CVE-2021 records published in December 2021

This page lists the 1,836 CVE-2021 records published in December 2021, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2021 list filters these records by severity or signal.

Critical
30816.8% of these records
Listed in CISA KEV
150.8% of these records
Reported exploited
10.1% of these records
Detection signal
532.9% of these records
Exploit code
613.3% of these records
Actionable vendor fix
1,46179.6% of these records

Figures as of 2026-10-24 13:51 UTC. Records published in December 2021 have had from about 58 months to about 59 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2021 records published in December 2021, newest first: records 1 to 1,000 of 1,836
CVE Summary CVSS EPSS Published Signals
CVE-2021-4193Out-of-bounds read in Vim/Vim5.5v3.11.8%2021-12-31Fix
CVE-2021-4192vim/vim use-after-free7.8v3.11.7%2021-12-31Fix
CVE-2021-45818Safari Montage CRLF injection6.1v3.10.6%2021-12-30
CVE-2021-45815Quectel UC20 cross-site scripting6.1v3.10.6%2021-12-30
CVE-2021-45732Netgear Nighthawk R6700 hard-coded credentials8.8NVD v3.10.8%2021-12-30
CVE-2021-45427Emerson XWEB300D Evo path traversal9.8v3.119.0%2021-12-30
CVE-2021-45379Glewlwyd improper authentication8.8v3.11.0%2021-12-30Fix
CVE-2021-45077Netgear Nighthawk R6700 cleartext storage of sensitive information7.5NVD v3.10.6%2021-12-30
CVE-2021-44466Bitmask Riseup VPN incorrect permission assignment7.3NVD v3.10.4%2021-12-30
CVE-2021-43862jcubic jquery.terminal self XSS on user input3.7CNA v3.11.0%2021-12-30Fix
CVE-2021-43861mermaid-js mermaid incorrect sanitisation function leads to `XSS`7.2CNA v3.10.9%2021-12-30Fix
CVE-2021-38876IBM i cross-site scripting6.1CNA v3.00.6%2021-12-30Fix
CVE-2021-23147Netgear Nighthawk R6700 improper authentication6.8NVD v3.10.4%2021-12-30
CVE-2021-20175Netgear Nighthawk R6700 cleartext transmission of sensitive information7.5NVD v3.10.6%2021-12-30
CVE-2021-20174Netgear Nighthawk R6700 cleartext transmission of sensitive information7.5NVD v3.10.6%2021-12-30
CVE-2021-20173Netgear Nighthawk R6700 OS command injection8.8NVD v3.13.2%2021-12-30
CVE-2021-20172Netgear Genie Installer for macOS incorrect permission assignment7.8NVD v3.10.3%2021-12-30
CVE-2021-20171Netgear RAX43 cleartext storage of sensitive information5.5NVD v3.10.2%2021-12-30
CVE-2021-20170Netgear RAX43 hard-coded credentials8.8NVD v3.10.5%2021-12-30
CVE-2021-20169Netgear RAX43 cleartext transmission of sensitive information6.8NVD v3.10.2%2021-12-30
CVE-2021-20168Netgear RAX43 improper authentication6.8NVD v3.10.3%2021-12-30
CVE-2021-20167Netgear RAX43 command injection8.0NVD v3.17.2%2021-12-30Nuclei
CVE-2021-20166Netgear RAX43 buffer overflow8.8NVD v3.12.2%2021-12-30
CVE-2021-20165Trendnet AC2600 TEW-827DRU cross-site request forgery8.8NVD v3.10.6%2021-12-30
CVE-2021-20164Trendnet AC2600 TEW-827DRU insufficiently protected credentials4.9NVD v3.10.7%2021-12-30
CVE-2021-20163Trendnet AC2600 TEW-827DRU insufficiently protected credentials4.9NVD v3.10.8%2021-12-30
CVE-2021-20162Trendnet AC2600 TEW-827DRU cleartext storage of sensitive information4.9NVD v3.10.5%2021-12-30
CVE-2021-20161Trendnet AC2600 TEW-827DRU improper authentication6.8NVD v3.10.2%2021-12-30
CVE-2021-20160Trendnet AC2600 TEW-827DRU OS command injection8.8NVD v3.13.1%2021-12-30
CVE-2021-20159Trendnet AC2600 TEW-827DRU OS command injection8.8NVD v3.13.1%2021-12-30
CVE-2021-20158Trendnet AC2600 TEW-827DRU missing authentication9.8NVD v3.19.5%2021-12-30Nuclei
CVE-2021-20157TRENDnet TEW-827DRU hidden administrative command denial of service7.5NVD v3.11.5%2021-12-30
CVE-2021-20156Trendnet AC2600 TEW-827DRU improper signature verification6.5NVD v3.10.4%2021-12-30
CVE-2021-20155Trendnet AC2600 TEW-827DRU hard-coded credentials9.8NVD v3.11.9%2021-12-30
CVE-2021-20154Trendnet AC2600 TEW-827DRU cleartext transmission of sensitive information7.5NVD v3.10.8%2021-12-30
CVE-2021-20153Trendnet AC2600 TEW-827DRU link following6.8NVD v3.11.0%2021-12-30
CVE-2021-20152Trendnet AC2600 TEW-827DRU missing authentication6.5NVD v3.10.8%2021-12-30
CVE-2021-20151Trendnet AC2600 TEW-827DRU session fixation10.0NVD v3.11.6%2021-12-30
CVE-2021-20150Trendnet AC2600 TEW-827DRU missing authentication5.3NVD v3.140.1%2021-12-30Nuclei
CVE-2021-20149Trendnet AC2600 TEW-827DRU incorrect authorization9.8NVD v3.11.4%2021-12-30
CVE-2021-20134Adobe Quagga Services on D-Link DIR-2640 less than or equal to absolute path traversal8.4NVD v3.17.5%2021-12-30
CVE-2021-20133Adobe Quagga Services on D-Link DIR-2640 less than or equal to absolute path traversal6.1NVD v3.12.1%2021-12-30
CVE-2021-20132Quagga Services on D-Link DIR-2640 Routers hard-coded credentials8.8NVD v3.14.3%2021-12-30
CVE-2021-4190Wireshark excessive iteration7.5CNA v3.13.1%2021-12-30Fix
CVE-2021-4188Null pointer dereference in mruby/mruby7.5v3.10.9%2021-12-30Fix
CVE-2021-4186Wireshark Gryphon dissector crash6.3CNA v3.12.1%2021-12-30Fix
CVE-2021-4185Wireshark RTMPT dissector infinite loop7.5CNA v3.13.8%2021-12-30Fix
CVE-2021-4184Wireshark BitTorrent DHT dissector infinite loop7.5CNA v3.13.8%2021-12-30Fix
CVE-2021-4183Wireshark pcapng file parser crash5.5CNA v3.11.5%2021-12-30Fix
CVE-2021-4182Wireshark infinite loop7.5CNA v3.13.2%2021-12-30Fix
CVE-2021-4181Wireshark Sysdig Event dissector crash7.5CNA v3.13.8%2021-12-30Fix
CVE-2021-45885Stormshield Network Security insufficient session expiration7.5v3.10.9%2021-12-29Fix
CVE-2021-44161Changing Information Technology Inc. MOTP(Mobile One Time Password) SQL injection8.8CNA v3.10.5%2021-12-29Fix
CVE-2021-44160Carinal Tien Hospital Health Report System authorization bypass through user-controlled key7.3CNA v3.11.1%2021-12-29Fix
CVE-2021-43876Microsoft SharePoint elevation of privilege8.8CNA v3.11.9%2021-12-29Fix
CVE-2021-38688Improper authentication in Qfile7.1CNA v3.10.8%2021-12-29Fix
CVE-2021-38687Stack overflow vulnerability in Surveillance Station8.1CNA v3.11.3%2021-12-29Fix
CVE-2021-38680Reflected XSS in Kazoo Server6.1NVD v3.10.7%2021-12-29Fix
CVE-2021-36724ForeScout SecureConnector local service DoS5.5v3.10.2%2021-12-29
CVE-2021-36723Emuse eServices / eNvoice Exposure of Private Personal Information7.5v3.10.5%2021-12-29
CVE-2021-36722Emuse eServices / eNvoice SQL injection9.8v3.11.3%2021-12-29
CVE-2021-35035Zyxel NBG6604 firmware cleartext storage of sensitive information4.9CNA v3.10.6%2021-12-29Fix
CVE-2021-35034Zyxel NBG6604 firmware CGI program of the Zyxel insufficient session expiration7.4CNA v3.11.0%2021-12-29Fix
CVE-2021-25993Requarks Wiki.js stored cross-site scripting (XSS) in markdown editor5.4v3.10.6%2021-12-29
CVE-2021-25991ifme improper access control leads to admin deactivation7.3v3.10.8%2021-12-29
CVE-2021-25990ifme stored cross-site scripting (XSS) in Contacts section5.4v3.10.6%2021-12-29
CVE-2021-25989ifme stored cross-site scripting (XSS) in Groups section5.4v3.10.6%2021-12-29
CVE-2021-25988ifme stored cross-site scripting (XSS) in Notifications section5.4v3.10.6%2021-12-29
CVE-2021-23727celery stored command injection7.5v3.13.9%2021-12-29Fix
CVE-2021-4187vim/vim use-after-free7.8v3.11.6%2021-12-29Fix
CVE-2021-4176Cross-site scripting (XSS) Reflected in livehelperchat/livehelperchat6.1v3.10.8%2021-12-29Fix
CVE-2021-4175Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat5.4v3.10.5%2021-12-29Fix
CVE-2021-45911GIF2APNG out-of-bounds write7.8v3.10.9%2021-12-28Fix
CVE-2021-45910GIF2APNG out-of-bounds write7.8v3.10.9%2021-12-28Fix
CVE-2021-45909GIF2APNG out-of-bounds write7.8v3.10.9%2021-12-28Fix
CVE-2021-45908GIF2APNG out-of-bounds write7.8v3.10.7%2021-12-28
CVE-2021-45907GIF2APNG out-of-bounds write7.8v3.10.7%2021-12-28
CVE-2021-45903salesagility SuiteCRM web interface stored cross-site scripting6.1v3.11.1%2021-12-28Fix
CVE-2021-45814Nettemp Nnt SQL injection9.8v3.16.3%2021-12-28Exploit code
CVE-2021-45813Slican Webcti cross-site scripting6.1v3.10.6%2021-12-28
CVE-2021-45812NUUO Nvrsolo cross-site scripting6.1v3.10.8%2021-12-28
CVE-2021-45425Safari Montage reflected cross-site scripting6.1v3.13.4%2021-12-28Exploit code
CVE-2021-44832Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration6.6NVD v3.197.9%2021-12-28Reported exploitedSnortExploit codeFix
CVE-2021-43556FATEK Automation WinProladder project file parser stack-based buffer overflow7.8v3.12.1%2021-12-28
CVE-2021-43554FATEK Automation WinProladder project file parser out-of-bounds write7.8v3.11.9%2021-12-28
CVE-2021-42583foxcpp maddy Max Mazurov weak cryptography7.5v3.10.7%2021-12-28Fix
CVE-2021-40579Online Enrollment Management System insecure direct object reference6.5v3.10.8%2021-12-28
CVE-2021-37401IDEC DATA File Manager insufficiently protected credentials9.8v3.11.3%2021-12-28Fix
CVE-2021-37400IDEC DATA File Manager insufficiently protected credentials9.8v3.11.3%2021-12-28Fix
CVE-2021-35032Zyxel GS1900 series firmware OS command injection6.4CNA v3.10.2%2021-12-28Fix
CVE-2021-35031Zyxel GS1900 series firmware OS command injection6.8CNA v3.10.5%2021-12-28Fix
CVE-2021-20873Yappli missing authorization8.1v3.10.8%2021-12-28Fix
CVE-2021-4179Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat5.4v3.10.5%2021-12-28Fix
CVE-2021-4177Generation of error message containing sensitive information in livehelperchat/livehelperchat5.3v3.10.9%2021-12-28Fix
CVE-2021-45906openwrt cross-site scripting5.4v3.10.5%2021-12-27
CVE-2021-45905openwrt cross-site scripting5.4v3.10.5%2021-12-27
CVE-2021-45904openwrt cross-site scripting5.4v3.10.5%2021-12-27
CVE-2021-45896Nokia Fastmile privilege escalation8.8v3.11.6%2021-12-27
CVE-2021-45895Cross-site scripting in Netgen Tags Bundle6.1v3.10.7%2021-12-27Fix
CVE-2021-45890Authguard improper authentication9.8v3.11.7%2021-12-27Fix
CVE-2021-45884Brave information disclosure7.5v3.13.1%2021-12-27
CVE-2021-45711Simple ASN1 panic on incorrect date input to `simple_asn1`7.5v3.11.3%2021-12-27Fix
CVE-2021-45710Race condition in Tokio8.1v3.11.2%2021-12-27Fix
CVE-2021-45709Crypto2 non-aligned u32 read in Chacha20 encryption and decryption9.8v3.10.8%2021-12-27
CVE-2021-45708Abomonation transmutes &T to and from &[u8] without sufficient constraints7.5v3.11.0%2021-12-27Fix
CVE-2021-45707Out-of-bounds write in Nix9.8v3.11.7%2021-12-27Fix
CVE-2021-45706Zeroize Derive memory flaw in zeroize_derive9.8v3.11.2%2021-12-27Fix
CVE-2021-45705Nanorand aliased mutable references from `tls_rand` & `TlsWyRand`9.8v3.11.2%2021-12-27Fix
CVE-2021-45704Out-of-bounds write and race condition in Metrics-util8.1v3.10.7%2021-12-27Fix
CVE-2021-45703Tectonic Xdv use of uninitialized resource in tectonic_xdv9.8v3.11.2%2021-12-27Fix
CVE-2021-45702Linux Foundation Tremor-script memory safety issue when7.5v3.11.1%2021-12-27Fix
CVE-2021-45701Linux Foundation Tremor-script memory safety issue when9.8v3.11.2%2021-12-27Fix
CVE-2021-45700Nervos Ckb process crashes when the cell used as DepGroup is not alive7.5v3.11.1%2021-12-27Fix
CVE-2021-45699Allocation of resources without limits or throttling in Ckb7.5v3.11.5%2021-12-27Fix
CVE-2021-45698Nervos Ckb miner fails to get block template when a cell used as a cell dep has been destroyed9.8v3.11.2%2021-12-27Fix
CVE-2021-45697The `total_size` function for partial read the length of any `FixVec` is incorrect in Molecule9.8v3.11.3%2021-12-27Fix
CVE-2021-45696Miscomputed SHA2 results when using AVX2 backend9.8v3.10.8%2021-12-27Fix
CVE-2021-45695Incorrect reliance on Trait memory layout in Mopa9.8v3.11.6%2021-12-27
CVE-2021-45694Window may read from uninitialized memory locations in Rdiff7.5v3.11.1%2021-12-27
CVE-2021-45693Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read9.8v3.11.2%2021-12-27
CVE-2021-45692Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read9.8v3.11.4%2021-12-27
CVE-2021-45691Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read9.8v3.11.2%2021-12-27
CVE-2021-45690Messagepack-rs deserialization functions pass uninitialized memory to user-provided Read9.8v3.11.2%2021-12-27
CVE-2021-45689Gfx-auxil reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv` )9.8v3.11.2%2021-12-27
CVE-2021-45688Ash-rs ash reading on uninitialized memory may cause UB ( `util::read_spv` )9.8v3.11.3%2021-12-27Fix
CVE-2021-45687Raw-cpuid optional `Deserialize` implementations lacking validation9.8v3.11.1%2021-12-27Fix
CVE-2021-45686Csv-sniffer `Read` on uninitialized memory may cause UB (fn preamble_skipcount)9.8v3.11.2%2021-12-27Fix
CVE-2021-45685Columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec)9.8v3.11.2%2021-12-27Fix
CVE-2021-45684Flumedb `Read` on uninitialized buffer may cause UB ( `read_entry` )9.8v3.11.2%2021-12-27Fix
CVE-2021-45683Binjs IO read on uninitialized memory may cause UB9.8v3.11.2%2021-12-27
CVE-2021-45682Bronzedb-protocol `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`)9.8v3.11.2%2021-12-27
CVE-2021-45681Derive-com-impl QueryInterface should call AddRef before returning pointer7.5v3.11.1%2021-12-27Fix
CVE-2021-45680Vec-const attempts to construct a Vec from a pointer to a const slice7.5v3.11.1%2021-12-27Fix
CVE-2021-45339Avast Antivirus privilege escalation7.8v3.10.3%2021-12-27Fix
CVE-2021-45338Avast Antivirus privilege escalation7.8v3.10.4%2021-12-27Fix
CVE-2021-45337Avast Antivirus Self-Defense driver privilege escalation8.8v3.10.4%2021-12-27Fix
CVE-2021-45336Avast Antivirus Sandbox component privilege escalation8.8v3.10.5%2021-12-27Fix
CVE-2021-45335Avast Antivirus incorrect default permissions8.8v3.10.4%2021-12-27Fix
CVE-2021-45232Apache APISIX Dashboard security vulnerability on unauthorized access9.8NVD v3.186.3%2021-12-27NucleiExploit codeFix
CVE-2021-43858User privilege escalation in MinIO8.8CNA v3.135.5%2021-12-27Exploit codeFix
CVE-2021-43857Gerapy may contain remote code execution9.8CNA v3.155.3%2021-12-27Exploit codeFix
CVE-2021-43856Stored XSS in non-image uploads in Requarks/wiki8.2CNA v3.10.9%2021-12-27Fix
CVE-2021-43855Stored XSS via SVG in Requarks/wiki8.2CNA v3.10.9%2021-12-27Fix
CVE-2021-43845Teluu PJSIP RTCP XR handling out-of-bounds read8.2CNA v3.13.6%2021-12-27Fix
CVE-2021-43552Philips Patient Information Center iX and Efficia CM Series use of hard-coded cryptographic key5.5v3.10.2%2021-12-27Fix
CVE-2021-43550Philips Patient Information Center iX and Efficia CM Series weak cryptographic algorithm6.5v3.10.2%2021-12-27Fix
CVE-2021-43548Philips Patient Information Center iX (PIC iX) and Efficia CM Series improper input validation6.5v3.10.4%2021-12-27Fix
CVE-2021-38961IBM OPENBMC cross-site scripting6.1CNA v3.00.6%2021-12-27Fix
CVE-2021-35232SolarWinds Web Help Desk hard-coded credentials6.8CNA v3.10.3%2021-12-27Emerging ThreatsFix
CVE-2021-33017Philips IntelliBridge EC 40 and EC 80 Hub authentication bypass using an alternate path or channel8.8v3.10.5%2021-12-27Fix
CVE-2021-32993Philips IntelliBridge EC 40 and EC 80 Hub use of hard-coded credentials8.8v3.10.3%2021-12-27Fix
CVE-2021-24998Simple JWT Login WordPress plugin insecure password creation7.5NVD v3.11.2%2021-12-27Fix
CVE-2021-24997WP Guppy WordPress plugin sensitive information disclosure6.5NVD v3.12.8%2021-12-27NucleiFix
CVE-2021-24992Buttonizer - Smart Floating Action Button WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-12-27Fix
CVE-2021-24988WP RSS Aggregator WordPress plugin Subscriber+ stored cross-site scripting5.4NVD v3.10.3%2021-12-27Fix
CVE-2021-24984WPFront User Role Editor WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2021-12-27Fix
CVE-2021-24980Gwolle Guestbook WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2021-12-27Fix
CVE-2021-24979Paid Memberships Pro WordPress plugin reflected cross-site scripting6.1NVD v3.11.9%2021-12-27NucleiFix
CVE-2021-24969Download Manager WordPress plugin Subscriber+ stored cross-site scripting5.4NVD v3.10.6%2021-12-27Fix
CVE-2021-24967themehunk Contact Form and Lead Form Elementor Builder stored cross-site scripting6.1NVD v3.11.2%2021-12-27Fix
CVE-2021-24902Typebot WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2021-12-27Fix
CVE-2021-24797Tickera WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.11.2%2021-12-27Fix
CVE-2021-24753Rich Reviews by Starfish WordPress plugin Admin+ SQL injection7.2NVD v3.11.5%2021-12-27Fix
CVE-2021-23244OPPO ColorOS permission whitelist vulnerability7.8v3.10.6%2021-12-27Fix
CVE-2021-21751ZTE ZXIN10 CMS large screen page configuration vulnerability8.1v3.10.8%2021-12-27Fix
CVE-2021-21750ZXIN10 CMS improper privilege management7.8v3.10.3%2021-12-27Fix
CVE-2021-4173vim/vim use-after-free7.8v3.11.6%2021-12-27Fix
CVE-2021-4161ICSA-21-357-01 Moxa MGate Protocol Gateways7.5NVD v3.10.7%2021-12-27
CVE-2021-45720Lru use-after-free7.5v3.11.2%2021-12-26Fix
CVE-2021-45719Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45718Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45717Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45716Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45715Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45714Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45713Incorrect Lifetime Bounds on Closures in `Rusqlite`7.5v3.11.2%2021-12-26Fix
CVE-2021-45712Path traversal in Rust-embed7.5v3.11.6%2021-12-26Fix
CVE-2021-45679NETGEAR R6900P privilege escalation7.2v3.11.0%2021-12-26Fix
CVE-2021-45678NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code.9.8v3.11.3%2021-12-26Fix
CVE-2021-45677NETGEAR GS110TP cross-site scripting6.1v3.10.6%2021-12-26Fix
CVE-2021-45676NETGEAR RAX200 cross-site scripting4.8v3.10.5%2021-12-26Fix
CVE-2021-45675NETGEAR R6700V2 cross-site scripting4.8v3.10.3%2021-12-26Fix
CVE-2021-45674NETGEAR RAX200 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45673NETGEAR R6900P cross-site scripting5.4v3.10.5%2021-12-26Fix
CVE-2021-45672NETGEAR R6700V2 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45671NETGEAR EX7500 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45670NETGEAR EX3700 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45669NETGEAR RAX200 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45668NETGEAR EX3700 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45667NETGEAR EX3700 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45666NETGEAR EX3700 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45665NETGEAR EX3700 cross-site scripting4.8v3.10.4%2021-12-26Fix
CVE-2021-45664NETGEAR R7000 cross-site scripting4.8v3.10.6%2021-12-26Fix
CVE-2021-45663NETGEAR R7000 cross-site scripting5.4v3.10.5%2021-12-26Fix
CVE-2021-45662NETGEAR R7000 cross-site scripting5.4v3.10.5%2021-12-26Fix
CVE-2021-45661NETGEAR RBS50Y injection7.8v3.10.3%2021-12-26Fix
CVE-2021-45660NETGEAR RBS50Y injection7.8v3.10.3%2021-12-26Fix
CVE-2021-45659NETGEAR RBS50Y injection7.8v3.10.3%2021-12-26Fix
CVE-2021-45658NETGEAR EX6100V2 injection9.8v3.10.8%2021-12-26Fix
CVE-2021-45657NETGEAR R6700V2 injection7.8v3.10.3%2021-12-26Fix
CVE-2021-45656NETGEAR AC2100 injection7.8v3.10.3%2021-12-26Fix
CVE-2021-45655NETGEAR R6400 injection6.8v3.10.4%2021-12-26Fix
CVE-2021-45654NETGEAR XR1000 information disclosure7.5NVD v3.11.0%2021-12-26Fix
CVE-2021-45653NETGEAR RBK352 information disclosure7.5v3.11.4%2021-12-26Fix
CVE-2021-45652NETGEAR RBK352 information disclosure7.5NVD v3.11.0%2021-12-26Fix
CVE-2021-45651NETGEAR RBK50 information disclosure7.5v3.10.6%2021-12-26Fix
CVE-2021-45650NETGEAR R6400v2 information disclosure7.5NVD v3.11.0%2021-12-26Fix
CVE-2021-45649NETGEAR R6400v2 information disclosure5.5NVD v3.10.3%2021-12-26Fix
CVE-2021-45648NETGEAR EX6100V2 information disclosure7.5v3.10.8%2021-12-26Fix
CVE-2021-45647NETGEAR R6700V2 information disclosure7.5v3.11.3%2021-12-26Fix
CVE-2021-45646NETGEAR R7000 information disclosure7.5v3.10.9%2021-12-26Fix
CVE-2021-45645Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122.9.8v3.10.9%2021-12-26Fix
CVE-2021-45644Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 befo9.8v3.11.1%2021-12-26Fix
CVE-2021-45643Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, and XR1000 before 1.0.0.58.6.5NVD v3.10.5%2021-12-26Fix
CVE-2021-45642Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before7.2v3.10.9%2021-12-26Fix
CVE-2021-45641Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 18.8v3.10.7%2021-12-26Fix
CVE-2021-45640Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 17.2v3.10.6%2021-12-26Fix
CVE-2021-45639NETGEAR EX3700 cross-site scripting6.1v3.10.6%2021-12-26Fix
CVE-2021-45638NETGEAR D7000V2 out-of-bounds write9.8v3.11.5%2021-12-26Fix
CVE-2021-45637NETGEAR R6700V2 out-of-bounds write9.8v3.11.2%2021-12-26Fix
CVE-2021-45636NETGEAR D7000 out-of-bounds write8.8v3.10.5%2021-12-26Fix
CVE-2021-45635NETGEAR CBR750 command injection8.8NVD v3.10.9%2021-12-26Fix
CVE-2021-45634NETGEAR CBR750 command injection8.8NVD v3.11.1%2021-12-26Fix
CVE-2021-45633NETGEAR CBR750 command injection8.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45632NETGEAR CBR750 command injection8.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45631NETGEAR CBR750 command injection8.8NVD v3.11.0%2021-12-26Fix
CVE-2021-45630NETGEAR CBR750 command injection9.8v3.11.7%2021-12-26Fix
CVE-2021-45629NETGEAR CBR750 command injection8.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45628NETGEAR CBR750 command injection8.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45627NETGEAR CBR750 command injection9.8v3.11.7%2021-12-26Fix
CVE-2021-45626NETGEAR RBS50Y command injection8.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45625NETGEAR R6900P command injection9.8v3.11.7%2021-12-26Fix
CVE-2021-45624NETGEAR D7000V2 command injection9.8v3.11.7%2021-12-26Fix
CVE-2021-45623NETGEAR R7800 command injection9.8v3.11.7%2021-12-26Fix
CVE-2021-45622NETGEAR R6400v2 command injection9.8v3.12.4%2021-12-26
CVE-2021-45621NETGEAR R6300V2 command injection9.8v3.12.0%2021-12-26Fix
CVE-2021-45620NETGEAR R6400v2 command injection9.8v3.12.0%2021-12-26Fix
CVE-2021-45619NETGEAR EX6100V2 command injection9.8v3.12.5%2021-12-26Fix
CVE-2021-45618NETGEAR EX6100V2 command injection9.8v3.12.0%2021-12-26Fix
CVE-2021-45617NETGEAR R6400v2 command injection9.8v3.12.1%2021-12-26Fix
CVE-2021-45616NETGEAR RAX35v2 command injection9.8v3.12.0%2021-12-26Fix
CVE-2021-45615NETGEAR CBR750 command injection8.8NVD v3.11.0%2021-12-26Fix
CVE-2021-45614NETGEAR D7000V2 command injection9.8v3.12.0%2021-12-26Fix
CVE-2021-45613NETGEAR D7000V2 command injection9.8v3.12.0%2021-12-26Fix
CVE-2021-45612NETGEAR R6400v2 command injection9.8v3.12.5%2021-12-26Fix
CVE-2021-45611NETGEAR WNDR3400V3 buffer overflow9.8v3.11.2%2021-12-26Fix
CVE-2021-45610NETGEAR DGN2200v4 buffer overflow9.8v3.11.4%2021-12-26Fix
CVE-2021-45609NETGEAR R7100LG buffer overflow9.8v3.11.2%2021-12-26Fix
CVE-2021-45608NETGEAR R6400v2 integer overflow9.8v3.12.5%2021-12-26Fix
CVE-2021-45607NETGEAR R6400v2 out-of-bounds write8.8v3.11.2%2021-12-26Fix
CVE-2021-45606NETGEAR R6400v2 out-of-bounds write8.8v3.10.9%2021-12-26Fix
CVE-2021-45605NETGEAR R6900P out-of-bounds write8.8v3.10.6%2021-12-26Fix
CVE-2021-45604NETGEAR CBR750 out-of-bounds write4.5v3.10.4%2021-12-26Fix
CVE-2021-45603NETGEAR WN3000RPV2 information disclosure5.5v3.10.6%2021-12-26Fix
CVE-2021-45602NETGEAR WN3000RPV2 OS command injection7.8v3.10.7%2021-12-26Fix
CVE-2021-45601NETGEAR CBR750 command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45600NETGEAR CBR750 command injection7.2v3.11.5%2021-12-26Fix
CVE-2021-45599NETGEAR CBR750 command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45598NETGEAR CBR750 command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45597NETGEAR CBR750 command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45596NETGEAR CBR750 command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45595NETGEAR RBS50Y command injection8.8v3.11.6%2021-12-26Fix
CVE-2021-45594NETGEAR RBS50Y command injection6.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45593NETGEAR RBK20 command injection6.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45592NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45591NETGEAR RBK752 command injection6.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45590NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45589NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45588NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45587NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45586NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45585NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45584NETGEAR RBK752 command injection8.4v3.10.6%2021-12-26Fix
CVE-2021-45583NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45582NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45581NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45580NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45579NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45578NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45577NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45576NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45575NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45574NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45573NETGEAR AC2100 out-of-bounds write8.8v3.10.5%2021-12-26Fix
CVE-2021-45572NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45571NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45570NETGEAR RBK752 command injection6.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45569NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45568NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45567NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45566NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45565NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45564NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45563NETGEAR RBK752 command injection6.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45562NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45561NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45560NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45559NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45558NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45557NETGEAR GS728TPPV2 command injection8.8v3.11.2%2021-12-26Fix
CVE-2021-45556NETGEAR GS728TPPV2 command injection8.8v3.11.2%2021-12-26Fix
CVE-2021-45555NETGEAR R7900P command injection6.8NVD v3.11.8%2021-12-26Fix
CVE-2021-45554NETGEAR R6400v2 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45553NETGEAR R6900P command injection8.8v3.11.0%2021-12-26Fix
CVE-2021-45552NETGEAR R7500V2 command injection7.2v3.11.2%2021-12-26Fix
CVE-2021-45551NETGEAR R6700V2 command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45550NETGEAR DGN2200B command injection6.8v3.10.6%2021-12-26Fix
CVE-2021-45549NETGEAR R6900P command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45548NETGEAR WN3000RPV2 command injection8.8v3.11.0%2021-12-26Fix
CVE-2021-45547NETGEAR R7900P command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45546NETGEAR R7900P command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45545NETGEAR R7900P command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45544NETGEAR R7900P command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45543NETGEAR R7900P command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45542NETGEAR RAX200 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45541NETGEAR R7900P command injection8.8v3.11.5%2021-12-26Fix
CVE-2021-45540NETGEAR R7900P command injection8.4v3.10.6%2021-12-26Fix
CVE-2021-45539NETGEAR R7900P command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45538NETGEAR RBK752 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45537NETGEAR RAX200 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45536NETGEAR RBK752 command injection6.8NVD v3.10.7%2021-12-26Fix
CVE-2021-45535NETGEAR RAX200 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45534NETGEAR R6700V2 command injection7.8v3.11.1%2021-12-26Fix
CVE-2021-45533NETGEAR EX3700 command injection6.8NVD v3.10.6%2021-12-26Fix
CVE-2021-45532NETGEAR R8000 command injection7.8v3.10.5%2021-12-26Fix
CVE-2021-45531NETGEAR D6220 command injection8.8v3.11.3%2021-12-26Fix
CVE-2021-45530NETGEAR R7960P buffer overflow8.8v3.10.9%2021-12-26Fix
CVE-2021-45529NETGEAR WNR3500LV2 buffer overflow7.2v3.10.5%2021-12-26Fix
CVE-2021-45528NETGEAR WNR3500LV2 buffer overflow7.2v3.10.5%2021-12-26Fix
CVE-2021-45527NETGEAR D7000V2 buffer overflow9.8v3.11.1%2021-12-26Fix
CVE-2021-45526NETGEAR R6300V2 buffer overflow8.8v3.10.5%2021-12-26Fix
CVE-2021-45525NETGEAR WNR3500LV2 buffer overflow8.8v3.10.9%2021-12-26Fix
CVE-2021-45524NETGEAR R8000 buffer overflow9.1v3.11.2%2021-12-26Fix
CVE-2021-45523NETGEAR R7000 buffer overflow6.5v3.11.0%2021-12-26Fix
CVE-2021-45522NETGEAR XR1000 hard-coded credentials8.8v3.10.9%2021-12-26Fix
CVE-2021-45521NETGEAR RBK352 hard-coded credentials6.5NVD v3.10.4%2021-12-26Fix
CVE-2021-45520NETGEAR RBK352 hard-coded credentials8.8NVD v3.10.4%2021-12-26Fix
CVE-2021-45519NETGEAR XR1000 denial of service6.5v3.10.4%2021-12-26Fix
CVE-2021-45518NETGEAR XR1000 denial of service6.5v3.10.4%2021-12-26Fix
CVE-2021-45517NETGEAR XR1000 denial of service6.5v3.10.4%2021-12-26Fix
CVE-2021-45516NETGEAR R6900P denial of service4.5v3.10.4%2021-12-26Fix
CVE-2021-45515NETGEAR RBRE960 denial of service6.5v3.10.4%2021-12-26Fix
CVE-2021-45514NETGEAR XR1000 command injection8.8NVD v3.10.8%2021-12-26Fix
CVE-2021-45513NETGEAR XR1000 command injection9.6v3.10.8%2021-12-26Fix
CVE-2021-45512NETGEAR WNR3500L weak cryptographic algorithm9.8v3.10.5%2021-12-26Fix
CVE-2021-45511NETGEAR R6700V2 authentication bypass9.8v3.118.9%2021-12-26MetasploitExploit codeFix
CVE-2021-45510NETGEAR XR1000 authentication bypass8.8v3.10.5%2021-12-26Fix
CVE-2021-45509NETGEAR RBK752 authentication bypass9.8v3.11.1%2021-12-26Fix
CVE-2021-45508NETGEAR CBR750 authentication bypass9.8v3.11.1%2021-12-26Fix
CVE-2021-45507NETGEAR CBR750 authentication bypass9.8v3.11.4%2021-12-26Fix
CVE-2021-45506NETGEAR CBR750 authentication bypass8.8NVD v3.10.5%2021-12-26Fix
CVE-2021-45505NETGEAR CBR750 authentication bypass8.8NVD v3.10.5%2021-12-26Fix
CVE-2021-45504NETGEAR CBR750 authentication bypass9.8v3.11.1%2021-12-26Fix
CVE-2021-45503NETGEAR CBR750 authentication bypass8.8NVD v3.10.5%2021-12-26Fix
CVE-2021-45502NETGEAR CBR750 authentication bypass8.8NVD v3.10.5%2021-12-26Fix
CVE-2021-45501NETGEAR R6700V2 authentication bypass9.8v3.11.9%2021-12-26Fix
CVE-2021-45500NETGEAR R7000P authentication bypass8.8NVD v3.10.5%2021-12-26Fix
CVE-2021-45499NETGEAR R6900P authentication bypass8.8v3.11.0%2021-12-26Fix
CVE-2021-45498NETGEAR R6700V2 authentication bypass9.8v3.11.6%2021-12-26Fix
CVE-2021-45497NETGEAR D7000 authentication bypass9.8v3.11.9%2021-12-26Fix
CVE-2021-45496NETGEAR D7000 authentication bypass9.8v3.11.7%2021-12-26Fix
CVE-2021-45495NETGEAR D7000 authentication bypass9.8v3.11.6%2021-12-26Fix
CVE-2021-45494NETGEAR RBK352 arbitrary file read4.5NVD v3.10.4%2021-12-26Fix
CVE-2021-45493NETGEAR RAX35 information disclosure7.5v3.10.8%2021-12-26Fix
CVE-2021-44598Attendance-Management-System cross-site scripting6.1v3.10.7%2021-12-26
CVE-2021-44078Unicorn Engine sandbox escape8.1v3.10.5%2021-12-26Fix
CVE-2021-41788MediaTek MT7603E improper input validation in wifi driver7.5v3.11.8%2021-12-26Fix
CVE-2021-37584MediaTek MT7603E out-of-bounds write in wifi driver8.8v3.11.2%2021-12-26Fix
CVE-2021-37583MediaTek MT7603E out-of-bounds write in 1905 daemon8.8v3.11.4%2021-12-26Fix
CVE-2021-37572MediaTek MT7603E missing authorization in 1905 daemon7.5v3.11.0%2021-12-26Fix
CVE-2021-37571MediaTek MT7603E out-of-bounds write in 1905 daemon8.8v3.11.2%2021-12-26Fix
CVE-2021-37570MediaTek MT7603E out-of-bounds read in 1905 daemon7.5v3.11.1%2021-12-26Fix
CVE-2021-37569MediaTek MT7603E out-of-bounds write in 1905 daemon8.8v3.11.2%2021-12-26Fix
CVE-2021-37568MediaTek MT7603E out-of-bounds write in 1905 daemon8.8v3.11.2%2021-12-26Fix
CVE-2021-37567MediaTek MT7603E out-of-bounds read in 1905 daemon7.5v3.11.1%2021-12-26Fix
CVE-2021-37566MediaTek MT7603E out-of-bounds write in 1905 daemon8.8v3.11.3%2021-12-26Fix
CVE-2021-37565MediaTek MT7603E out-of-bounds read in 1905 daemon7.5v3.11.1%2021-12-26Fix
CVE-2021-37564MediaTek MT7603E out-of-bounds read in 1905 daemon7.5v3.11.1%2021-12-26Fix
CVE-2021-37563MediaTek MT7603E out-of-bounds write in wifi driver8.8v3.11.2%2021-12-26Fix
CVE-2021-37562MediaTek MT7603E out-of-bounds read in wifi driver7.5v3.11.1%2021-12-26Fix
CVE-2021-37561MediaTek MT7603E out-of-bounds write in wifi driver8.8v3.11.2%2021-12-26Fix
CVE-2021-37560MediaTek MT7603E out-of-bounds write in wifi driver8.8v3.11.2%2021-12-26Fix
CVE-2021-35055MediaTek MT7603E out-of-bounds write in wifi driver8.8v3.11.2%2021-12-26Fix
CVE-2021-32469MediaTek MT7603E out-of-bounds read in wifi driver7.5v3.11.0%2021-12-26Fix
CVE-2021-32468MediaTek MT7603E out-of-bounds read in wifi driver7.5v3.11.2%2021-12-26Fix
CVE-2021-32467MediaTek MT7603E out-of-bounds read in wifi driver7.5v3.11.0%2021-12-26Fix
CVE-2021-4169Cross-site scripting (XSS) Reflected in livehelperchat/livehelperchat6.1v3.10.9%2021-12-26Fix
CVE-2021-4168Cross-site request forgery (CSRF) in star7th/ShowDoc8.8v3.10.6%2021-12-26Fix
CVE-2021-45489NetBSD weak random number generator7.5v3.11.0%2021-12-25Fix
CVE-2021-45488NetBSD insufficient randomness7.5v3.11.0%2021-12-25Fix
CVE-2021-45487NetBSD insufficient randomness7.5v3.11.0%2021-12-25Fix
CVE-2021-45486Linux kernel weak cryptographic algorithm3.5v3.10.4%2021-12-25Fix
CVE-2021-45485Linux kernel weak cryptographic algorithm7.5v3.13.6%2021-12-25Exploit codeFix
CVE-2021-45484NetBSD weak random number generator7.5v3.11.0%2021-12-25Fix
CVE-2021-45483WebKitGTK use-after-free6.5v3.11.4%2021-12-25Fix
CVE-2021-45482WebKitGTK use-after-free6.5v3.11.4%2021-12-25Fix
CVE-2021-45481WebKitGTK memory leak6.5v3.11.4%2021-12-25Fix
CVE-2021-4166Out-of-bounds read in Vim/Vim7.1NVD v3.11.6%2021-12-25Fix
CVE-2021-4162Cross-site request forgery (CSRF) in Archivy/Archivy4.3v3.10.4%2021-12-25Fix
CVE-2021-45480Linux kernel memory leak5.5v3.10.4%2021-12-24Fix
CVE-2021-45474mediawiki cross-site scripting6.1v3.11.0%2021-12-24Fix
CVE-2021-45473mediawiki cross-site scripting6.1v3.11.2%2021-12-24Fix
CVE-2021-45472mediawiki cross-site scripting6.1v3.11.0%2021-12-24Fix
CVE-2021-45471MediaWiki EntitySchema extension vulnerability5.3v3.11.2%2021-12-24Fix
CVE-2021-23772github.com/kataras/iris arbitrary file write8.8v3.11.8%2021-12-24Fix
CVE-2021-23574js-data prototype pollution9.8v3.12.1%2021-12-24Fix
CVE-2021-23490parse-link-header regular expression denial of service (ReDoS)7.5v3.11.8%2021-12-24Fix
CVE-2021-20876Japan Total System GroupSession Free edition path traversal6.8v3.11.0%2021-12-24Fix
CVE-2021-20875Japan Total System GroupSession Free edition open redirect6.1v3.10.8%2021-12-24Fix
CVE-2021-20874Japan Total System GroupSession Free edition incorrect permission assignment7.5v3.11.3%2021-12-24Fix
CVE-2021-20827IDEC PLC plaintext password storage7.5v3.10.6%2021-12-24Fix
CVE-2021-20826IDEC PLC unprotected transport of credentials7.6v3.10.4%2021-12-24Fix
CVE-2021-4072Cross-site scripting (XSS) Stored in Elgg/Elgg5.4NVD v3.10.7%2021-12-24Fix
CVE-2021-3977Cross-site scripting (XSS) Stored in invoiceninja/invoiceninja5.4v3.10.6%2021-12-24Fix
CVE-2021-45470CIRCL cve-search regular expression denial of service7.5v3.11.9%2021-12-23
CVE-2021-45469Linux kernel out-of-bounds read7.8v3.10.5%2021-12-23Fix
CVE-2021-45463GEGL magick-load module vulnerability7.8v3.11.4%2021-12-23Fix
CVE-2021-45462Open5GS improper quantity validation7.5v3.14.4%2021-12-23
CVE-2021-44600oretnom23 Simple Online Mens Salon Management System SQL injection7.5v3.11.3%2021-12-23
CVE-2021-44599Online Enrollment Management System SQL injection7.5v3.11.2%2021-12-23
CVE-2021-44548Apache Solr information disclosure vulnerability through DataImportHandler9.8v3.15.1%2021-12-23Fix
CVE-2021-44543privoxy cross-site scripting6.1NVD v3.10.8%2021-12-23Fix
CVE-2021-44542Privoxy error handling memory leak7.5NVD v3.11.2%2021-12-23Fix
CVE-2021-44541Privoxy process_encrypted_request_headers function memory leak7.5NVD v3.11.4%2021-12-23Fix
CVE-2021-44540Privoxy get_url_spec_param function memory leak7.5NVD v3.11.3%2021-12-23Fix
CVE-2021-44526Zoho ManageEngine ServiceDesk Plus authentication bypass9.8v3.13.2%2021-12-23Fix
CVE-2021-44453mySCADA myPRO debug interface ping utility OS command injection9.8v3.11.4%2021-12-23Fix
CVE-2021-44273E2BN E2GUARDIAN improper certificate validation7.4v3.11.0%2021-12-23Fix
CVE-2021-43989mySCADA myPRO password storage vulnerability7.5v3.10.7%2021-12-23Fix
CVE-2021-43987mySCADA myPRO hidden functionality9.8v3.11.2%2021-12-23Fix
CVE-2021-43985mySCADA myPRO authentication bypass9.8v3.11.5%2021-12-23Fix
CVE-2021-43984mySCADA myPRO firmware update feature OS command injection9.8v3.11.2%2021-12-23Fix
CVE-2021-43981mySCADA myPRO email notification feature OS command injection9.8v3.11.2%2021-12-23Fix
CVE-2021-43854Inefficient regular expression complexity in nltk7.5CNA v3.12.6%2021-12-23Fix
CVE-2021-43849NiklasMerz cordova-plugin-fingerprint-aio DoS6.2CNA v3.10.3%2021-12-23Fix
CVE-2021-40161Revit out-of-bounds write7.8v3.11.4%2021-12-23Fix
CVE-2021-40160Revit out-of-bounds read7.8v3.11.5%2021-12-23Fix
CVE-2021-38022Google Chrome WebAuthentication inappropriate implementation6.5v3.10.9%2021-12-23Fix
CVE-2021-38021Google Chrome referrer inappropriate implementation6.5v3.10.8%2021-12-23Fix
CVE-2021-38020Google Chrome contacts picker insufficient policy enforcement4.3v3.10.7%2021-12-23Fix
CVE-2021-38019Google Chrome CORS insufficient policy enforcement6.5v3.10.8%2021-12-23Fix
CVE-2021-38018Google Chrome navigation inappropriate implementation6.5v3.10.8%2021-12-23Fix
CVE-2021-38017Google Chrome iframe sandbox insufficient policy enforcement8.8v3.10.8%2021-12-23Fix
CVE-2021-38016Google Chrome background fetch insufficient policy enforcement8.8v3.10.8%2021-12-23Fix
CVE-2021-38015Google Chrome input inappropriate implementation8.8v3.10.6%2021-12-23Fix
CVE-2021-38014Google Chrome Swiftshader out-of-bounds write8.8v3.10.8%2021-12-23Fix
CVE-2021-38013Google Chrome fingerprint recognition heap-based buffer overflow9.6v3.11.0%2021-12-23Fix
CVE-2021-38012Google Chrome V8 type confusion8.8v3.10.9%2021-12-23Fix
CVE-2021-38011Google Chrome storage foundation use-after-free8.8v3.10.8%2021-12-23Fix
CVE-2021-38010Google Chrome service workers inappropriate implementation6.5v3.10.9%2021-12-23Fix
CVE-2021-38009Google Chrome cache inappropriate implementation6.5v3.10.8%2021-12-23Fix
CVE-2021-38008Google Chrome media use-after-free8.8v3.11.4%2021-12-23Fix
CVE-2021-38007Google Chrome V8 type confusion8.8v3.10.9%2021-12-23Fix
CVE-2021-38006Google Chrome storage foundation use-after-free8.8v3.11.0%2021-12-23Fix
CVE-2021-38005Google Chrome loader use-after-free8.8v3.11.0%2021-12-23Fix
CVE-2021-35243SolarWinds Web Help Desk HTTP PUT and delete Methods Enabled5.3CNA v3.10.9%2021-12-23Fix
CVE-2021-30767Apple watchOS logic flaw5.5v3.10.3%2021-12-23Fix
CVE-2021-27007NetApp Virtual Desktop Service (VDS) takeover9.8v3.11.1%2021-12-23Fix
CVE-2021-27006NetApp StorageGRID SANtricity System Manager integration privilege escalation4.4v3.10.3%2021-12-23Fix
CVE-2021-23198mySCADA myPRO password parameter OS command injection9.8v3.11.2%2021-12-23Fix
CVE-2021-23175NVIDIA GeForce Experience Software incorrect authorization8.2CNA v3.10.4%2021-12-23Fix
CVE-2021-22657mySCADA myPRO API password parameter OS command injection9.8v3.11.2%2021-12-23Fix
CVE-2021-20318Artemis in EAP 7 deserialization of untrusted data7.2v3.11.7%2021-12-23Fix
CVE-2021-20050SonicWall SMA100 An improper access control7.5v3.10.9%2021-12-23Fix
CVE-2021-20049SonicWall SMA100 response discrepancy7.5v3.11.3%2021-12-23Fix
CVE-2021-4144TP-Link TL-WR802N V4(JP) OS command injection8.8v3.11.9%2021-12-23Fix
CVE-2021-4118Deserialization of untrusted data in pytorchlightning/pytorch-lightning7.8v3.11.0%2021-12-23Fix
CVE-2021-4079Google Chrome WebRTC out-of-bounds write8.8v3.10.8%2021-12-23Fix
CVE-2021-4078Google Chrome V8 type confusion8.8v3.11.0%2021-12-23Fix
CVE-2021-4068Google Chrome new tab page improper input validation6.5v3.11.3%2021-12-23Fix
CVE-2021-4067Google Chrome window manager use-after-free8.8v3.11.2%2021-12-23Fix
CVE-2021-4066Google Chrome ANGLE integer underflow8.8v3.11.3%2021-12-23Fix
CVE-2021-4065Google Chrome autofill use-after-free8.8v3.11.2%2021-12-23Fix
CVE-2021-4064Google Chrome screen capture use-after-free8.8v3.11.3%2021-12-23Fix
CVE-2021-4063Google Chrome developer tools use-after-free8.8v3.11.3%2021-12-23Fix
CVE-2021-4062Google Chrome BFCache heap-based buffer overflow8.8v3.11.4%2021-12-23Fix
CVE-2021-4061Google Chrome V8 type confusion8.8v3.11.4%2021-12-23Fix
CVE-2021-4059Google Chrome loader improper input validation6.5v3.11.3%2021-12-23Fix
CVE-2021-4058Google Chrome ANGLE heap-based buffer overflow8.8v3.11.4%2021-12-23Fix
CVE-2021-4057Google Chrome file API use-after-free8.8v3.12.1%2021-12-23Fix
CVE-2021-4056Google Chrome loader type confusion8.8v3.11.4%2021-12-23Fix
CVE-2021-4055Google Chrome extensions heap-based buffer overflow8.8v3.11.1%2021-12-23Fix
CVE-2021-4054Google Chrome autofill incorrect security UI6.5v3.11.2%2021-12-23Fix
CVE-2021-4053Google Chrome UI use-after-free8.8v3.11.2%2021-12-23Fix
CVE-2021-4052Google Chrome web apps use-after-free8.8v3.10.9%2021-12-23Fix
CVE-2021-4024Exposure of sensitive information to an unauthorized actor and origin validation error in podman6.5v3.11.1%2021-12-23Fix
CVE-2021-3622hivex stack-based buffer overflow4.3NVD v3.14.8%2021-12-23Fix
CVE-2021-3621SSSD command injection8.8v3.12.5%2021-12-23Fix
CVE-2021-3584foreman OS command injection7.2v3.13.9%2021-12-23Fix
CVE-2021-45461Sangoma restapps arbitrary code execution9.8v3.121.7%2021-12-22Fix
CVE-2021-45459Command injection in Node-windows9.8v3.14.1%2021-12-22Fix
CVE-2021-45419Starcharge Titan 180 Premium insufficient verification of data authenticity8.8v3.10.5%2021-12-22
CVE-2021-45418Starcharge Titan 180 Premium path traversal8.8v3.11.8%2021-12-22
CVE-2021-45267gpac null pointer dereference5.5v3.10.6%2021-12-22Fix
CVE-2021-45266gpac null pointer dereference7.5v3.11.1%2021-12-22Fix
CVE-2021-45263GPAC SVG attribute value deletion use-after-free5.5v3.10.6%2021-12-22Fix
CVE-2021-45262gpac use-after-free5.5v3.10.6%2021-12-22Fix
CVE-2021-45261GNU patch release of an invalid pointer5.5v3.10.7%2021-12-22Fix
CVE-2021-45260gpac null pointer dereference5.5v3.10.6%2021-12-22Fix
CVE-2021-45259gpac null pointer dereference5.5v3.10.7%2021-12-22Fix
CVE-2021-45258gpac stack-based buffer overflow5.5v3.10.6%2021-12-22Fix
CVE-2021-45257NASM Netwide Assembler An infinite loop5.5v3.10.7%2021-12-22
CVE-2021-45256NASM Netwide Assembler null pointer dereference5.5v3.10.6%2021-12-22
CVE-2021-44733Linux kernel use-after-free7.0v3.10.7%2021-12-22Exploit codeFix
CVE-2021-44659Thoughtworks gocd server-side request forgery9.8v3.12.5%2021-12-22
CVE-2021-44544Delta Electronics DIAEnergie HandlerEnergyType.ashx cross-site scripting6.1NVD v3.19.5%2021-12-22Fix
CVE-2021-44471Delta Electronics DIAEnergie DIAE_HandlerAlarmGroup.ashx stored cross-site scripting6.1NVD v3.10.7%2021-12-22Fix
CVE-2021-44031Quest Kace Desktop Authority unrestricted file upload9.8v3.12.1%2021-12-22Fix
CVE-2021-44030Quest Kace Desktop Authority cross-site scripting6.1v3.14.2%2021-12-22Fix
CVE-2021-44029Quest Kace Desktop Authority deserialization of untrusted data9.8v3.10.9%2021-12-22Fix
CVE-2021-44028Quest Kace Desktop Authority XML external entity injection5.5v3.13.0%2021-12-22Fix
CVE-2021-43853michaelschwarz Ajax.NET-Professional cross-site scripting in AjaxNetProfessional8.7CNA v3.10.8%2021-12-22Fix
CVE-2021-43851SQL injection vulnerability in anuko timetracker8.1CNA v3.11.2%2021-12-22Fix
CVE-2021-43804Out-of-bounds read when parsing RTCP BYE message in PJSIP7.3CNA v3.12.1%2021-12-22Fix
CVE-2021-43631Projectworlds hospital-management-system-in-php SQL injection9.8v3.11.1%2021-12-22
CVE-2021-43630Projectworlds hospital-management-system-in-php SQL injection8.8v3.12.0%2021-12-22
CVE-2021-43629Projectworlds hospital-management-system-in-php SQL injection9.8v3.11.1%2021-12-22
CVE-2021-43628Projectworlds hospital-management-system-in-php SQL injection9.8v3.11.1%2021-12-22
CVE-2021-43158Projectworlds Online Shopping System cross-site request forgery4.3v3.10.5%2021-12-22
CVE-2021-43157Projectworlds Online Shopping System SQL injection9.8v3.11.1%2021-12-22
CVE-2021-43156Projectworlds Online Book Store Project In PHP cross-site request forgery6.5v3.10.5%2021-12-22
CVE-2021-43155Projectworlds Online Book Store Project In PHP SQL injection9.8v3.11.1%2021-12-22
CVE-2021-40836F-Secure Atlant Outlook PST file scanning denial of service5.5v3.10.5%2021-12-22
CVE-2021-40612Opmantek Open-audit command execution9.8v3.12.0%2021-12-22Fix
CVE-2021-40418Blackmagic Design uninitialized variable use9.8v3.117.9%2021-12-22
CVE-2021-40417Blackmagic Design integer overflow to buffer overflow9.8v3.115.7%2021-12-22
CVE-2021-40394Gerbv out-of-bounds write9.8v3.12.9%2021-12-22Fix
CVE-2021-40393Gerbv out-of-bounds write9.8v3.13.1%2021-12-22Fix
CVE-2021-39306Realtek RTL8195AM out-of-bounds write9.8v3.11.3%2021-12-22Fix
CVE-2021-39013IBM Cloud Pak for Security information disclosure4.3CNA v3.00.8%2021-12-22Fix
CVE-2021-37706Potential integer underflow upon receiving STUN message in PJSIP7.3CNA v3.14.6%2021-12-22Fix
CVE-2021-36886Contact Form 7 Database Addon CFDB7 WordPress plugin cross-site request forgery (CSRF)8.8v3.10.5%2021-12-22Fix
CVE-2021-36885Contact Form 7 Database Addon CFDB7 WordPress plugin unauthenticated stored cross-site scripting6.1v3.10.8%2021-12-22Fix
CVE-2021-36750Zendesk Enc Datavault missing brute-force protection8.1v3.113.5%2021-12-22Exploit codeFix
CVE-2021-31558Delta Electronics DIAEnergie DIAE_hierarchyHandler.ashx stored cross-site scripting6.1v3.110.6%2021-12-22Fix
CVE-2021-23228Delta Electronics DIAEnergie error pages reflected cross-site scripting6.1NVD v3.10.6%2021-12-22Fix
CVE-2021-21953Anker authentication bypass8.1v3.11.0%2021-12-22
CVE-2021-21952Anker authentication bypass9.8v3.11.3%2021-12-22
CVE-2021-21937Advantech SQL injection6.5NVD v3.11.2%2021-12-22
CVE-2021-21936Advantech SQL injection8.8v3.11.4%2021-12-22
CVE-2021-21935Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21934Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21933Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21932Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21931Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21930Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21929Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21928Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21927Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21926Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21925Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21924Advantech SQL injection6.5NVD v3.120.2%2021-12-22
CVE-2021-21923Advantech SQL injection4.9NVD v3.11.1%2021-12-22
CVE-2021-21922Advantech SQL injection6.5NVD v3.11.1%2021-12-22
CVE-2021-21921Advantech SQL injection4.9NVD v3.11.1%2021-12-22
CVE-2021-21920Advantech SQL injection4.9NVD v3.11.1%2021-12-22
CVE-2021-21919Advantech SQL injection4.9NVD v3.11.1%2021-12-22
CVE-2021-21918Advantech SQL injection4.9NVD v3.11.1%2021-12-22
CVE-2021-21917Advantech ‘group_list’ page of the SQL injection8.8v3.11.4%2021-12-22
CVE-2021-21916Advantech ‘group_list’ page of the SQL injection8.8v3.11.4%2021-12-22Fix
CVE-2021-21915Advantech ‘group_list’ page of the SQL injection8.8v3.11.4%2021-12-22Fix
CVE-2021-21912Advantech Windows version of installation privilege escalation7.8v3.10.4%2021-12-22
CVE-2021-21911Advantech Windows version of installation privilege escalation7.8v3.10.3%2021-12-22
CVE-2021-21910Advantech Windows version of installation privilege escalation7.8v3.10.3%2021-12-22
CVE-2021-21909Garrett Metal Detectors path traversal8.1v3.11.0%2021-12-22
CVE-2021-21908Garrett Metal Detectors path traversal6.5v3.11.4%2021-12-22
CVE-2021-21907Garrett Metal Detectors CMA CLI getenv command functionality path traversal4.9v3.11.4%2021-12-22
CVE-2021-21906Garrett Metal Detectors how the CMA readfile function stack-based buffer overflow7.2v3.11.0%2021-12-22
CVE-2021-21905Garrett Metal Detectors how the CMA readfile function stack-based buffer overflow7.2v3.11.0%2021-12-22
CVE-2021-21904Garrett Metal Detectors CMA CLI setenv command path traversal7.2NVD v3.12.8%2021-12-22
CVE-2021-21903Garrett Metal Detectors CMA check_udp_crc function stack-based buffer overflow9.8v3.11.7%2021-12-22
CVE-2021-21902Garrett Metal Detectors CMA run_server_6877 functionality authentication bypass8.1v3.11.7%2021-12-22
CVE-2021-21901Garrett Metal Detectors CMA check_udp_crc function stack-based buffer overflow8.8NVD v3.11.6%2021-12-22
CVE-2021-21896Lantronix Web Manager FsBrowseClean functionality path traversal6.5v3.12.2%2021-12-22
CVE-2021-21895Lantronix Web Manager FsTFtp functionality path traversal7.2NVD v3.12.3%2021-12-22
CVE-2021-21894Lantronix Web Manager FsTFtp functionality path traversal9.1v3.12.4%2021-12-22
CVE-2021-21892Lantronix Web Manager FsUnmount functionality stack-based buffer overflow9.9v3.130.4%2021-12-22
CVE-2021-21891Lantronix Web Manager FsBrowseClean functionality stack-based buffer overflow9.1v3.13.0%2021-12-22
CVE-2021-21890Lantronix Web Manager FsBrowseClean functionality stack-based buffer overflow9.1v3.13.0%2021-12-22
CVE-2021-21889Lantronix Web Manager Ping functionality stack-based buffer overflow9.9v3.12.8%2021-12-22
CVE-2021-21888Lantronix OS command injection9.1v3.13.9%2021-12-22
CVE-2021-21887Lantronix Web Manager SslGenerateCSR functionality stack-based buffer overflow9.1v3.13.0%2021-12-22
CVE-2021-21886Lantronix Web Manager FSBrowsePage functionality path traversal4.3v3.11.9%2021-12-22
CVE-2021-21885Lantronix Web Manager FsMove functionality path traversal7.2v3.12.4%2021-12-22
CVE-2021-21884Lantronix Web Manager SslGenerateCSR functionality OS command injection9.1v3.15.3%2021-12-22
CVE-2021-21883Lantronix Web Manager Diagnostics: Ping functionality OS command injection9.9v3.16.1%2021-12-22
CVE-2021-21882Lantronix Web Manager FsUnmount functionality OS command injection8.8NVD v3.16.1%2021-12-22
CVE-2021-21881Lantronix OS command injection9.9v3.137.1%2021-12-22Nuclei
CVE-2021-21880Lantronix Web Manager FsCopyFile functionality path traversal7.2v3.12.4%2021-12-22
CVE-2021-21879Lantronix Web Manager file upload functionality path traversal8.8NVD v3.13.7%2021-12-22
CVE-2021-21878Lantronix local file inclusion4.9v3.11.2%2021-12-22
CVE-2021-21877Lantronix OS command injection9.1v3.12.7%2021-12-22
CVE-2021-21876Lantronix OS command injection9.1v3.12.7%2021-12-22
CVE-2021-21875Lantronix OS command injection9.1v3.12.9%2021-12-22
CVE-2021-21874Lantronix OS command injection9.1v3.12.9%2021-12-22
CVE-2021-21873Lantronix OS command injection9.1v3.12.9%2021-12-22
CVE-2021-21872Lantronix OS command injection9.9v3.16.1%2021-12-22
CVE-2021-45451Arm mbed TLS weak cryptographic algorithm7.5v3.10.9%2021-12-21Fix
CVE-2021-45450TrustedFirmware Mbed TLS weak cryptographic algorithm7.5v3.11.1%2021-12-21Fix
CVE-2021-45297gpac An infinite loop5.5v3.10.6%2021-12-21Fix
CVE-2021-45293WebAssembly Binaryen denial of service5.5v3.10.8%2021-12-21Fix
CVE-2021-45292gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-45291GPAC MP4Box command use-after-free5.5v3.10.6%2021-12-21Fix
CVE-2021-45290WebAssembly Binaryen denial of service7.5v3.11.5%2021-12-21Fix
CVE-2021-45289gpac denial of service5.5v3.10.6%2021-12-21Fix
CVE-2021-45288gpac filedump.c double free5.5v3.10.6%2021-12-21Fix
CVE-2021-45255Video Sharing Website SQL injection9.8v3.11.5%2021-12-21
CVE-2021-45253Simple Cold Storage Management System Project Simple Cold Storage Managment System SQL injection9.8v3.11.2%2021-12-21
CVE-2021-45252oretnom23 Simple Forum Discussion System SQL injection9.8v3.11.2%2021-12-21
CVE-2021-45091Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.4.3v3.10.6%2021-12-21Fix
CVE-2021-45090Stormshield Endpoint Security remote code execution9.8v3.12.9%2021-12-21Fix
CVE-2021-45089Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control.5.2v3.10.3%2021-12-21Fix
CVE-2021-44927gpac null pointer dereference5.5v3.10.7%2021-12-21Fix
CVE-2021-44926gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44925gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44924gpac An infinite loop5.5v3.10.6%2021-12-21Fix
CVE-2021-44923gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44922gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44921gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44920GPAC dump_od_to_saf function memory corruption5.5v3.10.6%2021-12-21Fix
CVE-2021-44919gpac gf_sg_vrml_mf_alloc function null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44918gpac null pointer dereference5.5v3.10.6%2021-12-21Fix
CVE-2021-44917Gnuplot A divide by zero5.5v3.10.7%2021-12-21Fix
CVE-2021-44877Dalmark Systeam Enterprise Resource Planning missing authorization7.5v3.11.0%2021-12-21Fix
CVE-2021-44876Dalmark Systeam Enterprise Resource Planning observable discrepancy5.3v3.10.8%2021-12-21Fix
CVE-2021-44875Dalmark Systeam Enterprise Resource Planning observable discrepancy5.3v3.10.8%2021-12-21Fix
CVE-2021-44874Dalmark Systeam Enterprise Resource Planning SQL injection8.8v3.11.0%2021-12-21Fix
CVE-2021-44860Opendesign Drawings SDK out-of-bounds read7.8v3.10.8%2021-12-21Fix
CVE-2021-44859Opendesign Drawings SDK out-of-bounds read7.8v3.10.8%2021-12-21Fix
CVE-2021-44423Opendesign Drawings Explorer out-of-bounds read7.8v3.10.8%2021-12-21Fix
CVE-2021-44422Opendesign Drawings SDK out-of-bounds write7.8v3.10.9%2021-12-21Fix
CVE-2021-44207Acclaim Systems USAHERDS use of hard-coded credentials8.1v3.117.6%2021-12-21KEV
CVE-2021-43839crypto-org-chain cronos Drainage of FeeCollector's Block Transaction Fees7.5CNA v3.11.3%2021-12-21Fix
CVE-2021-43587Dell PowerPath Management Appliance hard-coded cryptographic key8.2CNA v3.10.2%2021-12-21Fix
CVE-2021-38966IBM Cloud Pak for Automation cross-site scripting5.4CNA v3.00.5%2021-12-21Fix
CVE-2021-38900IBM Business Process Manager and Business Automation Workflow improper access control4.9CNA v3.01.1%2021-12-21Fix
CVE-2021-38893IBM Cloud Pak for Automation cross-site scripting6.4CNA v3.00.7%2021-12-21Fix
CVE-2021-36350Dell PowerScale OneFS improper authentication5.9CNA v3.11.1%2021-12-21Fix
CVE-2021-36341Dell Wyse Device Agent information disclosure5.5CNA v3.10.2%2021-12-21Fix
CVE-2021-36337Dell Wyse Management Suite inadequate encryption strength6.5CNA v3.10.4%2021-12-21Fix
CVE-2021-36336Dell Wyse Management Suite deserialization of untrusted data9.8CNA v3.11.7%2021-12-21Fix
CVE-2021-36318Dell Avamar sensitive information in log files6.7CNA v3.10.2%2021-12-21Fix
CVE-2021-36317Dell Avamar plaintext password storage6.7CNA v3.10.2%2021-12-21Fix
CVE-2021-36316Dell Avamar improper privilege management6.7CNA v3.10.7%2021-12-21Fix
CVE-2021-27453Mesa Labs AmegaView authentication bypass9.8v3.11.0%2021-12-21
CVE-2021-27451Mesa Labs AmegaView improper authentication9.8v3.10.8%2021-12-21
CVE-2021-27449Mesa Labs AmegaView command injection8.8NVD v3.13.1%2021-12-21
CVE-2021-27447Mesa Labs AmegaView command injection9.8v3.12.3%2021-12-21
CVE-2021-27445Mesa Labs AmegaView improper privilege management7.8v3.10.2%2021-12-21
CVE-2021-24981Directorist Business Directory WordPress plugin CSRF to remote file upload7.5NVD v3.10.8%2021-12-21Fix
CVE-2021-24956Blog2Social WordPress plugin reflected cross-site scripting6.1NVD v3.11.4%2021-12-21NucleiFix
CVE-2021-24941Icegram WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2021-12-21Fix
CVE-2021-24907Everest Forms WordPress plugin reflected cross-site scripting6.1NVD v3.10.9%2021-12-21Fix
CVE-2021-24849WCFM - WooCommerce Multivendor Marketplace WordPress plugin unauthenticated SQL injection9.8NVD v3.18.5%2021-12-21NucleiFix
CVE-2021-24846Ni WooCommerce Custom Order Status WordPress plugin Subscriber+ SQL injection8.8NVD v3.11.3%2021-12-21Fix
CVE-2021-24750WP Visitor Statistics (Real Time Traffic) WordPress plugin Subscriber+ SQL injection8.8NVD v3.138.3%2021-12-21NucleiExploit codeFix
CVE-2021-24739Logo Carousel WordPress plugin Unauthorised Private post access8.1NVD v3.11.0%2021-12-21Fix
CVE-2021-24738Logo Carousel WordPress plugin Contributor+ stored cross-site scripting5.4NVD v3.10.6%2021-12-21Fix
CVE-2021-24578SportsPress WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2021-12-21Fix
CVE-2021-4139Cross-site scripting (XSS) Stored in pimcore/pimcore9.0v3.10.9%2021-12-21Fix
CVE-2021-44916Opmantek Open-audit cross-site scripting6.1v3.13.7%2021-12-20Exploit codeFix
CVE-2021-44858mediawiki incorrect default permissions7.5v3.11.3%2021-12-20Fix
CVE-2021-44790Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server9.8v3.197.1%2021-12-20Exploit codeFix
CVE-2021-44732Arm mbed TLS double free9.8v3.12.6%2021-12-20Fix
CVE-2021-44699Adobe Audition MP4 File Parsing out-of-bounds read information disclosure3.3CNA v3.11.8%2021-12-20Fix
CVE-2021-44698Adobe Audition MP4 File Parsing out-of-bounds read information disclosure3.3CNA v3.11.8%2021-12-20Fix
CVE-2021-44697Adobe Audition MOV File Parsing out-of-bounds read information disclosure3.3CNA v3.11.8%2021-12-20Fix
CVE-2021-44676Zoho ManageEngine Access Manager Plus improper authentication9.8v3.14.4%2021-12-20Fix
CVE-2021-44675Zoho Manageengine Servicedesk Plus Msp improper authentication9.8v3.16.5%2021-12-20Fix
CVE-2021-44554Cybelesoft Thinfinity Virtualui observable discrepancy5.3v3.11.0%2021-12-20
CVE-2021-44525Zoho ManageEngine PAM360 improper authentication9.8v3.13.4%2021-12-20Fix
CVE-2021-44263Gurock Testrail cross-site scripting5.4v3.10.6%2021-12-20Fix
CVE-2021-44224Possible null dereference or SSRF in forward proxy configurations in Apache HTTP Server8.2v3.182.3%2021-12-20Fix
CVE-2021-44183Adobe Dimension TIF File Parsing out-of-bounds read information disclosure3.3CNA v3.01.5%2021-12-20Fix
CVE-2021-44182Adobe Dimension SVG File Parsing out-of-bounds read information disclosure3.3CNA v3.01.7%2021-12-20Fix
CVE-2021-44181Adobe Dimension GIF File Parsing out-of-bounds write remote code execution7.8CNA v3.03.1%2021-12-20Fix
CVE-2021-44180Adobe Dimension PCX File Parsing out-of-bounds write remote code execution7.8CNA v3.03.1%2021-12-20Fix
CVE-2021-44179Adobe Dimension GIF File Parsing memory corruption remote code execution7.8CNA v3.03.0%2021-12-20Fix
CVE-2021-44164Chain Sea Information Integration Co., Ltd ai chatbot system arbitrary file upload9.8CNA v3.12.1%2021-12-20Fix
CVE-2021-44163Chain Sea Information Integration Co., Ltd ai chatbot system reflected XSS6.1CNA v3.10.8%2021-12-20Fix
CVE-2021-44162Chain Sea Information Integration Co., Ltd ai chatbot system path traversal7.5CNA v3.11.7%2021-12-20Fix
CVE-2021-441594MOSAn GCB Doctor unrestricted upload of file9.8CNA v3.13.4%2021-12-20Fix
CVE-2021-43847Authorization bypass in Space Invite in HumHub6.5CNA v3.11.2%2021-12-20Fix
CVE-2021-43846solidusio solidus CSRF forgery protection bypass for Spree::OrdersController#populate5.3CNA v3.10.6%2021-12-20Fix
CVE-2021-43844Externally controlled reference to a resource in another sphere in MSEdgeRedirect8.8CNA v3.13.3%2021-12-20Fix
CVE-2021-43843Insufficient patch for regular expression denial of service (ReDoS) to jsx-slack5.3CNA v3.11.9%2021-12-20Fix
CVE-2021-43842Stored XSS via SVG file upload in Wiki.js5.4CNA v3.10.7%2021-12-20Fix
CVE-2021-43763Adobe Dimension TIF File Parsing out-of-bounds read information disclosure3.3CNA v3.01.7%2021-12-20Fix
CVE-2021-43750Adobe Premiere Rush null pointer dereference local denial of service5.5CNA v3.11.4%2021-12-20Fix
CVE-2021-43749Adobe Premiere Rush null pointer dereference local denial of service5.5CNA v3.11.4%2021-12-20Fix
CVE-2021-43748Adobe Premiere Rush null pointer dereference local denial of service5.5CNA v3.11.4%2021-12-20Fix
CVE-2021-43747Adobe Premiere Rush WAV file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-43746Adobe Premiere Rush MP4 File Parsing uninitialized variable information disclosure5.5CNA v3.11.7%2021-12-20Fix
CVE-2021-43441Iorder An HTML injection5.3v3.11.2%2021-12-20
CVE-2021-43440Iorder Source Code stored cross-site scripting6.1v3.11.4%2021-12-20
CVE-2021-43439Iresturant Add Review function remote code execution9.8v3.13.4%2021-12-20
CVE-2021-43438Iresturant Signup form stored cross-site scripting5.4v3.10.7%2021-12-20
CVE-2021-43437Engineers Online Portal injection8.8v3.11.2%2021-12-20
CVE-2021-43030Adobe Premiere Rush MP4 File Parsing uninitialized variable information disclosure3.3CNA v3.01.3%2021-12-20Fix
CVE-2021-43029Adobe Premiere Rush M4A file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-43028Adobe Premiere Rush M4A file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-43026Adobe Premiere Rush MXF file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-43025Adobe Premiere Rush SVG file memory corruption remote code execution7.8CNA v3.02.3%2021-12-20Fix
CVE-2021-43024Adobe Premiere Rush WAV file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-43023Adobe Premiere Rush EPS/TIFF file memory corruption remote code execution7.8CNA v3.02.3%2021-12-20Fix
CVE-2021-43022Adobe Premiere Rush PNG file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-43021Adobe Premiere Rush EXR file memory corruption remote code execution7.8CNA v3.12.3%2021-12-20Fix
CVE-2021-42913Samsung Syncthru Web Service insufficiently protected credentials7.5v3.11.8%2021-12-20Exploit codeFix
CVE-2021-42809The Sentinel Protection Installer does not properly restrict loading Dynamic Link library6.5CNA v3.10.3%2021-12-20
CVE-2021-42808Thales Sentinel Protection Installer improper access control6.5CNA v3.10.2%2021-12-20
CVE-2021-42138Thales CPL Safenet Authentication Service insufficient entropy7.2CNA v3.10.6%2021-12-20Fix
CVE-2021-41561Apache Parquet-MR potential DoS in case of malicious Parquet file7.5v3.13.1%2021-12-20Fix
CVE-2021-40784Adobe Premiere Rush WAV file memory corruption remote code execution7.8CNA v3.02.0%2021-12-20Fix
CVE-2021-40783Adobe Premiere Rush WAV file memory corruption remote code execution7.8CNA v3.02.0%2021-12-20Fix
CVE-2021-38421Fuji Electric Tellus Lite V-simulator out-of-bounds read7.1v3.10.8%2021-12-20
CVE-2021-38419Fuji Electric Tellus Lite V-simulator out-of-bounds write7.8v3.10.9%2021-12-20
CVE-2021-38415Fuji Electric Tellus Lite V-simulator heap based buffer overflow7.8v3.11.0%2021-12-20
CVE-2021-38413Fuji Electric Tellus Lite V-simulator stack based buffer overflow7.8v3.11.0%2021-12-20
CVE-2021-38409Fuji Electric Tellus Lite V-simulator uninitialized pointer7.8v3.10.7%2021-12-20
CVE-2021-38401Fuji Electric Tellus Lite V-simulator untrusted pointer dereference7.8v3.10.9%2021-12-20
CVE-2021-36889tarteaucitron.js WordPress plugin cross-site scripting4.8v3.10.6%2021-12-20Fix
CVE-2021-36887tarteaucitron.js WordPress plugin cross-site scripting8.8v3.10.5%2021-12-20Fix
CVE-2021-35248SolarWinds Orion unrestricted access to Orion.UserSettings SWIS entity for low-privilege users6.8CNA v3.10.9%2021-12-20Fix
CVE-2021-35244Unrestricted file upload causing remote code execution: Orion Platform6.8CNA v3.15.8%2021-12-20Fix
CVE-2021-35234SolarWinds Orion Core Exposed Dangerous Functions Privileged Escalation8.0CNA v3.12.8%2021-12-20Fix
CVE-2021-22057VMware Workspace ONE Access authentication bypass8.8v3.11.1%2021-12-20Fix
CVE-2021-22056VMware Workspace ONE Access and Identity Manager server-side request forgery7.5v3.11.6%2021-12-20Fix
CVE-2021-3860JFrog Artifactory SQL injection8.8CNA v3.11.0%2021-12-20Fix
CVE-2021-45041salesagility SuiteCRM SQL injection8.8v3.12.2%2021-12-19Exploit codeFix
CVE-2021-43083Apache PLC4X buffer overflow in PLC4C via crafted server response8.8v3.11.9%2021-12-19Fix
CVE-2021-4136Heap-based buffer overflow in Vim/Vim7.8NVD v3.12.0%2021-12-19Fix
CVE-2021-45105Apache Log4j2 does not always protect from infinite recursion in lookup evaluation5.9NVD v3.1100.0%2021-12-18Emerging ThreatsSnortExploit codeFix
CVE-2021-4131Cross-site request forgery (CSRF) in livehelperchat/livehelperchat8.8v3.10.5%2021-12-18Fix
CVE-2021-4130Cross-site request forgery (CSRF) in snipe/Snipe-IT8.8v3.10.5%2021-12-18Fix
CVE-2021-45042HashiCorp Vault kernel panic4.9v3.11.4%2021-12-17Fix
CVE-2021-45038mediawiki information disclosure5.3v3.11.4%2021-12-17Fix
CVE-2021-44857mediawiki missing authorization6.5v3.10.9%2021-12-17Fix
CVE-2021-44145Apache NiFi information disclosure by XXE6.5v3.11.7%2021-12-17Fix
CVE-2021-44035Wolters Kluwer TeamMate attachment upload handling vulnerability7.8v3.10.5%2021-12-17
CVE-2021-43840Path traversal in message_bus4.4CNA v3.11.9%2021-12-17Fix
CVE-2021-43838Regular expression denial of service (ReDoS) in jsx-slack5.3CNA v3.11.4%2021-12-17Fix
CVE-2021-43678Wechat-php-sdk is affected by a cross-site scripting6.1v3.10.8%2021-12-17
CVE-2021-42584convos A stored cross-site scripting5.4v3.10.7%2021-12-17
CVE-2021-41843openemr calendar search function SQL injection6.5v3.113.7%2021-12-17
CVE-2021-41500Incorrect comparison in Cvxopt7.5v3.11.2%2021-12-17Fix
CVE-2021-41499Classic buffer overflow in Pyo7.5v3.11.4%2021-12-17Fix
CVE-2021-41498Pyo ajaxsoundstudio.com buffer overflow7.5v3.11.1%2021-12-17Fix
CVE-2021-41497Bounter null pointer reference7.5v3.11.0%2021-12-17
CVE-2021-41496Buffer copy without checking size of input in NumPy5.5v3.10.4%2021-12-17Fix
CVE-2021-41495NumPy null pointer dereference5.3v3.11.2%2021-12-17Fix
CVE-2021-41451TP-Link Archer AX10 HTTP request smuggling7.5v3.12.4%2021-12-17
CVE-2021-40853TCMAN GIM missing authorization7.2v3.10.8%2021-12-17
CVE-2021-40852TCMAN GIM open redirect6.1v3.10.7%2021-12-17Fix
CVE-2021-40851TCMAN GIM SQL injection7.5v3.11.3%2021-12-17Fix
CVE-2021-40850TCMAN GIM SQL injection9.8v3.10.9%2021-12-17Fix
CVE-2021-38883IBM Business Process Manager cross-site scripting5.4CNA v3.00.5%2021-12-17Fix
CVE-2021-37863Mattermost Server post creation denial of service3.5CNA v3.10.8%2021-12-17Fix
CVE-2021-37862Mattermost improper check for exceptional conditions3.7CNA v3.10.7%2021-12-17Fix
CVE-2021-36780Linux Foundation Longhorn unauthorized data access from replicas8.1CNA v3.10.5%2021-12-17Fix
CVE-2021-36779Host operations allowed in privileged Longhorn managed pods9.6CNA v3.10.7%2021-12-17Fix
CVE-2021-34141Incorrect comparison in NumPy5.3NVD v3.11.7%2021-12-17Fix
CVE-2021-33430NumPy buffer overflow (Disputed)5.3v3.11.1%2021-12-17Fix
CVE-2021-32499SICK SOPAS ET injection7.5v3.10.8%2021-12-17Fix
CVE-2021-32498SICK SOPAS ET path traversal8.6v3.10.9%2021-12-17Fix
CVE-2021-32497SICK SOPAS Engineering Tool SDD emulator vulnerability8.6v3.10.7%2021-12-17Fix
CVE-2021-23814Unrestricted upload of file with dangerous type in UniSharp/laravel-filemanager8.8v3.11.8%2021-12-17Fix
CVE-2021-23803latte/latte Access Control Bypass9.8v3.11.6%2021-12-17Fix
CVE-2021-23797http-server-node directory traversal9.8v3.11.7%2021-12-17Exploit code
CVE-2021-23450dojo prototype pollution9.8NVD v3.130.4%2021-12-17Fix
CVE-2021-22054Omnissa Workspace ONE server-side request forgery7.5NVD v3.199.7%2021-12-17KEVNucleiEmerging ThreatsExploit codeFix
CVE-2021-20608Mitsubishi Electric GX Works2 improper length parameter handling7.5v3.12.7%2021-12-17Fix
CVE-2021-20607Mitsubishi Electric GX Works2 integer underflow5.5v3.10.9%2021-12-17Fix
CVE-2021-20606Mitsubishi Electric GX Works2 out-of-bounds read5.5v3.10.9%2021-12-17Fix
CVE-2021-4132Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat5.4NVD v3.10.6%2021-12-17Fix
CVE-2021-4011xorg-x11-server out-of-bounds access7.8NVD v3.10.6%2021-12-17Fix
CVE-2021-4010xorg-x11-server out-of-bounds access7.8NVD v3.10.6%2021-12-17Fix
CVE-2021-4009xorg-x11-server out-of-bounds access7.8NVD v3.10.6%2021-12-17Fix
CVE-2021-4008xorg-x11-server out-of-bounds access7.8NVD v3.10.6%2021-12-17Fix
CVE-2021-0903MT6873 improper restriction of operations within the bounds of a memory buffer in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0902MT6873 improper input validation in apusys4.4NVD v3.10.1%2021-12-17Fix
CVE-2021-0901MT6873 integer overflow or wraparound in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0900MT6873 improper input validation in apusys4.4NVD v3.10.1%2021-12-17Fix
CVE-2021-0899MT6873 use-after-free in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0898MT6873 use-after-free in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0897MT6873 time-of-check time-of-use (toctou) race condition in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0896MT6873 improper restriction of operations within the bounds of a memory buffer in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0895MT6873 improper restriction of operations within the bounds of a memory buffer in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0894MT6873 improper restriction of operations within the bounds of a memory buffer in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0893MT6873 use-after-free in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0679MT6873 improper check or handling of exceptional conditions in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0678MT6873 improper restriction of operations within the bounds of a memory buffer in apusys6.7NVD v3.10.1%2021-12-17Fix
CVE-2021-0677MT6833 integer overflow or wraparound in ccu driver4.4NVD v3.10.1%2021-12-17Fix
CVE-2021-0676MT6762 exposure of sensitive information to an unauthorized actor in geniezone driver4.4NVD v3.10.1%2021-12-17Fix
CVE-2021-0674MT6570 improper input validation in alac decoder5.5NVD v3.10.5%2021-12-17Fix
CVE-2021-0673MT6779 improper input validation in Audio Aurisys HAL7.8NVD v3.10.7%2021-12-17Fix
CVE-2021-45102wisc HTCondor incorrect authorization8.8v3.10.9%2021-12-16Fix
CVE-2021-45101HTCondor SchedD and Collector daemons information disclosure8.1v3.10.9%2021-12-16Fix
CVE-2021-45100Linux kernel cleartext transmission of sensitive information7.5v3.10.9%2021-12-16Fix
CVE-2021-45099The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against co8.8v3.11.3%2021-12-16Fix
CVE-2021-45098An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. T7.5v3.11.8%2021-12-16Fix
CVE-2021-45097KNIME Server insufficiently protected credentials5.5v3.10.2%2021-12-16
CVE-2021-45096KNIME Analytics Platform XML external entity injection4.3v3.11.1%2021-12-16Fix
CVE-2021-45095Linux kernel resource leak5.5v3.10.3%2021-12-16Fix
CVE-2021-45092Cybelesoft Thinfinity Virtualui injection9.8v3.140.0%2021-12-16NucleiExploit code
CVE-2021-45088GNOME Epiphany cross-site scripting6.1v3.11.4%2021-12-16Fix
CVE-2021-45087GNOME Epiphany cross-site scripting6.1v3.11.5%2021-12-16Fix
CVE-2021-45086GNOME Epiphany cross-site scripting6.1v3.11.3%2021-12-16Fix
CVE-2021-45085GNOME Epiphany cross-site scripting6.1v3.11.5%2021-12-16Fix
CVE-2021-44317PHPGurukul Bus Pass Management System cross-site scripting5.4v3.10.5%2021-12-16
CVE-2021-44315PHPGurukul Bus Pass Management System files accessible to external parties7.5v3.11.7%2021-12-16
CVE-2021-44023Trend Micro Security (Consumer) A link following7.1v3.10.4%2021-12-16Fix
CVE-2021-43837Template injection in vault-cli8.4CNA v3.15.0%2021-12-16Fix
CVE-2021-43834eLabFTW single sign-on authentication authentication bypass9.1CNA v3.11.0%2021-12-16Fix
CVE-2021-43833Account takeover in eLabFTW8.1CNA v3.10.8%2021-12-16Fix
CVE-2021-43812Open redirect in nextjs-auth06.4CNA v3.10.7%2021-12-16Fix
CVE-2021-42912FiberHome An5506-04-f OS command injection8.8v3.110.9%2021-12-16
CVE-2021-42550QOS.ch logback RCE from attacker with configuration edit priviledges through JNDI lookup6.6v3.14.4%2021-12-16Fix
CVE-2021-41962Vehicle Service Management System Sourcecodester cross-site scripting4.8NVD v3.10.6%2021-12-16
CVE-2021-41262SQL injection in Galette8.8CNA v3.11.1%2021-12-16Fix
CVE-2021-41261Stored cross-site scripting in Galette8.1CNA v3.10.6%2021-12-16Fix
CVE-2021-41260Missing CSRF checks in Galette8.2CNA v3.10.4%2021-12-16Fix
CVE-2021-41028Fortinet FortiClientEMS improper certificate validation8.2CNA v3.10.2%2021-12-16Fix
CVE-2021-40835URL address bar spoofing in F-Secure SAFE Browser for iOS4.3v3.10.7%2021-12-16Fix
CVE-2021-38244cbioportal regular expression denial of service7.5v3.11.2%2021-12-16
CVE-2021-37262jflyfox jfinal_cms injection7.5v3.11.0%2021-12-16
CVE-2021-26800User Management System In PHP Stored Procedure cross-site request forgery6.5v3.10.4%2021-12-16
CVE-2021-4124Cross-site scripting (XSS) Stored in meetecho/janus-gateway6.1NVD v3.10.9%2021-12-16Fix
CVE-2021-4123Cross-site request forgery (CSRF) in livehelperchat/livehelperchat6.5v3.10.5%2021-12-16Fix
CVE-2021-4121Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm6.1v3.10.8%2021-12-16Fix
CVE-2021-3960Privilege escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)7.1CNA v3.10.3%2021-12-16Fix
CVE-2021-3959Server-side request forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)6.8CNA v3.11.7%2021-12-16Fix
CVE-2021-3179Gglocker insufficiently protected credentials5.5v3.10.4%2021-12-16
CVE-2021-45078GNU Binutils out-of-bounds write7.8v3.11.3%2021-12-15Fix
CVE-2021-45043Hd-network Real-time Monitoring System path traversal7.5v3.133.1%2021-12-15NucleiExploit code
CVE-2021-45018Catfish Cms cross-site scripting6.1v3.10.6%2021-12-15
CVE-2021-45017Catfish Cms cross-site request forgery8.8v3.10.4%2021-12-15
CVE-2021-44657StackStorm Jinja interpreter vulnerability8.8v3.12.5%2021-12-15Fix
CVE-2021-44655Online Pre-owned/used Car Showroom Management System SQL injection9.8v3.16.0%2021-12-15Exploit code
CVE-2021-44653oretnom23 Online Magazine Management System SQL injection9.8v3.16.0%2021-12-15Exploit code
CVE-2021-44350ThinkPHP ThinkPHP5 SQL injection9.8v3.11.4%2021-12-15Fix
CVE-2021-44116Cross-site scripting in Anchor CMS6.1v3.10.7%2021-12-15
CVE-2021-43935Hillrom Welch Allyn Q-Stress Cardiac Stress Testing System authentication bypass9.8v3.11.1%2021-12-15Fix
CVE-2021-43908Microsoft Visual Studio Code spoofing4.3CNA v3.12.8%2021-12-15Exploit codeFix
CVE-2021-43907Microsoft Visual Studio Code WSL Extension remote code execution9.8CNA v3.13.8%2021-12-15Fix
CVE-2021-43905Microsoft Office app remote code execution9.6CNA v3.12.8%2021-12-15Fix
CVE-2021-43899Microsoft 4K Wireless Display Adapter remote code execution9.8CNA v3.12.4%2021-12-15Fix
CVE-2021-43896Microsoft PowerShell spoofing5.5CNA v3.12.3%2021-12-15Fix
CVE-2021-43893Microsoft Windows Encrypting File System (EFS) elevation of privilege7.5CNA v3.16.6%2021-12-15Exploit codeFix
CVE-2021-43892Microsoft BizTalk ESB Toolkit spoofing7.4CNA v3.12.9%2021-12-15Fix
CVE-2021-43891Microsoft Visual Studio Code remote code execution7.8CNA v3.113.8%2021-12-15Exploit codeFix
CVE-2021-43890Microsoft Windows AppX Installer spoofing7.1CNA v3.110.3%2021-12-15KEVFix
CVE-2021-43889Microsoft Defender for IoT remote code execution7.2CNA v3.12.2%2021-12-15Fix
CVE-2021-43888Microsoft Defender for IoT information disclosure7.5CNA v3.13.0%2021-12-15Fix
CVE-2021-43883Microsoft Windows Installer elevation of privilege7.8CNA v3.112.0%2021-12-15Exploit codeFix
CVE-2021-43882Microsoft Defender for IoT remote code execution9.0CNA v3.12.4%2021-12-15Fix
CVE-2021-43880Microsoft Windows Mobile Device Management elevation of privilege5.5CNA v3.10.7%2021-12-15Fix
CVE-2021-43877ASP.NET Core and Visual Studio elevation of privilege8.8CNA v3.10.7%2021-12-15Fix
CVE-2021-43875Microsoft Office Graphics remote code execution7.8CNA v3.15.1%2021-12-15Fix
CVE-2021-43836PHP file inclusion in the Sulu admin panel8.5CNA v3.12.0%2021-12-15Fix
CVE-2021-43835Privilege escalation in the Sulu Admin panel7.2CNA v3.11.1%2021-12-15Fix
CVE-2021-43831Files on the host computer can be accessed from the Gradio interface7.7CNA v3.13.8%2021-12-15NucleiFix
CVE-2021-43806SQL injection in Tuleap8.8CNA v3.11.5%2021-12-15Fix
CVE-2021-43782Indirect LDAP injection in Tuleap6.7CNA v3.11.4%2021-12-15Fix
CVE-2021-43675LycheeOrg Lychee cross-site scripting6.1v3.10.9%2021-12-15
CVE-2021-43518Teeworlds buffer overflow7.8v3.11.4%2021-12-15Fix
CVE-2021-43326Automox incorrect default permissions7.8v3.11.2%2021-12-15Exploit codeFix
CVE-2021-43325Automox incorrect default permissions7.8v3.10.2%2021-12-15Fix
CVE-2021-43256Microsoft Excel remote code execution7.8CNA v3.12.1%2021-12-15Fix
CVE-2021-43255Microsoft Office Trust Center spoofing5.5CNA v3.12.0%2021-12-15Fix
CVE-2021-43248Microsoft Windows Digital Media Receiver elevation of privilege7.8CNA v3.10.5%2021-12-15Fix
CVE-2021-43247Microsoft Windows TCP/IP driver elevation of privilege7.8CNA v3.10.9%2021-12-15Fix
CVE-2021-43246Microsoft Windows Hyper-V denial of service5.6CNA v3.10.8%2021-12-15Fix
CVE-2021-43245Microsoft Windows Digital TV Tuner elevation of privilege7.8CNA v3.10.5%2021-12-15Fix
CVE-2021-43244Microsoft Windows Kernel information disclosure6.5CNA v3.10.8%2021-12-15Fix
CVE-2021-43243Microsoft VP9 Video Extensions information disclosure5.5CNA v3.10.8%2021-12-15Fix
CVE-2021-43242Microsoft SharePoint server spoofing7.6CNA v3.11.2%2021-12-15Fix
CVE-2021-43240Microsoft Windows NTFS Set Short Name elevation of privilege7.8CNA v3.10.6%2021-12-15Fix
CVE-2021-43239Microsoft Windows Recovery Environment agent elevation of privilege7.1CNA v3.10.5%2021-12-15Fix
CVE-2021-43238Microsoft Windows Remote Access elevation of privilege7.8CNA v3.10.9%2021-12-15Fix
CVE-2021-43237Microsoft Windows Setup elevation of privilege7.8CNA v3.11.0%2021-12-15Fix
CVE-2021-43236Microsoft Message Queuing information disclosure7.5CNA v3.13.0%2021-12-15Fix
CVE-2021-43235Microsoft Windows storage Spaces controller information disclosure5.5CNA v3.10.8%2021-12-15Fix
CVE-2021-43234Microsoft Windows Fax service remote code execution7.8CNA v3.12.1%2021-12-15Fix
CVE-2021-43233Microsoft Windows remote Desktop client remote code execution7.5CNA v3.12.2%2021-12-15Fix
CVE-2021-43232Microsoft Windows Event Tracing remote code execution7.8CNA v3.12.1%2021-12-15Fix
CVE-2021-43231Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.7%2021-12-15Fix
CVE-2021-43230Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.6%2021-12-15Fix
CVE-2021-43229Microsoft Windows NTFS elevation of privilege7.8CNA v3.11.8%2021-12-15Exploit codeFix
CVE-2021-43228Microsoft Windows SymCrypt denial of service7.5CNA v3.13.7%2021-12-15Fix
CVE-2021-43227Microsoft Windows storage Spaces controller information disclosure5.5CNA v3.10.8%2021-12-15Fix
CVE-2021-43226Microsoft Windows privilege escalation7.8CNA v3.13.1%2021-12-15KEVExploit codeFix
CVE-2021-43225Microsoft Bot Framework SDK remote code execution7.5CNA v3.12.8%2021-12-15Fix
CVE-2021-43224Microsoft Windows Common Log File System driver information disclosure5.5CNA v3.13.9%2021-12-15Exploit codeFix
CVE-2021-43223Microsoft Windows Remote Access Connection Manager elevation of privilege7.8CNA v3.10.5%2021-12-15Fix
CVE-2021-43222Microsoft Message Queuing information disclosure7.5CNA v3.13.0%2021-12-15Fix
CVE-2021-43219Microsoft Windows DirectX Graphics Kernel file denial of service7.4CNA v3.13.7%2021-12-15Fix
CVE-2021-43217Microsoft Windows Encrypting File System (EFS) remote code execution8.1CNA v3.16.4%2021-12-15Fix
CVE-2021-43216Microsoft Local Security Authority (LSA) server information disclosure6.5CNA v3.13.2%2021-12-15Fix
CVE-2021-43215Microsoft Windows iSNS server memory corruption vulnerability can lead to remote code execution9.8CNA v3.12.7%2021-12-15Fix
CVE-2021-43214Microsoft Raw Image Extension web Media extensions remote code execution7.8CNA v3.11.7%2021-12-15Fix
CVE-2021-43207Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.10.6%2021-12-15Fix
CVE-2021-43113Itextpdf iText command injection in itext7-core9.8v3.15.2%2021-12-15Fix
CVE-2021-42945zzcms A SQL injection9.8v3.11.0%2021-12-15
CVE-2021-42320Microsoft SharePoint server spoofing8.0CNA v3.11.5%2021-12-15Fix
CVE-2021-42315Microsoft Defender for IoT remote code execution8.8CNA v3.12.2%2021-12-15Fix
CVE-2021-42314Microsoft Defender for IoT remote code execution8.8CNA v3.12.2%2021-12-15Fix
CVE-2021-42313Microsoft Defender for IoT remote code execution10.0CNA v3.13.8%2021-12-15Fix
CVE-2021-42312Microsoft Defender for IoT elevation of privilege7.8CNA v3.10.5%2021-12-15Fix
CVE-2021-42311Microsoft Defender for IoT remote code execution10.0CNA v3.14.2%2021-12-15Fix
CVE-2021-42310Microsoft Defender for IoT remote code execution8.1CNA v3.12.0%2021-12-15Fix
CVE-2021-42309Microsoft SharePoint server remote code execution8.8CNA v3.12.7%2021-12-15Fix
CVE-2021-42295Microsoft Office Visual Basic for Applications information disclosure5.5CNA v3.12.9%2021-12-15Fix
CVE-2021-42294Microsoft SharePoint server remote code execution7.2CNA v3.12.2%2021-12-15Fix
CVE-2021-42293Microsoft Jet Red Database Engine and Access Connectivity Engine elevation of privilege6.5CNA v3.12.8%2021-12-15Fix
CVE-2021-42220Dolibarr cross-site scripting (XSS)5.4v3.10.9%2021-12-15Fix
CVE-2021-42216Anonaddy weak cryptography9.8v3.11.2%2021-12-15
CVE-2021-41871Socomec Remote View Pro cross-site scripting5.4v3.10.5%2021-12-15Fix
CVE-2021-41870Socomec Remote View Pro unrestricted file upload8.8v3.11.1%2021-12-15Fix
CVE-2021-41844Crocoblock JetEngine improper input validation9.8v3.11.1%2021-12-15Fix
CVE-2021-41560OpenCATS unrestricted file upload9.8v3.111.1%2021-12-15Exploit code
CVE-2021-41557Sofico Miles Rich Internet Application cross-site scripting5.4v3.10.8%2021-12-15
CVE-2021-41365Microsoft Defender for IoT remote code execution8.8CNA v3.12.7%2021-12-15Fix
CVE-2021-41360Microsoft HEVC Video Extensions remote code execution7.8CNA v3.12.1%2021-12-15Fix
CVE-2021-41333Microsoft Windows Print Spooler elevation of privilege7.8CNA v3.11.1%2021-12-15Fix
CVE-2021-41276Indirect LDAP injection in Tuleap6.7CNA v3.11.5%2021-12-15Fix
CVE-2021-40827Clementine-player Clementine out-of-bounds write7.8v3.11.2%2021-12-15
CVE-2021-40826Clementine-player Clementine null pointer dereference7.8v3.11.2%2021-12-15
CVE-2021-40453Microsoft HEVC Video Extensions remote code execution7.8CNA v3.12.2%2021-12-15Fix
CVE-2021-40452Microsoft HEVC Video Extensions remote code execution7.8CNA v3.12.5%2021-12-15Fix
CVE-2021-40441Microsoft Windows Media Center elevation of privilege7.8CNA v3.10.7%2021-12-15Fix
CVE-2021-40171SecuritasHome Alarm System RF jamming alert vulnerability5.3v3.10.9%2021-12-15Fix
CVE-2021-40170Securitashome Alarm System authentication bypass by replay6.8v3.10.9%2021-12-15Fix
CVE-2021-39657Android ufshcd.c out-of-bounds read4.4v3.10.2%2021-12-15Fix
CVE-2021-39656Android file.c use-after-free6.7v3.10.1%2021-12-15Fix
CVE-2021-39655Google Android kernel vulnerability9.8v3.10.5%2021-12-15Fix
CVE-2021-39653Android (TBD) privilege escalation7.8v3.10.1%2021-12-15Fix
CVE-2021-39652Android (TBD) out-of-bounds write6.7v3.10.1%2021-12-15Fix
CVE-2021-39651Android TBD privilege escalation7.8v3.10.1%2021-12-15Fix
CVE-2021-39650Android (TBD) out-of-bounds write6.7v3.10.1%2021-12-15Fix
CVE-2021-39649Android regmap.c use-after-free6.7v3.10.1%2021-12-15Fix
CVE-2021-39648Android configfs.c information disclosure4.1v3.10.2%2021-12-15Fix
CVE-2021-39647Android information disclosure4.4v3.10.1%2021-12-15Fix
CVE-2021-39646Google Android kernel vulnerability7.5v3.10.4%2021-12-15Fix
CVE-2021-39645Google Android kernel vulnerability9.8v3.10.5%2021-12-15Fix
CVE-2021-39644Google Android kernel vulnerability9.8v3.10.5%2021-12-15Fix
CVE-2021-39643Android ic.c privilege escalation6.7v3.10.1%2021-12-15Fix
CVE-2021-39642Android lwis_ioctl.c out-of-bounds write6.4v3.10.1%2021-12-15Fix
CVE-2021-39641Google Android kernel vulnerability9.8v3.10.5%2021-12-15Fix
CVE-2021-39640Android ep0.c out-of-bounds write7.8v3.10.1%2021-12-15Fix
CVE-2021-39639Android fvp.c privilege escalation6.8v3.10.1%2021-12-15Fix
CVE-2021-39638Android lwis_periodic_io.c out-of-bounds write6.7v3.10.1%2021-12-15Fix
CVE-2021-39637Android trusty_remote_provisioning_context.cpp out-of-bounds read4.4v3.10.1%2021-12-15Fix
CVE-2021-39636Android ip_tables.c information disclosure4.4v3.10.2%2021-12-15Fix
CVE-2021-38701Motorola T008 cross-site scripting4.8v3.10.5%2021-12-15Fix
CVE-2021-36888Oxilab Image Hover Effects Ultimate (WordPress plugin) improper access control9.8v3.16.7%2021-12-15NucleiFix
CVE-2021-36450Verint Workforce Optimization cross-site scripting6.1v3.164.9%2021-12-15Nuclei
CVE-2021-35490Thruk cross-site scripting5.4v3.10.5%2021-12-15Fix
CVE-2021-29847IBM Power System S821LC Server (8001-12C) man-in-the-middle5.3CNA v3.01.0%2021-12-15Fix
CVE-2021-27859Missing authorization vulnerability in FatPipe software8.8v3.11.6%2021-12-15Fix
CVE-2021-27858Missing authorization vulnerability in FatPipe software5.3v3.12.7%2021-12-15NucleiFix
CVE-2021-27857FatPipe software allows unauthenticated configuration download7.5v3.11.8%2021-12-15KCVFix
CVE-2021-27856FatPipe software administrative account with no password9.8v3.15.6%2021-12-15NucleiFix
CVE-2021-27855FatPipe software allows privilege escalation8.8v3.11.6%2021-12-15Fix
CVE-2021-26787Genesys Workforce Management cross-site scripting6.1v3.10.7%2021-12-15
CVE-2021-20330MongoDB Server specific replication command with malformed oplog entries can crash secondaries6.5CNA v3.11.0%2021-12-15Fix
CVE-2021-4119Improper access control in bookstackapp/BookStack9.8v3.126.9%2021-12-15Fix
CVE-2021-4117Business Logic Errors in yetiforcecompany/yetiforcecrm4.3NVD v3.10.7%2021-12-15Fix
CVE-2021-4116Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm5.4v3.10.5%2021-12-15Fix
CVE-2021-4111Business Logic Errors in yetiforcecompany/yetiforcecrm4.3NVD v3.10.6%2021-12-15Fix
CVE-2021-4110Null pointer dereference in mruby/mruby7.5NVD v3.11.6%2021-12-15Fix
CVE-2021-1048Android Kernel use-after-free7.8v3.11.0%2021-12-15KEVKCVFix
CVE-2021-1047Android cm_access_control.c out-of-bounds read4.4v3.10.1%2021-12-15Fix
CVE-2021-1046Android lwis_device_dpm.c out-of-bounds read4.4v3.10.1%2021-12-15Fix
CVE-2021-1045Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A7.5v3.10.5%2021-12-15Fix
CVE-2021-1044Android identity_support.c out-of-bounds write7.8v3.10.1%2021-12-15Fix
CVE-2021-1043Android TBD information disclosure5.5v3.10.1%2021-12-15Fix
CVE-2021-1042Android dsi_panel.c information disclosure4.4v3.10.1%2021-12-15Fix
CVE-2021-1041Android (TBD) out-of-bounds read5.5v3.10.1%2021-12-15Fix
CVE-2021-1040Android BluetoothPairingSelectionFragment.java elevation of privilege7.8v3.10.1%2021-12-15Fix
CVE-2021-1039Android AndroidManifest.xml elevation of privilege7.8v3.10.1%2021-12-15Fix
CVE-2021-1038Android AndroidManifest.xml denial of service5.5v3.10.1%2021-12-15Fix
CVE-2021-1034Android missing authorization3.3v3.10.1%2021-12-15Fix
CVE-2021-1032Android PackageManagerService.java information disclosure3.3v3.10.1%2021-12-15Fix
CVE-2021-1031Android NotificationManagerService.java information disclosure3.3v3.10.1%2021-12-15Fix
CVE-2021-1030Android NotificationManagerService.java information disclosure5.5v3.10.1%2021-12-15Fix
CVE-2021-1029Android SurfaceFlinger.cpp out-of-bounds write7.8v3.10.1%2021-12-15Fix
CVE-2021-1028Android SurfaceFlinger.cpp out-of-bounds write7.8v3.10.1%2021-12-15Fix
CVE-2021-1027Android incorrect type conversion7.8v3.10.1%2021-12-15Fix
CVE-2021-1026Android RttServiceImpl.java information disclosure5.5v3.10.1%2021-12-15Fix
CVE-2021-1025Android WallpaperManagerService.java information disclosure5.5v3.10.1%2021-12-15Fix
CVE-2021-1024Android EventResultPersister.java privilege escalation6.7v3.10.1%2021-12-15Fix
CVE-2021-1023Android RequestIgnoreBatteryOptimizations.java information disclosure5.0v3.10.1%2021-12-15Fix
CVE-2021-1022Android btif_hf_client.cc crash7.5v3.10.7%2021-12-15Fix
CVE-2021-1021Android NotificationManagerService.java privilege escalation7.3v3.10.1%2021-12-15Fix
CVE-2021-1020Android NotificationListenerService.java privilege escalation7.3v3.10.1%2021-12-15Fix
CVE-2021-1019Android NotificationListenerService.java privilege escalation7.3v3.10.1%2021-12-15Fix
CVE-2021-1018Android AudioService.java information disclosure3.3v3.10.1%2021-12-15Fix
CVE-2021-1017Android AndroidManifest.xml privilege escalation7.8v3.10.1%2021-12-15Fix
CVE-2021-1016Android UsbPermissionActivity.java privilege escalation7.3v3.10.1%2021-12-15Fix
CVE-2021-1015Android PhoneInterfaceManager.java information disclosure3.3v3.10.1%2021-12-15Fix