVD v3.1 | 1.8% | 2021-11-10 | Exploit codeFix |
| CVE-2021-3380 | Height8tech H8 Ssrms ICREM insecure direct object reference | 6.5v3.1 | 1.1% | 2021-11-10 | Fix |
| CVE-2021-3064 | PAN-OS: Memory corruption vulnerability in GlobalProtect portal and Gateway Interfaces | 9.8CNA v3.1 | 20.1% | 2021-11-10 | Exploit codeFix |
| CVE-2021-3063 | PAN-OS: Denial of service (DoS) vulnerability in GlobalProtect portal and Gateway Interfaces | 7.5CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-3062 | Palo Alto Networks PAN-OS improper access control | 8.1CNA v3.1 | 0.7% | 2021-11-10 | Fix |
| CVE-2021-3061 | PAN-OS: OS command injection vulnerability in the Command Line Interface (CLI) | 6.4CNA v3.1 | 0.9% | 2021-11-10 | Fix |
| CVE-2021-3060 | PAN-OS: OS command injection in Simple Certificate Enrollment Protocol (SCEP) | 8.1CNA v3.1 | 32.5% | 2021-11-10 | Exploit codeFix |
| CVE-2021-3059 | PAN-OS: OS command injection vulnerability when Performing Dynamic Updates | 8.1CNA v3.1 | 1.5% | 2021-11-10 | Fix |
| CVE-2021-3058 | PAN-OS: OS command injection vulnerability in Web Interface XML API | 8.8CNA v3.1 | 1.6% | 2021-11-10 | Fix |
| CVE-2021-3056 | PAN-OS: Memory corruption vulnerability in GlobalProtect Clientless VPN during SAML Authentication | 8.8CNA v3.1 | 1.5% | 2021-11-10 | Fix |
| CVE-2021-43575 | Knx Engineering Tool Software 6 hard-coded credentials | 5.5v3.1 | 0.3% | 2021-11-09 | |
| CVE-2021-43572 | Starkbank Ecdsa-python improper verification of cryptographic signature in starkbank-ecdsa | 9.8v3.1 | 1.2% | 2021-11-09 | Fix |
| CVE-2021-43571 | Starkbank Ecdsa-node improper verification of cryptographic signature in starkbank-ecdsa | 9.8v3.1 | 1.0% | 2021-11-09 | Fix |
| CVE-2021-43570 | Starkbank Ecdsa-java improper verification of cryptographic signature in starkbank-ecdsa | 9.8v3.1 | 1.0% | 2021-11-09 | Fix |
| CVE-2021-43569 | Starkbank Ecdsa-dotnet improper verification of cryptographic signature in starkbank-ecdsa | 9.8v3.1 | 1.0% | 2021-11-09 | Fix |
| CVE-2021-43568 | Starkbank Elixir Ecdsa ecdsa-elixir fails to check signatures, vulnerable to message forging | 9.8v3.1 | 1.0% | 2021-11-09 | Fix |
| CVE-2021-43519 | Lua stack-based buffer overflow | 5.5v3.1 | 1.1% | 2021-11-09 | Fix |
| CVE-2021-43466 | thymeleaf template injection in thymeleaf-spring5 | 9.8v3.1 | 3.9% | 2021-11-09 | Fix |
| CVE-2021-43203 | JetBrains Ktor improper authentication | 7.5v3.1 | 0.8% | 2021-11-09 | Fix |
| CVE-2021-43201 | JetBrains TeamCity project settings vulnerability | 5.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43200 | JetBrains TeamCity Agent Push vulnerability | 9.8v3.1 | 1.1% | 2021-11-09 | Fix |
| CVE-2021-43199 | JetBrains TeamCity incorrect default permissions | 5.3v3.1 | 0.6% | 2021-11-09 | Fix |
| CVE-2021-43198 | JetBrains TeamCity cross-site scripting | 5.4v3.1 | 0.4% | 2021-11-09 | Fix |
| CVE-2021-43197 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-09 | Fix |
| CVE-2021-43196 | JetBrains TeamCity information disclosure | 7.5v3.1 | 1.0% | 2021-11-09 | Fix |
| CVE-2021-43195 | JetBrains TeamCity HTTP security headers vulnerability | 5.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43194 | In JetBrains TeamCity before 2021.1.2, user enumeration was possible. | 5.3v3.1 | 0.8% | 2021-11-09 | Fix |
| CVE-2021-43193 | JetBrains TeamCity remote code execution | 9.8v3.1 | 1.9% | 2021-11-09 | Fix |
| CVE-2021-43192 | JetBrains YouTrack Mobile iOS URL scheme vulnerability | 5.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43191 | JetBrains YouTrack Mobile security screen vulnerability | 5.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43190 | JetBrains YouTrack Mobile Android vulnerability | 5.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43189 | JetBrains YouTrack Mobile Android access token protection vulnerability | 7.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43188 | JetBrains YouTrack Mobile iOS access token protection vulnerability | 7.3v3.1 | 0.7% | 2021-11-09 | Fix |
| CVE-2021-43187 | JetBrains YouTrack Mobile iOS client-side cache vulnerability | 5.3v3.1 | 0.8% | 2021-11-09 | Fix |
| CVE-2021-43186 | JetBrains YouTrack cross-site scripting | 5.4v3.1 | 0.5% | 2021-11-09 | Fix |
| CVE-2021-43185 | JetBrains YouTrack host header injection | 9.8v3.1 | 1.9% | 2021-11-09 | Fix |
| CVE-2021-43184 | JetBrains YouTrack cross-site scripting | 5.4v3.1 | 0.6% | 2021-11-09 | Fix |
| CVE-2021-43183 | JetBrains Hub authentication throttling vulnerability | 9.8v3.1 | 1.1% | 2021-11-09 | Fix |
| CVE-2021-43182 | JetBrains Hub denial of service | 7.5v3.1 | 0.9% | 2021-11-09 | Fix |
| CVE-2021-43181 | JetBrains Hub cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-09 | Fix |
| CVE-2021-43180 | JetBrains Hub information disclosure | 7.5v3.1 | 1.0% | 2021-11-09 | Fix |
| CVE-2021-43174 | NLnet Labs Routinator gzip transfer encoding caused out-of-memory crash | 7.5v3.1 | 1.2% | 2021-11-09 | Fix |
| CVE-2021-43173 | NLnet Labs Routinator hanging RRDP request | 7.5v3.1 | 1.4% | 2021-11-09 | Fix |
| CVE-2021-43172 | NLnet Labs Routinator infinite length chain of RRDP repositories | 7.5v3.1 | 1.2% | 2021-11-09 | Fix |
| CVE-2021-43114 | FORT-validator crash | 7.5v3.1 | 1.1% | 2021-11-09 | Fix |
| CVE-2021-42026 | Siemens Mendix Applications using Mendix 8 incorrect authorization | 4.3v3.1 | 0.5% | 2021-11-09 | Fix |
| CVE-2021-42025 | Siemens Mendix Applications using Mendix 8 incorrect authorization | 6.5v3.1 | 0.6% | 2021-11-09 | Fix |
| CVE-2021-42021 | Siemens Siveillance Video DLNA Server path traversal | 7.5v3.1 | 1.7% | 2021-11-09 | Fix |
| CVE-2021-42015 | Siemens Mendix Applications using Mendix 7 sensitive information in browser cache | 5.5v3.1 | 0.2% | 2021-11-09 | Fix |
| CVE-2021-40366 | Siemens Climatix POL909 (AWB module) missing encryption | 7.4v3.1 | 0.4% | 2021-11-09 | Fix |
| CVE-2021-40364 | Siemens SIMATIC PCS 7 sensitive information in log files | 5.5CNA v3.1 | 0.2% | 2021-11-09 | Fix |
| CVE-2021-40359 | Siemens OpenPCS 7 path traversal | 7.7CNA v3.1 | 1.2% | 2021-11-09 | Fix |
| CVE-2021-40358 | Siemens SIMATIC PCS 7 path traversal | 9.9CNA v3.1 | 1.3% | 2021-11-09 | Fix |
| CVE-2021-37207 | Siemens SENTRON powermanager V3 incorrect permission assignment | 7.8v3.1 | 0.2% | 2021-11-09 | Fix |
| CVE-2021-35489 | Thruk cross-site scripting | 6.1v3.1 | 0.8% | 2021-11-09 | Fix |
| CVE-2021-35488 | Thruk cross-site scripting | 6.1v3.1 | 2.6% | 2021-11-09 | NucleiFix |
| CVE-2021-31890 | Siemens Capital Embedded AR Classic 431-422 information disclosure | 7.5CNA v3.1 | 2.2% | 2021-11-09 | Fix |
| CVE-2021-31889 | Siemens Capital Embedded AR Classic 431-422 integer underflow | 7.5CNA v3.1 | 2.2% | 2021-11-09 | Fix |
| CVE-2021-31888 | Siemens APOGEE MBC (PPC) (BACnet) improper null termination | 8.8v3.1 | 2.4% | 2021-11-09 | Fix |
| CVE-2021-31887 | Siemens APOGEE MBC (PPC) (BACnet) improper null termination | 8.8v3.1 | 2.4% | 2021-11-09 | Fix |
| CVE-2021-31886 | Siemens APOGEE MBC (PPC) (BACnet) improper null termination | 9.8v3.1 | 2.9% | 2021-11-09 | Fix |
| CVE-2021-31885 | Siemens APOGEE MBC (PPC) (BACnet) buffer access with incorrect length | 7.5v3.1 | 1.2% | 2021-11-09 | Fix |
| CVE-2021-31884 | Siemens APOGEE MBC (PPC) (BACnet) improper null termination | 9.8v3.1 | 1.5% | 2021-11-09 | Fix |
| CVE-2021-31883 | Siemens Capital Embedded AR Classic 431-422 denial of service | 7.1CNA v3.1 | 1.5% | 2021-11-09 | Fix |
| CVE-2021-31882 | Siemens Capital Embedded AR Classic 431-422 denial of service | 6.5CNA v3.1 | 1.5% | 2021-11-09 | Fix |
| CVE-2021-31881 | Siemens Capital Embedded AR Classic 431-422 out-of-bounds read | 7.1CNA v3.1 | 1.5% | 2021-11-09 | Fix |
| CVE-2021-31346 | Siemens Capital Embedded AR Classic 431-422 improper quantity validation | 8.2CNA v3.1 | 2.0% | 2021-11-09 | Fix |
| CVE-2021-31345 | Siemens Capital Embedded AR Classic 431-422 improper quantity validation | 7.5CNA v3.1 | 1.6% | 2021-11-09 | Fix |
| CVE-2021-31344 | Siemens Capital Embedded AR Classic 431-422 type confusion | 6.9CNA v4.0 | 1.5% | 2021-11-09 | Fix |
| CVE-2021-20119 | Arris SurfBoard SB8200 incorrect authorization | 7.1NVD v3.1 | 0.5% | 2021-11-09 | |
| CVE-2021-3641 | Improper link resolution before file access in Bitdefender GravityZone (VA-9921) | 6.1CNA v3.1 | 0.4% | 2021-11-09 | |
| CVE-2021-42770 | OPNsense cross-site scripting | 6.1v3.1 | 1.4% | 2021-11-08 | Fix |
| CVE-2021-42372 | Xorux LPAR2RRD HW Events SNMP community command injection | 8.8v3.1 | 6.1% | 2021-11-08 | Fix |
| CVE-2021-42371 | Xorux LPAR2RRD insecure storage of sensitive information | 9.8v3.1 | 1.6% | 2021-11-08 | Fix |
| CVE-2021-42370 | Xorux LPAR2RRD cleartext storage of sensitive information | 7.5v3.1 | 0.7% | 2021-11-08 | Fix |
| CVE-2021-42078 | PHP Event Calendar cross-site scripting | 6.1v3.1 | 0.9% | 2021-11-08 | |
| CVE-2021-42077 | Kaysongroup PHP Event Calendar SQL injection | 9.8v3.1 | 2.5% | 2021-11-08 | |
| CVE-2021-42076 | Barrier out-of-bounds write | 7.5v3.1 | 1.6% | 2021-11-08 | Fix |
| CVE-2021-42075 | Barrier missing resource release | 7.5v3.1 | 2.2% | 2021-11-08 | Fix |
| CVE-2021-42074 | Barrier use-after-free | 7.5v3.1 | 1.8% | 2021-11-08 | Fix |
| CVE-2021-42073 | Barrier session fixation | 8.2v3.1 | 1.5% | 2021-11-08 | Fix |
| CVE-2021-42072 | Barrier improper authentication | 8.8v3.1 | 1.7% | 2021-11-08 | Fix |
| CVE-2021-41772 | Go archive/zip package denial of service | 7.5v3.1 | 3.3% | 2021-11-08 | Fix |
| CVE-2021-41771 | Go memory corruption | 7.5v3.1 | 4.7% | 2021-11-08 | Fix |
| CVE-2021-41733 | oppia open redirect | 6.1v3.1 | 0.7% | 2021-11-08 | |
| CVE-2021-41253 | zyantific zydis possible heap buffer overflow when using zycore string functions in formatter hooks | 5.9CNA v3.1 | 1.9% | 2021-11-08 | Fix |
| CVE-2021-41170 | sroehrl neoan3-template insecure inherited permissions in neoan3-apps/template | 9.8CNA v3.1 | 1.6% | 2021-11-08 | Fix |
| CVE-2021-40577 | Online Enrollment Management System Sourcecodester stored cross-site scripting | 5.4v3.1 | 1.6% | 2021-11-08 | Exploit code |
| CVE-2021-40261 | Casap Automated Enrollment System SourceCodester cross-site scripting | 6.1v3.1 | 0.7% | 2021-11-08 | |
| CVE-2021-40260 | Tailor Management System SourceCodester Tailor Management cross-site scripting | 6.1v3.1 | 0.7% | 2021-11-08 | |
| CVE-2021-39420 | Vfront Multiple cross-site scripting | 6.1v3.1 | 0.7% | 2021-11-08 | |
| CVE-2021-39182 | EnroCrypt hashing module vulnerability | 7.5CNA v3.1 | 0.6% | 2021-11-08 | Fix |
| CVE-2021-37850 | Denial of service in ESET for Mac products | 5.5CNA v3.1 | 0.2% | 2021-11-08 | Fix |
| CVE-2021-34685 | Hitachi Vantara Pentaho unrestricted file upload | 7.2v3.1 | 2.3% | 2021-11-08 | Fix |
| CVE-2021-34684 | Hitachi Vantara Pentaho SQL injection | 9.8v3.1 | 5.8% | 2021-11-08 | Fix |
| CVE-2021-32483 | Cloudera Manager privilege escalation | 5.3v3.1 | 0.8% | 2021-11-08 | Fix |
| CVE-2021-32482 | Cloudera Manager cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-08 | Fix |
| CVE-2021-32481 | Cloudera Hue cross-site scripting | 6.1v3.1 | 0.7% | 2021-11-08 | Fix |
| CVE-2021-31602 | Hitachi Vantara Pentaho improper authentication | 7.5v3.1 | 51.7% | 2021-11-08 | NucleiFix |
| CVE-2021-31601 | Hitachi Vantara Pentaho SOAP web services vulnerability | 6.5NVD v3.1 | 1.4% | 2021-11-08 | Fix |
| CVE-2021-31600 | Hitachi Vantara Pentaho files accessible to external parties | 4.3v3.1 | 1.0% | 2021-11-08 | Fix |
| CVE-2021-31599 | Hitachi Vantara Pentaho unrestricted file upload | 8.8v3.1 | 2.3% | 2021-11-08 | Fix |
| CVE-2021-30132 | Cloudera Manager privilege escalation | 9.8v3.1 | 1.1% | 2021-11-08 | Fix |
| CVE-2021-29994 | Cloudera Hue cross-site scripting | 6.1v3.1 | 0.9% | 2021-11-08 | Fix |
| CVE-2021-29843 | IBM MQ Appliance denial of service | 5.3CNA v3.0 | 0.9% | 2021-11-08 | Fix |
| CVE-2021-29735 | IBM Security Guardium cross-site scripting | 4.8CNA v3.0 | 0.5% | 2021-11-08 | Fix |
| CVE-2021-29243 | Cloudera Manager cross-site scripting | 6.1v3.1 | 0.6% | 2021-11-08 | Fix |
| CVE-2021-28024 | Servicetonic insufficient randomness | 9.8v3.1 | 1.4% | 2021-11-08 | |
| CVE-2021-28023 | Servicetonic service import feature arbitrary file upload | 9.8v3.1 | 1.4% | 2021-11-08 | |
| CVE-2021-28022 | Servicetonic login form blind SQL injection | 7.5v3.1 | 1.2% | 2021-11-08 | |
| CVE-2021-25979 | Apostrophe insufficient session expiration | 9.8v3.1 | 1.1% | 2021-11-08 | Fix |
| CVE-2021-24844 | Wpaffiliatemanager Affiliates Manager admin dashboard SQL injection | 7.2NVD v3.1 | 1.5% | 2021-11-08 | Fix |
| CVE-2021-24840 | Squaretype Modern Blog WordPress theme unauthenticated Private/Schedule posts disclosure | 5.3NVD v3.1 | 1.2% | 2021-11-08 | Fix |
| CVE-2021-24835 | WCFM WordPress plugin SQL injection | 8.8NVD v3.1 | 1.3% | 2021-11-08 | Fix |
| CVE-2021-24832 | WP SEO Redirect 301 WordPress plugin redirect deletion via CSRF | 4.3NVD v3.1 | 0.5% | 2021-11-08 | Fix |
| CVE-2021-24829 | Visitor Traffic Real Time Statistics WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.4% | 2021-11-08 | Fix |
| CVE-2021-24827 | Asgaros Forum WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 12.6% | 2021-11-08 | NucleiFix |
| CVE-2021-24816 | Phoenix Media Rename WordPress plugin Author arbitrary Media file Renaming | 4.3NVD v3.1 | 0.7% | 2021-11-08 | Fix |
| CVE-2021-24807 | Support Board WordPress plugin Agent+ stored cross-site scripting | 5.4NVD v3.1 | 1.4% | 2021-11-08 | Exploit codeFix |
| CVE-2021-24806 | wpDiscuz WordPress plugin arbitrary comment Addition/Edition/Deletion via CSRF | 4.3NVD v3.1 | 0.5% | 2021-11-08 | Fix |
| CVE-2021-24801 | WP Survey Plus WordPress plugin Subscriber+ AJAX Calls | 4.3NVD v3.1 | 0.5% | 2021-11-08 | |
| CVE-2021-24798 | WP Header Images WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-11-08 | Fix |
| CVE-2021-24791 | Header Footer Code Manager WordPress plugin Admin+ SQL Injections | 7.2NVD v3.1 | 5.2% | 2021-11-08 | NucleiFix |
| CVE-2021-24788 | Batch Cat WordPress plugin Subscriber+ arbitrary Categories Add/Set/Delete to posts | 6.5NVD v3.1 | 0.9% | 2021-11-08 | |
| CVE-2021-24783 | Post Expirator WordPress plugin Contributor+ arbitrary post Schedule deletion | 6.5NVD v3.1 | 0.8% | 2021-11-08 | Fix |
| CVE-2021-24767 | Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin Log deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2021-11-08 | Fix |
| CVE-2021-24766 | 404 to 301 WordPress plugin Logs deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2021-11-08 | Fix |
| CVE-2021-24731 | Pie Register WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 6.4% | 2021-11-08 | NucleiFix |
| CVE-2021-24721 | Loco Translate WordPress plugin authenticated PHP code injection | 6.5NVD v3.1 | 0.9% | 2021-11-08 | Fix |
| CVE-2021-24710 | Print-O-Matic WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2021-11-08 | Fix |
| CVE-2021-24708 | WP All Export WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-08 | Fix |
| CVE-2021-24706 | Qwizcards WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-11-08 | Fix |