CVE-2021 records published in December 2021
This page lists the 1,836 CVE-2021 records published in December 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.
- Critical
- 30816.8% of these records
- Listed in CISA KEV
- 150.8% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 532.9% of these records
- Exploit code
- 613.3% of these records
- Actionable vendor fix
- 1,46179.6% of these records
Figures as of 2026-10-24 13:51 UTC. Records published in December 2021 have had from about 58 months to about 59 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-4193 | Out-of-bounds read in Vim/Vim | 5.5v3.1 | 1.8% | 2021-12-31 | Fix |
| CVE-2021-4192 | vim/vim use-after-free | 7.8v3.1 | 1.7% | 2021-12-31 | Fix |
| CVE-2021-45818 | Safari Montage CRLF injection | 6.1v3.1 | 0.6% | 2021-12-30 | |
| CVE-2021-45815 | Quectel UC20 cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-30 | |
| CVE-2021-45732 | Netgear Nighthawk R6700 hard-coded credentials | 8.8NVD v3.1 | 0.8% | 2021-12-30 | |
| CVE-2021-45427 | Emerson XWEB300D Evo path traversal | 9.8v3.1 | 19.0% | 2021-12-30 | |
| CVE-2021-45379 | Glewlwyd improper authentication | 8.8v3.1 | 1.0% | 2021-12-30 | Fix |
| CVE-2021-45077 | Netgear Nighthawk R6700 cleartext storage of sensitive information | 7.5NVD v3.1 | 0.6% | 2021-12-30 | |
| CVE-2021-44466 | Bitmask Riseup VPN incorrect permission assignment | 7.3NVD v3.1 | 0.4% | 2021-12-30 | |
| CVE-2021-43862 | jcubic jquery.terminal self XSS on user input | 3.7CNA v3.1 | 1.0% | 2021-12-30 | Fix |
| CVE-2021-43861 | mermaid-js mermaid incorrect sanitisation function leads to `XSS` | 7.2CNA v3.1 | 0.9% | 2021-12-30 | Fix |
| CVE-2021-38876 | IBM i cross-site scripting | 6.1CNA v3.0 | 0.6% | 2021-12-30 | Fix |
| CVE-2021-23147 | Netgear Nighthawk R6700 improper authentication | 6.8NVD v3.1 | 0.4% | 2021-12-30 | |
| CVE-2021-20175 | Netgear Nighthawk R6700 cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.6% | 2021-12-30 | |
| CVE-2021-20174 | Netgear Nighthawk R6700 cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.6% | 2021-12-30 | |
| CVE-2021-20173 | Netgear Nighthawk R6700 OS command injection | 8.8NVD v3.1 | 3.2% | 2021-12-30 | |
| CVE-2021-20172 | Netgear Genie Installer for macOS incorrect permission assignment | 7.8NVD v3.1 | 0.3% | 2021-12-30 | |
| CVE-2021-20171 | Netgear RAX43 cleartext storage of sensitive information | 5.5NVD v3.1 | 0.2% | 2021-12-30 | |
| CVE-2021-20170 | Netgear RAX43 hard-coded credentials | 8.8NVD v3.1 | 0.5% | 2021-12-30 | |
| CVE-2021-20169 | Netgear RAX43 cleartext transmission of sensitive information | 6.8NVD v3.1 | 0.2% | 2021-12-30 | |
| CVE-2021-20168 | Netgear RAX43 improper authentication | 6.8NVD v3.1 | 0.3% | 2021-12-30 | |
| CVE-2021-20167 | Netgear RAX43 command injection | 8.0NVD v3.1 | 7.2% | 2021-12-30 | Nuclei |
| CVE-2021-20166 | Netgear RAX43 buffer overflow | 8.8NVD v3.1 | 2.2% | 2021-12-30 | |
| CVE-2021-20165 | Trendnet AC2600 TEW-827DRU cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2021-12-30 | |
| CVE-2021-20164 | Trendnet AC2600 TEW-827DRU insufficiently protected credentials | 4.9NVD v3.1 | 0.7% | 2021-12-30 | |
| CVE-2021-20163 | Trendnet AC2600 TEW-827DRU insufficiently protected credentials | 4.9NVD v3.1 | 0.8% | 2021-12-30 | |
| CVE-2021-20162 | Trendnet AC2600 TEW-827DRU cleartext storage of sensitive information | 4.9NVD v3.1 | 0.5% | 2021-12-30 | |
| CVE-2021-20161 | Trendnet AC2600 TEW-827DRU improper authentication | 6.8NVD v3.1 | 0.2% | 2021-12-30 | |
| CVE-2021-20160 | Trendnet AC2600 TEW-827DRU OS command injection | 8.8NVD v3.1 | 3.1% | 2021-12-30 | |
| CVE-2021-20159 | Trendnet AC2600 TEW-827DRU OS command injection | 8.8NVD v3.1 | 3.1% | 2021-12-30 | |
| CVE-2021-20158 | Trendnet AC2600 TEW-827DRU missing authentication | 9.8NVD v3.1 | 9.5% | 2021-12-30 | Nuclei |
| CVE-2021-20157 | TRENDnet TEW-827DRU hidden administrative command denial of service | 7.5NVD v3.1 | 1.5% | 2021-12-30 | |
| CVE-2021-20156 | Trendnet AC2600 TEW-827DRU improper signature verification | 6.5NVD v3.1 | 0.4% | 2021-12-30 | |
| CVE-2021-20155 | Trendnet AC2600 TEW-827DRU hard-coded credentials | 9.8NVD v3.1 | 1.9% | 2021-12-30 | |
| CVE-2021-20154 | Trendnet AC2600 TEW-827DRU cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.8% | 2021-12-30 | |
| CVE-2021-20153 | Trendnet AC2600 TEW-827DRU link following | 6.8NVD v3.1 | 1.0% | 2021-12-30 | |
| CVE-2021-20152 | Trendnet AC2600 TEW-827DRU missing authentication | 6.5NVD v3.1 | 0.8% | 2021-12-30 | |
| CVE-2021-20151 | Trendnet AC2600 TEW-827DRU session fixation | 10.0NVD v3.1 | 1.6% | 2021-12-30 | |
| CVE-2021-20150 | Trendnet AC2600 TEW-827DRU missing authentication | 5.3NVD v3.1 | 40.1% | 2021-12-30 | Nuclei |
| CVE-2021-20149 | Trendnet AC2600 TEW-827DRU incorrect authorization | 9.8NVD v3.1 | 1.4% | 2021-12-30 | |
| CVE-2021-20134 | Adobe Quagga Services on D-Link DIR-2640 less than or equal to absolute path traversal | 8.4NVD v3.1 | 7.5% | 2021-12-30 | |
| CVE-2021-20133 | Adobe Quagga Services on D-Link DIR-2640 less than or equal to absolute path traversal | 6.1NVD v3.1 | 2.1% | 2021-12-30 | |
| CVE-2021-20132 | Quagga Services on D-Link DIR-2640 Routers hard-coded credentials | 8.8NVD v3.1 | 4.3% | 2021-12-30 | |
| CVE-2021-4190 | Wireshark excessive iteration | 7.5CNA v3.1 | 3.1% | 2021-12-30 | Fix |
| CVE-2021-4188 | Null pointer dereference in mruby/mruby | 7.5v3.1 | 0.9% | 2021-12-30 | Fix |
| CVE-2021-4186 | Wireshark Gryphon dissector crash | 6.3CNA v3.1 | 2.1% | 2021-12-30 | Fix |
| CVE-2021-4185 | Wireshark RTMPT dissector infinite loop | 7.5CNA v3.1 | 3.8% | 2021-12-30 | Fix |
| CVE-2021-4184 | Wireshark BitTorrent DHT dissector infinite loop | 7.5CNA v3.1 | 3.8% | 2021-12-30 | Fix |
| CVE-2021-4183 | Wireshark pcapng file parser crash | 5.5CNA v3.1 | 1.5% | 2021-12-30 | Fix |
| CVE-2021-4182 | Wireshark infinite loop | 7.5CNA v3.1 | 3.2% | 2021-12-30 | Fix |
| CVE-2021-4181 | Wireshark Sysdig Event dissector crash | 7.5CNA v3.1 | 3.8% | 2021-12-30 | Fix |
| CVE-2021-45885 | Stormshield Network Security insufficient session expiration | 7.5v3.1 | 0.9% | 2021-12-29 | Fix |
| CVE-2021-44161 | Changing Information Technology Inc. MOTP(Mobile One Time Password) SQL injection | 8.8CNA v3.1 | 0.5% | 2021-12-29 | Fix |
| CVE-2021-44160 | Carinal Tien Hospital Health Report System authorization bypass through user-controlled key | 7.3CNA v3.1 | 1.1% | 2021-12-29 | Fix |
| CVE-2021-43876 | Microsoft SharePoint elevation of privilege | 8.8CNA v3.1 | 1.9% | 2021-12-29 | Fix |
| CVE-2021-38688 | Improper authentication in Qfile | 7.1CNA v3.1 | 0.8% | 2021-12-29 | Fix |
| CVE-2021-38687 | Stack overflow vulnerability in Surveillance Station | 8.1CNA v3.1 | 1.3% | 2021-12-29 | Fix |
| CVE-2021-38680 | Reflected XSS in Kazoo Server | 6.1NVD v3.1 | 0.7% | 2021-12-29 | Fix |
| CVE-2021-36724 | ForeScout SecureConnector local service DoS | 5.5v3.1 | 0.2% | 2021-12-29 | |
| CVE-2021-36723 | Emuse eServices / eNvoice Exposure of Private Personal Information | 7.5v3.1 | 0.5% | 2021-12-29 | |
| CVE-2021-36722 | Emuse eServices / eNvoice SQL injection | 9.8v3.1 | 1.3% | 2021-12-29 | |
| CVE-2021-35035 | Zyxel NBG6604 firmware cleartext storage of sensitive information | 4.9CNA v3.1 | 0.6% | 2021-12-29 | Fix |
| CVE-2021-35034 | Zyxel NBG6604 firmware CGI program of the Zyxel insufficient session expiration | 7.4CNA v3.1 | 1.0% | 2021-12-29 | Fix |
| CVE-2021-25993 | Requarks Wiki.js stored cross-site scripting (XSS) in markdown editor | 5.4v3.1 | 0.6% | 2021-12-29 | |
| CVE-2021-25991 | ifme improper access control leads to admin deactivation | 7.3v3.1 | 0.8% | 2021-12-29 | |
| CVE-2021-25990 | ifme stored cross-site scripting (XSS) in Contacts section | 5.4v3.1 | 0.6% | 2021-12-29 | |
| CVE-2021-25989 | ifme stored cross-site scripting (XSS) in Groups section | 5.4v3.1 | 0.6% | 2021-12-29 | |
| CVE-2021-25988 | ifme stored cross-site scripting (XSS) in Notifications section | 5.4v3.1 | 0.6% | 2021-12-29 | |
| CVE-2021-23727 | celery stored command injection | 7.5v3.1 | 3.9% | 2021-12-29 | Fix |
| CVE-2021-4187 | vim/vim use-after-free | 7.8v3.1 | 1.6% | 2021-12-29 | Fix |
| CVE-2021-4176 | Cross-site scripting (XSS) Reflected in livehelperchat/livehelperchat | 6.1v3.1 | 0.8% | 2021-12-29 | Fix |
| CVE-2021-4175 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.5% | 2021-12-29 | Fix |
| CVE-2021-45911 | GIF2APNG out-of-bounds write | 7.8v3.1 | 0.9% | 2021-12-28 | Fix |
| CVE-2021-45910 | GIF2APNG out-of-bounds write | 7.8v3.1 | 0.9% | 2021-12-28 | Fix |
| CVE-2021-45909 | GIF2APNG out-of-bounds write | 7.8v3.1 | 0.9% | 2021-12-28 | Fix |
| CVE-2021-45908 | GIF2APNG out-of-bounds write | 7.8v3.1 | 0.7% | 2021-12-28 | |
| CVE-2021-45907 | GIF2APNG out-of-bounds write | 7.8v3.1 | 0.7% | 2021-12-28 | |
| CVE-2021-45903 | salesagility SuiteCRM web interface stored cross-site scripting | 6.1v3.1 | 1.1% | 2021-12-28 | Fix |
| CVE-2021-45814 | Nettemp Nnt SQL injection | 9.8v3.1 | 6.3% | 2021-12-28 | Exploit code |
| CVE-2021-45813 | Slican Webcti cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-28 | |
| CVE-2021-45812 | NUUO Nvrsolo cross-site scripting | 6.1v3.1 | 0.8% | 2021-12-28 | |
| CVE-2021-45425 | Safari Montage reflected cross-site scripting | 6.1v3.1 | 3.4% | 2021-12-28 | Exploit code |
| CVE-2021-44832 | Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration | 6.6NVD v3.1 | 97.9% | 2021-12-28 | Reported exploitedSnortExploit codeFix |
| CVE-2021-43556 | FATEK Automation WinProladder project file parser stack-based buffer overflow | 7.8v3.1 | 2.1% | 2021-12-28 | |
| CVE-2021-43554 | FATEK Automation WinProladder project file parser out-of-bounds write | 7.8v3.1 | 1.9% | 2021-12-28 | |
| CVE-2021-42583 | foxcpp maddy Max Mazurov weak cryptography | 7.5v3.1 | 0.7% | 2021-12-28 | Fix |
| CVE-2021-40579 | Online Enrollment Management System insecure direct object reference | 6.5v3.1 | 0.8% | 2021-12-28 | |
| CVE-2021-37401 | IDEC DATA File Manager insufficiently protected credentials | 9.8v3.1 | 1.3% | 2021-12-28 | Fix |
| CVE-2021-37400 | IDEC DATA File Manager insufficiently protected credentials | 9.8v3.1 | 1.3% | 2021-12-28 | Fix |
| CVE-2021-35032 | Zyxel GS1900 series firmware OS command injection | 6.4CNA v3.1 | 0.2% | 2021-12-28 | Fix |
| CVE-2021-35031 | Zyxel GS1900 series firmware OS command injection | 6.8CNA v3.1 | 0.5% | 2021-12-28 | Fix |
| CVE-2021-20873 | Yappli missing authorization | 8.1v3.1 | 0.8% | 2021-12-28 | Fix |
| CVE-2021-4179 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.5% | 2021-12-28 | Fix |
| CVE-2021-4177 | Generation of error message containing sensitive information in livehelperchat/livehelperchat | 5.3v3.1 | 0.9% | 2021-12-28 | Fix |
| CVE-2021-45906 | openwrt cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-27 | |
| CVE-2021-45905 | openwrt cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-27 | |
| CVE-2021-45904 | openwrt cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-27 | |
| CVE-2021-45896 | Nokia Fastmile privilege escalation | 8.8v3.1 | 1.6% | 2021-12-27 | |
| CVE-2021-45895 | Cross-site scripting in Netgen Tags Bundle | 6.1v3.1 | 0.7% | 2021-12-27 | Fix |
| CVE-2021-45890 | Authguard improper authentication | 9.8v3.1 | 1.7% | 2021-12-27 | Fix |
| CVE-2021-45884 | Brave information disclosure | 7.5v3.1 | 3.1% | 2021-12-27 | |
| CVE-2021-45711 | Simple ASN1 panic on incorrect date input to `simple_asn1` | 7.5v3.1 | 1.3% | 2021-12-27 | Fix |
| CVE-2021-45710 | Race condition in Tokio | 8.1v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45709 | Crypto2 non-aligned u32 read in Chacha20 encryption and decryption | 9.8v3.1 | 0.8% | 2021-12-27 | |
| CVE-2021-45708 | Abomonation transmutes &T to and from &[u8] without sufficient constraints | 7.5v3.1 | 1.0% | 2021-12-27 | Fix |
| CVE-2021-45707 | Out-of-bounds write in Nix | 9.8v3.1 | 1.7% | 2021-12-27 | Fix |
| CVE-2021-45706 | Zeroize Derive memory flaw in zeroize_derive | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45705 | Nanorand aliased mutable references from `tls_rand` & `TlsWyRand` | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45704 | Out-of-bounds write and race condition in Metrics-util | 8.1v3.1 | 0.7% | 2021-12-27 | Fix |
| CVE-2021-45703 | Tectonic Xdv use of uninitialized resource in tectonic_xdv | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45702 | Linux Foundation Tremor-script memory safety issue when | 7.5v3.1 | 1.1% | 2021-12-27 | Fix |
| CVE-2021-45701 | Linux Foundation Tremor-script memory safety issue when | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45700 | Nervos Ckb process crashes when the cell used as DepGroup is not alive | 7.5v3.1 | 1.1% | 2021-12-27 | Fix |
| CVE-2021-45699 | Allocation of resources without limits or throttling in Ckb | 7.5v3.1 | 1.5% | 2021-12-27 | Fix |
| CVE-2021-45698 | Nervos Ckb miner fails to get block template when a cell used as a cell dep has been destroyed | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45697 | The `total_size` function for partial read the length of any `FixVec` is incorrect in Molecule | 9.8v3.1 | 1.3% | 2021-12-27 | Fix |
| CVE-2021-45696 | Miscomputed SHA2 results when using AVX2 backend | 9.8v3.1 | 0.8% | 2021-12-27 | Fix |
| CVE-2021-45695 | Incorrect reliance on Trait memory layout in Mopa | 9.8v3.1 | 1.6% | 2021-12-27 | |
| CVE-2021-45694 | Window may read from uninitialized memory locations in Rdiff | 7.5v3.1 | 1.1% | 2021-12-27 | |
| CVE-2021-45693 | Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read | 9.8v3.1 | 1.2% | 2021-12-27 | |
| CVE-2021-45692 | Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read | 9.8v3.1 | 1.4% | 2021-12-27 | |
| CVE-2021-45691 | Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read | 9.8v3.1 | 1.2% | 2021-12-27 | |
| CVE-2021-45690 | Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read | 9.8v3.1 | 1.2% | 2021-12-27 | |
| CVE-2021-45689 | Gfx-auxil reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv` ) | 9.8v3.1 | 1.2% | 2021-12-27 | |
| CVE-2021-45688 | Ash-rs ash reading on uninitialized memory may cause UB ( `util::read_spv` ) | 9.8v3.1 | 1.3% | 2021-12-27 | Fix |
| CVE-2021-45687 | Raw-cpuid optional `Deserialize` implementations lacking validation | 9.8v3.1 | 1.1% | 2021-12-27 | Fix |
| CVE-2021-45686 | Csv-sniffer `Read` on uninitialized memory may cause UB (fn preamble_skipcount) | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45685 | Columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec) | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45684 | Flumedb `Read` on uninitialized buffer may cause UB ( `read_entry` ) | 9.8v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-45683 | Binjs IO read on uninitialized memory may cause UB | 9.8v3.1 | 1.2% | 2021-12-27 | |
| CVE-2021-45682 | Bronzedb-protocol `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`) | 9.8v3.1 | 1.2% | 2021-12-27 | |
| CVE-2021-45681 | Derive-com-impl QueryInterface should call AddRef before returning pointer | 7.5v3.1 | 1.1% | 2021-12-27 | Fix |
| CVE-2021-45680 | Vec-const attempts to construct a Vec from a pointer to a const slice | 7.5v3.1 | 1.1% | 2021-12-27 | Fix |
| CVE-2021-45339 | Avast Antivirus privilege escalation | 7.8v3.1 | 0.3% | 2021-12-27 | Fix |
| CVE-2021-45338 | Avast Antivirus privilege escalation | 7.8v3.1 | 0.4% | 2021-12-27 | Fix |
| CVE-2021-45337 | Avast Antivirus Self-Defense driver privilege escalation | 8.8v3.1 | 0.4% | 2021-12-27 | Fix |
| CVE-2021-45336 | Avast Antivirus Sandbox component privilege escalation | 8.8v3.1 | 0.5% | 2021-12-27 | Fix |
| CVE-2021-45335 | Avast Antivirus incorrect default permissions | 8.8v3.1 | 0.4% | 2021-12-27 | Fix |
| CVE-2021-45232 | Apache APISIX Dashboard security vulnerability on unauthorized access | 9.8NVD v3.1 | 86.3% | 2021-12-27 | NucleiExploit codeFix |
| CVE-2021-43858 | User privilege escalation in MinIO | 8.8CNA v3.1 | 35.5% | 2021-12-27 | Exploit codeFix |
| CVE-2021-43857 | Gerapy may contain remote code execution | 9.8CNA v3.1 | 55.3% | 2021-12-27 | Exploit codeFix |
| CVE-2021-43856 | Stored XSS in non-image uploads in Requarks/wiki | 8.2CNA v3.1 | 0.9% | 2021-12-27 | Fix |
| CVE-2021-43855 | Stored XSS via SVG in Requarks/wiki | 8.2CNA v3.1 | 0.9% | 2021-12-27 | Fix |
| CVE-2021-43845 | Teluu PJSIP RTCP XR handling out-of-bounds read | 8.2CNA v3.1 | 3.6% | 2021-12-27 | Fix |
| CVE-2021-43552 | Philips Patient Information Center iX and Efficia CM Series use of hard-coded cryptographic key | 5.5v3.1 | 0.2% | 2021-12-27 | Fix |
| CVE-2021-43550 | Philips Patient Information Center iX and Efficia CM Series weak cryptographic algorithm | 6.5v3.1 | 0.2% | 2021-12-27 | Fix |
| CVE-2021-43548 | Philips Patient Information Center iX (PIC iX) and Efficia CM Series improper input validation | 6.5v3.1 | 0.4% | 2021-12-27 | Fix |
| CVE-2021-38961 | IBM OPENBMC cross-site scripting | 6.1CNA v3.0 | 0.6% | 2021-12-27 | Fix |
| CVE-2021-35232 | SolarWinds Web Help Desk hard-coded credentials | 6.8CNA v3.1 | 0.3% | 2021-12-27 | Emerging ThreatsFix |
| CVE-2021-33017 | Philips IntelliBridge EC 40 and EC 80 Hub authentication bypass using an alternate path or channel | 8.8v3.1 | 0.5% | 2021-12-27 | Fix |
| CVE-2021-32993 | Philips IntelliBridge EC 40 and EC 80 Hub use of hard-coded credentials | 8.8v3.1 | 0.3% | 2021-12-27 | Fix |
| CVE-2021-24998 | Simple JWT Login WordPress plugin insecure password creation | 7.5NVD v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-24997 | WP Guppy WordPress plugin sensitive information disclosure | 6.5NVD v3.1 | 2.8% | 2021-12-27 | NucleiFix |
| CVE-2021-24992 | Buttonizer - Smart Floating Action Button WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-27 | Fix |
| CVE-2021-24988 | WP RSS Aggregator WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.3% | 2021-12-27 | Fix |
| CVE-2021-24984 | WPFront User Role Editor WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-27 | Fix |
| CVE-2021-24980 | Gwolle Guestbook WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-27 | Fix |
| CVE-2021-24979 | Paid Memberships Pro WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.9% | 2021-12-27 | NucleiFix |
| CVE-2021-24969 | Download Manager WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-12-27 | Fix |
| CVE-2021-24967 | themehunk Contact Form and Lead Form Elementor Builder stored cross-site scripting | 6.1NVD v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-24902 | Typebot WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-27 | Fix |
| CVE-2021-24797 | Tickera WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.2% | 2021-12-27 | Fix |
| CVE-2021-24753 | Rich Reviews by Starfish WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.5% | 2021-12-27 | Fix |
| CVE-2021-23244 | OPPO ColorOS permission whitelist vulnerability | 7.8v3.1 | 0.6% | 2021-12-27 | Fix |
| CVE-2021-21751 | ZTE ZXIN10 CMS large screen page configuration vulnerability | 8.1v3.1 | 0.8% | 2021-12-27 | Fix |
| CVE-2021-21750 | ZXIN10 CMS improper privilege management | 7.8v3.1 | 0.3% | 2021-12-27 | Fix |
| CVE-2021-4173 | vim/vim use-after-free | 7.8v3.1 | 1.6% | 2021-12-27 | Fix |
| CVE-2021-4161 | ICSA-21-357-01 Moxa MGate Protocol Gateways | 7.5NVD v3.1 | 0.7% | 2021-12-27 | |
| CVE-2021-45720 | Lru use-after-free | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45719 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45718 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45717 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45716 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45715 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45714 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45713 | Incorrect Lifetime Bounds on Closures in `Rusqlite` | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45712 | Path traversal in Rust-embed | 7.5v3.1 | 1.6% | 2021-12-26 | Fix |
| CVE-2021-45679 | NETGEAR R6900P privilege escalation | 7.2v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45678 | NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. | 9.8v3.1 | 1.3% | 2021-12-26 | Fix |
| CVE-2021-45677 | NETGEAR GS110TP cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45676 | NETGEAR RAX200 cross-site scripting | 4.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45675 | NETGEAR R6700V2 cross-site scripting | 4.8v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45674 | NETGEAR RAX200 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45673 | NETGEAR R6900P cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45672 | NETGEAR R6700V2 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45671 | NETGEAR EX7500 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45670 | NETGEAR EX3700 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45669 | NETGEAR RAX200 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45668 | NETGEAR EX3700 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45667 | NETGEAR EX3700 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45666 | NETGEAR EX3700 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45665 | NETGEAR EX3700 cross-site scripting | 4.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45664 | NETGEAR R7000 cross-site scripting | 4.8v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45663 | NETGEAR R7000 cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45662 | NETGEAR R7000 cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45661 | NETGEAR RBS50Y injection | 7.8v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45660 | NETGEAR RBS50Y injection | 7.8v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45659 | NETGEAR RBS50Y injection | 7.8v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45658 | NETGEAR EX6100V2 injection | 9.8v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45657 | NETGEAR R6700V2 injection | 7.8v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45656 | NETGEAR AC2100 injection | 7.8v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45655 | NETGEAR R6400 injection | 6.8v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45654 | NETGEAR XR1000 information disclosure | 7.5NVD v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45653 | NETGEAR RBK352 information disclosure | 7.5v3.1 | 1.4% | 2021-12-26 | Fix |
| CVE-2021-45652 | NETGEAR RBK352 information disclosure | 7.5NVD v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45651 | NETGEAR RBK50 information disclosure | 7.5v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45650 | NETGEAR R6400v2 information disclosure | 7.5NVD v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45649 | NETGEAR R6400v2 information disclosure | 5.5NVD v3.1 | 0.3% | 2021-12-26 | Fix |
| CVE-2021-45648 | NETGEAR EX6100V2 information disclosure | 7.5v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45647 | NETGEAR R6700V2 information disclosure | 7.5v3.1 | 1.3% | 2021-12-26 | Fix |
| CVE-2021-45646 | NETGEAR R7000 information disclosure | 7.5v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45645 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122. | 9.8v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45644 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 befo | 9.8v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45643 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, and XR1000 before 1.0.0.58. | 6.5NVD v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45642 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before | 7.2v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45641 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1 | 8.8v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45640 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1 | 7.2v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45639 | NETGEAR EX3700 cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45638 | NETGEAR D7000V2 out-of-bounds write | 9.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45637 | NETGEAR R6700V2 out-of-bounds write | 9.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45636 | NETGEAR D7000 out-of-bounds write | 8.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45635 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45634 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45633 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45632 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45631 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45630 | NETGEAR CBR750 command injection | 9.8v3.1 | 1.7% | 2021-12-26 | Fix |
| CVE-2021-45629 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45628 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45627 | NETGEAR CBR750 command injection | 9.8v3.1 | 1.7% | 2021-12-26 | Fix |
| CVE-2021-45626 | NETGEAR RBS50Y command injection | 8.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45625 | NETGEAR R6900P command injection | 9.8v3.1 | 1.7% | 2021-12-26 | Fix |
| CVE-2021-45624 | NETGEAR D7000V2 command injection | 9.8v3.1 | 1.7% | 2021-12-26 | Fix |
| CVE-2021-45623 | NETGEAR R7800 command injection | 9.8v3.1 | 1.7% | 2021-12-26 | Fix |
| CVE-2021-45622 | NETGEAR R6400v2 command injection | 9.8v3.1 | 2.4% | 2021-12-26 | |
| CVE-2021-45621 | NETGEAR R6300V2 command injection | 9.8v3.1 | 2.0% | 2021-12-26 | Fix |
| CVE-2021-45620 | NETGEAR R6400v2 command injection | 9.8v3.1 | 2.0% | 2021-12-26 | Fix |
| CVE-2021-45619 | NETGEAR EX6100V2 command injection | 9.8v3.1 | 2.5% | 2021-12-26 | Fix |
| CVE-2021-45618 | NETGEAR EX6100V2 command injection | 9.8v3.1 | 2.0% | 2021-12-26 | Fix |
| CVE-2021-45617 | NETGEAR R6400v2 command injection | 9.8v3.1 | 2.1% | 2021-12-26 | Fix |
| CVE-2021-45616 | NETGEAR RAX35v2 command injection | 9.8v3.1 | 2.0% | 2021-12-26 | Fix |
| CVE-2021-45615 | NETGEAR CBR750 command injection | 8.8NVD v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45614 | NETGEAR D7000V2 command injection | 9.8v3.1 | 2.0% | 2021-12-26 | Fix |
| CVE-2021-45613 | NETGEAR D7000V2 command injection | 9.8v3.1 | 2.0% | 2021-12-26 | Fix |
| CVE-2021-45612 | NETGEAR R6400v2 command injection | 9.8v3.1 | 2.5% | 2021-12-26 | Fix |
| CVE-2021-45611 | NETGEAR WNDR3400V3 buffer overflow | 9.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45610 | NETGEAR DGN2200v4 buffer overflow | 9.8v3.1 | 1.4% | 2021-12-26 | Fix |
| CVE-2021-45609 | NETGEAR R7100LG buffer overflow | 9.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45608 | NETGEAR R6400v2 integer overflow | 9.8v3.1 | 2.5% | 2021-12-26 | Fix |
| CVE-2021-45607 | NETGEAR R6400v2 out-of-bounds write | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45606 | NETGEAR R6400v2 out-of-bounds write | 8.8v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45605 | NETGEAR R6900P out-of-bounds write | 8.8v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45604 | NETGEAR CBR750 out-of-bounds write | 4.5v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45603 | NETGEAR WN3000RPV2 information disclosure | 5.5v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45602 | NETGEAR WN3000RPV2 OS command injection | 7.8v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45601 | NETGEAR CBR750 command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45600 | NETGEAR CBR750 command injection | 7.2v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45599 | NETGEAR CBR750 command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45598 | NETGEAR CBR750 command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45597 | NETGEAR CBR750 command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45596 | NETGEAR CBR750 command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45595 | NETGEAR RBS50Y command injection | 8.8v3.1 | 1.6% | 2021-12-26 | Fix |
| CVE-2021-45594 | NETGEAR RBS50Y command injection | 6.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45593 | NETGEAR RBK20 command injection | 6.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45592 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45591 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45590 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45589 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45588 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45587 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45586 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45585 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45584 | NETGEAR RBK752 command injection | 8.4v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45583 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45582 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45581 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45580 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45579 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45578 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45577 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45576 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45575 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45574 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45573 | NETGEAR AC2100 out-of-bounds write | 8.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45572 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45571 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45570 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45569 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45568 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45567 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45566 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45565 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45564 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45563 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45562 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45561 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45560 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45559 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45558 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45557 | NETGEAR GS728TPPV2 command injection | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45556 | NETGEAR GS728TPPV2 command injection | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45555 | NETGEAR R7900P command injection | 6.8NVD v3.1 | 1.8% | 2021-12-26 | Fix |
| CVE-2021-45554 | NETGEAR R6400v2 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45553 | NETGEAR R6900P command injection | 8.8v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45552 | NETGEAR R7500V2 command injection | 7.2v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45551 | NETGEAR R6700V2 command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45550 | NETGEAR DGN2200B command injection | 6.8v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45549 | NETGEAR R6900P command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45548 | NETGEAR WN3000RPV2 command injection | 8.8v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45547 | NETGEAR R7900P command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45546 | NETGEAR R7900P command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45545 | NETGEAR R7900P command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45544 | NETGEAR R7900P command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45543 | NETGEAR R7900P command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45542 | NETGEAR RAX200 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45541 | NETGEAR R7900P command injection | 8.8v3.1 | 1.5% | 2021-12-26 | Fix |
| CVE-2021-45540 | NETGEAR R7900P command injection | 8.4v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45539 | NETGEAR R7900P command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45538 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45537 | NETGEAR RAX200 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45536 | NETGEAR RBK752 command injection | 6.8NVD v3.1 | 0.7% | 2021-12-26 | Fix |
| CVE-2021-45535 | NETGEAR RAX200 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45534 | NETGEAR R6700V2 command injection | 7.8v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45533 | NETGEAR EX3700 command injection | 6.8NVD v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45532 | NETGEAR R8000 command injection | 7.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45531 | NETGEAR D6220 command injection | 8.8v3.1 | 1.3% | 2021-12-26 | Fix |
| CVE-2021-45530 | NETGEAR R7960P buffer overflow | 8.8v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45529 | NETGEAR WNR3500LV2 buffer overflow | 7.2v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45528 | NETGEAR WNR3500LV2 buffer overflow | 7.2v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45527 | NETGEAR D7000V2 buffer overflow | 9.8v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45526 | NETGEAR R6300V2 buffer overflow | 8.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45525 | NETGEAR WNR3500LV2 buffer overflow | 8.8v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45524 | NETGEAR R8000 buffer overflow | 9.1v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-45523 | NETGEAR R7000 buffer overflow | 6.5v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45522 | NETGEAR XR1000 hard-coded credentials | 8.8v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-45521 | NETGEAR RBK352 hard-coded credentials | 6.5NVD v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45520 | NETGEAR RBK352 hard-coded credentials | 8.8NVD v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45519 | NETGEAR XR1000 denial of service | 6.5v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45518 | NETGEAR XR1000 denial of service | 6.5v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45517 | NETGEAR XR1000 denial of service | 6.5v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45516 | NETGEAR R6900P denial of service | 4.5v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45515 | NETGEAR RBRE960 denial of service | 6.5v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45514 | NETGEAR XR1000 command injection | 8.8NVD v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45513 | NETGEAR XR1000 command injection | 9.6v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-45512 | NETGEAR WNR3500L weak cryptographic algorithm | 9.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45511 | NETGEAR R6700V2 authentication bypass | 9.8v3.1 | 18.9% | 2021-12-26 | MetasploitExploit codeFix |
| CVE-2021-45510 | NETGEAR XR1000 authentication bypass | 8.8v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45509 | NETGEAR RBK752 authentication bypass | 9.8v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45508 | NETGEAR CBR750 authentication bypass | 9.8v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45507 | NETGEAR CBR750 authentication bypass | 9.8v3.1 | 1.4% | 2021-12-26 | Fix |
| CVE-2021-45506 | NETGEAR CBR750 authentication bypass | 8.8NVD v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45505 | NETGEAR CBR750 authentication bypass | 8.8NVD v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45504 | NETGEAR CBR750 authentication bypass | 9.8v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-45503 | NETGEAR CBR750 authentication bypass | 8.8NVD v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45502 | NETGEAR CBR750 authentication bypass | 8.8NVD v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45501 | NETGEAR R6700V2 authentication bypass | 9.8v3.1 | 1.9% | 2021-12-26 | Fix |
| CVE-2021-45500 | NETGEAR R7000P authentication bypass | 8.8NVD v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-45499 | NETGEAR R6900P authentication bypass | 8.8v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-45498 | NETGEAR R6700V2 authentication bypass | 9.8v3.1 | 1.6% | 2021-12-26 | Fix |
| CVE-2021-45497 | NETGEAR D7000 authentication bypass | 9.8v3.1 | 1.9% | 2021-12-26 | Fix |
| CVE-2021-45496 | NETGEAR D7000 authentication bypass | 9.8v3.1 | 1.7% | 2021-12-26 | Fix |
| CVE-2021-45495 | NETGEAR D7000 authentication bypass | 9.8v3.1 | 1.6% | 2021-12-26 | Fix |
| CVE-2021-45494 | NETGEAR RBK352 arbitrary file read | 4.5NVD v3.1 | 0.4% | 2021-12-26 | Fix |
| CVE-2021-45493 | NETGEAR RAX35 information disclosure | 7.5v3.1 | 0.8% | 2021-12-26 | Fix |
| CVE-2021-44598 | Attendance-Management-System cross-site scripting | 6.1v3.1 | 0.7% | 2021-12-26 | |
| CVE-2021-44078 | Unicorn Engine sandbox escape | 8.1v3.1 | 0.5% | 2021-12-26 | Fix |
| CVE-2021-41788 | MediaTek MT7603E improper input validation in wifi driver | 7.5v3.1 | 1.8% | 2021-12-26 | Fix |
| CVE-2021-37584 | MediaTek MT7603E out-of-bounds write in wifi driver | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-37583 | MediaTek MT7603E out-of-bounds write in 1905 daemon | 8.8v3.1 | 1.4% | 2021-12-26 | Fix |
| CVE-2021-37572 | MediaTek MT7603E missing authorization in 1905 daemon | 7.5v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-37571 | MediaTek MT7603E out-of-bounds write in 1905 daemon | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-37570 | MediaTek MT7603E out-of-bounds read in 1905 daemon | 7.5v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-37569 | MediaTek MT7603E out-of-bounds write in 1905 daemon | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-37568 | MediaTek MT7603E out-of-bounds write in 1905 daemon | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-37567 | MediaTek MT7603E out-of-bounds read in 1905 daemon | 7.5v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-37566 | MediaTek MT7603E out-of-bounds write in 1905 daemon | 8.8v3.1 | 1.3% | 2021-12-26 | Fix |
| CVE-2021-37565 | MediaTek MT7603E out-of-bounds read in 1905 daemon | 7.5v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-37564 | MediaTek MT7603E out-of-bounds read in 1905 daemon | 7.5v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-37563 | MediaTek MT7603E out-of-bounds write in wifi driver | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-37562 | MediaTek MT7603E out-of-bounds read in wifi driver | 7.5v3.1 | 1.1% | 2021-12-26 | Fix |
| CVE-2021-37561 | MediaTek MT7603E out-of-bounds write in wifi driver | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-37560 | MediaTek MT7603E out-of-bounds write in wifi driver | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-35055 | MediaTek MT7603E out-of-bounds write in wifi driver | 8.8v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-32469 | MediaTek MT7603E out-of-bounds read in wifi driver | 7.5v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-32468 | MediaTek MT7603E out-of-bounds read in wifi driver | 7.5v3.1 | 1.2% | 2021-12-26 | Fix |
| CVE-2021-32467 | MediaTek MT7603E out-of-bounds read in wifi driver | 7.5v3.1 | 1.0% | 2021-12-26 | Fix |
| CVE-2021-4169 | Cross-site scripting (XSS) Reflected in livehelperchat/livehelperchat | 6.1v3.1 | 0.9% | 2021-12-26 | Fix |
| CVE-2021-4168 | Cross-site request forgery (CSRF) in star7th/ShowDoc | 8.8v3.1 | 0.6% | 2021-12-26 | Fix |
| CVE-2021-45489 | NetBSD weak random number generator | 7.5v3.1 | 1.0% | 2021-12-25 | Fix |
| CVE-2021-45488 | NetBSD insufficient randomness | 7.5v3.1 | 1.0% | 2021-12-25 | Fix |
| CVE-2021-45487 | NetBSD insufficient randomness | 7.5v3.1 | 1.0% | 2021-12-25 | Fix |
| CVE-2021-45486 | Linux kernel weak cryptographic algorithm | 3.5v3.1 | 0.4% | 2021-12-25 | Fix |
| CVE-2021-45485 | Linux kernel weak cryptographic algorithm | 7.5v3.1 | 3.6% | 2021-12-25 | Exploit codeFix |
| CVE-2021-45484 | NetBSD weak random number generator | 7.5v3.1 | 1.0% | 2021-12-25 | Fix |
| CVE-2021-45483 | WebKitGTK use-after-free | 6.5v3.1 | 1.4% | 2021-12-25 | Fix |
| CVE-2021-45482 | WebKitGTK use-after-free | 6.5v3.1 | 1.4% | 2021-12-25 | Fix |
| CVE-2021-45481 | WebKitGTK memory leak | 6.5v3.1 | 1.4% | 2021-12-25 | Fix |
| CVE-2021-4166 | Out-of-bounds read in Vim/Vim | 7.1NVD v3.1 | 1.6% | 2021-12-25 | Fix |
| CVE-2021-4162 | Cross-site request forgery (CSRF) in Archivy/Archivy | 4.3v3.1 | 0.4% | 2021-12-25 | Fix |
| CVE-2021-45480 | Linux kernel memory leak | 5.5v3.1 | 0.4% | 2021-12-24 | Fix |
| CVE-2021-45474 | mediawiki cross-site scripting | 6.1v3.1 | 1.0% | 2021-12-24 | Fix |
| CVE-2021-45473 | mediawiki cross-site scripting | 6.1v3.1 | 1.2% | 2021-12-24 | Fix |
| CVE-2021-45472 | mediawiki cross-site scripting | 6.1v3.1 | 1.0% | 2021-12-24 | Fix |
| CVE-2021-45471 | MediaWiki EntitySchema extension vulnerability | 5.3v3.1 | 1.2% | 2021-12-24 | Fix |
| CVE-2021-23772 | github.com/kataras/iris arbitrary file write | 8.8v3.1 | 1.8% | 2021-12-24 | Fix |
| CVE-2021-23574 | js-data prototype pollution | 9.8v3.1 | 2.1% | 2021-12-24 | Fix |
| CVE-2021-23490 | parse-link-header regular expression denial of service (ReDoS) | 7.5v3.1 | 1.8% | 2021-12-24 | Fix |
| CVE-2021-20876 | Japan Total System GroupSession Free edition path traversal | 6.8v3.1 | 1.0% | 2021-12-24 | Fix |
| CVE-2021-20875 | Japan Total System GroupSession Free edition open redirect | 6.1v3.1 | 0.8% | 2021-12-24 | Fix |
| CVE-2021-20874 | Japan Total System GroupSession Free edition incorrect permission assignment | 7.5v3.1 | 1.3% | 2021-12-24 | Fix |
| CVE-2021-20827 | IDEC PLC plaintext password storage | 7.5v3.1 | 0.6% | 2021-12-24 | Fix |
| CVE-2021-20826 | IDEC PLC unprotected transport of credentials | 7.6v3.1 | 0.4% | 2021-12-24 | Fix |
| CVE-2021-4072 | Cross-site scripting (XSS) Stored in Elgg/Elgg | 5.4NVD v3.1 | 0.7% | 2021-12-24 | Fix |
| CVE-2021-3977 | Cross-site scripting (XSS) Stored in invoiceninja/invoiceninja | 5.4v3.1 | 0.6% | 2021-12-24 | Fix |
| CVE-2021-45470 | CIRCL cve-search regular expression denial of service | 7.5v3.1 | 1.9% | 2021-12-23 | |
| CVE-2021-45469 | Linux kernel out-of-bounds read | 7.8v3.1 | 0.5% | 2021-12-23 | Fix |
| CVE-2021-45463 | GEGL magick-load module vulnerability | 7.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-45462 | Open5GS improper quantity validation | 7.5v3.1 | 4.4% | 2021-12-23 | |
| CVE-2021-44600 | oretnom23 Simple Online Mens Salon Management System SQL injection | 7.5v3.1 | 1.3% | 2021-12-23 | |
| CVE-2021-44599 | Online Enrollment Management System SQL injection | 7.5v3.1 | 1.2% | 2021-12-23 | |
| CVE-2021-44548 | Apache Solr information disclosure vulnerability through DataImportHandler | 9.8v3.1 | 5.1% | 2021-12-23 | Fix |
| CVE-2021-44543 | privoxy cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-44542 | Privoxy error handling memory leak | 7.5NVD v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-44541 | Privoxy process_encrypted_request_headers function memory leak | 7.5NVD v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-44540 | Privoxy get_url_spec_param function memory leak | 7.5NVD v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-44526 | Zoho ManageEngine ServiceDesk Plus authentication bypass | 9.8v3.1 | 3.2% | 2021-12-23 | Fix |
| CVE-2021-44453 | mySCADA myPRO debug interface ping utility OS command injection | 9.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-44273 | E2BN E2GUARDIAN improper certificate validation | 7.4v3.1 | 1.0% | 2021-12-23 | Fix |
| CVE-2021-43989 | mySCADA myPRO password storage vulnerability | 7.5v3.1 | 0.7% | 2021-12-23 | Fix |
| CVE-2021-43987 | mySCADA myPRO hidden functionality | 9.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-43985 | mySCADA myPRO authentication bypass | 9.8v3.1 | 1.5% | 2021-12-23 | Fix |
| CVE-2021-43984 | mySCADA myPRO firmware update feature OS command injection | 9.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-43981 | mySCADA myPRO email notification feature OS command injection | 9.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-43854 | Inefficient regular expression complexity in nltk | 7.5CNA v3.1 | 2.6% | 2021-12-23 | Fix |
| CVE-2021-43849 | NiklasMerz cordova-plugin-fingerprint-aio DoS | 6.2CNA v3.1 | 0.3% | 2021-12-23 | Fix |
| CVE-2021-40161 | Revit out-of-bounds write | 7.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-40160 | Revit out-of-bounds read | 7.8v3.1 | 1.5% | 2021-12-23 | Fix |
| CVE-2021-38022 | Google Chrome WebAuthentication inappropriate implementation | 6.5v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-38021 | Google Chrome referrer inappropriate implementation | 6.5v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38020 | Google Chrome contacts picker insufficient policy enforcement | 4.3v3.1 | 0.7% | 2021-12-23 | Fix |
| CVE-2021-38019 | Google Chrome CORS insufficient policy enforcement | 6.5v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38018 | Google Chrome navigation inappropriate implementation | 6.5v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38017 | Google Chrome iframe sandbox insufficient policy enforcement | 8.8v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38016 | Google Chrome background fetch insufficient policy enforcement | 8.8v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38015 | Google Chrome input inappropriate implementation | 8.8v3.1 | 0.6% | 2021-12-23 | Fix |
| CVE-2021-38014 | Google Chrome Swiftshader out-of-bounds write | 8.8v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38013 | Google Chrome fingerprint recognition heap-based buffer overflow | 9.6v3.1 | 1.0% | 2021-12-23 | Fix |
| CVE-2021-38012 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-38011 | Google Chrome storage foundation use-after-free | 8.8v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38010 | Google Chrome service workers inappropriate implementation | 6.5v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-38009 | Google Chrome cache inappropriate implementation | 6.5v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-38008 | Google Chrome media use-after-free | 8.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-38007 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-38006 | Google Chrome storage foundation use-after-free | 8.8v3.1 | 1.0% | 2021-12-23 | Fix |
| CVE-2021-38005 | Google Chrome loader use-after-free | 8.8v3.1 | 1.0% | 2021-12-23 | Fix |
| CVE-2021-35243 | SolarWinds Web Help Desk HTTP PUT and delete Methods Enabled | 5.3CNA v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-30767 | Apple watchOS logic flaw | 5.5v3.1 | 0.3% | 2021-12-23 | Fix |
| CVE-2021-27007 | NetApp Virtual Desktop Service (VDS) takeover | 9.8v3.1 | 1.1% | 2021-12-23 | Fix |
| CVE-2021-27006 | NetApp StorageGRID SANtricity System Manager integration privilege escalation | 4.4v3.1 | 0.3% | 2021-12-23 | Fix |
| CVE-2021-23198 | mySCADA myPRO password parameter OS command injection | 9.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-23175 | NVIDIA GeForce Experience Software incorrect authorization | 8.2CNA v3.1 | 0.4% | 2021-12-23 | Fix |
| CVE-2021-22657 | mySCADA myPRO API password parameter OS command injection | 9.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-20318 | Artemis in EAP 7 deserialization of untrusted data | 7.2v3.1 | 1.7% | 2021-12-23 | Fix |
| CVE-2021-20050 | SonicWall SMA100 An improper access control | 7.5v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-20049 | SonicWall SMA100 response discrepancy | 7.5v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-4144 | TP-Link TL-WR802N V4(JP) OS command injection | 8.8v3.1 | 1.9% | 2021-12-23 | Fix |
| CVE-2021-4118 | Deserialization of untrusted data in pytorchlightning/pytorch-lightning | 7.8v3.1 | 1.0% | 2021-12-23 | Fix |
| CVE-2021-4079 | Google Chrome WebRTC out-of-bounds write | 8.8v3.1 | 0.8% | 2021-12-23 | Fix |
| CVE-2021-4078 | Google Chrome V8 type confusion | 8.8v3.1 | 1.0% | 2021-12-23 | Fix |
| CVE-2021-4068 | Google Chrome new tab page improper input validation | 6.5v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-4067 | Google Chrome window manager use-after-free | 8.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-4066 | Google Chrome ANGLE integer underflow | 8.8v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-4065 | Google Chrome autofill use-after-free | 8.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-4064 | Google Chrome screen capture use-after-free | 8.8v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-4063 | Google Chrome developer tools use-after-free | 8.8v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-4062 | Google Chrome BFCache heap-based buffer overflow | 8.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-4061 | Google Chrome V8 type confusion | 8.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-4059 | Google Chrome loader improper input validation | 6.5v3.1 | 1.3% | 2021-12-23 | Fix |
| CVE-2021-4058 | Google Chrome ANGLE heap-based buffer overflow | 8.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-4057 | Google Chrome file API use-after-free | 8.8v3.1 | 2.1% | 2021-12-23 | Fix |
| CVE-2021-4056 | Google Chrome loader type confusion | 8.8v3.1 | 1.4% | 2021-12-23 | Fix |
| CVE-2021-4055 | Google Chrome extensions heap-based buffer overflow | 8.8v3.1 | 1.1% | 2021-12-23 | Fix |
| CVE-2021-4054 | Google Chrome autofill incorrect security UI | 6.5v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-4053 | Google Chrome UI use-after-free | 8.8v3.1 | 1.2% | 2021-12-23 | Fix |
| CVE-2021-4052 | Google Chrome web apps use-after-free | 8.8v3.1 | 0.9% | 2021-12-23 | Fix |
| CVE-2021-4024 | Exposure of sensitive information to an unauthorized actor and origin validation error in podman | 6.5v3.1 | 1.1% | 2021-12-23 | Fix |
| CVE-2021-3622 | hivex stack-based buffer overflow | 4.3NVD v3.1 | 4.8% | 2021-12-23 | Fix |
| CVE-2021-3621 | SSSD command injection | 8.8v3.1 | 2.5% | 2021-12-23 | Fix |
| CVE-2021-3584 | foreman OS command injection | 7.2v3.1 | 3.9% | 2021-12-23 | Fix |
| CVE-2021-45461 | Sangoma restapps arbitrary code execution | 9.8v3.1 | 21.7% | 2021-12-22 | Fix |
| CVE-2021-45459 | Command injection in Node-windows | 9.8v3.1 | 4.1% | 2021-12-22 | Fix |
| CVE-2021-45419 | Starcharge Titan 180 Premium insufficient verification of data authenticity | 8.8v3.1 | 0.5% | 2021-12-22 | |
| CVE-2021-45418 | Starcharge Titan 180 Premium path traversal | 8.8v3.1 | 1.8% | 2021-12-22 | |
| CVE-2021-45267 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-22 | Fix |
| CVE-2021-45266 | gpac null pointer dereference | 7.5v3.1 | 1.1% | 2021-12-22 | Fix |
| CVE-2021-45263 | GPAC SVG attribute value deletion use-after-free | 5.5v3.1 | 0.6% | 2021-12-22 | Fix |
| CVE-2021-45262 | gpac use-after-free | 5.5v3.1 | 0.6% | 2021-12-22 | Fix |
| CVE-2021-45261 | GNU patch release of an invalid pointer | 5.5v3.1 | 0.7% | 2021-12-22 | Fix |
| CVE-2021-45260 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-22 | Fix |
| CVE-2021-45259 | gpac null pointer dereference | 5.5v3.1 | 0.7% | 2021-12-22 | Fix |
| CVE-2021-45258 | gpac stack-based buffer overflow | 5.5v3.1 | 0.6% | 2021-12-22 | Fix |
| CVE-2021-45257 | NASM Netwide Assembler An infinite loop | 5.5v3.1 | 0.7% | 2021-12-22 | |
| CVE-2021-45256 | NASM Netwide Assembler null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-22 | |
| CVE-2021-44733 | Linux kernel use-after-free | 7.0v3.1 | 0.7% | 2021-12-22 | Exploit codeFix |
| CVE-2021-44659 | Thoughtworks gocd server-side request forgery | 9.8v3.1 | 2.5% | 2021-12-22 | |
| CVE-2021-44544 | Delta Electronics DIAEnergie HandlerEnergyType.ashx cross-site scripting | 6.1NVD v3.1 | 9.5% | 2021-12-22 | Fix |
| CVE-2021-44471 | Delta Electronics DIAEnergie DIAE_HandlerAlarmGroup.ashx stored cross-site scripting | 6.1NVD v3.1 | 0.7% | 2021-12-22 | Fix |
| CVE-2021-44031 | Quest Kace Desktop Authority unrestricted file upload | 9.8v3.1 | 2.1% | 2021-12-22 | Fix |
| CVE-2021-44030 | Quest Kace Desktop Authority cross-site scripting | 6.1v3.1 | 4.2% | 2021-12-22 | Fix |
| CVE-2021-44029 | Quest Kace Desktop Authority deserialization of untrusted data | 9.8v3.1 | 0.9% | 2021-12-22 | Fix |
| CVE-2021-44028 | Quest Kace Desktop Authority XML external entity injection | 5.5v3.1 | 3.0% | 2021-12-22 | Fix |
| CVE-2021-43853 | michaelschwarz Ajax.NET-Professional cross-site scripting in AjaxNetProfessional | 8.7CNA v3.1 | 0.8% | 2021-12-22 | Fix |
| CVE-2021-43851 | SQL injection vulnerability in anuko timetracker | 8.1CNA v3.1 | 1.2% | 2021-12-22 | Fix |
| CVE-2021-43804 | Out-of-bounds read when parsing RTCP BYE message in PJSIP | 7.3CNA v3.1 | 2.1% | 2021-12-22 | Fix |
| CVE-2021-43631 | Projectworlds hospital-management-system-in-php SQL injection | 9.8v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-43630 | Projectworlds hospital-management-system-in-php SQL injection | 8.8v3.1 | 2.0% | 2021-12-22 | |
| CVE-2021-43629 | Projectworlds hospital-management-system-in-php SQL injection | 9.8v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-43628 | Projectworlds hospital-management-system-in-php SQL injection | 9.8v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-43158 | Projectworlds Online Shopping System cross-site request forgery | 4.3v3.1 | 0.5% | 2021-12-22 | |
| CVE-2021-43157 | Projectworlds Online Shopping System SQL injection | 9.8v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-43156 | Projectworlds Online Book Store Project In PHP cross-site request forgery | 6.5v3.1 | 0.5% | 2021-12-22 | |
| CVE-2021-43155 | Projectworlds Online Book Store Project In PHP SQL injection | 9.8v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-40836 | F-Secure Atlant Outlook PST file scanning denial of service | 5.5v3.1 | 0.5% | 2021-12-22 | |
| CVE-2021-40612 | Opmantek Open-audit command execution | 9.8v3.1 | 2.0% | 2021-12-22 | Fix |
| CVE-2021-40418 | Blackmagic Design uninitialized variable use | 9.8v3.1 | 17.9% | 2021-12-22 | |
| CVE-2021-40417 | Blackmagic Design integer overflow to buffer overflow | 9.8v3.1 | 15.7% | 2021-12-22 | |
| CVE-2021-40394 | Gerbv out-of-bounds write | 9.8v3.1 | 2.9% | 2021-12-22 | Fix |
| CVE-2021-40393 | Gerbv out-of-bounds write | 9.8v3.1 | 3.1% | 2021-12-22 | Fix |
| CVE-2021-39306 | Realtek RTL8195AM out-of-bounds write | 9.8v3.1 | 1.3% | 2021-12-22 | Fix |
| CVE-2021-39013 | IBM Cloud Pak for Security information disclosure | 4.3CNA v3.0 | 0.8% | 2021-12-22 | Fix |
| CVE-2021-37706 | Potential integer underflow upon receiving STUN message in PJSIP | 7.3CNA v3.1 | 4.6% | 2021-12-22 | Fix |
| CVE-2021-36886 | Contact Form 7 Database Addon CFDB7 WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.5% | 2021-12-22 | Fix |
| CVE-2021-36885 | Contact Form 7 Database Addon CFDB7 WordPress plugin unauthenticated stored cross-site scripting | 6.1v3.1 | 0.8% | 2021-12-22 | Fix |
| CVE-2021-36750 | Zendesk Enc Datavault missing brute-force protection | 8.1v3.1 | 13.5% | 2021-12-22 | Exploit codeFix |
| CVE-2021-31558 | Delta Electronics DIAEnergie DIAE_hierarchyHandler.ashx stored cross-site scripting | 6.1v3.1 | 10.6% | 2021-12-22 | Fix |
| CVE-2021-23228 | Delta Electronics DIAEnergie error pages reflected cross-site scripting | 6.1NVD v3.1 | 0.6% | 2021-12-22 | Fix |
| CVE-2021-21953 | Anker authentication bypass | 8.1v3.1 | 1.0% | 2021-12-22 | |
| CVE-2021-21952 | Anker authentication bypass | 9.8v3.1 | 1.3% | 2021-12-22 | |
| CVE-2021-21937 | Advantech SQL injection | 6.5NVD v3.1 | 1.2% | 2021-12-22 | |
| CVE-2021-21936 | Advantech SQL injection | 8.8v3.1 | 1.4% | 2021-12-22 | |
| CVE-2021-21935 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21934 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21933 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21932 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21931 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21930 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21929 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21928 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21927 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21926 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21925 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21924 | Advantech SQL injection | 6.5NVD v3.1 | 20.2% | 2021-12-22 | |
| CVE-2021-21923 | Advantech SQL injection | 4.9NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21922 | Advantech SQL injection | 6.5NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21921 | Advantech SQL injection | 4.9NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21920 | Advantech SQL injection | 4.9NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21919 | Advantech SQL injection | 4.9NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21918 | Advantech SQL injection | 4.9NVD v3.1 | 1.1% | 2021-12-22 | |
| CVE-2021-21917 | Advantech ‘group_list’ page of the SQL injection | 8.8v3.1 | 1.4% | 2021-12-22 | |
| CVE-2021-21916 | Advantech ‘group_list’ page of the SQL injection | 8.8v3.1 | 1.4% | 2021-12-22 | Fix |
| CVE-2021-21915 | Advantech ‘group_list’ page of the SQL injection | 8.8v3.1 | 1.4% | 2021-12-22 | Fix |
| CVE-2021-21912 | Advantech Windows version of installation privilege escalation | 7.8v3.1 | 0.4% | 2021-12-22 | |
| CVE-2021-21911 | Advantech Windows version of installation privilege escalation | 7.8v3.1 | 0.3% | 2021-12-22 | |
| CVE-2021-21910 | Advantech Windows version of installation privilege escalation | 7.8v3.1 | 0.3% | 2021-12-22 | |
| CVE-2021-21909 | Garrett Metal Detectors path traversal | 8.1v3.1 | 1.0% | 2021-12-22 | |
| CVE-2021-21908 | Garrett Metal Detectors path traversal | 6.5v3.1 | 1.4% | 2021-12-22 | |
| CVE-2021-21907 | Garrett Metal Detectors CMA CLI getenv command functionality path traversal | 4.9v3.1 | 1.4% | 2021-12-22 | |
| CVE-2021-21906 | Garrett Metal Detectors how the CMA readfile function stack-based buffer overflow | 7.2v3.1 | 1.0% | 2021-12-22 | |
| CVE-2021-21905 | Garrett Metal Detectors how the CMA readfile function stack-based buffer overflow | 7.2v3.1 | 1.0% | 2021-12-22 | |
| CVE-2021-21904 | Garrett Metal Detectors CMA CLI setenv command path traversal | 7.2NVD v3.1 | 2.8% | 2021-12-22 | |
| CVE-2021-21903 | Garrett Metal Detectors CMA check_udp_crc function stack-based buffer overflow | 9.8v3.1 | 1.7% | 2021-12-22 | |
| CVE-2021-21902 | Garrett Metal Detectors CMA run_server_6877 functionality authentication bypass | 8.1v3.1 | 1.7% | 2021-12-22 | |
| CVE-2021-21901 | Garrett Metal Detectors CMA check_udp_crc function stack-based buffer overflow | 8.8NVD v3.1 | 1.6% | 2021-12-22 | |
| CVE-2021-21896 | Lantronix Web Manager FsBrowseClean functionality path traversal | 6.5v3.1 | 2.2% | 2021-12-22 | |
| CVE-2021-21895 | Lantronix Web Manager FsTFtp functionality path traversal | 7.2NVD v3.1 | 2.3% | 2021-12-22 | |
| CVE-2021-21894 | Lantronix Web Manager FsTFtp functionality path traversal | 9.1v3.1 | 2.4% | 2021-12-22 | |
| CVE-2021-21892 | Lantronix Web Manager FsUnmount functionality stack-based buffer overflow | 9.9v3.1 | 30.4% | 2021-12-22 | |
| CVE-2021-21891 | Lantronix Web Manager FsBrowseClean functionality stack-based buffer overflow | 9.1v3.1 | 3.0% | 2021-12-22 | |
| CVE-2021-21890 | Lantronix Web Manager FsBrowseClean functionality stack-based buffer overflow | 9.1v3.1 | 3.0% | 2021-12-22 | |
| CVE-2021-21889 | Lantronix Web Manager Ping functionality stack-based buffer overflow | 9.9v3.1 | 2.8% | 2021-12-22 | |
| CVE-2021-21888 | Lantronix OS command injection | 9.1v3.1 | 3.9% | 2021-12-22 | |
| CVE-2021-21887 | Lantronix Web Manager SslGenerateCSR functionality stack-based buffer overflow | 9.1v3.1 | 3.0% | 2021-12-22 | |
| CVE-2021-21886 | Lantronix Web Manager FSBrowsePage functionality path traversal | 4.3v3.1 | 1.9% | 2021-12-22 | |
| CVE-2021-21885 | Lantronix Web Manager FsMove functionality path traversal | 7.2v3.1 | 2.4% | 2021-12-22 | |
| CVE-2021-21884 | Lantronix Web Manager SslGenerateCSR functionality OS command injection | 9.1v3.1 | 5.3% | 2021-12-22 | |
| CVE-2021-21883 | Lantronix Web Manager Diagnostics: Ping functionality OS command injection | 9.9v3.1 | 6.1% | 2021-12-22 | |
| CVE-2021-21882 | Lantronix Web Manager FsUnmount functionality OS command injection | 8.8NVD v3.1 | 6.1% | 2021-12-22 | |
| CVE-2021-21881 | Lantronix OS command injection | 9.9v3.1 | 37.1% | 2021-12-22 | Nuclei |
| CVE-2021-21880 | Lantronix Web Manager FsCopyFile functionality path traversal | 7.2v3.1 | 2.4% | 2021-12-22 | |
| CVE-2021-21879 | Lantronix Web Manager file upload functionality path traversal | 8.8NVD v3.1 | 3.7% | 2021-12-22 | |
| CVE-2021-21878 | Lantronix local file inclusion | 4.9v3.1 | 1.2% | 2021-12-22 | |
| CVE-2021-21877 | Lantronix OS command injection | 9.1v3.1 | 2.7% | 2021-12-22 | |
| CVE-2021-21876 | Lantronix OS command injection | 9.1v3.1 | 2.7% | 2021-12-22 | |
| CVE-2021-21875 | Lantronix OS command injection | 9.1v3.1 | 2.9% | 2021-12-22 | |
| CVE-2021-21874 | Lantronix OS command injection | 9.1v3.1 | 2.9% | 2021-12-22 | |
| CVE-2021-21873 | Lantronix OS command injection | 9.1v3.1 | 2.9% | 2021-12-22 | |
| CVE-2021-21872 | Lantronix OS command injection | 9.9v3.1 | 6.1% | 2021-12-22 | |
| CVE-2021-45451 | Arm mbed TLS weak cryptographic algorithm | 7.5v3.1 | 0.9% | 2021-12-21 | Fix |
| CVE-2021-45450 | TrustedFirmware Mbed TLS weak cryptographic algorithm | 7.5v3.1 | 1.1% | 2021-12-21 | Fix |
| CVE-2021-45297 | gpac An infinite loop | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-45293 | WebAssembly Binaryen denial of service | 5.5v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-45292 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-45291 | GPAC MP4Box command use-after-free | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-45290 | WebAssembly Binaryen denial of service | 7.5v3.1 | 1.5% | 2021-12-21 | Fix |
| CVE-2021-45289 | gpac denial of service | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-45288 | gpac filedump.c double free | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-45255 | Video Sharing Website SQL injection | 9.8v3.1 | 1.5% | 2021-12-21 | |
| CVE-2021-45253 | Simple Cold Storage Management System Project Simple Cold Storage Managment System SQL injection | 9.8v3.1 | 1.2% | 2021-12-21 | |
| CVE-2021-45252 | oretnom23 Simple Forum Discussion System SQL injection | 9.8v3.1 | 1.2% | 2021-12-21 | |
| CVE-2021-45091 | Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. | 4.3v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-45090 | Stormshield Endpoint Security remote code execution | 9.8v3.1 | 2.9% | 2021-12-21 | Fix |
| CVE-2021-45089 | Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. | 5.2v3.1 | 0.3% | 2021-12-21 | Fix |
| CVE-2021-44927 | gpac null pointer dereference | 5.5v3.1 | 0.7% | 2021-12-21 | Fix |
| CVE-2021-44926 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44925 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44924 | gpac An infinite loop | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44923 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44922 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44921 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44920 | GPAC dump_od_to_saf function memory corruption | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44919 | gpac gf_sg_vrml_mf_alloc function null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44918 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-44917 | Gnuplot A divide by zero | 5.5v3.1 | 0.7% | 2021-12-21 | Fix |
| CVE-2021-44877 | Dalmark Systeam Enterprise Resource Planning missing authorization | 7.5v3.1 | 1.0% | 2021-12-21 | Fix |
| CVE-2021-44876 | Dalmark Systeam Enterprise Resource Planning observable discrepancy | 5.3v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-44875 | Dalmark Systeam Enterprise Resource Planning observable discrepancy | 5.3v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-44874 | Dalmark Systeam Enterprise Resource Planning SQL injection | 8.8v3.1 | 1.0% | 2021-12-21 | Fix |
| CVE-2021-44860 | Opendesign Drawings SDK out-of-bounds read | 7.8v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-44859 | Opendesign Drawings SDK out-of-bounds read | 7.8v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-44423 | Opendesign Drawings Explorer out-of-bounds read | 7.8v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-44422 | Opendesign Drawings SDK out-of-bounds write | 7.8v3.1 | 0.9% | 2021-12-21 | Fix |
| CVE-2021-44207 | Acclaim Systems USAHERDS use of hard-coded credentials | 8.1v3.1 | 17.6% | 2021-12-21 | KEV |
| CVE-2021-43839 | crypto-org-chain cronos Drainage of FeeCollector's Block Transaction Fees | 7.5CNA v3.1 | 1.3% | 2021-12-21 | Fix |
| CVE-2021-43587 | Dell PowerPath Management Appliance hard-coded cryptographic key | 8.2CNA v3.1 | 0.2% | 2021-12-21 | Fix |
| CVE-2021-38966 | IBM Cloud Pak for Automation cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-12-21 | Fix |
| CVE-2021-38900 | IBM Business Process Manager and Business Automation Workflow improper access control | 4.9CNA v3.0 | 1.1% | 2021-12-21 | Fix |
| CVE-2021-38893 | IBM Cloud Pak for Automation cross-site scripting | 6.4CNA v3.0 | 0.7% | 2021-12-21 | Fix |
| CVE-2021-36350 | Dell PowerScale OneFS improper authentication | 5.9CNA v3.1 | 1.1% | 2021-12-21 | Fix |
| CVE-2021-36341 | Dell Wyse Device Agent information disclosure | 5.5CNA v3.1 | 0.2% | 2021-12-21 | Fix |
| CVE-2021-36337 | Dell Wyse Management Suite inadequate encryption strength | 6.5CNA v3.1 | 0.4% | 2021-12-21 | Fix |
| CVE-2021-36336 | Dell Wyse Management Suite deserialization of untrusted data | 9.8CNA v3.1 | 1.7% | 2021-12-21 | Fix |
| CVE-2021-36318 | Dell Avamar sensitive information in log files | 6.7CNA v3.1 | 0.2% | 2021-12-21 | Fix |
| CVE-2021-36317 | Dell Avamar plaintext password storage | 6.7CNA v3.1 | 0.2% | 2021-12-21 | Fix |
| CVE-2021-36316 | Dell Avamar improper privilege management | 6.7CNA v3.1 | 0.7% | 2021-12-21 | Fix |
| CVE-2021-27453 | Mesa Labs AmegaView authentication bypass | 9.8v3.1 | 1.0% | 2021-12-21 | |
| CVE-2021-27451 | Mesa Labs AmegaView improper authentication | 9.8v3.1 | 0.8% | 2021-12-21 | |
| CVE-2021-27449 | Mesa Labs AmegaView command injection | 8.8NVD v3.1 | 3.1% | 2021-12-21 | |
| CVE-2021-27447 | Mesa Labs AmegaView command injection | 9.8v3.1 | 2.3% | 2021-12-21 | |
| CVE-2021-27445 | Mesa Labs AmegaView improper privilege management | 7.8v3.1 | 0.2% | 2021-12-21 | |
| CVE-2021-24981 | Directorist Business Directory WordPress plugin CSRF to remote file upload | 7.5NVD v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-24956 | Blog2Social WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2021-12-21 | NucleiFix |
| CVE-2021-24941 | Icegram WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-24907 | Everest Forms WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-12-21 | Fix |
| CVE-2021-24849 | WCFM - WooCommerce Multivendor Marketplace WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 8.5% | 2021-12-21 | NucleiFix |
| CVE-2021-24846 | Ni WooCommerce Custom Order Status WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.3% | 2021-12-21 | Fix |
| CVE-2021-24750 | WP Visitor Statistics (Real Time Traffic) WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 38.3% | 2021-12-21 | NucleiExploit codeFix |
| CVE-2021-24739 | Logo Carousel WordPress plugin Unauthorised Private post access | 8.1NVD v3.1 | 1.0% | 2021-12-21 | Fix |
| CVE-2021-24738 | Logo Carousel WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-12-21 | Fix |
| CVE-2021-24578 | SportsPress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-21 | Fix |
| CVE-2021-4139 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 9.0v3.1 | 0.9% | 2021-12-21 | Fix |
| CVE-2021-44916 | Opmantek Open-audit cross-site scripting | 6.1v3.1 | 3.7% | 2021-12-20 | Exploit codeFix |
| CVE-2021-44858 | mediawiki incorrect default permissions | 7.5v3.1 | 1.3% | 2021-12-20 | Fix |
| CVE-2021-44790 | Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server | 9.8v3.1 | 97.1% | 2021-12-20 | Exploit codeFix |
| CVE-2021-44732 | Arm mbed TLS double free | 9.8v3.1 | 2.6% | 2021-12-20 | Fix |
| CVE-2021-44699 | Adobe Audition MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.8% | 2021-12-20 | Fix |
| CVE-2021-44698 | Adobe Audition MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.8% | 2021-12-20 | Fix |
| CVE-2021-44697 | Adobe Audition MOV File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.8% | 2021-12-20 | Fix |
| CVE-2021-44676 | Zoho ManageEngine Access Manager Plus improper authentication | 9.8v3.1 | 4.4% | 2021-12-20 | Fix |
| CVE-2021-44675 | Zoho Manageengine Servicedesk Plus Msp improper authentication | 9.8v3.1 | 6.5% | 2021-12-20 | Fix |
| CVE-2021-44554 | Cybelesoft Thinfinity Virtualui observable discrepancy | 5.3v3.1 | 1.0% | 2021-12-20 | |
| CVE-2021-44525 | Zoho ManageEngine PAM360 improper authentication | 9.8v3.1 | 3.4% | 2021-12-20 | Fix |
| CVE-2021-44263 | Gurock Testrail cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-20 | Fix |
| CVE-2021-44224 | Possible null dereference or SSRF in forward proxy configurations in Apache HTTP Server | 8.2v3.1 | 82.3% | 2021-12-20 | Fix |
| CVE-2021-44183 | Adobe Dimension TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.5% | 2021-12-20 | Fix |
| CVE-2021-44182 | Adobe Dimension SVG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.7% | 2021-12-20 | Fix |
| CVE-2021-44181 | Adobe Dimension GIF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 3.1% | 2021-12-20 | Fix |
| CVE-2021-44180 | Adobe Dimension PCX File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 3.1% | 2021-12-20 | Fix |
| CVE-2021-44179 | Adobe Dimension GIF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 3.0% | 2021-12-20 | Fix |
| CVE-2021-44164 | Chain Sea Information Integration Co., Ltd ai chatbot system arbitrary file upload | 9.8CNA v3.1 | 2.1% | 2021-12-20 | Fix |
| CVE-2021-44163 | Chain Sea Information Integration Co., Ltd ai chatbot system reflected XSS | 6.1CNA v3.1 | 0.8% | 2021-12-20 | Fix |
| CVE-2021-44162 | Chain Sea Information Integration Co., Ltd ai chatbot system path traversal | 7.5CNA v3.1 | 1.7% | 2021-12-20 | Fix |
| CVE-2021-44159 | 4MOSAn GCB Doctor unrestricted upload of file | 9.8CNA v3.1 | 3.4% | 2021-12-20 | Fix |
| CVE-2021-43847 | Authorization bypass in Space Invite in HumHub | 6.5CNA v3.1 | 1.2% | 2021-12-20 | Fix |
| CVE-2021-43846 | solidusio solidus CSRF forgery protection bypass for Spree::OrdersController#populate | 5.3CNA v3.1 | 0.6% | 2021-12-20 | Fix |
| CVE-2021-43844 | Externally controlled reference to a resource in another sphere in MSEdgeRedirect | 8.8CNA v3.1 | 3.3% | 2021-12-20 | Fix |
| CVE-2021-43843 | Insufficient patch for regular expression denial of service (ReDoS) to jsx-slack | 5.3CNA v3.1 | 1.9% | 2021-12-20 | Fix |
| CVE-2021-43842 | Stored XSS via SVG file upload in Wiki.js | 5.4CNA v3.1 | 0.7% | 2021-12-20 | Fix |
| CVE-2021-43763 | Adobe Dimension TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.7% | 2021-12-20 | Fix |
| CVE-2021-43750 | Adobe Premiere Rush null pointer dereference local denial of service | 5.5CNA v3.1 | 1.4% | 2021-12-20 | Fix |
| CVE-2021-43749 | Adobe Premiere Rush null pointer dereference local denial of service | 5.5CNA v3.1 | 1.4% | 2021-12-20 | Fix |
| CVE-2021-43748 | Adobe Premiere Rush null pointer dereference local denial of service | 5.5CNA v3.1 | 1.4% | 2021-12-20 | Fix |
| CVE-2021-43747 | Adobe Premiere Rush WAV file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43746 | Adobe Premiere Rush MP4 File Parsing uninitialized variable information disclosure | 5.5CNA v3.1 | 1.7% | 2021-12-20 | Fix |
| CVE-2021-43441 | Iorder An HTML injection | 5.3v3.1 | 1.2% | 2021-12-20 | |
| CVE-2021-43440 | Iorder Source Code stored cross-site scripting | 6.1v3.1 | 1.4% | 2021-12-20 | |
| CVE-2021-43439 | Iresturant Add Review function remote code execution | 9.8v3.1 | 3.4% | 2021-12-20 | |
| CVE-2021-43438 | Iresturant Signup form stored cross-site scripting | 5.4v3.1 | 0.7% | 2021-12-20 | |
| CVE-2021-43437 | Engineers Online Portal injection | 8.8v3.1 | 1.2% | 2021-12-20 | |
| CVE-2021-43030 | Adobe Premiere Rush MP4 File Parsing uninitialized variable information disclosure | 3.3CNA v3.0 | 1.3% | 2021-12-20 | Fix |
| CVE-2021-43029 | Adobe Premiere Rush M4A file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43028 | Adobe Premiere Rush M4A file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43026 | Adobe Premiere Rush MXF file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43025 | Adobe Premiere Rush SVG file memory corruption remote code execution | 7.8CNA v3.0 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43024 | Adobe Premiere Rush WAV file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43023 | Adobe Premiere Rush EPS/TIFF file memory corruption remote code execution | 7.8CNA v3.0 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43022 | Adobe Premiere Rush PNG file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-43021 | Adobe Premiere Rush EXR file memory corruption remote code execution | 7.8CNA v3.1 | 2.3% | 2021-12-20 | Fix |
| CVE-2021-42913 | Samsung Syncthru Web Service insufficiently protected credentials | 7.5v3.1 | 1.8% | 2021-12-20 | Exploit codeFix |
| CVE-2021-42809 | The Sentinel Protection Installer does not properly restrict loading Dynamic Link library | 6.5CNA v3.1 | 0.3% | 2021-12-20 | |
| CVE-2021-42808 | Thales Sentinel Protection Installer improper access control | 6.5CNA v3.1 | 0.2% | 2021-12-20 | |
| CVE-2021-42138 | Thales CPL Safenet Authentication Service insufficient entropy | 7.2CNA v3.1 | 0.6% | 2021-12-20 | Fix |
| CVE-2021-41561 | Apache Parquet-MR potential DoS in case of malicious Parquet file | 7.5v3.1 | 3.1% | 2021-12-20 | Fix |
| CVE-2021-40784 | Adobe Premiere Rush WAV file memory corruption remote code execution | 7.8CNA v3.0 | 2.0% | 2021-12-20 | Fix |
| CVE-2021-40783 | Adobe Premiere Rush WAV file memory corruption remote code execution | 7.8CNA v3.0 | 2.0% | 2021-12-20 | Fix |
| CVE-2021-38421 | Fuji Electric Tellus Lite V-simulator out-of-bounds read | 7.1v3.1 | 0.8% | 2021-12-20 | |
| CVE-2021-38419 | Fuji Electric Tellus Lite V-simulator out-of-bounds write | 7.8v3.1 | 0.9% | 2021-12-20 | |
| CVE-2021-38415 | Fuji Electric Tellus Lite V-simulator heap based buffer overflow | 7.8v3.1 | 1.0% | 2021-12-20 | |
| CVE-2021-38413 | Fuji Electric Tellus Lite V-simulator stack based buffer overflow | 7.8v3.1 | 1.0% | 2021-12-20 | |
| CVE-2021-38409 | Fuji Electric Tellus Lite V-simulator uninitialized pointer | 7.8v3.1 | 0.7% | 2021-12-20 | |
| CVE-2021-38401 | Fuji Electric Tellus Lite V-simulator untrusted pointer dereference | 7.8v3.1 | 0.9% | 2021-12-20 | |
| CVE-2021-36889 | tarteaucitron.js WordPress plugin cross-site scripting | 4.8v3.1 | 0.6% | 2021-12-20 | Fix |
| CVE-2021-36887 | tarteaucitron.js WordPress plugin cross-site scripting | 8.8v3.1 | 0.5% | 2021-12-20 | Fix |
| CVE-2021-35248 | SolarWinds Orion unrestricted access to Orion.UserSettings SWIS entity for low-privilege users | 6.8CNA v3.1 | 0.9% | 2021-12-20 | Fix |
| CVE-2021-35244 | Unrestricted file upload causing remote code execution: Orion Platform | 6.8CNA v3.1 | 5.8% | 2021-12-20 | Fix |
| CVE-2021-35234 | SolarWinds Orion Core Exposed Dangerous Functions Privileged Escalation | 8.0CNA v3.1 | 2.8% | 2021-12-20 | Fix |
| CVE-2021-22057 | VMware Workspace ONE Access authentication bypass | 8.8v3.1 | 1.1% | 2021-12-20 | Fix |
| CVE-2021-22056 | VMware Workspace ONE Access and Identity Manager server-side request forgery | 7.5v3.1 | 1.6% | 2021-12-20 | Fix |
| CVE-2021-3860 | JFrog Artifactory SQL injection | 8.8CNA v3.1 | 1.0% | 2021-12-20 | Fix |
| CVE-2021-45041 | salesagility SuiteCRM SQL injection | 8.8v3.1 | 2.2% | 2021-12-19 | Exploit codeFix |
| CVE-2021-43083 | Apache PLC4X buffer overflow in PLC4C via crafted server response | 8.8v3.1 | 1.9% | 2021-12-19 | Fix |
| CVE-2021-4136 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 2.0% | 2021-12-19 | Fix |
| CVE-2021-45105 | Apache Log4j2 does not always protect from infinite recursion in lookup evaluation | 5.9NVD v3.1 | 100.0% | 2021-12-18 | Emerging ThreatsSnortExploit codeFix |
| CVE-2021-4131 | Cross-site request forgery (CSRF) in livehelperchat/livehelperchat | 8.8v3.1 | 0.5% | 2021-12-18 | Fix |
| CVE-2021-4130 | Cross-site request forgery (CSRF) in snipe/Snipe-IT | 8.8v3.1 | 0.5% | 2021-12-18 | Fix |
| CVE-2021-45042 | HashiCorp Vault kernel panic | 4.9v3.1 | 1.4% | 2021-12-17 | Fix |
| CVE-2021-45038 | mediawiki information disclosure | 5.3v3.1 | 1.4% | 2021-12-17 | Fix |
| CVE-2021-44857 | mediawiki missing authorization | 6.5v3.1 | 0.9% | 2021-12-17 | Fix |
| CVE-2021-44145 | Apache NiFi information disclosure by XXE | 6.5v3.1 | 1.7% | 2021-12-17 | Fix |
| CVE-2021-44035 | Wolters Kluwer TeamMate attachment upload handling vulnerability | 7.8v3.1 | 0.5% | 2021-12-17 | |
| CVE-2021-43840 | Path traversal in message_bus | 4.4CNA v3.1 | 1.9% | 2021-12-17 | Fix |
| CVE-2021-43838 | Regular expression denial of service (ReDoS) in jsx-slack | 5.3CNA v3.1 | 1.4% | 2021-12-17 | Fix |
| CVE-2021-43678 | Wechat-php-sdk is affected by a cross-site scripting | 6.1v3.1 | 0.8% | 2021-12-17 | |
| CVE-2021-42584 | convos A stored cross-site scripting | 5.4v3.1 | 0.7% | 2021-12-17 | |
| CVE-2021-41843 | openemr calendar search function SQL injection | 6.5v3.1 | 13.7% | 2021-12-17 | |
| CVE-2021-41500 | Incorrect comparison in Cvxopt | 7.5v3.1 | 1.2% | 2021-12-17 | Fix |
| CVE-2021-41499 | Classic buffer overflow in Pyo | 7.5v3.1 | 1.4% | 2021-12-17 | Fix |
| CVE-2021-41498 | Pyo ajaxsoundstudio.com buffer overflow | 7.5v3.1 | 1.1% | 2021-12-17 | Fix |
| CVE-2021-41497 | Bounter null pointer reference | 7.5v3.1 | 1.0% | 2021-12-17 | |
| CVE-2021-41496 | Buffer copy without checking size of input in NumPy | 5.5v3.1 | 0.4% | 2021-12-17 | Fix |
| CVE-2021-41495 | NumPy null pointer dereference | 5.3v3.1 | 1.2% | 2021-12-17 | Fix |
| CVE-2021-41451 | TP-Link Archer AX10 HTTP request smuggling | 7.5v3.1 | 2.4% | 2021-12-17 | |
| CVE-2021-40853 | TCMAN GIM missing authorization | 7.2v3.1 | 0.8% | 2021-12-17 | |
| CVE-2021-40852 | TCMAN GIM open redirect | 6.1v3.1 | 0.7% | 2021-12-17 | Fix |
| CVE-2021-40851 | TCMAN GIM SQL injection | 7.5v3.1 | 1.3% | 2021-12-17 | Fix |
| CVE-2021-40850 | TCMAN GIM SQL injection | 9.8v3.1 | 0.9% | 2021-12-17 | Fix |
| CVE-2021-38883 | IBM Business Process Manager cross-site scripting | 5.4CNA v3.0 | 0.5% | 2021-12-17 | Fix |
| CVE-2021-37863 | Mattermost Server post creation denial of service | 3.5CNA v3.1 | 0.8% | 2021-12-17 | Fix |
| CVE-2021-37862 | Mattermost improper check for exceptional conditions | 3.7CNA v3.1 | 0.7% | 2021-12-17 | Fix |
| CVE-2021-36780 | Linux Foundation Longhorn unauthorized data access from replicas | 8.1CNA v3.1 | 0.5% | 2021-12-17 | Fix |
| CVE-2021-36779 | Host operations allowed in privileged Longhorn managed pods | 9.6CNA v3.1 | 0.7% | 2021-12-17 | Fix |
| CVE-2021-34141 | Incorrect comparison in NumPy | 5.3NVD v3.1 | 1.7% | 2021-12-17 | Fix |
| CVE-2021-33430 | NumPy buffer overflow (Disputed) | 5.3v3.1 | 1.1% | 2021-12-17 | Fix |
| CVE-2021-32499 | SICK SOPAS ET injection | 7.5v3.1 | 0.8% | 2021-12-17 | Fix |
| CVE-2021-32498 | SICK SOPAS ET path traversal | 8.6v3.1 | 0.9% | 2021-12-17 | Fix |
| CVE-2021-32497 | SICK SOPAS Engineering Tool SDD emulator vulnerability | 8.6v3.1 | 0.7% | 2021-12-17 | Fix |
| CVE-2021-23814 | Unrestricted upload of file with dangerous type in UniSharp/laravel-filemanager | 8.8v3.1 | 1.8% | 2021-12-17 | Fix |
| CVE-2021-23803 | latte/latte Access Control Bypass | 9.8v3.1 | 1.6% | 2021-12-17 | Fix |
| CVE-2021-23797 | http-server-node directory traversal | 9.8v3.1 | 1.7% | 2021-12-17 | Exploit code |
| CVE-2021-23450 | dojo prototype pollution | 9.8NVD v3.1 | 30.4% | 2021-12-17 | Fix |
| CVE-2021-22054 | Omnissa Workspace ONE server-side request forgery | 7.5NVD v3.1 | 99.7% | 2021-12-17 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-20608 | Mitsubishi Electric GX Works2 improper length parameter handling | 7.5v3.1 | 2.7% | 2021-12-17 | Fix |
| CVE-2021-20607 | Mitsubishi Electric GX Works2 integer underflow | 5.5v3.1 | 0.9% | 2021-12-17 | Fix |
| CVE-2021-20606 | Mitsubishi Electric GX Works2 out-of-bounds read | 5.5v3.1 | 0.9% | 2021-12-17 | Fix |
| CVE-2021-4132 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4NVD v3.1 | 0.6% | 2021-12-17 | Fix |
| CVE-2021-4011 | xorg-x11-server out-of-bounds access | 7.8NVD v3.1 | 0.6% | 2021-12-17 | Fix |
| CVE-2021-4010 | xorg-x11-server out-of-bounds access | 7.8NVD v3.1 | 0.6% | 2021-12-17 | Fix |
| CVE-2021-4009 | xorg-x11-server out-of-bounds access | 7.8NVD v3.1 | 0.6% | 2021-12-17 | Fix |
| CVE-2021-4008 | xorg-x11-server out-of-bounds access | 7.8NVD v3.1 | 0.6% | 2021-12-17 | Fix |
| CVE-2021-0903 | MT6873 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0902 | MT6873 improper input validation in apusys | 4.4NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0901 | MT6873 integer overflow or wraparound in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0900 | MT6873 improper input validation in apusys | 4.4NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0899 | MT6873 use-after-free in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0898 | MT6873 use-after-free in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0897 | MT6873 time-of-check time-of-use (toctou) race condition in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0896 | MT6873 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0895 | MT6873 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0894 | MT6873 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0893 | MT6873 use-after-free in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0679 | MT6873 improper check or handling of exceptional conditions in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0678 | MT6873 improper restriction of operations within the bounds of a memory buffer in apusys | 6.7NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0677 | MT6833 integer overflow or wraparound in ccu driver | 4.4NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0676 | MT6762 exposure of sensitive information to an unauthorized actor in geniezone driver | 4.4NVD v3.1 | 0.1% | 2021-12-17 | Fix |
| CVE-2021-0674 | MT6570 improper input validation in alac decoder | 5.5NVD v3.1 | 0.5% | 2021-12-17 | Fix |
| CVE-2021-0673 | MT6779 improper input validation in Audio Aurisys HAL | 7.8NVD v3.1 | 0.7% | 2021-12-17 | Fix |
| CVE-2021-45102 | wisc HTCondor incorrect authorization | 8.8v3.1 | 0.9% | 2021-12-16 | Fix |
| CVE-2021-45101 | HTCondor SchedD and Collector daemons information disclosure | 8.1v3.1 | 0.9% | 2021-12-16 | Fix |
| CVE-2021-45100 | Linux kernel cleartext transmission of sensitive information | 7.5v3.1 | 0.9% | 2021-12-16 | Fix |
| CVE-2021-45099 | The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against co | 8.8v3.1 | 1.3% | 2021-12-16 | Fix |
| CVE-2021-45098 | An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. T | 7.5v3.1 | 1.8% | 2021-12-16 | Fix |
| CVE-2021-45097 | KNIME Server insufficiently protected credentials | 5.5v3.1 | 0.2% | 2021-12-16 | |
| CVE-2021-45096 | KNIME Analytics Platform XML external entity injection | 4.3v3.1 | 1.1% | 2021-12-16 | Fix |
| CVE-2021-45095 | Linux kernel resource leak | 5.5v3.1 | 0.3% | 2021-12-16 | Fix |
| CVE-2021-45092 | Cybelesoft Thinfinity Virtualui injection | 9.8v3.1 | 40.0% | 2021-12-16 | NucleiExploit code |
| CVE-2021-45088 | GNOME Epiphany cross-site scripting | 6.1v3.1 | 1.4% | 2021-12-16 | Fix |
| CVE-2021-45087 | GNOME Epiphany cross-site scripting | 6.1v3.1 | 1.5% | 2021-12-16 | Fix |
| CVE-2021-45086 | GNOME Epiphany cross-site scripting | 6.1v3.1 | 1.3% | 2021-12-16 | Fix |
| CVE-2021-45085 | GNOME Epiphany cross-site scripting | 6.1v3.1 | 1.5% | 2021-12-16 | Fix |
| CVE-2021-44317 | PHPGurukul Bus Pass Management System cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-16 | |
| CVE-2021-44315 | PHPGurukul Bus Pass Management System files accessible to external parties | 7.5v3.1 | 1.7% | 2021-12-16 | |
| CVE-2021-44023 | Trend Micro Security (Consumer) A link following | 7.1v3.1 | 0.4% | 2021-12-16 | Fix |
| CVE-2021-43837 | Template injection in vault-cli | 8.4CNA v3.1 | 5.0% | 2021-12-16 | Fix |
| CVE-2021-43834 | eLabFTW single sign-on authentication authentication bypass | 9.1CNA v3.1 | 1.0% | 2021-12-16 | Fix |
| CVE-2021-43833 | Account takeover in eLabFTW | 8.1CNA v3.1 | 0.8% | 2021-12-16 | Fix |
| CVE-2021-43812 | Open redirect in nextjs-auth0 | 6.4CNA v3.1 | 0.7% | 2021-12-16 | Fix |
| CVE-2021-42912 | FiberHome An5506-04-f OS command injection | 8.8v3.1 | 10.9% | 2021-12-16 | |
| CVE-2021-42550 | QOS.ch logback RCE from attacker with configuration edit priviledges through JNDI lookup | 6.6v3.1 | 4.4% | 2021-12-16 | Fix |
| CVE-2021-41962 | Vehicle Service Management System Sourcecodester cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-16 | |
| CVE-2021-41262 | SQL injection in Galette | 8.8CNA v3.1 | 1.1% | 2021-12-16 | Fix |
| CVE-2021-41261 | Stored cross-site scripting in Galette | 8.1CNA v3.1 | 0.6% | 2021-12-16 | Fix |
| CVE-2021-41260 | Missing CSRF checks in Galette | 8.2CNA v3.1 | 0.4% | 2021-12-16 | Fix |
| CVE-2021-41028 | Fortinet FortiClientEMS improper certificate validation | 8.2CNA v3.1 | 0.2% | 2021-12-16 | Fix |
| CVE-2021-40835 | URL address bar spoofing in F-Secure SAFE Browser for iOS | 4.3v3.1 | 0.7% | 2021-12-16 | Fix |
| CVE-2021-38244 | cbioportal regular expression denial of service | 7.5v3.1 | 1.2% | 2021-12-16 | |
| CVE-2021-37262 | jflyfox jfinal_cms injection | 7.5v3.1 | 1.0% | 2021-12-16 | |
| CVE-2021-26800 | User Management System In PHP Stored Procedure cross-site request forgery | 6.5v3.1 | 0.4% | 2021-12-16 | |
| CVE-2021-4124 | Cross-site scripting (XSS) Stored in meetecho/janus-gateway | 6.1NVD v3.1 | 0.9% | 2021-12-16 | Fix |
| CVE-2021-4123 | Cross-site request forgery (CSRF) in livehelperchat/livehelperchat | 6.5v3.1 | 0.5% | 2021-12-16 | Fix |
| CVE-2021-4121 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 6.1v3.1 | 0.8% | 2021-12-16 | Fix |
| CVE-2021-3960 | Privilege escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146) | 7.1CNA v3.1 | 0.3% | 2021-12-16 | Fix |
| CVE-2021-3959 | Server-side request forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) | 6.8CNA v3.1 | 1.7% | 2021-12-16 | Fix |
| CVE-2021-3179 | Gglocker insufficiently protected credentials | 5.5v3.1 | 0.4% | 2021-12-16 | |
| CVE-2021-45078 | GNU Binutils out-of-bounds write | 7.8v3.1 | 1.3% | 2021-12-15 | Fix |
| CVE-2021-45043 | Hd-network Real-time Monitoring System path traversal | 7.5v3.1 | 33.1% | 2021-12-15 | NucleiExploit code |
| CVE-2021-45018 | Catfish Cms cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-15 | |
| CVE-2021-45017 | Catfish Cms cross-site request forgery | 8.8v3.1 | 0.4% | 2021-12-15 | |
| CVE-2021-44657 | StackStorm Jinja interpreter vulnerability | 8.8v3.1 | 2.5% | 2021-12-15 | Fix |
| CVE-2021-44655 | Online Pre-owned/used Car Showroom Management System SQL injection | 9.8v3.1 | 6.0% | 2021-12-15 | Exploit code |
| CVE-2021-44653 | oretnom23 Online Magazine Management System SQL injection | 9.8v3.1 | 6.0% | 2021-12-15 | Exploit code |
| CVE-2021-44350 | ThinkPHP ThinkPHP5 SQL injection | 9.8v3.1 | 1.4% | 2021-12-15 | Fix |
| CVE-2021-44116 | Cross-site scripting in Anchor CMS | 6.1v3.1 | 0.7% | 2021-12-15 | |
| CVE-2021-43935 | Hillrom Welch Allyn Q-Stress Cardiac Stress Testing System authentication bypass | 9.8v3.1 | 1.1% | 2021-12-15 | Fix |
| CVE-2021-43908 | Microsoft Visual Studio Code spoofing | 4.3CNA v3.1 | 2.8% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43907 | Microsoft Visual Studio Code WSL Extension remote code execution | 9.8CNA v3.1 | 3.8% | 2021-12-15 | Fix |
| CVE-2021-43905 | Microsoft Office app remote code execution | 9.6CNA v3.1 | 2.8% | 2021-12-15 | Fix |
| CVE-2021-43899 | Microsoft 4K Wireless Display Adapter remote code execution | 9.8CNA v3.1 | 2.4% | 2021-12-15 | Fix |
| CVE-2021-43896 | Microsoft PowerShell spoofing | 5.5CNA v3.1 | 2.3% | 2021-12-15 | Fix |
| CVE-2021-43893 | Microsoft Windows Encrypting File System (EFS) elevation of privilege | 7.5CNA v3.1 | 6.6% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43892 | Microsoft BizTalk ESB Toolkit spoofing | 7.4CNA v3.1 | 2.9% | 2021-12-15 | Fix |
| CVE-2021-43891 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 13.8% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43890 | Microsoft Windows AppX Installer spoofing | 7.1CNA v3.1 | 10.3% | 2021-12-15 | KEVFix |
| CVE-2021-43889 | Microsoft Defender for IoT remote code execution | 7.2CNA v3.1 | 2.2% | 2021-12-15 | Fix |
| CVE-2021-43888 | Microsoft Defender for IoT information disclosure | 7.5CNA v3.1 | 3.0% | 2021-12-15 | Fix |
| CVE-2021-43883 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 12.0% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43882 | Microsoft Defender for IoT remote code execution | 9.0CNA v3.1 | 2.4% | 2021-12-15 | Fix |
| CVE-2021-43880 | Microsoft Windows Mobile Device Management elevation of privilege | 5.5CNA v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-43877 | ASP.NET Core and Visual Studio elevation of privilege | 8.8CNA v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-43875 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 5.1% | 2021-12-15 | Fix |
| CVE-2021-43836 | PHP file inclusion in the Sulu admin panel | 8.5CNA v3.1 | 2.0% | 2021-12-15 | Fix |
| CVE-2021-43835 | Privilege escalation in the Sulu Admin panel | 7.2CNA v3.1 | 1.1% | 2021-12-15 | Fix |
| CVE-2021-43831 | Files on the host computer can be accessed from the Gradio interface | 7.7CNA v3.1 | 3.8% | 2021-12-15 | NucleiFix |
| CVE-2021-43806 | SQL injection in Tuleap | 8.8CNA v3.1 | 1.5% | 2021-12-15 | Fix |
| CVE-2021-43782 | Indirect LDAP injection in Tuleap | 6.7CNA v3.1 | 1.4% | 2021-12-15 | Fix |
| CVE-2021-43675 | LycheeOrg Lychee cross-site scripting | 6.1v3.1 | 0.9% | 2021-12-15 | |
| CVE-2021-43518 | Teeworlds buffer overflow | 7.8v3.1 | 1.4% | 2021-12-15 | Fix |
| CVE-2021-43326 | Automox incorrect default permissions | 7.8v3.1 | 1.2% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43325 | Automox incorrect default permissions | 7.8v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-43256 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.1% | 2021-12-15 | Fix |
| CVE-2021-43255 | Microsoft Office Trust Center spoofing | 5.5CNA v3.1 | 2.0% | 2021-12-15 | Fix |
| CVE-2021-43248 | Microsoft Windows Digital Media Receiver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-43247 | Microsoft Windows TCP/IP driver elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-43246 | Microsoft Windows Hyper-V denial of service | 5.6CNA v3.1 | 0.8% | 2021-12-15 | Fix |
| CVE-2021-43245 | Microsoft Windows Digital TV Tuner elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-43244 | Microsoft Windows Kernel information disclosure | 6.5CNA v3.1 | 0.8% | 2021-12-15 | Fix |
| CVE-2021-43243 | Microsoft VP9 Video Extensions information disclosure | 5.5CNA v3.1 | 0.8% | 2021-12-15 | Fix |
| CVE-2021-43242 | Microsoft SharePoint server spoofing | 7.6CNA v3.1 | 1.2% | 2021-12-15 | Fix |
| CVE-2021-43240 | Microsoft Windows NTFS Set Short Name elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-43239 | Microsoft Windows Recovery Environment agent elevation of privilege | 7.1CNA v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-43238 | Microsoft Windows Remote Access elevation of privilege | 7.8CNA v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-43237 | Microsoft Windows Setup elevation of privilege | 7.8CNA v3.1 | 1.0% | 2021-12-15 | Fix |
| CVE-2021-43236 | Microsoft Message Queuing information disclosure | 7.5CNA v3.1 | 3.0% | 2021-12-15 | Fix |
| CVE-2021-43235 | Microsoft Windows storage Spaces controller information disclosure | 5.5CNA v3.1 | 0.8% | 2021-12-15 | Fix |
| CVE-2021-43234 | Microsoft Windows Fax service remote code execution | 7.8CNA v3.1 | 2.1% | 2021-12-15 | Fix |
| CVE-2021-43233 | Microsoft Windows remote Desktop client remote code execution | 7.5CNA v3.1 | 2.2% | 2021-12-15 | Fix |
| CVE-2021-43232 | Microsoft Windows Event Tracing remote code execution | 7.8CNA v3.1 | 2.1% | 2021-12-15 | Fix |
| CVE-2021-43231 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-43230 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-43229 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 1.8% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43228 | Microsoft Windows SymCrypt denial of service | 7.5CNA v3.1 | 3.7% | 2021-12-15 | Fix |
| CVE-2021-43227 | Microsoft Windows storage Spaces controller information disclosure | 5.5CNA v3.1 | 0.8% | 2021-12-15 | Fix |
| CVE-2021-43226 | Microsoft Windows privilege escalation | 7.8CNA v3.1 | 3.1% | 2021-12-15 | KEVExploit codeFix |
| CVE-2021-43225 | Microsoft Bot Framework SDK remote code execution | 7.5CNA v3.1 | 2.8% | 2021-12-15 | Fix |
| CVE-2021-43224 | Microsoft Windows Common Log File System driver information disclosure | 5.5CNA v3.1 | 3.9% | 2021-12-15 | Exploit codeFix |
| CVE-2021-43223 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-43222 | Microsoft Message Queuing information disclosure | 7.5CNA v3.1 | 3.0% | 2021-12-15 | Fix |
| CVE-2021-43219 | Microsoft Windows DirectX Graphics Kernel file denial of service | 7.4CNA v3.1 | 3.7% | 2021-12-15 | Fix |
| CVE-2021-43217 | Microsoft Windows Encrypting File System (EFS) remote code execution | 8.1CNA v3.1 | 6.4% | 2021-12-15 | Fix |
| CVE-2021-43216 | Microsoft Local Security Authority (LSA) server information disclosure | 6.5CNA v3.1 | 3.2% | 2021-12-15 | Fix |
| CVE-2021-43215 | Microsoft Windows iSNS server memory corruption vulnerability can lead to remote code execution | 9.8CNA v3.1 | 2.7% | 2021-12-15 | Fix |
| CVE-2021-43214 | Microsoft Raw Image Extension web Media extensions remote code execution | 7.8CNA v3.1 | 1.7% | 2021-12-15 | Fix |
| CVE-2021-43207 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-43113 | Itextpdf iText command injection in itext7-core | 9.8v3.1 | 5.2% | 2021-12-15 | Fix |
| CVE-2021-42945 | zzcms A SQL injection | 9.8v3.1 | 1.0% | 2021-12-15 | |
| CVE-2021-42320 | Microsoft SharePoint server spoofing | 8.0CNA v3.1 | 1.5% | 2021-12-15 | Fix |
| CVE-2021-42315 | Microsoft Defender for IoT remote code execution | 8.8CNA v3.1 | 2.2% | 2021-12-15 | Fix |
| CVE-2021-42314 | Microsoft Defender for IoT remote code execution | 8.8CNA v3.1 | 2.2% | 2021-12-15 | Fix |
| CVE-2021-42313 | Microsoft Defender for IoT remote code execution | 10.0CNA v3.1 | 3.8% | 2021-12-15 | Fix |
| CVE-2021-42312 | Microsoft Defender for IoT elevation of privilege | 7.8CNA v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-42311 | Microsoft Defender for IoT remote code execution | 10.0CNA v3.1 | 4.2% | 2021-12-15 | Fix |
| CVE-2021-42310 | Microsoft Defender for IoT remote code execution | 8.1CNA v3.1 | 2.0% | 2021-12-15 | Fix |
| CVE-2021-42309 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 2.7% | 2021-12-15 | Fix |
| CVE-2021-42295 | Microsoft Office Visual Basic for Applications information disclosure | 5.5CNA v3.1 | 2.9% | 2021-12-15 | Fix |
| CVE-2021-42294 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 2.2% | 2021-12-15 | Fix |
| CVE-2021-42293 | Microsoft Jet Red Database Engine and Access Connectivity Engine elevation of privilege | 6.5CNA v3.1 | 2.8% | 2021-12-15 | Fix |
| CVE-2021-42220 | Dolibarr cross-site scripting (XSS) | 5.4v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-42216 | Anonaddy weak cryptography | 9.8v3.1 | 1.2% | 2021-12-15 | |
| CVE-2021-41871 | Socomec Remote View Pro cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-41870 | Socomec Remote View Pro unrestricted file upload | 8.8v3.1 | 1.1% | 2021-12-15 | Fix |
| CVE-2021-41844 | Crocoblock JetEngine improper input validation | 9.8v3.1 | 1.1% | 2021-12-15 | Fix |
| CVE-2021-41560 | OpenCATS unrestricted file upload | 9.8v3.1 | 11.1% | 2021-12-15 | Exploit code |
| CVE-2021-41557 | Sofico Miles Rich Internet Application cross-site scripting | 5.4v3.1 | 0.8% | 2021-12-15 | |
| CVE-2021-41365 | Microsoft Defender for IoT remote code execution | 8.8CNA v3.1 | 2.7% | 2021-12-15 | Fix |
| CVE-2021-41360 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.1% | 2021-12-15 | Fix |
| CVE-2021-41333 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 1.1% | 2021-12-15 | Fix |
| CVE-2021-41276 | Indirect LDAP injection in Tuleap | 6.7CNA v3.1 | 1.5% | 2021-12-15 | Fix |
| CVE-2021-40827 | Clementine-player Clementine out-of-bounds write | 7.8v3.1 | 1.2% | 2021-12-15 | |
| CVE-2021-40826 | Clementine-player Clementine null pointer dereference | 7.8v3.1 | 1.2% | 2021-12-15 | |
| CVE-2021-40453 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.2% | 2021-12-15 | Fix |
| CVE-2021-40452 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.5% | 2021-12-15 | Fix |
| CVE-2021-40441 | Microsoft Windows Media Center elevation of privilege | 7.8CNA v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-40171 | SecuritasHome Alarm System RF jamming alert vulnerability | 5.3v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-40170 | Securitashome Alarm System authentication bypass by replay | 6.8v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-39657 | Android ufshcd.c out-of-bounds read | 4.4v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-39656 | Android file.c use-after-free | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39655 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-39653 | Android (TBD) privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39652 | Android (TBD) out-of-bounds write | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39651 | Android TBD privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39650 | Android (TBD) out-of-bounds write | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39649 | Android regmap.c use-after-free | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39648 | Android configfs.c information disclosure | 4.1v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-39647 | Android information disclosure | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39646 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2021-12-15 | Fix |
| CVE-2021-39645 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-39644 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-39643 | Android ic.c privilege escalation | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39642 | Android lwis_ioctl.c out-of-bounds write | 6.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39641 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-39640 | Android ep0.c out-of-bounds write | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39639 | Android fvp.c privilege escalation | 6.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39638 | Android lwis_periodic_io.c out-of-bounds write | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39637 | Android trusty_remote_provisioning_context.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-39636 | Android ip_tables.c information disclosure | 4.4v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-38701 | Motorola T008 cross-site scripting | 4.8v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-36888 | Oxilab Image Hover Effects Ultimate (WordPress plugin) improper access control | 9.8v3.1 | 6.7% | 2021-12-15 | NucleiFix |
| CVE-2021-36450 | Verint Workforce Optimization cross-site scripting | 6.1v3.1 | 64.9% | 2021-12-15 | Nuclei |
| CVE-2021-35490 | Thruk cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-29847 | IBM Power System S821LC Server (8001-12C) man-in-the-middle | 5.3CNA v3.0 | 1.0% | 2021-12-15 | Fix |
| CVE-2021-27859 | Missing authorization vulnerability in FatPipe software | 8.8v3.1 | 1.6% | 2021-12-15 | Fix |
| CVE-2021-27858 | Missing authorization vulnerability in FatPipe software | 5.3v3.1 | 2.7% | 2021-12-15 | NucleiFix |
| CVE-2021-27857 | FatPipe software allows unauthenticated configuration download | 7.5v3.1 | 1.8% | 2021-12-15 | KCVFix |
| CVE-2021-27856 | FatPipe software administrative account with no password | 9.8v3.1 | 5.6% | 2021-12-15 | NucleiFix |
| CVE-2021-27855 | FatPipe software allows privilege escalation | 8.8v3.1 | 1.6% | 2021-12-15 | Fix |
| CVE-2021-26787 | Genesys Workforce Management cross-site scripting | 6.1v3.1 | 0.7% | 2021-12-15 | |
| CVE-2021-20330 | MongoDB Server specific replication command with malformed oplog entries can crash secondaries | 6.5CNA v3.1 | 1.0% | 2021-12-15 | Fix |
| CVE-2021-4119 | Improper access control in bookstackapp/BookStack | 9.8v3.1 | 26.9% | 2021-12-15 | Fix |
| CVE-2021-4117 | Business Logic Errors in yetiforcecompany/yetiforcecrm | 4.3NVD v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-4116 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-4111 | Business Logic Errors in yetiforcecompany/yetiforcecrm | 4.3NVD v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-4110 | Null pointer dereference in mruby/mruby | 7.5NVD v3.1 | 1.6% | 2021-12-15 | Fix |
| CVE-2021-1048 | Android Kernel use-after-free | 7.8v3.1 | 1.0% | 2021-12-15 | KEVKCVFix |
| CVE-2021-1047 | Android cm_access_control.c out-of-bounds read | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1046 | Android lwis_device_dpm.c out-of-bounds read | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1045 | Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A | 7.5v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-1044 | Android identity_support.c out-of-bounds write | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1043 | Android TBD information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1042 | Android dsi_panel.c information disclosure | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1041 | Android (TBD) out-of-bounds read | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1040 | Android BluetoothPairingSelectionFragment.java elevation of privilege | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1039 | Android AndroidManifest.xml elevation of privilege | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1038 | Android AndroidManifest.xml denial of service | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1034 | Android missing authorization | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1032 | Android PackageManagerService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1031 | Android NotificationManagerService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1030 | Android NotificationManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1029 | Android SurfaceFlinger.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1028 | Android SurfaceFlinger.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1027 | Android incorrect type conversion | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1026 | Android RttServiceImpl.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1025 | Android WallpaperManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1024 | Android EventResultPersister.java privilege escalation | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1023 | Android RequestIgnoreBatteryOptimizations.java information disclosure | 5.0v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1022 | Android btif_hf_client.cc crash | 7.5v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-1021 | Android NotificationManagerService.java privilege escalation | 7.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1020 | Android NotificationListenerService.java privilege escalation | 7.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1019 | Android NotificationListenerService.java privilege escalation | 7.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1018 | Android AudioService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1017 | Android AndroidManifest.xml privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1016 | Android UsbPermissionActivity.java privilege escalation | 7.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1015 | Android PhoneInterfaceManager.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |