CVE-2021 list

CVE-2021 records published in November 2021

Page two of two: records 1,001 to 1,367 of the 1,367 published in November 2021, newest first. The first page carries the figures for November 2021.

CVE-2021 records published in November 2021, newest first: records 1,001 to 1,367 of 1,367
CVE Summary CVSS EPSS Published Signals
CVE-2021-24701Quiz Tool Lite WordPress plugin Multiple Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-08
CVE-2021-24698Simple Download Monitor WordPress plugin arbitrary Thumbnails Removal4.3NVD v3.10.7%2021-11-08Fix
CVE-2021-24697Simple Download Monitor WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2021-11-08Fix
CVE-2021-24695Simple Download Monitor WordPress plugin unauthenticated Log access7.5NVD v3.11.7%2021-11-08Fix
CVE-2021-24693Simple Download Monitor WordPress plugin Contributor+ stored cross-site scripting via file Thumbnail9.0NVD v3.11.3%2021-11-08Fix
CVE-2021-24674Genie WP Favicon WordPress plugin arbitrary Favicon Change via CSRF6.5NVD v3.10.5%2021-11-08
CVE-2021-24669MAZ Loader WordPress plugin Contributor+ SQL injection8.8NVD v3.11.3%2021-11-08Fix
CVE-2021-24664WPSchoolPress WordPress plugin Multiple Admin+ stored cross-site scripting4.8NVD v3.12.4%2021-11-08Exploit codeFix
CVE-2021-24647Pie Register WordPress plugin unauthenticated arbitrary login8.1NVD v3.19.8%2021-11-08NucleiExploit codeFix
CVE-2021-24646Booking.com Banner Creator WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-08Fix
CVE-2021-24645Booking.com Product Helper WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-08Fix
CVE-2021-24631Unlimited PopUps WordPress plugin Author+ SQL injection8.8NVD v3.11.6%2021-11-08
CVE-2021-24630Schreikasten WordPress plugin Author+ SQL Injections8.8NVD v3.11.6%2021-11-08
CVE-2021-24629Post Content XMLRPC WordPress plugin Admin+ SQL Injections7.2NVD v3.11.5%2021-11-08
CVE-2021-24628Wow Forms WordPress plugin Admin+ SQL injection7.2NVD v3.11.5%2021-11-08
CVE-2021-24627G Auto-Hyperlink WordPress plugin Admin+ SQL injection7.2NVD v3.16.7%2021-11-08Nuclei
CVE-2021-24626Chameleon CSS WordPress plugin Subscriber+ SQL injection8.8NVD v3.10.7%2021-11-08
CVE-2021-24625SpiderCatalog WordPress plugin Admin+ SQL injection7.2NVD v3.11.5%2021-11-08
CVE-2021-24616AddToAny Share Buttons WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2021-11-08Fix
CVE-2021-24607Storefront Footer Text WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-08
CVE-2021-24594Translate WordPress - Google Language Translator plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2021-11-08Fix
CVE-2021-24575WPSchoolPress WordPress plugin Multiple authenticated SQL Injections8.8NVD v3.11.4%2021-11-08Fix
CVE-2021-24537Similar Posts WordPress plugin Admin+ arbitrary PHP code execution7.2NVD v3.11.6%2021-11-08Fix
CVE-2021-22051Request injection in Spring Cloud Gateway6.5v3.10.7%2021-11-08Fix
CVE-2021-43414GNU Hurd improper authentication7.0v3.10.3%2021-11-07Fix
CVE-2021-43413GNU Hurd pager port sharing vulnerability8.8v3.12.0%2021-11-07Fix
CVE-2021-43412GNU Hurd use-after-free7.8v3.10.4%2021-11-07Fix
CVE-2021-43411GNU Hurd race condition7.5v3.11.3%2021-11-07Fix
CVE-2021-37471Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line.7.5v3.11.2%2021-11-07Fix
CVE-2021-25978Cross-site scripting in Apostrophe5.4v3.10.5%2021-11-07Fix
CVE-2021-43406FusionPBX improper input validation8.8v3.11.0%2021-11-05
CVE-2021-43405FusionPBX fax extension field vulnerability8.8v3.135.6%2021-11-05Exploit code
CVE-2021-43404FusionPBX fax file name field vulnerability8.8v3.11.0%2021-11-05
CVE-2021-42837Talend DATA Catalog improper authentication9.8v3.11.2%2021-11-05Fix
CVE-2021-42701AzeoTech DAQFactory cloud connection handling vulnerability6.3v3.10.6%2021-11-05
CVE-2021-42699AzeoTech DAQFactory cookie transmission cleartext transmission of sensitive information5.9v3.10.5%2021-11-05
CVE-2021-42698AzeoTech DAQFactory project file deserialization deserialization of untrusted data7.8v3.10.8%2021-11-05
CVE-2021-42671Engineers Online Portal forced browsing7.5NVD v3.119.7%2021-11-05Emerging Threats
CVE-2021-42670Engineers Online Portal Sourcecodester SQL injection9.8v3.18.3%2021-11-05Exploit code
CVE-2021-42669Engineers Online Portal Sourcecodester file upload9.8v3.123.3%2021-11-05Emerging ThreatsExploit code
CVE-2021-42668Engineers Online Portal Sourcecodester SQL injection9.8v3.14.7%2021-11-05Exploit code
CVE-2021-42667Online Event Booking And Reservation System Sourcecodester SQL injection9.8v3.115.8%2021-11-05NucleiExploit code
CVE-2021-42666Engineers Online Portal Sourcecodester SQL injection8.8v3.14.5%2021-11-05Exploit code
CVE-2021-42665Engineers Online Portal Sourcecodester SQL injection9.8NVD v3.14.9%2021-11-05Exploit code
CVE-2021-42664Engineers Online Portal Sourcecodester stored cross-site scripting5.4v3.11.7%2021-11-05Exploit code
CVE-2021-42663Online Event Booking And Reservation System Sourcecodester HTML injection4.3v3.13.9%2021-11-05NucleiExploit code
CVE-2021-42662Online Event Booking And Reservation System Sourcecodester stored cross-site scripting5.4v3.11.7%2021-11-05Exploit code
CVE-2021-42543AzeoTech DAQFactory project file parsing vulnerability7.8v3.10.8%2021-11-05
CVE-2021-42359WP DSGVO Tools (GDPR) Unauthenticated arbitrary Post Deletion9.1v3.13.8%2021-11-05NucleiFix
CVE-2021-42237Sitecore XP remote command execution9.8v3.197.9%2021-11-05KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2021-41251SAP cloud-sdk-js possibility to elevate privileges or get unauthorized access to data5.9CNA v3.11.7%2021-11-05Fix
CVE-2021-41250python-discord bot presence of non-blacklisted URL bypasses all other filters4.3CNA v3.10.8%2021-11-05Fix
CVE-2021-41230OIDC claims not updated from Identity Provider in Pomerium5.3CNA v3.10.9%2021-11-05Fix
CVE-2021-41228tensorflow code injection in `saved_model_cli`7.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41227tensorflow arbitrary memory read in `ImmutableConst`6.6CNA v3.10.2%2021-11-05Fix
CVE-2021-41226tensorflow heap OOB read in `SparseBinCount`7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41225A use of uninitialized value vulnerability in TensorFlow5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41224tensorflow `SparseFillEmptyRows` heap OOB read7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41223tensorflow heap OOB read in `FusedBatchNorm` kernels7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41222tensorflow segfault due to negative splits in `SplitV`5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41221tensorflow access to invalid memory during shape inference in `Cudnn*` ops7.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41220tensorflow use-after-free in `CollectiveReduceV2`7.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41219tensorflow undefined behavior via `nullptr` reference binding in sparse matrix multiplication7.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41218tensorflow integer division by 0 in `tf.raw_ops.AllToAll`5.5CNA v3.10.1%2021-11-05Fix
CVE-2021-41217tensorflow null pointer exception when `Exit` node is not preceded by `Enter` op5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41216tensorflow heap buffer overflow in `Transpose`5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41215tensorflow null pointer exception in `DeserializeSparse`5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41214tensorflow reference binding to `nullptr` in `tf.ragged.cross`7.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41213tensorflow deadlock in mutually recursive `tf.function` objects5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41212tensorflow heap OOB read in `tf.ragged.cross`7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41211tensorflow heap OOB read in shape inference for `QuantizeV2`7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41210tensorflow heap OOB read in `tf.raw_ops.SparseCountSparseOutput`7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41209tensorflow FPE in convolutions with zero size filters5.5CNA v3.10.1%2021-11-05Fix
CVE-2021-41208tensorflow incomplete validation in boosted trees code8.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41207tensorflow division by zero in `ParallelConcat`5.5CNA v3.10.1%2021-11-05Fix
CVE-2021-41206tensorflow incomplete validation of shapes in multiple TF ops7.0CNA v3.10.2%2021-11-05Fix
CVE-2021-41205tensorflow heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops7.1CNA v3.10.2%2021-11-05Fix
CVE-2021-41204tensorflow segfault while copying constant resource tensor5.5CNA v3.10.1%2021-11-05Fix
CVE-2021-41203tensorflow missing validation during checkpoint loading7.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41202tensorflow overflow/crash in `tf.range`5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41201tensorflow unitialized access in `EinsumHelper::ParseEquation`7.8CNA v3.10.2%2021-11-05Fix
CVE-2021-41200tensorflow incomplete validation in `tf.summary.create_file_writer`5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41199tensorflow overflow/crash in `tf.image.resize` when size is large5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41198tensorflow overflow/crash in `tf.tile` when tiling tensor is large5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41197tensorflow crashes due to overflow and `CHECK`-fail in ops with large tensor shapes5.5CNA v3.10.3%2021-11-05Fix
CVE-2021-41196tensorflow crash in `max_pool3d` when size argument is 0 or negative5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-41195tensorflow crash in `tf.math.segment_*` operations5.5CNA v3.10.2%2021-11-05Fix
CVE-2021-39913GitLab sensitive information in log files4.4CNA v3.10.3%2021-11-05Fix
CVE-2021-39912GitLab resource exhaustion5.3CNA v3.11.5%2021-11-05Fix
CVE-2021-39911GitLab all versions improper access control1.7CNA v3.10.8%2021-11-05Fix
CVE-2021-39909GitLab improper signature verification5.3CNA v3.10.6%2021-11-05Fix
CVE-2021-39907GitLab resource exhaustion5.3CNA v3.11.5%2021-11-05Fix
CVE-2021-39906GitLab improper input validation8.7CNA v3.160.7%2021-11-05Fix
CVE-2021-39905GitLab An information disclosure4.3CNA v3.11.0%2021-11-05Fix
CVE-2021-39904GitLab GraphQL API in all versions improper access control4.3CNA v3.10.8%2021-11-05Fix
CVE-2021-39901GitLab SCIM token endpoint vulnerability2.7CNA v3.10.9%2021-11-05Fix
CVE-2021-39898GitLab information disclosure3.7CNA v3.11.3%2021-11-05Fix
CVE-2021-39897GitLab improper access control2.6CNA v3.11.2%2021-11-05Fix
CVE-2021-39895GitLab information disclosure6.0CNA v3.11.0%2021-11-05Fix
CVE-2021-39416RemoteClinic Remote Clinic v2.0 in cross-site scripting6.1v3.11.1%2021-11-05
CVE-2021-39413SEO Panel cross-site scripting6.1v3.10.8%2021-11-05
CVE-2021-39412Shopping Portal PHPGurukul Shopping v3.1 cross-site scripting6.1v3.10.6%2021-11-05
CVE-2021-39411PHPGurukul Hospital Management System cross-site scripting6.1v3.10.9%2021-11-05Nuclei
CVE-2021-35368OWASP ModSecurity Core Rule Set request body inspection vulnerability9.8v3.12.7%2021-11-05Fix
CVE-2021-29753IBM Business Process Manager cleartext transmission of sensitive information5.9CNA v3.00.8%2021-11-05Fix
CVE-2021-26844poweradmin Pa Server Monitor cross-site scripting5.4v3.10.7%2021-11-05Fix
CVE-2021-25509Samsung Mobile Samsung Flow improper input validation5.9CNA v3.10.2%2021-11-05Fix
CVE-2021-25508Samsung Mobile SmartThings API Key used improper privilege management5.3CNA v3.10.8%2021-11-05Fix
CVE-2021-25507Samsung Mobile Samsung Flow improper authorization5.7CNA v3.10.3%2021-11-05Fix
CVE-2021-25506Samsung Mobile Samsung Health improper authentication4.0CNA v3.10.2%2021-11-05Fix
CVE-2021-25505Samsung Mobile Samsung Pass improper authentication3.3CNA v3.10.6%2021-11-05Fix
CVE-2021-25504Samsung Mobile Group Sharing improper input validation4.0CNA v3.10.2%2021-11-05Fix
CVE-2021-25503Samsung Mobile Devices HDCP improper input validation5.0CNA v3.10.1%2021-11-05Fix
CVE-2021-25502Samsung Mobile Devices improper privilege management7.9CNA v3.10.1%2021-11-05Fix
CVE-2021-25501Samsung Mobile Devices SCloudBnRReceiver in SecTelephonyProvider improper access control5.7CNA v3.10.1%2021-11-05Fix
CVE-2021-25500Samsung Mobile Devices improper input validation7.2CNA v3.10.1%2021-11-05Fix
CVE-2021-22260GitLab DataDog integration in all versions stored cross-site scripting7.7CNA v3.10.9%2021-11-05Fix
CVE-2021-3928Vim uninitialized variable use7.8NVD v3.10.6%2021-11-05Fix
CVE-2021-3927Heap-based buffer overflow in Vim/Vim7.8NVD v3.11.7%2021-11-05Fix
CVE-2021-3924Path traversal in getgrav/grav7.5v3.14.4%2021-11-05
CVE-2021-3916Path traversal in bookstackapp/BookStack6.5v3.11.2%2021-11-05Fix
CVE-2021-3774Meross MSS550X missing encryption of sensitive data6.5NVD v3.10.7%2021-11-05
CVE-2021-43400BlueZ use-after-free9.1v3.11.7%2021-11-04Fix
CVE-2021-43398Cryptopp Crypto++ observable discrepancy5.3v3.12.0%2021-11-04Fix
CVE-2021-43396GNU glibc ISO-2022-JP-3 iconv converter vulnerability7.5NVD v3.13.3%2021-11-04Fix
CVE-2021-43389Linux kernel out-of-bounds read5.5v3.10.7%2021-11-04Fix
CVE-2021-43293Sonatype Nexus Repository Manager server-side request forgery4.3v3.10.9%2021-11-04Fix
CVE-2021-43281MyBB Admin CP settings management code injection7.2v3.11.3%2021-11-04Fix
CVE-2021-42624Miniftpd latest version buffer overflow7.8v3.10.3%2021-11-04
CVE-2021-42057Obsidian Dataview vulnerable to code injection due to unsafe eval7.8v3.11.2%2021-11-04Fix
CVE-2021-41249XSS vulnerability in GraphQL Playground7.1CNA v3.11.2%2021-11-04Fix
CVE-2021-41248XSS vulnerability in GraphiQL7.1CNA v3.11.3%2021-11-04Fix
CVE-2021-41247Incomplete JupyterHub logout with simultaneous JupyterLab sessions3.5CNA v3.10.8%2021-11-04Fix
CVE-2021-40128Cisco Webex Meetings Email content injection5.3CNA v3.11.0%2021-11-04Fix
CVE-2021-40127Cisco Small Business Smart and Managed Switches web-based management interface denial of service5.3CNA v3.11.3%2021-11-04Fix
CVE-2021-40126Cisco Umbrella web dashboard information disclosure4.3CNA v3.10.9%2021-11-04Fix
CVE-2021-40124Cisco AnyConnect Secure Mobility Client Network Access Manager module privilege escalation6.7CNA v3.10.2%2021-11-04Fix
CVE-2021-40120Cisco Small Business RV Series Routers command injection6.5CNA v3.12.0%2021-11-04Fix
CVE-2021-40119Cisco Policy Suite Static SSH Keys vulnerability9.8CNA v3.12.5%2021-11-04Fix
CVE-2021-40115Cisco Webex Video Mesh cross-site scripting6.1CNA v3.10.8%2021-11-04Fix
CVE-2021-40113Cisco Catalyst PON Series Switches Optical Network Terminal vulnerabilities10.0CNA v3.14.6%2021-11-04Exploit codeFix
CVE-2021-40112Cisco Catalyst PON Series Switches Optical Network Terminal vulnerabilities10.0CNA v3.11.4%2021-11-04Fix
CVE-2021-39914GitLab regular expression denial of service3.1CNA v3.11.1%2021-11-04Fix
CVE-2021-39903GitLab project visibility setting vulnerability6.5CNA v3.11.1%2021-11-04Fix
CVE-2021-39902GitLab incorrect authorization4.3CNA v3.10.8%2021-11-04Fix
CVE-2021-34795Cisco Catalyst PON Series Switches Optical Network Terminal vulnerabilities10.0CNA v3.11.7%2021-11-04Fix
CVE-2021-34784Cisco Prime Infrastructure and Evolved Programmable Network Manager stored cross-site scripting5.4CNA v3.10.6%2021-11-04Fix
CVE-2021-34774Cisco Common Services Platform Collector information disclosure4.9CNA v3.11.0%2021-11-04Fix
CVE-2021-34773Cisco Unified Communications Products cross-site request forgery6.5CNA v3.10.5%2021-11-04Fix
CVE-2021-34741Cisco Email Security Appliance denial of service7.5CNA v3.11.3%2021-11-04Fix
CVE-2021-34739Cisco Small Business Series Switches Session Credentials Replay vulnerability8.1CNA v3.11.7%2021-11-04Fix
CVE-2021-34731Cisco Prime Access Registrar stored cross-site scripting4.8CNA v3.10.6%2021-11-04Fix
CVE-2021-34701Cisco Unified Communications Products path traversal4.3CNA v3.11.6%2021-11-04Fix
CVE-2021-34597Phoenix Contact: PC Worx/-Express prone to improper input validation7.8CNA v3.10.7%2021-11-04Fix
CVE-2021-34594Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server6.5v3.11.1%2021-11-04Fix
CVE-2021-21698Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files7.5v3.12.1%2021-11-04Fix
CVE-2021-21697Jenkins build directory improper access control9.1v3.11.6%2021-11-04Fix
CVE-2021-21696Jenkins code execution9.8v3.12.4%2021-11-04Fix
CVE-2021-21695Jenkins link following8.8v3.12.1%2021-11-04Fix
CVE-2021-21694Jenkins missing authorization9.8v3.11.6%2021-11-04Fix
CVE-2021-21693Jenkins incorrect authorization9.8v3.11.6%2021-11-04Fix
CVE-2021-21692Jenkins path traversal9.8v3.12.1%2021-11-04Fix
CVE-2021-21691Jenkins link following9.8v3.12.1%2021-11-04Fix
CVE-2021-21690Jenkins path traversal9.8v3.12.5%2021-11-04Fix
CVE-2021-21689Jenkins agent-to-controller file access control vulnerability9.1v3.11.5%2021-11-04Fix
CVE-2021-21688Jenkins missing authorization7.5v3.11.4%2021-11-04Fix
CVE-2021-21687Jenkins missing authorization9.1v3.11.4%2021-11-04Fix
CVE-2021-21686Jenkins link following8.1v3.12.0%2021-11-04Fix
CVE-2021-21685Jenkins missing authorization9.1v3.11.5%2021-11-04Fix
CVE-2021-1500Cisco Webex Video Mesh web-based management interface open redirect5.4CNA v3.10.8%2021-11-04Fix
CVE-2021-43339Ericsson Network Location command injection8.8v3.19.6%2021-11-03Exploit code
CVE-2021-43324Cross-site scripting in LibreNMS6.1v3.10.6%2021-11-03Fix
CVE-2021-43141oretnom23 Simple Subscription Website Sourcecodester cross-site scripting6.1v3.11.4%2021-11-03Exploit code
CVE-2021-43140oretnom23 Simple Subscription Website Sourcecodester SQL injection9.8v3.14.7%2021-11-03Exploit code
CVE-2021-43130Customer Relationship Management System Sourcecodester SQL injection9.8v3.12.3%2021-11-03
CVE-2021-43082Apache Traffic Server heap-buffer-overflow with stats-over-http plugin9.8v3.12.4%2021-11-03Fix
CVE-2021-43032XenForo cross-site scripting4.8v3.10.9%2021-11-03Exploit codeFix
CVE-2021-42772Broadcom One Command Manager buffer overflow9.8v3.11.3%2021-11-03
CVE-2021-41585Apache Traffic Server ATS stops accepting connections on FreeBSD7.5v3.12.5%2021-11-03Fix
CVE-2021-41562Deletion of arbitrary files vulnerability in Snow Agent for Windows6.1CNA v3.10.3%2021-11-03Fix
CVE-2021-41492Simple Cashiering System Sourcecodester SQL injection9.8v3.11.7%2021-11-03
CVE-2021-41312Atlassian Jira Server improper authentication7.5v3.11.2%2021-11-03Fix
CVE-2021-41174Grafana XSS vulnerability allowing arbitrary JavaScript execution6.9CNA v3.185.4%2021-11-03NucleiFix
CVE-2021-41134Stored XSS in Jupyter nbdime8.7CNA v3.10.7%2021-11-03Fix
CVE-2021-41036The Eclipse Foundation Eclipse Paho MQTT C Client out-of-bounds write9.8v3.11.2%2021-11-03Fix
CVE-2021-40985htmldoc stack-based buffer under-read5.5v3.10.9%2021-11-03Fix
CVE-2021-40849Mahara insufficient session expiration9.8v3.11.4%2021-11-03Fix
CVE-2021-40848Mahara CSV injection7.8v3.11.0%2021-11-03Fix
CVE-2021-39238HP Enterprise LaserJet buffer overflow9.8v3.112.1%2021-11-03Fix
CVE-2021-39237HP LaserJet information disclosure4.6v3.12.4%2021-11-03Fix
CVE-2021-38502Mozilla Thunderbird SMTP connection handling vulnerability5.9v3.11.1%2021-11-03Fix
CVE-2021-38501Mozilla Firefox memory safety bugs8.8v3.11.0%2021-11-03Fix
CVE-2021-38500Mozilla Thunderbird memory safety bugs8.8v3.11.3%2021-11-03Fix
CVE-2021-38499Mozilla Firefox out-of-bounds write8.8v3.10.8%2021-11-03Fix
CVE-2021-38498Mozilla Firefox use-after-free7.5v3.11.5%2021-11-03Fix
CVE-2021-38497Mozilla Firefox origin validation error6.5v3.10.5%2021-11-03Fix
CVE-2021-38496Mozilla Thunderbird use-after-free8.8v3.11.6%2021-11-03Fix
CVE-2021-38495Mozilla Thunderbird out-of-bounds write8.8v3.11.1%2021-11-03Fix
CVE-2021-38494Mozilla Firefox out-of-bounds write8.8v3.10.8%2021-11-03Fix
CVE-2021-38493Mozilla Firefox ESR out-of-bounds write8.8v3.11.2%2021-11-03Fix
CVE-2021-38492Mozilla Firefox and Thunderbird mk scheme navigation handling vulnerability6.5v3.11.2%2021-11-03Fix
CVE-2021-38491Mozilla Firefox mixed-content check vulnerability6.5v3.10.9%2021-11-03Fix
CVE-2021-38488Delta Electronics DIALink events API cross-site scripting4.8v3.112.3%2021-11-03
CVE-2021-38428Delta Electronics DIALink schedule API cross-site scripting4.8v3.111.4%2021-11-03
CVE-2021-38424Delta Electronics DIALink tag interface CSV injection7.8v3.10.5%2021-11-03
CVE-2021-38422Delta Electronics DIALink cleartext storage of sensitive information7.8v3.10.2%2021-11-03
CVE-2021-38420Delta Electronics DIALink uncontrolled search path7.8v3.10.2%2021-11-03
CVE-2021-38418Delta Electronics DIALink cleartext transmission5.9NVD v3.10.6%2021-11-03
CVE-2021-38416Delta Electronics DIALink DLL hijacking7.8v3.10.3%2021-11-03
CVE-2021-38411Delta Electronics DIALink cross-site scripting4.8v3.10.6%2021-11-03
CVE-2021-38407Delta Electronics DIALink devices API cross-site scripting4.8v3.10.6%2021-11-03
CVE-2021-38403Delta Electronics DIALink maintenance API cross-site scripting4.8v3.10.6%2021-11-03
CVE-2021-38161Apache Traffic Server not validating origin TLS certificate8.1v3.12.0%2021-11-03Fix
CVE-2021-37149Apache Traffic Server Request Smuggling multiple attacks7.5v3.12.6%2021-11-03Fix
CVE-2021-37148Apache Traffic Server request Smuggling transfer encoding validation7.5v3.12.6%2021-11-03Fix
CVE-2021-37147Apache Traffic Server request Smuggling LF line ending7.5v3.12.5%2021-11-03Fix
CVE-2021-36698Artica Pandora FMS cross-site scripting5.4v3.10.5%2021-11-03
CVE-2021-36697Artica Pandora FMS injection6.7v3.10.3%2021-11-03
CVE-2021-36192Fortinet FortiManager information disclosure5.2CNA v3.10.2%2021-11-03Fix
CVE-2021-35053Kaspersky Endpoint Security Possible system denial of service7.5NVD v3.12.6%2021-11-03
CVE-2021-33800Druid path traversal7.5v3.11.5%2021-11-03Fix
CVE-2021-33210Fimer Aurora Vision improper authentication4.3v3.10.8%2021-11-03Fix
CVE-2021-33209Fimer Aurora Vision missing brute-force protection5.3v3.10.8%2021-11-03Fix
CVE-2021-29993Mozilla Firefox crash8.1v3.10.7%2021-11-03Fix
CVE-2021-29991Mozilla Firefox HTTP request smuggling8.1v3.10.9%2021-11-03Fix
CVE-2021-27836libxls null pointer dereference6.5v3.11.2%2021-11-03Fix
CVE-2021-26786Playtuber arbitrary code execution8.8v3.11.6%2021-11-03
CVE-2021-23820json-pointer prototype pollution9.8v3.11.9%2021-11-03Fix
CVE-2021-23807json-pointer prototype pollution9.8v3.12.7%2021-11-03Fix
CVE-2021-23784tempura cross-site scripting (XSS)6.1v3.11.3%2021-11-03Fix
CVE-2021-23624dotty prototype pollution9.8v3.11.3%2021-11-03Fix
CVE-2021-23509json-ptr prototype pollution9.8v3.11.8%2021-11-03Fix
CVE-2021-23472bootstrap-table cross-site scripting (XSS)6.1v3.12.4%2021-11-03Fix
CVE-2021-22960Node.js Node HTTP request smuggling6.5v3.12.5%2021-11-03Fix
CVE-2021-20707NEC CLUSTERPRO X Transaction Server improper input validation7.5v3.11.0%2021-11-03
CVE-2021-20706NEC CLUSTERPRO X WebManager improper input validation7.5v3.11.1%2021-11-03
CVE-2021-20705NEC CLUSTERPRO X WebManager improper input validation7.5v3.11.1%2021-11-03
CVE-2021-20704NEC CLUSTERPRO X compatible API buffer overflow9.8v3.12.1%2021-11-03
CVE-2021-20703NEC CLUSTERPRO X Transaction Server buffer overflow9.8v3.12.1%2021-11-03
CVE-2021-20702NEC CLUSTERPRO X Transaction Server buffer overflow9.8v3.12.2%2021-11-03
CVE-2021-20701NEC CLUSTERPRO X Disk agent buffer overflow9.8v3.12.1%2021-11-03
CVE-2021-20700NEC CLUSTERPRO X Disk agent buffer overflow9.8v3.12.1%2021-11-03
CVE-2021-20135Nessus local privilege escalation6.7NVD v3.10.3%2021-11-03
CVE-2021-43270Datalust Seq.app.emailplus cleartext transmission of sensitive information7.5v3.10.4%2021-11-02Fix
CVE-2021-43267Linux kernel improper quantity validation9.8v3.157.6%2021-11-02Exploit codeFix
CVE-2021-43266Mahara OS command injection7.3v3.11.3%2021-11-02Fix
CVE-2021-43265Mahara cross-site scripting5.4v3.10.6%2021-11-02Fix
CVE-2021-43264Mahara path traversal3.3v3.10.6%2021-11-02Fix
CVE-2021-42763Couchbase Server cleartext storage of sensitive information7.5v3.10.6%2021-11-02Fix
CVE-2021-42754Fortinet FortiClientMac code injection3.2CNA v3.10.4%2021-11-02Fix
CVE-2021-42697Uncontrolled recursion in Akka HTTP7.5v3.136.1%2021-11-02Exploit codeFix
CVE-2021-42568Sonatype Nexus Repository Manager SSL certificates loading function vulnerability4.3v3.10.5%2021-11-02Fix
CVE-2021-41238HangfireIO Hangfire missing authorization with Default settings in Dashboard UI8.6CNA v3.11.0%2021-11-02Fix
CVE-2021-41232Thunderdome Planning Poker LDAP authentication LDAP injection8.1CNA v3.11.5%2021-11-02Fix
CVE-2021-41023Fortinet FortiSIEMWindowsAgent insufficiently protected credentials5.5CNA v3.10.2%2021-11-02Fix
CVE-2021-41022Fortinet FortiSIEMWindowsAgent improper privilege management7.8CNA v3.10.2%2021-11-02Fix
CVE-2021-41019Fortinet FortiOS improper certificate validation3.5CNA v3.10.6%2021-11-02Fix
CVE-2021-38948IBM InfoSphere Information Server XML injection7.1CNA v3.02.0%2021-11-02Fix
CVE-2021-37996Google Chrome improper input validation5.5v3.10.6%2021-11-02Fix
CVE-2021-37995Google Chrome WebApp Installer inappropriate implementation6.5v3.10.8%2021-11-02Fix
CVE-2021-37994Google Chrome iFrame Sandbox inappropriate implementation6.5v3.10.8%2021-11-02Fix
CVE-2021-37993Google Chrome PDF Accessibility use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37992Google Chrome WebAudio out-of-bounds read8.8v3.11.0%2021-11-02Fix
CVE-2021-37991Google Chrome race condition7.5v3.10.8%2021-11-02Fix
CVE-2021-37990Google Chrome WebView inappropriate implementation5.5v3.10.6%2021-11-02Fix
CVE-2021-37989Google Chrome Blink inappropriate implementation6.5v3.10.8%2021-11-02Fix
CVE-2021-37988Google Chrome Profiles use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37987Google Chrome Network APIs use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37986Google Chrome settings heap-based buffer overflow8.8v3.11.0%2021-11-02Fix
CVE-2021-37985Google Chrome V8 use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37984Google Chrome PDFium heap-based buffer overflow8.8v3.11.0%2021-11-02Fix
CVE-2021-37983Google Chrome Dev tools use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37982Google Chrome Incognito use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37981Google Chrome Skia heap-based buffer overflow9.6v3.11.0%2021-11-02Fix
CVE-2021-37980Google Chrome Sandbox inappropriate implementation7.4v3.11.5%2021-11-02Exploit codeFix
CVE-2021-37979Google Chrome WebRTC heap-based buffer overflow8.8v3.11.8%2021-11-02Fix
CVE-2021-37978Google Chrome Blink heap-based buffer overflow8.8v3.11.0%2021-11-02Fix
CVE-2021-37977Google Chrome Garbage Collection use-after-free8.8v3.10.9%2021-11-02Fix
CVE-2021-37842Couchbase Server cleartext storage of sensitive information7.5v3.10.6%2021-11-02Fix
CVE-2021-36925Realtek Rtsupx USB Utility Driver privilege escalation7.8v3.10.3%2021-11-02Fix
CVE-2021-36924Realtek Rtsupx USB Utility Driver time-of-check time-of-use race condition7.8v3.10.2%2021-11-02Fix
CVE-2021-36923Realtek Rtsupx USB Utility Driver unauthorized access7.8v3.10.3%2021-11-02Fix
CVE-2021-36922Realtek Rtsupx USB Utility Driver unauthorized access7.8v3.10.3%2021-11-02Fix
CVE-2021-36794Siren Investigate Siren Alert cluster feature vulnerability9.8v3.11.4%2021-11-02Fix
CVE-2021-36560Phone Shop Sales Management System forced browsing9.8v3.11.5%2021-11-02
CVE-2021-36187Fortinet FortiWeb A resource exhaustion5.3CNA v3.11.4%2021-11-02Fix
CVE-2021-36186Fortinet FortiWeb A stack-based buffer overflow8.8CNA v3.11.6%2021-11-02Fix
CVE-2021-36185Fortinet FortiWLM OS command injection8.8CNA v3.11.9%2021-11-02Fix
CVE-2021-36184Fortinet FortiWLM SQL injection8.8CNA v3.11.0%2021-11-02Fix
CVE-2021-36183Fortinet FortiClientWindows improper authorization7.4CNA v3.10.3%2021-11-02Fix
CVE-2021-36181Fortinet FortiPortal race condition3.1CNA v3.10.5%2021-11-02Fix
CVE-2021-36176Fortinet FortiPortal web interface resource exhaustion6.1CNA v3.10.6%2021-11-02Fix
CVE-2021-36174Fortinet FortiPortal license verification function excessive memory allocation4.3CNA v3.10.8%2021-11-02Fix
CVE-2021-36172Fortinet FortiPortal parser of XML responses XML external entity injection4.3CNA v3.10.8%2021-11-02Fix
CVE-2021-33611Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 146.1CNA v3.11.0%2021-11-02Fix
CVE-2021-33593NAVER Whale browser UI misrepresentation5.3v3.10.7%2021-11-02Fix
CVE-2021-32595Fortinet FortiPortal web interface resource exhaustion6.5CNA v3.10.8%2021-11-02Fix
CVE-2021-29888IBM InfoSphere Information Server cross-site request forgery6.5CNA v3.00.5%2021-11-02Fix
CVE-2021-29875IBM InfoSphere Information Server information disclosure5.9CNA v3.01.1%2021-11-02Fix
CVE-2021-29771IBM InfoSphere Information Server cross-site scripting5.4CNA v3.00.5%2021-11-02Fix
CVE-2021-29738IBM InfoSphere Information Server server-side request forgery5.4CNA v3.00.5%2021-11-02Fix
CVE-2021-29737IBM InfoSphere Information Server improper certificate validation5.9CNA v3.00.7%2021-11-02Fix
CVE-2021-27722Nsasoft SpotAuditor buffer overflow5.5v3.10.7%2021-11-02
CVE-2021-26107Fortinet FortiManager improper access control6.3CNA v3.10.5%2021-11-02Fix
CVE-2021-25973Publify improper authorization leads to Guest Signup Restriction Bypass6.5v3.10.8%2021-11-02Fix
CVE-2021-3765Inefficient regular expression complexity in validatorjs/validator.js7.5v3.11.8%2021-11-02Fix
CVE-2021-43058REPLICATED CLASSIC An open redirect6.1v3.10.6%2021-11-01Fix
CVE-2021-42917Kodi buffer overflow5.5v3.11.9%2021-11-01Fix
CVE-2021-42694Unicode code injection8.3v3.14.9%2021-11-01Exploit codeFix
CVE-2021-42574Unicode code injection8.3NVD v3.112.9%2021-11-01Exploit codeFix
CVE-2021-42557Jeedom API access vulnerability7.5v3.12.2%2021-11-01Fix
CVE-2021-41973Apache Mina HTTP listener DOS6.5v3.14.7%2021-11-01Fix
CVE-2021-41313Atlassian Jira Server improper authorization4.3v3.10.9%2021-11-01Fix
CVE-2021-41310Atlassian Jira Server cross-site scripting6.1v3.10.7%2021-11-01Fix
CVE-2021-41187SQL injection in DHIS2 Tracker API8.1CNA v3.10.9%2021-11-01Fix
CVE-2021-40348spacewalkproject spacewalk code injection8.8v3.11.8%2021-11-01Fix
CVE-2021-39346Google Maps Easy Authenticated stored cross-site scripting4.8CNA v3.11.0%2021-11-01Fix
CVE-2021-39341OptinMonster Unprotected REST-API endpoints8.2CNA v3.121.9%2021-11-01NucleiFix
CVE-2021-39340Notification Custom Notifications and Alerts for WordPress authenticated stored cross-site scripting4.8CNA v3.10.9%2021-11-01Fix
CVE-2021-39333HashThemes Demo Importer improper access control allowing Content Deletion8.1CNA v3.11.1%2021-11-01Fix
CVE-2021-38847S-cart unrestricted file upload8.8v3.11.3%2021-11-01
CVE-2021-38356NextScripts: Social Networks Auto-Poster reflected cross-site scripting6.1CNA v3.10.9%2021-11-01Fix
CVE-2021-31849Data Loss Prevention (DLP) ePO extension SQL injection8.4CNA v3.11.1%2021-11-01Fix
CVE-2021-31848Data Loss Prevention (DLP) ePO extension cross-site scripting (XSS)8.4CNA v3.10.8%2021-11-01Fix
CVE-2021-29213HPE ProLiant ML30 Gen10 Server denial of service6.7v3.10.3%2021-11-01Fix
CVE-2021-29212iLO Amplifier Pack path traversal9.8v3.113.5%2021-11-01Fix
CVE-2021-27644DolphinScheduler mysql jdbc connector parameters deserialize remote code execution8.8v3.11.9%2021-11-01Fix
CVE-2021-27005Clustered Data ONTAP crash7.5v3.11.3%2021-11-01Fix
CVE-2021-27004NetApp ONTAP System Manager iSCSI CHAP credential storage information disclosure5.5v3.10.2%2021-11-01Fix
CVE-2021-26740Doyocms unrestricted file upload9.8v3.11.6%2021-11-01
CVE-2021-26739Doyocms pay.php in millken SQL injection9.8v3.11.7%2021-11-01
CVE-2021-25878YouPHPTube cross-site scripting6.1v3.10.9%2021-11-01
CVE-2021-25877YouPHPTube code injection7.2v3.11.6%2021-11-01
CVE-2021-25876YouPHPTube cross-site scripting6.1v3.10.9%2021-11-01
CVE-2021-25875YouPHPTube cross-site scripting6.1v3.10.9%2021-11-01
CVE-2021-25874YouPHPTube SQL injection7.5v3.11.7%2021-11-01
CVE-2021-24813Events Made Easy WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2021-11-01Fix
CVE-2021-24809BP Better Messages WordPress plugin Multiple CSRF8.8NVD v3.10.7%2021-11-01Fix
CVE-2021-24808BP Better Messages WordPress plugin reflected cross-site scripting6.1NVD v3.10.9%2021-11-01Fix
CVE-2021-24799Far Future Expiry Header WordPress plugin Plugin's settings update via CSRF4.3NVD v3.10.5%2021-11-01Fix
CVE-2021-24794Connections Business Directory WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2021-11-01Fix
CVE-2021-24793WPeMatico RSS Feed Fetcher WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-01Fix
CVE-2021-24789Flat Preloader WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-01Fix
CVE-2021-24781Image Source Control WordPress plugin Contributor+ arbitrary post Meta Value Change4.3NVD v3.10.8%2021-11-01Fix
CVE-2021-24773WordPress Download Manager plugin Admin+ stored cross-site scripting4.8NVD v3.12.9%2021-11-01Fix
CVE-2021-24770Stylish Price List WordPress plugin Subscriber+ arbitrary Image upload6.5NVD v3.10.9%2021-11-01Fix
CVE-2021-24757Stylish Price List WordPress plugin unauthenticated arbitrary Image upload5.3NVD v3.11.1%2021-11-01Fix
CVE-2021-24742Logo Slider and Showcase WordPress plugin Editor Plugin's settings update6.5NVD v3.10.9%2021-11-01Fix
CVE-2021-24723WP Reactions Lite WordPress plugin authenticated stored cross-site scripting5.4NVD v3.10.7%2021-11-01Fix
CVE-2021-24722Restaurant Menu by MotoPress WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-01Fix
CVE-2021-24717AutomatorWP WordPress plugin missing authorization and privilege escalation8.8NVD v3.11.3%2021-11-01Fix
CVE-2021-24716Modern Events Calendar Lite WordPress plugin authenticated stored cross-site scripting5.4NVD v3.10.7%2021-11-01Fix
CVE-2021-24715WP Sitemap Page WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-11-01Fix
CVE-2021-24685Flat Preloader WordPress plugin CSRF to stored cross-site scripting5.4NVD v3.10.5%2021-11-01Fix
CVE-2021-24682Cool Tag Cloud WordPress plugin Contributor+ stored cross-site scripting5.4NVD v3.10.7%2021-11-01Fix
CVE-2021-24624sonaar MP3 Audio Player for Music, Radio and Podcast playlist settings vulnerability4.8NVD v3.10.6%2021-11-01Fix
CVE-2021-24572Paypal Donation WordPress plugin CSRF to arbitrary post deletion4.3NVD v3.10.5%2021-11-01Fix
CVE-2021-24570Paypal Donation WordPress plugin CSRF to stored cross-site scripting4.3NVD v3.10.5%2021-11-01Fix
CVE-2021-24539Dazzlersoftware Coming Soon and Maintenance Mode by Dazzler stored cross-site scripting4.8NVD v3.10.6%2021-11-01Fix
CVE-2021-22564Google Out-of-bounds Copy in Libjxl in large image groups4.5CNA v3.10.3%2021-11-01Fix
CVE-2021-22563libjxl spline rendering out-of-bounds read4.5CNA v3.10.3%2021-11-01Fix
CVE-2021-20839Antenna House Office Server Document Converter XML external entity injection6.5v3.11.1%2021-11-01Fix
CVE-2021-20838Antenna House Office Server Document Converter XML external entity injection7.5v3.11.5%2021-11-01Fix
CVE-2021-20136ManageEngine Log360 missing authentication9.8NVD v3.110.8%2021-11-01Fix
CVE-2021-3705HP LaserJet Pro improper access control9.8v3.11.8%2021-11-01Fix
CVE-2021-3704HP LaserJet Pro M501 Series J8H61A denial of service7.5v3.11.4%2021-11-01Fix
CVE-2021-3440HP Print and Scan Doctor, an application within the HP Smart App elevation of privilege7.8v3.10.3%2021-11-01Fix