CVE-2021 records published in December 2021
Page two of two: records 1,001 to 1,836 of the 1,836 published in December 2021, newest first. The first page carries the figures for December 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-1014 | Android PhoneInterfaceManager.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1013 | Android PermissionManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1012 | Android NotificationAccessDetails.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1011 | Android missing authorization | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1010 | Android missing authorization | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1009 | Android PackageManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1008 | Android SubscriptionController.java denial of service | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1007 | Android btu_hcif.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1006 | Android DatabaseManager.java information disclosure | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1005 | Android PhoneInterfaceManager.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1004 | Android WifiServiceImpl.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1003 | Android AudioService.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-1002 | Android eas_wtengine.c out-of-bounds read | 7.5v3.1 | 0.8% | 2021-12-15 | Fix |
| CVE-2021-1001 | Android mp4enc_api.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0999 | Android AndroidManifest.xml privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0998 | Android ih264e_me.c out-of-bounds read | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0997 | Android GnssNetworkConnectivityHandler.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0996 | Android HciEventManager.cpp out-of-bounds read | 4.5v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-0995 | Android WifiServiceImpl.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0994 | Android ConnectivityService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0993 | Android TextLine.java denial of service | 6.5v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-0992 | Android PaymentDefaultDialog.java privilege escalation | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0991 | Android information disclosure | 2.4v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-0990 | Android PhoneSubInfoController.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0989 | Android TelecomServiceImpl.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0988 | Android ActivityClientController.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0987 | Android PhoneInterfaceManager.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0986 | Android DevicePolicyManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0985 | Android AlertReceiver.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0984 | Android ManagedServices.java insecure permissions | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0983 | Android DevicePolicyManagerService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0982 | Android DevicePolicyManagerService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0981 | Android NotificationManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0979 | Android ShortcutService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0978 | Android DeviceIdentifiersPolicyService.java information disclosure | 3.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0977 | Android phNxpNciHal_dta.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0976 | Android floor0.c out-of-bounds read | 6.5v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-0973 | Android UriUtil.java information disclosure | 5.0v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0971 | Android MPEG4Extractor.cpp out-of-bounds write | 6.5v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-0970 | Android GpsNavigationMessage.java deserialization of untrusted data | 7.8v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-0969 | Android AccessPoint.java improper error handling | 6.5v3.1 | 0.6% | 2021-12-15 | Fix |
| CVE-2021-0968 | Android allocator.cc out-of-bounds write | 8.8v3.1 | 0.7% | 2021-12-15 | Fix |
| CVE-2021-0967 | Android codebook.c out-of-bounds write | 8.8v3.1 | 1.0% | 2021-12-15 | Fix |
| CVE-2021-0966 | Android generate_cpp.cpp uninitialized memory use | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0965 | Android AndroidManifest.xml privilege escalation | 8.8v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-0964 | Android C2SoftMp3Dec.cpp out-of-bounds write | 6.5v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-0963 | Android KeyChainActivity.java privilege escalation | 7.1v3.1 | 0.2% | 2021-12-15 | Exploit codeFix |
| CVE-2021-0961 | Android xt_quota2.c information disclosure | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0958 | Android km_compat.cpp denial of service | 4.4v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0956 | Android NfcTag.cpp out-of-bounds write | 9.8v3.1 | 1.2% | 2021-12-15 | Fix |
| CVE-2021-0955 | Android race condition | 7.0v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0954 | Android ResolverActivity privilege escalation | 7.3v3.1 | 0.3% | 2021-12-15 | Fix |
| CVE-2021-0953 | Android SearchWidgetProvider.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0952 | Android PhotoSelectionHandler.java insecure permissions | 5.0v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0933 | Android DeviceChooserActivity.java privilege escalation | 8.0v3.1 | 0.4% | 2021-12-15 | Fix |
| CVE-2021-0932 | Android NavigationModeController.java confused deputy | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0931 | Android BluetoothDevice.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0930 | Android phNxpNciHal_ext.cc out-of-bounds write | 8.8v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-0929 | Android ion.c privilege escalation | 7.8v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-0928 | Android OutputConfiguration.java deserialization of untrusted data | 7.8v3.1 | 0.4% | 2021-12-15 | Fix |
| CVE-2021-0927 | Android TvInputManagerService.java insecure permissions | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0926 | Android NfcImportVCardActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0925 | Android rw_t4t.cc out-of-bounds read | 7.5v3.1 | 1.0% | 2021-12-15 | Fix |
| CVE-2021-0924 | Android xhci.c out-of-bounds read | 7.8v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-0923 | Android Permission.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0922 | Android PackageManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0921 | Android ParsingPackageImpl.java deserialization of untrusted data | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0920 | Android Kernel race condition | 6.4v3.1 | 0.9% | 2021-12-15 | KEVFix |
| CVE-2021-0919 | Android IServiceManager.cpp improper error handling | 5.0v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0918 | Android gatt_cl.cc out-of-bounds write | 8.8v3.1 | 0.4% | 2021-12-15 | Fix |
| CVE-2021-0904 | MT6771 incorrect permission assignment for critical resource in SRAMROM | 6.7NVD v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0889 | Android Android TV remote code execution | 9.8v3.1 | 1.6% | 2021-12-15 | Fix |
| CVE-2021-0799 | Android ActivityThread.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0769 | Android AllowBindAppWidgetActivity.java privilege escalation | 7.3v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0704 | Android AccountManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0675 | MT6570 improper restriction of operations within the bounds of a memory buffer in alac decoder | 7.8NVD v3.1 | 0.5% | 2021-12-15 | Fix |
| CVE-2021-0653 | Android NetworkPolicyManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0650 | Android eas_wtengine.c out-of-bounds read | 6.5v3.1 | 0.9% | 2021-12-15 | Fix |
| CVE-2021-0649 | Android Vpn.java privilege escalation | 7.8v3.1 | 0.1% | 2021-12-15 | Fix |
| CVE-2021-0434 | Android privilege escalation | 7.3v3.1 | 0.2% | 2021-12-15 | Fix |
| CVE-2021-45046 | Apache Log4j2 deserialization of untrusted data | 9.0NVD v3.1 | 100.0% | 2021-12-14 | KEVNucleiSnortExploit codeFix |
| CVE-2021-45015 | Taogogo taoCMS path traversal | 9.1v3.1 | 1.2% | 2021-12-14 | Fix |
| CVE-2021-45014 | Taogogo taoCMS background SQL injection | 9.8v3.1 | 1.1% | 2021-12-14 | |
| CVE-2021-44949 | Glfusion insecure direct object reference | 9.8v3.1 | 1.1% | 2021-12-14 | |
| CVE-2021-44942 | Glfusion cross-site request forgery | 4.3v3.1 | 0.3% | 2021-12-14 | |
| CVE-2021-44937 | Glfusion improper authentication | 5.3v3.1 | 0.7% | 2021-12-14 | |
| CVE-2021-44935 | Glfusion origin validation error | 9.1v3.1 | 0.5% | 2021-12-14 | |
| CVE-2021-44549 | Apache Sling Commons Messaging Mail improper certificate validation | 7.4v3.1 | 1.9% | 2021-12-14 | Fix |
| CVE-2021-44538 | Schildichat buffer overflow | 9.8v3.1 | 1.9% | 2021-12-14 | Fix |
| CVE-2021-44524 | Siemens SiPass integrated resource exposure | 9.8v3.1 | 1.6% | 2021-12-14 | Fix |
| CVE-2021-44523 | Siemens SiPass integrated resource exposure | 9.1v3.1 | 1.4% | 2021-12-14 | Fix |
| CVE-2021-44522 | Siemens SiPass integrated resource exposure | 7.5v3.1 | 1.4% | 2021-12-14 | Fix |
| CVE-2021-44450 | Siemens JT Utilities out-of-bounds read | 7.8v3.1 | 0.6% | 2021-12-14 | Fix |
| CVE-2021-44449 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44448 | Siemens JT Utilities out-of-bounds read | 3.3v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-44447 | Siemens JT Utilities use-after-free | 7.8v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44446 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44445 | Siemens JT Utilities heap-based buffer overflow | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44444 | Siemens JT Utilities out-of-bounds read | 3.3v3.1 | 1.1% | 2021-12-14 | Fix |
| CVE-2021-44443 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44442 | Siemens JT Utilities heap-based buffer overflow | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44441 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44440 | Siemens JT Utilities memory corruption | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44439 | Siemens JT Utilities out-of-bounds read | 7.8v3.1 | 0.6% | 2021-12-14 | Fix |
| CVE-2021-44438 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44437 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44436 | Siemens JT Utilities out-of-bounds read | 3.3v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-44435 | Siemens JT Utilities stack-based buffer overflow | 7.8v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44434 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44433 | Siemens JT Utilities use-after-free | 7.8v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44432 | Siemens JT Utilities stack-based buffer overflow | 7.8v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44431 | Siemens JT Utilities out-of-bounds read | 3.3v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-44430 | Siemens JT Utilities out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44235 | SAP NetWeaver AS ABAP OS command injection | 6.7v3.1 | 0.3% | 2021-12-14 | Fix |
| CVE-2021-44233 | SAP GRC Access Control missing authorization | 8.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44232 | SAP SAF-T Framework path traversal | 7.7v3.1 | 1.0% | 2021-12-14 | Fix |
| CVE-2021-44231 | SAP ABAP Server and ABAP Platform (Translation Tools) code injection | 9.8v3.1 | 1.3% | 2021-12-14 | Fix |
| CVE-2021-44165 | Siemens POWER METER SICAM Q100 stack-based buffer overflow | 7.2v3.1 | 2.6% | 2021-12-14 | Fix |
| CVE-2021-44043 | Uipath App Studio cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-44042 | Uipath Assistant improper output encoding | 9.8v3.1 | 1.1% | 2021-12-14 | Fix |
| CVE-2021-44041 | Uipath Assistant externally controlled resource reference | 9.8v3.1 | 1.7% | 2021-12-14 | Fix |
| CVE-2021-44017 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 1.0% | 2021-12-14 | Fix |
| CVE-2021-44015 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 1.3% | 2021-12-14 | Fix |
| CVE-2021-44014 | Siemens JT Open use-after-free | 7.8CNA v3.1 | 1.6% | 2021-12-14 | Fix |
| CVE-2021-44013 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.7% | 2021-12-14 | Fix |
| CVE-2021-44012 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 1.3% | 2021-12-14 | Fix |
| CVE-2021-44011 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 1.3% | 2021-12-14 | Fix |
| CVE-2021-44010 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44009 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44008 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44007 | Siemens JT2Go off-by-one error | 5.5v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44006 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.2% | 2021-12-14 | Fix |
| CVE-2021-44005 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 1.2% | 2021-12-14 | Fix |
| CVE-2021-44004 | Siemens JT2Go out-of-bounds read | 5.5v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-44003 | Siemens JT2Go uninitialized variable use | 5.5v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-44002 | Siemens JT Open out-of-bounds write | 7.8CNA v3.1 | 1.6% | 2021-12-14 | Fix |
| CVE-2021-44001 | Siemens JT2Go out-of-bounds write | 7.8v3.1 | 2.0% | 2021-12-14 | Fix |
| CVE-2021-43830 | SQL injection in OpenProject | 7.4CNA v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-43829 | Unrestricted upload of files in Patrowl | 7.4CNA v3.1 | 59.2% | 2021-12-14 | Fix |
| CVE-2021-43828 | Improper privilege management in Patrowl | 7.5CNA v3.1 | 1.4% | 2021-12-14 | Fix |
| CVE-2021-43827 | Discourse Footnote inline footnote rendering vulnerability | 4.3CNA v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-43821 | Files accessible to external parties in Opencast | 9.9CNA v3.1 | 2.0% | 2021-12-14 | Exploit codeFix |
| CVE-2021-43820 | Permissions check bypass in Seafile | 7.4CNA v3.1 | 1.0% | 2021-12-14 | Fix |
| CVE-2021-43807 | HTTP method spoofing in Opencast | 7.5CNA v3.1 | 1.4% | 2021-12-14 | Fix |
| CVE-2021-43388 | Unisys Cargo Mobile cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2021-12-14 | Fix |
| CVE-2021-43051 | TIBCO Spotfire Server API Authorization vulnerability | 7.1CNA v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-42367 | Variation Swatches for WooCommerce authenticated stored cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-42070 | SAP 3D Visual Enterprise Viewer crash | 3.3v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-42069 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 3.3v3.1 | 1.0% | 2021-12-14 | Fix |
| CVE-2021-42068 | SAP 3D Visual Enterprise Viewer crash | 3.3v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-42066 | SAP Business One cleartext storage of sensitive information | 4.4v3.1 | 0.4% | 2021-12-14 | Fix |
| CVE-2021-42064 | SAP Commerce SQL injection | 9.8v3.1 | 1.1% | 2021-12-14 | Fix |
| CVE-2021-42063 | SAP Knowledge Warehouse cross-site scripting | 6.1v3.1 | 23.4% | 2021-12-14 | NucleiExploit codeFix |
| CVE-2021-42061 | SAP BusinessObjects Business Intelligence Platform cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-42051 | AbanteCart cross-site scripting | 5.4v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-42050 | AbanteCart cross-site scripting | 6.1v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-42027 | Siemens SINUMERIK Edge improper certificate validation | 7.4v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-42024 | Siemens Simcenter STAR-CCM+ Viewer out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-42023 | Siemens ModelSim Simulation insufficiently protected credentials | 6.5v3.1 | 0.6% | 2021-12-14 | Fix |
| CVE-2021-42022 | Siemens SIMATIC eaSie PCS 7 Skill Package path traversal | 6.5v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-41836 | Fathom Analytics Authenticated stored cross-site scripting | 4.8CNA v3.1 | 0.6% | 2021-12-14 | Fix |
| CVE-2021-41547 | Siemens Teamcenter Active Workspace path traversal | 7.2v3.1 | 1.1% | 2021-12-14 | Fix |
| CVE-2021-41067 | Listary improper integrity check validation | 7.5v3.1 | 0.6% | 2021-12-14 | Fix |
| CVE-2021-41066 | Bopsoft Listary missing authorization | 7.5v3.1 | 1.3% | 2021-12-14 | Fix |
| CVE-2021-41065 | Bopsoft Listary resource exposure | 7.3v3.1 | 0.5% | 2021-12-14 | Fix |
| CVE-2021-40883 | emlog A remote code execution | 9.8v3.1 | 3.0% | 2021-12-14 | |
| CVE-2021-40882 | Piwigo A cross-site scripting | 6.1v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39319 | duoFAQ Responsive, Flat, Simple FAQ reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39318 | H5P CSS Editor reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39315 | Magic Post Voice reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39314 | WooCommerce EnvioPack reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39313 | Simple Image Gallery reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39312 | True Ranker directory traversal/arbitrary file read | 7.5v3.1 | 77.9% | 2021-12-14 | NucleiExploit codeFix |
| CVE-2021-39311 | link-list-manager reflected cross-site scripting | 6.1v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39310 | Real WYSIWYG reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39309 | Parsian Bank Gateway for Woocommerce reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39308 | WooCommerce myghpay Payment Gateway reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-39183 | Unsafe inline XSS Owncast | 8.2CNA v3.1 | 0.7% | 2021-12-14 | Fix |
| CVE-2021-38950 | IBM MQ for HPE NonStop privilege escalation | 7.4CNA v3.0 | 0.2% | 2021-12-14 | Fix |
| CVE-2021-38361 | htaccess Redirect reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2021-12-14 | |
| CVE-2021-38182 | SAP Kyma improper input validation | 8.8v3.1 | 1.1% | 2021-12-14 | Fix |
| CVE-2021-36721 | SysAid API information disclosure | 5.3v3.1 | 0.4% | 2021-12-14 | |
| CVE-2021-34426 | Arbitrary command execution in Keybase Client for Windows | 5.3CNA v3.1 | 0.2% | 2021-12-14 | Fix |
| CVE-2021-34425 | Server side request forgery in Zoom Client for Meetings chat | 4.7CNA v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-4108 | Cross-site scripting (XSS) Stored in snipe/Snipe-IT | 6.1v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-4107 | Cross-site scripting (XSS) Reflected in yetiforcecompany/yetiforcecrm | 6.1v3.1 | 0.8% | 2021-12-14 | Fix |
| CVE-2021-4104 | Deserialization of untrusted data in JMSAppender in Apache Log4j | 7.5v3.1 | 81.1% | 2021-12-14 | SnortExploit codeFix |
| CVE-2021-4073 | RegistrationMagic authentication bypass | 8.1NVD v3.1 | 7.0% | 2021-12-14 | NucleiFix |
| CVE-2021-4044 | OpenSSL invalid handling of X509_verify_cert internal errors in libssl | 7.5v3.1 | 50.1% | 2021-12-14 | Exploit codeFix |
| CVE-2021-4007 | Rapid7 Insight Agent privilege escalation | 7.8CNA v3.1 | 0.3% | 2021-12-14 | |
| CVE-2021-3836 | Improper restriction of XML external entity reference in DBeaver/DBeaver | 5.5NVD v3.1 | 0.9% | 2021-12-14 | Fix |
| CVE-2021-3831 | Cross-site scripting (XSS) Reflected in gnuboard/gnuboard5 | 6.1NVD v3.1 | 1.8% | 2021-12-14 | NucleiExploit codeFix |
| CVE-2021-3376 | Cuppa CMS user_group_id_field parameter privilege escalation | 8.8v3.1 | 1.1% | 2021-12-14 | |
| CVE-2021-44966 | PHPGurukul Employee Record Management System SQL injection | 9.8v3.1 | 2.1% | 2021-12-13 | |
| CVE-2021-44965 | PHPGurukul Employee Record Management System /admin/includes/* directory path traversal | 7.5v3.1 | 2.2% | 2021-12-13 | |
| CVE-2021-44848 | Cybelesoft Thinfinity Virtualui observable discrepancy | 5.3v3.1 | 23.1% | 2021-12-13 | NucleiExploit code |
| CVE-2021-44847 | Toktok Toxcore handle_request function in DHT.c stack-based buffer overflow | 9.8v3.1 | 4.0% | 2021-12-13 | Fix |
| CVE-2021-44155 | Reprisesoftware Reprise License Manager information disclosure through error messages | 5.3v3.1 | 1.8% | 2021-12-13 | Fix |
| CVE-2021-44154 | Reprisesoftware Reprise License Manager buffer overflow | 7.2v3.1 | 1.9% | 2021-12-13 | Fix |
| CVE-2021-44153 | Reprise License Manager license file editor vulnerability | 7.2v3.1 | 2.0% | 2021-12-13 | Fix |
| CVE-2021-44152 | Reprisesoftware Reprise License Manager missing authentication | 9.8v3.1 | 58.6% | 2021-12-13 | NucleiFix |
| CVE-2021-44151 | Reprisesoftware Reprise License Manager insufficient randomness | 7.5v3.1 | 2.5% | 2021-12-13 | Fix |
| CVE-2021-43983 | WECON LeviStudioU project file parser stack-based buffer overflow | 7.8v3.1 | 2.7% | 2021-12-13 | |
| CVE-2021-43823 | Side-channel attack in Sourcegraph | 6.5CNA v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-43822 | SQL injection in jackalope/jackalope-doctrine-dbal | 8.5CNA v3.1 | 1.0% | 2021-12-13 | Fix |
| CVE-2021-43818 | lxml HTML Cleaner allows crafted and SVG embedded scripts to pass through | 8.2CNA v3.1 | 2.5% | 2021-12-13 | Fix |
| CVE-2021-43817 | Reflected cross-site-scripting vulnerability in Collabora Online | 8.2CNA v3.1 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-43814 | Heap-based OOB write when parsing dwarf DIE info in Rizin | 7.7CNA v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-43801 | Uncaught exception in mercurius | 7.5CNA v3.1 | 1.5% | 2021-12-13 | Fix |
| CVE-2021-43117 | FastAdmin unrestricted file upload | 9.8v3.1 | 2.1% | 2021-12-13 | |
| CVE-2021-42549 | Reflected XSS in search functionality of WP Cloud Plugins Lets-Box | 6.1v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-42548 | Reflected XSS in search functionality of WP Cloud Plugins Share-one-Drive | 6.1v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-42547 | Reflected XSS in search functionality of WP Cloud Plugins Out-of-the-Box | 6.1v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-42546 | Reflected XSS in search functionality of WP Cloud Plugins Use-Your-Drive | 6.1v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-41272 | SHL, SHR, and SAR operations trigger native exception at key values in besu | 7.5CNA v3.1 | 1.4% | 2021-12-13 | Fix |
| CVE-2021-40858 | Auerswald Commander 6000r IP path traversal | 4.9v3.1 | 2.4% | 2021-12-13 | |
| CVE-2021-40857 | Auerswald Commander 6000r IP insufficiently protected credentials | 8.8v3.1 | 2.0% | 2021-12-13 | |
| CVE-2021-40856 | Auerswald Comfortel 1400 IP incorrectly resolved name or reference | 7.5v3.1 | 51.1% | 2021-12-13 | Nuclei |
| CVE-2021-40008 | CloudEngine 12800 memory leak | 7.5v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-40007 | eCNS280_TD There is an information disclosure | 6.5v3.1 | 0.5% | 2021-12-13 | Fix |
| CVE-2021-39945 | GitLab improper access control | 2.7CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39944 | GitLab improper privilege management | 7.1CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39941 | GitLab An information disclosure | 3.7CNA v3.1 | 1.2% | 2021-12-13 | Fix |
| CVE-2021-39940 | GitLab regular expression denial of service | 4.3CNA v3.1 | 1.5% | 2021-12-13 | Fix |
| CVE-2021-39939 | GitLab Runner An resource exhaustion | 6.5CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39938 | GitLab resource exhaustion | 3.1CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39937 | GitLab improper privilege management | 5.9CNA v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-39936 | GitLab improper access control | 3.5CNA v3.1 | 1.0% | 2021-12-13 | Fix |
| CVE-2021-39935 | GitLab Community and Enterprise Editions server-side request forgery (SSRF) | 6.8CNA v3.1 | 35.6% | 2021-12-13 | KEVFix |
| CVE-2021-39934 | GitLab insecure direct object reference | 4.3CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39933 | GitLab regular expression denial of service | 4.3CNA v3.1 | 1.4% | 2021-12-13 | Fix |
| CVE-2021-39932 | GitLab improper input validation | 4.3CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39931 | GitLab business logic error | 3.1CNA v3.1 | 0.9% | 2021-12-13 | Fix |
| CVE-2021-39930 | GitLab missing authorization | 4.3CNA v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-39919 | GitLab weak password recovery | 4.4CNA v3.1 | 0.3% | 2021-12-13 | Fix |
| CVE-2021-39918 | GitLab incorrect authorization | 3.1CNA v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-39917 | GitLab denial of service | 4.3CNA v3.1 | 1.3% | 2021-12-13 | Fix |
| CVE-2021-39916 | GitLab insecure direct object reference | 4.3CNA v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-39915 | GitLab GraphQL API improper access control | 5.3CNA v3.1 | 1.1% | 2021-12-13 | Fix |
| CVE-2021-39910 | GitLab cross-site scripting | 2.6CNA v3.1 | 1.0% | 2021-12-13 | Fix |
| CVE-2021-39065 | IBM Spectrum Copy Data Management OS command injection | 8.1CNA v3.0 | 2.2% | 2021-12-13 | Fix |
| CVE-2021-39064 | IBM Spectrum Copy Data Management improper authentication | 5.9CNA v3.0 | 1.4% | 2021-12-13 | Fix |
| CVE-2021-39063 | IBM Spectrum Protect Plus origin validation error | 6.5CNA v3.0 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-39058 | IBM Spectrum Copy Data Management weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-39057 | IBM Spectrum Protect Plus server-side request forgery | 4.2CNA v3.0 | 0.5% | 2021-12-13 | Fix |
| CVE-2021-39054 | IBM Spectrum Copy Data Management clickjacking | 5.4CNA v3.0 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-39053 | IBM Spectrum Copy Data Management information disclosure | 5.9CNA v3.0 | 1.7% | 2021-12-13 | Fix |
| CVE-2021-39052 | IBM Spectrum Copy Data Management Spring Boot console vulnerability | 5.6CNA v3.0 | 1.1% | 2021-12-13 | Fix |
| CVE-2021-39050 | IBM i2 Analysts Notebook out-of-bounds write | 5.3CNA v3.0 | 0.3% | 2021-12-13 | Fix |
| CVE-2021-39049 | IBM i2 Analysts Notebook out-of-bounds write | 5.3CNA v3.0 | 0.3% | 2021-12-13 | Fix |
| CVE-2021-39048 | IBM Spectrum Protect out-of-bounds write | 6.2CNA v3.0 | 0.3% | 2021-12-13 | Fix |
| CVE-2021-38947 | IBM Spectrum Copy Data Management inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-38901 | IBM Spectrum Protect Operations Center information disclosure | 5.1CNA v3.0 | 0.2% | 2021-12-13 | Fix |
| CVE-2021-36169 | Fortinet FortiOS A hidden functionality | 4.2CNA v3.1 | 0.3% | 2021-12-13 | Fix |
| CVE-2021-32024 | BlackBerry QNX Software Development Platform (SDP) BMP image codec remote code execution | 9.8CNA v3.1 | 1.7% | 2021-12-13 | Fix |
| CVE-2021-24972 | Pixel Cat Lite WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-24970 | plugins360 All-in-One Video Gallery admin dashboard tab parameter local file inclusion | 7.2NVD v3.1 | 5.0% | 2021-12-13 | NucleiFix |
| CVE-2021-24955 | ProfilePress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2021-12-13 | Fix |
| CVE-2021-24954 | ProfilePress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2021-12-13 | Fix |
| CVE-2021-24951 | LearnPress WordPress plugin Admin+ SQL injection | 9.8NVD v3.1 | 1.6% | 2021-12-13 | Fix |
| CVE-2021-24946 | Modern Events Calendar WordPress plugin unauthenticated blind SQL injection | 9.8NVD v3.1 | 72.8% | 2021-12-13 | NucleiMetasploitExploit codeFix |
| CVE-2021-24945 | Like Button Rating WordPress plugin Unauthorised Vote export to email and IP Addresses disclosure | 8.0NVD v3.1 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-24932 | Auto Featured Image WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-24925 | Modern Events Calendar Lite WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-13 | Fix |
| CVE-2021-24922 | Pixel Cat Lite WordPress plugin CSRF to stored cross-site scripting | 9.0NVD v3.1 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-24896 | Caldera forms WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-24872 | Get Custom Field Values WordPress plugin Contributors+ arbitrary post Metadata access | 6.5NVD v3.1 | 1.0% | 2021-12-13 | Fix |
| CVE-2021-24871 | Get Custom Field Values WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2021-12-13 | Fix |
| CVE-2021-24863 | StopBadBots WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.6% | 2021-12-13 | Fix |
| CVE-2021-24861 | Quotes Collection WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2021-12-13 | |
| CVE-2021-24859 | User Meta Shortcodes WordPress plugin Contributor+ unauthorized arbitrary user Metadata access | 4.3NVD v3.1 | 0.8% | 2021-12-13 | |
| CVE-2021-24857 | ToTop Link WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 1.9% | 2021-12-13 | |
| CVE-2021-24855 | Display Post Metadata WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-12-13 | Fix |
| CVE-2021-24848 | Mediamatic WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.4% | 2021-12-13 | Fix |
| CVE-2021-24845 | Improved Include Page WordPress plugin Contributor+ arbitrary Posts/Pages access | 6.5NVD v3.1 | 1.0% | 2021-12-13 | |
| CVE-2021-24836 | Temporary Login Without Password WordPress plugin Subscriber+ Plugin's settings update | 4.3NVD v3.1 | 0.4% | 2021-12-13 | Fix |
| CVE-2021-24819 | Page/Post Content Shortcode WordPress plugin Contributor+ arbitrary Posts/Pages access | 4.3NVD v3.1 | 0.8% | 2021-12-13 | |
| CVE-2021-24818 | WP Limits WordPress plugin Plugin's settings update via CSRF | 4.3NVD v3.1 | 0.5% | 2021-12-13 | |
| CVE-2021-24817 | Ultimate NoFollow WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-12-13 | |
| CVE-2021-24795 | Filter Portfolio Gallery WordPress plugin arbitrary Gallery deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2021-12-13 | |
| CVE-2021-24792 | Shiny Buttons WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.2% | 2021-12-13 | |
| CVE-2021-24790 | Contact Form Advanced Database WordPress plugin Unauthorised AJAX Calls | 4.3NVD v3.1 | 0.4% | 2021-12-13 | |
| CVE-2021-24784 | WP Admin Logo Changer WordPress plugin Plugin's settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2021-12-13 | |
| CVE-2021-24782 | Flex Local Fonts WordPress plugin Admin+ stored cross-site-scripting | 4.8NVD v3.1 | 0.6% | 2021-12-13 | |
| CVE-2021-24780 | Single Post Exporter WordPress plugin Plugin's settings update via CSRF | 4.3NVD v3.1 | 0.5% | 2021-12-13 | |
| CVE-2021-24771 | Inspirational Quote Rotator WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-13 | |
| CVE-2021-24756 | WP System Log WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.3% | 2021-12-13 | Fix |
| CVE-2021-24747 | SEO Booster WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.5% | 2021-12-13 | Fix |
| CVE-2021-24705 | NEX-Forms WordPress plugin stored cross-site scripting via CSRF | 4.8NVD v3.1 | 0.3% | 2021-12-13 | Fix |
| CVE-2021-24045 | Facebook Hermes type confusion | 9.8v3.1 | 1.2% | 2021-12-13 | Fix |
| CVE-2021-22279 | OmniCore RobotWare missing authentication | 9.8CNA v3.1 | 1.4% | 2021-12-13 | Fix |
| CVE-2021-20867 | Delicious Brains Advanced Custom Fields and Advanced Custom Fields Pro missing authorization | 6.5v3.1 | 1.4% | 2021-12-13 | Fix |
| CVE-2021-20866 | Delicious Brains Advanced Custom Fields and Advanced Custom Fields Pro missing authorization | 6.5v3.1 | 1.7% | 2021-12-13 | Fix |
| CVE-2021-20865 | Delicious Brains Advanced Custom Fields and Advanced Custom Fields Pro missing authorization | 7.5v3.1 | 2.5% | 2021-12-13 | Fix |
| CVE-2021-44833 | Amazon AWS Opensearch incorrect default permissions | 9.8v3.1 | 1.6% | 2021-12-12 | Fix |
| CVE-2021-44515 | Zoho Desktop Central authentication bypass | 9.8v3.1 | 99.9% | 2021-12-12 | KEVNucleiEmerging ThreatsFix |
| CVE-2021-41805 | HashiCorp Consul incorrect authorization | 8.8v3.1 | 34.8% | 2021-12-12 | Exploit codeFix |
| CVE-2021-4097 | CRLF injection in phpservermon/phpservermon | 5.4v3.1 | 0.8% | 2021-12-12 | Fix |
| CVE-2021-4092 | Cross-site request forgery (CSRF) in yetiforcecompany/yetiforcecrm | 4.3v3.1 | 0.4% | 2021-12-11 | Fix |
| CVE-2021-44228 | Apache Log4j2 remote code execution | 10.0NVD v3.1 | 100.0% | 2021-12-10 | KEVNucleiMetasploitEmerging ThreatsSnortExploit codeFix |
| CVE-2021-43815 | Grafana directory traversal for `.cvs` files | 4.3CNA v3.1 | 1.9% | 2021-12-10 | Fix |
| CVE-2021-43813 | Directory traversal in Grafana | 4.3CNA v3.1 | 58.0% | 2021-12-10 | Fix |
| CVE-2021-43803 | Unexpected server crash in Next.js | 7.5CNA v3.1 | 47.3% | 2021-12-10 | Fix |
| CVE-2021-41242 | OpenOLAT path traversal in some REST methods leading to file upload to arbitrary places | 8.1CNA v3.1 | 1.5% | 2021-12-10 | Fix |
| CVE-2021-40834 | User interface spoofing in F-Secure SAFE browser for Android | 4.3v3.1 | 0.7% | 2021-12-10 | Fix |
| CVE-2021-38937 | IBM PowerVM Hypervisor crash | 6.3CNA v3.0 | 1.0% | 2021-12-10 | Fix |
| CVE-2021-38917 | IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018. | 7.4CNA v3.0 | 1.6% | 2021-12-10 | Fix |
| CVE-2021-37935 | Huntflow Enterprise login page information disclosure | 7.5v3.1 | 1.4% | 2021-12-10 | |
| CVE-2021-37934 | Huntflow Enterprise missing brute-force protection | 9.8v3.1 | 1.5% | 2021-12-10 | |
| CVE-2021-37189 | Digi Transport WR11 missing encryption | 7.5v3.1 | 0.6% | 2021-12-10 | Fix |
| CVE-2021-37188 | Digi Transport DR64 insufficient verification of data authenticity | 8.8v3.1 | 0.5% | 2021-12-10 | Fix |
| CVE-2021-37187 | Digi Transport DR64 insufficiently protected credentials | 6.5v3.1 | 0.7% | 2021-12-10 | Fix |
| CVE-2021-36911 | Comment Engine Pro WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2021-12-10 | |
| CVE-2021-35978 | Digi Transport DR64 command injection | 9.8v3.1 | 3.6% | 2021-12-10 | |
| CVE-2021-31747 | pluck-cms Pluck Missing SSL improper certificate validation | 4.8v3.1 | 0.3% | 2021-12-10 | |
| CVE-2021-31746 | pluck-cms Pluck path traversal | 9.8v3.1 | 2.4% | 2021-12-10 | |
| CVE-2021-31745 | pluck-cms Pluck login.php session fixation | 7.5v3.1 | 1.2% | 2021-12-10 | |
| CVE-2021-29214 | HPE StoreServ Management Console code injection | 7.2v3.1 | 1.1% | 2021-12-10 | Fix |
| CVE-2021-27984 | pluck-cms Pluck unrestricted file upload | 8.1v3.1 | 2.5% | 2021-12-10 | |
| CVE-2021-27983 | Max-3000 MaxSite CMS remote code execution | 9.8v3.1 | 3.5% | 2021-12-10 | |
| CVE-2021-26340 | A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM). | 8.4v3.1 | 0.2% | 2021-12-10 | Fix |
| CVE-2021-23700 | merge-deep2 prototype pollution | 9.8v3.1 | 1.2% | 2021-12-10 | |
| CVE-2021-23663 | sey prototype pollution | 9.8v3.1 | 1.2% | 2021-12-10 | |
| CVE-2021-23639 | md-to-pdf remote code execution (RCE) | 9.8v3.1 | 5.3% | 2021-12-10 | Exploit codeFix |
| CVE-2021-23561 | comb prototype pollution | 9.8v3.1 | 1.2% | 2021-12-10 | |
| CVE-2021-23463 | com.h2database:h2 XML external entity (XXE) injection | 9.1v3.1 | 2.7% | 2021-12-10 | Fix |
| CVE-2021-4089 | Improper access control in snipe/Snipe-IT | 4.3v3.1 | 0.7% | 2021-12-10 | Fix |
| CVE-2021-4084 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 6.1NVD v3.1 | 1.6% | 2021-12-10 | Fix |
| CVE-2021-4082 | Cross-site request forgery (CSRF) in pimcore/pimcore | 4.3v3.1 | 0.4% | 2021-12-10 | Fix |
| CVE-2021-4081 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 6.1v3.1 | 0.8% | 2021-12-10 | Fix |
| CVE-2021-3829 | open redirect in Openwhyd/Openwhyd | 6.1NVD v3.1 | 0.9% | 2021-12-10 | Fix |
| CVE-2021-44514 | Zoho ManageEngine OpManager improper authentication | 9.8v3.1 | 5.4% | 2021-12-09 | Fix |
| CVE-2021-43982 | Delta Electronics CNCSoft stack-based buffer overflow | 7.8v3.1 | 9.6% | 2021-12-09 | Fix |
| CVE-2021-43802 | Admin privilege escalation and arbitrary code execution via malicious *.Etherpad imports | 9.9CNA v3.1 | 2.1% | 2021-12-09 | Fix |
| CVE-2021-43797 | HTTP request smuggling in netty | 6.5CNA v3.1 | 2.9% | 2021-12-09 | Fix |
| CVE-2021-43703 | zzcms improper access control | 9.8v3.1 | 1.8% | 2021-12-09 | |
| CVE-2021-43608 | Doctrine-project Database Abstraction Layer DBAL 3 SQL injection Security | 9.8v3.1 | 2.4% | 2021-12-09 | Fix |
| CVE-2021-43410 | Apache Airavata Django Portal log statements log injection | 5.3v3.1 | 2.4% | 2021-12-09 | Fix |
| CVE-2021-43204 | Fortinet FortiClientWindows A improper resource control | 4.4CNA v3.1 | 0.4% | 2021-12-09 | Fix |
| CVE-2021-43071 | Fortinet FortiWeb A heap-based buffer overflow | 8.8CNA v3.1 | 1.3% | 2021-12-09 | Fix |
| CVE-2021-43068 | Fortinet FortiAuthenticator improper authentication | 5.4CNA v3.1 | 0.6% | 2021-12-09 | Fix |
| CVE-2021-43065 | Fortinet FortiNAC incorrect permission assignment | 7.8CNA v3.1 | 0.4% | 2021-12-09 | Fix |
| CVE-2021-42759 | Fortinet Meru AP OS command injection | 6.7CNA v3.1 | 0.3% | 2021-12-09 | Fix |
| CVE-2021-41697 | Globaldatingsoftware Premiumdatingscript reflected cross-site scripting | 6.1v3.1 | 0.7% | 2021-12-09 | |
| CVE-2021-41696 | Globaldatingsoftware Premiumdatingscript An authentication bypass | 6.5v3.1 | 0.9% | 2021-12-09 | |
| CVE-2021-41695 | Globaldatingsoftware Premiumdatingscript An SQL injection | 9.8v3.1 | 1.2% | 2021-12-09 | |
| CVE-2021-41694 | Globaldatingsoftware Premiumdatingscript insufficient randomness | 9.8v3.1 | 1.3% | 2021-12-09 | |
| CVE-2021-41449 | NETGEAR RAX35 web interfaces path traversal | 7.1v3.1 | 1.6% | 2021-12-09 | Fix |
| CVE-2021-41265 | Improper authentication in Flask-AppBuilder | 8.1CNA v3.1 | 1.3% | 2021-12-09 | Fix |
| CVE-2021-41246 | Session fixation in express-openid-connect | 4.6CNA v3.1 | 0.9% | 2021-12-09 | Fix |
| CVE-2021-40282 | zzcms An SQL injection | 8.8v3.1 | 1.1% | 2021-12-09 | |
| CVE-2021-40281 | zzcms An SQL injection | 8.8v3.1 | 1.1% | 2021-12-09 | |
| CVE-2021-40280 | zzcms An SQL injection | 7.2v3.1 | 1.1% | 2021-12-09 | |
| CVE-2021-40279 | zzcms An SQL injection | 7.2v3.1 | 1.1% | 2021-12-09 | |
| CVE-2021-39002 | IBM Db2 weak cryptographic algorithm | 5.9CNA v3.0 | 0.9% | 2021-12-09 | Fix |
| CVE-2021-38951 | IBM WebSphere Application Server denial of service | 7.5CNA v3.0 | 1.6% | 2021-12-09 | Fix |
| CVE-2021-38931 | IBM Db2 information disclosure | 6.5CNA v3.0 | 1.2% | 2021-12-09 | Fix |
| CVE-2021-38926 | IBM Db2 privilege escalation | 5.5CNA v3.0 | 0.3% | 2021-12-09 | Fix |
| CVE-2021-37861 | Mattermost sensitive information in log files | 5.8CNA v3.1 | 0.9% | 2021-12-09 | Fix |
| CVE-2021-36194 | Fortinet FortiWeb out-of-bounds write | 8.8CNA v3.1 | 1.4% | 2021-12-09 | Fix |
| CVE-2021-36189 | Fortinet FortiClientEMS A missing encryption | 6.8CNA v3.1 | 0.4% | 2021-12-09 | Fix |
| CVE-2021-36167 | Fortinet FortiClientWindows improper authorization | 4.3CNA v3.1 | 0.6% | 2021-12-09 | Fix |
| CVE-2021-29678 | IBM Db2 incorrect authorization | 8.7CNA v3.0 | 1.1% | 2021-12-09 | Fix |
| CVE-2021-22568 | Google Dart Publishing to third-party package repositories may expose pub.dev credentials | 8.8CNA v3.1 | 0.9% | 2021-12-09 | Fix |
| CVE-2021-22565 | Insufficient granularity of access control in GAEN Notification Server | 6.5CNA v3.1 | 0.4% | 2021-12-09 | Fix |
| CVE-2021-21955 | Anker authentication bypass | 7.5v3.1 | 1.0% | 2021-12-09 | |
| CVE-2021-21954 | Anker command execution | 9.9v3.1 | 2.4% | 2021-12-09 | |
| CVE-2021-20373 | IBM Db2 information disclosure | 5.9CNA v3.0 | 1.5% | 2021-12-09 | Fix |
| CVE-2021-20146 | Gryphon Tower router insufficiently protected credentials | 9.8NVD v3.1 | 2.1% | 2021-12-09 | |
| CVE-2021-20145 | Gryphon Tower router improper authentication | 7.5NVD v3.1 | 1.3% | 2021-12-09 | |
| CVE-2021-20144 | Gryphon Tower router parameters of operation command injection | 8.8NVD v3.1 | 3.7% | 2021-12-09 | |
| CVE-2021-20143 | Gryphon Tower router parameters of operation command injection | 8.8NVD v3.1 | 3.7% | 2021-12-09 | |
| CVE-2021-20142 | Gryphon Tower router parameters of operation command injection | 8.8NVD v3.1 | 3.7% | 2021-12-09 | |
| CVE-2021-20141 | Gryphon Tower router parameters of operation command injection | 8.8NVD v3.1 | 3.7% | 2021-12-09 | |
| CVE-2021-20140 | Gryphon Tower router parameters of operation command injection | 8.8NVD v3.1 | 4.0% | 2021-12-09 | |
| CVE-2021-20139 | Gryphon Tower router parameters of operation command injection | 8.8NVD v3.1 | 4.0% | 2021-12-09 | |
| CVE-2021-20138 | Gryphon Tower router multiple parameters in the command injection | 8.8NVD v3.1 | 3.7% | 2021-12-09 | |
| CVE-2021-20137 | Gryphon Tower router reflected cross-site scripting | 6.1NVD v3.1 | 2.6% | 2021-12-09 | Nuclei |
| CVE-2021-4038 | NSM vulnerable to XSS | 4.8CNA v3.1 | 0.6% | 2021-12-09 | Fix |
| CVE-2021-4033 | Cross-site request forgery (CSRF) in kevinpapst/kimai2 | 6.5v3.1 | 0.5% | 2021-12-09 | Fix |
| CVE-2021-3817 | SQL injection in wbce/WBCE_CMS | 9.8v3.1 | 37.8% | 2021-12-09 | Exploit codeFix |
| CVE-2021-44726 | KNIME Server cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-44725 | KNIME Server path traversal | 7.5v3.1 | 1.5% | 2021-12-08 | Fix |
| CVE-2021-44557 | Kb Multiner XML external entity injection | 9.1v3.1 | 1.3% | 2021-12-08 | |
| CVE-2021-44556 | Kb Digger XML external entity injection | 9.1v3.1 | 1.3% | 2021-12-08 | |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) code injection | 9.8v3.1 | 99.1% | 2021-12-08 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2021-44420 | Potential bypass of an upstream access control based on URL paths in Django | 7.3v3.1 | 2.3% | 2021-12-08 | Fix |
| CVE-2021-43978 | allegro insufficiently protected credentials | 8.1v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-43811 | awslabs sockeye code injection via unsafe YAML loading | 7.8CNA v3.1 | 2.5% | 2021-12-08 | Exploit codeFix |
| CVE-2021-43809 | rubygems local code execution | 6.7CNA v3.1 | 2.9% | 2021-12-08 | Fix |
| CVE-2021-43808 | Blade `@parent` Exploitation leading to possible XSS in Laravel | 5.3CNA v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-43546 | Mozilla Thunderbird clickjacking | 4.3v3.1 | 1.4% | 2021-12-08 | Fix |
| CVE-2021-43545 | Mozilla Thunderbird excessive iteration | 6.5v3.1 | 1.6% | 2021-12-08 | Fix |
| CVE-2021-43544 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-43543 | Mozilla Thunderbird cross-site scripting | 6.1v3.1 | 1.4% | 2021-12-08 | Fix |
| CVE-2021-43542 | Mozilla Thunderbird information disclosure through error messages | 6.5v3.1 | 1.7% | 2021-12-08 | Fix |
| CVE-2021-43541 | Mozilla Firefox external protocol handler vulnerability | 6.5v3.1 | 1.6% | 2021-12-08 | Fix |
| CVE-2021-43540 | WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95. | 6.5v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-43539 | Mozilla Thunderbird use-after-free | 8.8v3.1 | 1.6% | 2021-12-08 | Fix |
| CVE-2021-43538 | Mozilla Thunderbird race condition | 4.3v3.1 | 1.2% | 2021-12-08 | Fix |
| CVE-2021-43537 | Mozilla Thunderbird incorrect type conversion | 8.8v3.1 | 2.0% | 2021-12-08 | Fix |
| CVE-2021-43536 | Mozilla Thunderbird information disclosure | 6.5v3.1 | 1.7% | 2021-12-08 | Fix |
| CVE-2021-43535 | Mozilla Firefox use-after-free | 8.8v3.1 | 1.1% | 2021-12-08 | Fix |
| CVE-2021-43534 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 1.2% | 2021-12-08 | Fix |
| CVE-2021-43533 | Mozilla Firefox internationalized domain name parsing vulnerability | 4.3v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-43532 | Mozilla Firefox open redirect | 6.1v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-43531 | Mozilla Firefox origin validation error | 4.3v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-43530 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 1.4% | 2021-12-08 | Exploit codeFix |
| CVE-2021-43528 | Mozilla Thunderbird improper privilege management | 6.5v3.1 | 1.3% | 2021-12-08 | Fix |
| CVE-2021-43527 | Mozilla NSS out-of-bounds write | 9.8v3.1 | 17.6% | 2021-12-08 | Fix |
| CVE-2021-43399 | Yubico Yubihsm 2 Software Development Kit out-of-bounds write | 7.5v3.1 | 1.4% | 2021-12-08 | Fix |
| CVE-2021-43067 | Fortinet FortiAuthenticator information disclosure | 8.3CNA v3.1 | 1.1% | 2021-12-08 | |
| CVE-2021-43064 | Fortinet FortiWeb A open redirect | 4.3CNA v3.1 | 0.6% | 2021-12-08 | Fix |
| CVE-2021-43063 | Fortinet FortiWeb cross-site scripting | 6.1CNA v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-42835 | Plex Media Server time-of-check time-of-use race condition | 7.0v3.1 | 1.2% | 2021-12-08 | Exploit codeFix |
| CVE-2021-42760 | Fortinet FortiWLM SQL injection | 8.8CNA v3.1 | 1.0% | 2021-12-08 | Fix |
| CVE-2021-42758 | Fortinet FortiWLC incorrect authorization | 8.8CNA v3.1 | 2.0% | 2021-12-08 | Fix |
| CVE-2021-42757 | Fortinet FortiOS buffer overflow | 6.3CNA v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-42752 | Fortinet FortiWLM cross-site scripting | 5.4CNA v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-42110 | allegro DLL hijacking | 7.8v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-41450 | TP-Link Archer AX10 V1 An HTTP request smuggling | 7.5v3.1 | 1.8% | 2021-12-08 | Fix |
| CVE-2021-41311 | Atlassian Jira Server improper authentication | 7.5v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-41309 | Atlassian Jira Server improper authentication | 5.3v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-41090 | Grafana agent instance config inline secret exposure | 6.5CNA v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-41063 | Xylem Aanderaa Geoview SQL injection | 9.8v3.1 | 2.0% | 2021-12-08 | Fix |
| CVE-2021-41030 | Fortinet FortiClientEMS authentication bypass by replay | 5.4CNA v3.1 | 1.0% | 2021-12-08 | Fix |
| CVE-2021-41029 | Fortinet FortiWLM cross-site scripting | 6.4CNA v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-41027 | Fortinet FortiWeb A stack-based buffer overflow | 7.3CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-41025 | Fortinet FortiWeb race condition | 7.3CNA v3.1 | 1.5% | 2021-12-08 | Fix |
| CVE-2021-41024 | Fortinet FortiOS path traversal | 7.5CNA v3.1 | 1.6% | 2021-12-08 | Fix |
| CVE-2021-41021 | Fortinet FortiNAC privilege escalation | 7.8CNA v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-41017 | Fortinet FortiWeb some web API controllers heap-based buffer overflow | 8.8CNA v3.1 | 2.0% | 2021-12-08 | Fix |
| CVE-2021-41015 | Fortinet FortiWeb cross-site scripting | 6.1CNA v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-41014 | Fortinet FortiWeb A resource exhaustion | 7.5CNA v3.1 | 1.2% | 2021-12-08 | Fix |
| CVE-2021-41013 | Fortinet FortiWeb incorrect authorization | 5.3CNA v3.1 | 1.0% | 2021-12-08 | Fix |
| CVE-2021-40861 | Genesys Intelligent Workload Distribution Manager custom filter query component SQL injection | 7.2v3.1 | 1.7% | 2021-12-08 | Fix |
| CVE-2021-40860 | Genesys Intelligent Workload Distribution Manager custom filter query component SQL injection | 7.2v3.1 | 1.7% | 2021-12-08 | Fix |
| CVE-2021-38510 | Mozilla Firefox and Thunderbird executable file warning vulnerability | 8.8v3.1 | 1.0% | 2021-12-08 | Fix |
| CVE-2021-38509 | Mozilla Firefox clickjacking | 4.3v3.1 | 1.6% | 2021-12-08 | Fix |
| CVE-2021-38508 | Mozilla Firefox clickjacking | 4.3v3.1 | 1.5% | 2021-12-08 | Fix |
| CVE-2021-38507 | Mozilla Firefox origin validation error | 6.5v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-38506 | Mozilla Firefox clickjacking | 4.3v3.1 | 1.5% | 2021-12-08 | Fix |
| CVE-2021-38505 | Mozilla Firefox resource exposure | 6.5v3.1 | 1.1% | 2021-12-08 | Fix |
| CVE-2021-38504 | Mozilla Firefox use-after-free | 8.8v3.1 | 1.6% | 2021-12-08 | Fix |
| CVE-2021-38503 | Mozilla Firefox incorrect authorization | 10.0v3.1 | 3.8% | 2021-12-08 | Fix |
| CVE-2021-37941 | APM Java Agent local privilege escalation | 7.8v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-37097 | OOM vulnerability with the system framework code in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-37093 | Improper access control vulnerability in some Huawei devices | 5.3v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-37092 | Memory leakage vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-37075 | Credential management vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-37074 | Race condition vulnerability in some Huawei phones | 8.1v3.1 | 0.6% | 2021-12-08 | Fix |
| CVE-2021-37069 | Race condition vulnerability in some Huawei phones | 7.4v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-37054 | Identity spoofing and authentication bypass vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-37053 | Service logic vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-37052 | Exception log vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-37051 | Out-of-bounds read vulnerability in some Huawei phones | 9.1v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-37050 | Missing sensitive data encryption vulnerability in some Huawei phones | 7.5v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-37049 | Heap-based buffer overflow vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-37045 | UAF vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-37044 | Permission control vulnerability in some Huawei devices | 7.5v3.1 | 0.6% | 2021-12-08 | Fix |
| CVE-2021-37040 | Parameter injection vulnerability in some Huawei phones | 9.8v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-37039 | Input verification vulnerability in some Huawei phones | 6.5v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-37037 | Invalid address access vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-36720 | PineApp Mail Secure blocking.php cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-08 | |
| CVE-2021-36719 | Cybonet PineApp unrestricted file upload | 8.8v3.1 | 1.1% | 2021-12-08 | |
| CVE-2021-36718 | Synel Reports improper authentication | 6.5v3.1 | 0.5% | 2021-12-08 | |
| CVE-2021-36195 | Fortinet FortiWeb command line interpreter command injection | 4.2CNA v3.1 | 1.1% | 2021-12-08 | Fix |
| CVE-2021-36191 | Fortinet FortiWeb A open redirect | 4.1CNA v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-36190 | Fortinet FortiWeb A confused deputy | 5.5CNA v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-36188 | Fortinet FortiWeb cross-site scripting | 6.1CNA v3.1 | 0.7% | 2021-12-08 | Fix |
| CVE-2021-36180 | Fortinet FortiWeb OS command injection | 8.1CNA v3.1 | 1.2% | 2021-12-08 | Fix |
| CVE-2021-36173 | Fortinet FortiOS firmware signature verification function heap-based buffer overflow | 8.0CNA v3.1 | 1.5% | 2021-12-08 | Fix |
| CVE-2021-32591 | A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidenti | 5.3CNA v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-31850 | Denial of service in Database Security on Windows | 6.1CNA v3.1 | 1.0% | 2021-12-08 | Fix |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN configuration upload vulnerability | 8.8NVD v3.1 | 39.8% | 2021-12-08 | KEVFix |
| CVE-2021-26110 | Fortinet FortiOS, FortiProxy improper access control | 7.8CNA v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-26109 | Fortinet FortiOS memory allocator of SSLVPN integer overflow | 8.1CNA v3.1 | 1.9% | 2021-12-08 | Fix |
| CVE-2021-26108 | Fortinet FortiOS SSLVPN hard-coded cryptographic key | 7.5CNA v3.1 | 1.1% | 2021-12-08 | Fix |
| CVE-2021-26103 | Fortinet FortiOS insufficient verification of data authenticity | 6.3CNA v3.1 | 0.4% | 2021-12-08 | Fix |
| CVE-2021-25527 | Samsung Mobile Samsung Pay improper export of Android application components | 3.8CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25526 | Samsung Mobile Samsung Blockchain Wallet improper export of Android application components | 4.0CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25525 | Samsung Mobile Samsung Pay improper exception handling | 2.0CNA v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-25524 | Samsung Mobile Contacts insecure storage of sensitive information | 4.0CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25523 | Samsung Mobile SamsungDialer insecure storage of sensitive information | 4.0CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25522 | Samsung Smart Capture insecure storage of sensitive information | 5.3CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25521 | Samsung Mobile Samsung Internet improper authorization | 4.0CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25520 | Samsung Mobile Samsung Internet improper input validation | 5.9CNA v3.1 | 0.4% | 2021-12-08 | Fix |
| CVE-2021-25519 | Samsung Mobile Devices CPLC improper access control | 4.0CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25518 | Samsung Mobile Devices code execution | 6.4CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25517 | Samsung Mobile Devices LDFW improper input validation | 7.7CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25516 | Samsung Mobile Devices Exynos baseband improper exception handling | 6.4CNA v3.1 | 0.3% | 2021-12-08 | Fix |
| CVE-2021-25515 | Samsung Mobile Devices improper privilege management | 4.0CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25514 | Samsung Mobile Devices information disclosure | 3.3CNA v3.1 | 0.2% | 2021-12-08 | Fix |
| CVE-2021-25513 | Samsung Mobile Devices Apps Edge application improper privilege management | 2.4CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25512 | Samsung Mobile Devices telephony improper input validation | 6.1CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25511 | Samsung Mobile Devices FilterProvider improper input validation | 6.3CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-25510 | Samsung Mobile Devices FilterProvider improper input validation | 5.3CNA v3.1 | 0.1% | 2021-12-08 | Fix |
| CVE-2021-23862 | Bosch BVMS authenticated remote code execution | 7.2CNA v3.1 | 1.4% | 2021-12-08 | Fix |
| CVE-2021-23861 | Possible Access to Debug functions in Bosch VRM / BVMS | 6.5CNA v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-23860 | Reflected cross-site scripting (XSS) vulnerability in Bosch VRM / BVMS | 5.0CNA v3.1 | 0.5% | 2021-12-08 | Fix |
| CVE-2021-23859 | Denial of service and authentication bypass vulnerability in multiple Bosch products | 9.1CNA v3.1 | 1.0% | 2021-12-08 | Fix |
| CVE-2021-21957 | Dreamreport Remote Connector privilege escalation | 7.3v3.1 | 1.2% | 2021-12-08 | |
| CVE-2021-21951 | Anker out-of-bounds write | 10.0v3.1 | 2.4% | 2021-12-08 | |
| CVE-2021-21950 | Anker out-of-bounds write | 10.0v3.1 | 2.4% | 2021-12-08 | |
| CVE-2021-20047 | SonicWall Global VPN Client uncontrolled search path | 7.8v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-20045 | SonicWall SMA100 SMA100 sonicfiles RAC_COPY_TO buffer overflow | 9.8v3.1 | 25.2% | 2021-12-08 | Emerging ThreatsFix |
| CVE-2021-20044 | SonicWall SMA100 OS command injection | 8.8v3.1 | 40.1% | 2021-12-08 | Emerging ThreatsFix |
| CVE-2021-20043 | SonicWall SMA100 heap-based buffer overflow | 8.8v3.1 | 23.3% | 2021-12-08 | Emerging ThreatsFix |
| CVE-2021-20042 | SonicWall SMA100 confused deputy | 9.8v3.1 | 2.6% | 2021-12-08 | Emerging ThreatsFix |
| CVE-2021-20041 | SonicWall SMA100 infinite loop | 7.5v3.1 | 21.2% | 2021-12-08 | Emerging ThreatsFix |
| CVE-2021-20040 | SonicWall SMA100 SMA100 upload funtion relative path traversal | 7.5v3.1 | 25.8% | 2021-12-08 | Emerging ThreatsFix |
| CVE-2021-20039 | SonicWall SMA100 improper neutralization | 8.8v3.1 | 78.1% | 2021-12-08 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-20038 | SonicWall SMA 100 Appliances stack-based buffer overflow | 9.8v3.1 | 99.9% | 2021-12-08 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-4050 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 6.1v3.1 | 0.9% | 2021-12-08 | Fix |
| CVE-2021-4048 | lapack CLARRV out-of-bounds read | 9.1NVD v3.1 | 2.8% | 2021-12-08 | Fix |
| CVE-2021-3815 | Prototype pollution in fabiocaccamo/Utils.js | 9.8v3.1 | 0.8% | 2021-12-08 | Fix |
| CVE-2021-3370 | Douco DouPHP cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-08 | |
| CVE-2021-44686 | Calibre-ebook calibre regular expression denial of service | 7.5v3.1 | 5.0% | 2021-12-07 | Fix |
| CVE-2021-44685 | Git-it command injection in git-it-electron | 9.8v3.1 | 3.5% | 2021-12-07 | Fix |
| CVE-2021-44684 | Command injection in Github-todos | 9.8v3.1 | 2.6% | 2021-12-07 | |
| CVE-2021-44527 | UniFi Switches denial of service | 6.5v3.1 | 0.4% | 2021-12-07 | Fix |
| CVE-2021-44513 | Tmate-ssh-server race condition | 7.0v3.1 | 0.2% | 2021-12-07 | Fix |
| CVE-2021-44512 | Tmate-ssh-server incorrect permission assignment | 7.0v3.1 | 0.3% | 2021-12-07 | Fix |
| CVE-2021-44187 | Adobe Bridge SGI File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.8% | 2021-12-07 | Fix |
| CVE-2021-44186 | Adobe Bridge SGI File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 2.0% | 2021-12-07 | Fix |
| CVE-2021-44185 | Adobe Bridge RGB File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.8% | 2021-12-07 | Fix |
| CVE-2021-44149 | Trusted Firmware OP-TEE i.MX6UL CSU driver vulnerability | 7.8v3.1 | 0.3% | 2021-12-07 | |
| CVE-2021-44148 | GL.iNet Gl-ar150 cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-07 | |
| CVE-2021-43963 | Couchbase Sync Gateway information disclosure | 8.1v3.1 | 0.5% | 2021-12-07 | Fix |
| CVE-2021-43810 | admidio cross-site scripting (XSS) when redirect an URL | 8.8CNA v3.1 | 5.1% | 2021-12-07 | NucleiFix |
| CVE-2021-43805 | solidusio solidus ReDos vulnerability on guest checkout email validation | 7.5CNA v3.1 | 1.4% | 2021-12-07 | Fix |
| CVE-2021-43798 | Grafana path traversal | 7.5CNA v3.1 | 88.5% | 2021-12-07 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2021-43789 | Blind SQLi using Search filters in PrestaShop | 7.5CNA v3.1 | 4.7% | 2021-12-07 | Exploit codeFix |
| CVE-2021-43638 | Amazon Workspaces integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-43637 | Amazon Workspaces buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-43176 | GOautodial API relative path traversal | 8.8v3.1 | 1.3% | 2021-12-07 | Fix |
| CVE-2021-43175 | GOautodial API authentication bypass | 7.5v3.1 | 1.2% | 2021-12-07 | Fix |
| CVE-2021-43006 | Amzetta Zportal Dvm Tools integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-43003 | Amzetta Zportal Windows Zclient integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-43002 | Amzetta Zportal Dvm Tools buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-43000 | Amzetta Zportal Windows Zclient buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42996 | Donglify integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42994 | Donglify buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42993 | FlexiHub integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42990 | FlexiHub buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42988 | Eltima USB Network Gate buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42987 | Eltima USB Network Gate integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42986 | NoMachine Enterprise Client integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42983 | NoMachine Enterprise Client buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42980 | NoMachine Cloud Server buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42979 | NoMachine Cloud Server integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42977 | NoMachine Enterprise Desktop integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42976 | NoMachine Enterprise Desktop buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42973 | NoMachine Server integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42972 | NoMachine Server buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42717 | OWASP ModSecurity uncontrolled recursion | 7.5NVD v3.1 | 3.2% | 2021-12-07 | Fix |
| CVE-2021-42688 | Accops Hyworks Windows Client integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42687 | Accops Hyworks Windows Client buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42686 | Accops Hyworks Windows Client integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42685 | Accops Hyworks Dvm Tools integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42683 | Accops Hyworks Windows Client buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42682 | Accops Hyworks Dvm Tools integer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42681 | Accops Hyworks Dvm Tools buffer overflow | 8.8v3.1 | 0.5% | 2021-12-07 | |
| CVE-2021-42567 | Cross-site scripting in Apereo CAS | 6.1v3.1 | 8.1% | 2021-12-07 | NucleiFix |
| CVE-2021-42133 | Ivanti Avalanche unrestricted file upload | 8.1v3.1 | 2.8% | 2021-12-07 | Fix |
| CVE-2021-42132 | Ivanti Avalanche command injection | 8.8v3.1 | 70.1% | 2021-12-07 | Fix |
| CVE-2021-42131 | Ivanti Avalanche SQL injection | 8.8v3.1 | 66.5% | 2021-12-07 | Fix |
| CVE-2021-42130 | Ivanti Avalanche deserialization of untrusted data | 8.8v3.1 | 62.2% | 2021-12-07 | Fix |
| CVE-2021-42129 | Ivanti Avalanche command injection | 8.8v3.1 | 77.3% | 2021-12-07 | Fix |
| CVE-2021-42128 | Ivanti Avalanche exposed dangerous method | 9.8v3.1 | 4.5% | 2021-12-07 | Fix |
| CVE-2021-42127 | Ivanti Avalanche deserialization of untrusted data | 9.8v3.1 | 65.8% | 2021-12-07 | Fix |
| CVE-2021-42126 | Ivanti Avalanche improper authorization | 8.8v3.1 | 3.9% | 2021-12-07 | Fix |
| CVE-2021-42125 | Ivanti Avalanche arbitrary file upload | 8.8v3.1 | 81.6% | 2021-12-07 | Fix |
| CVE-2021-42124 | Ivanti Avalanche improper access control | 8.8v3.1 | 2.6% | 2021-12-07 | Fix |
| CVE-2021-41716 | Mahadiscom Mahavitaran improper authentication | 9.8v3.1 | 1.3% | 2021-12-07 | |
| CVE-2021-40859 | Auerswald Compact 5500R web management application vulnerability | 9.8v3.1 | 72.0% | 2021-12-07 | NucleiExploit code |
| CVE-2021-40578 | Online Enrollment Management System SQL injection | 7.2v3.1 | 1.5% | 2021-12-07 | |
| CVE-2021-40288 | TP-Link Archer AX10 WPA2 denial of service | 7.5v3.1 | 2.2% | 2021-12-07 | Fix |
| CVE-2021-40096 | Squaredup integration configuration cross-site scripting | 5.4v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-40095 | Squaredup local file inclusion | 4.9v3.1 | 1.0% | 2021-12-07 | Fix |
| CVE-2021-40094 | Squaredup cross-site scripting | 5.4v3.1 | 0.5% | 2021-12-07 | Fix |
| CVE-2021-40093 | Squaredup integration configuration cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-07 | Fix |
| CVE-2021-40092 | Squaredup Image Tile cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-07 | Fix |
| CVE-2021-38759 | Raspberry Pi OS Lite insecure default initialization | 9.8v3.1 | 15.7% | 2021-12-07 | Exploit codeFix |
| CVE-2021-37940 | Elastic Enterprise Search server-side request forgery | 6.8v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37100 | Huawei HarmonyOS There is a improper authentication | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37099 | Huawei HarmonyOS There is a path traversal | 9.1v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37096 | Input verification vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37095 | Huawei HarmonyOS There is a integer overflow | 9.8v3.1 | 1.4% | 2021-12-07 | Fix |
| CVE-2021-37094 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37091 | There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected. | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37090 | Huawei HarmonyOS There is a out-of-bounds read | 7.5v3.1 | 0.7% | 2021-12-07 | |
| CVE-2021-37089 | Huawei HarmonyOS There is a incomplete cleanup | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37088 | Huawei HarmonyOS There is a path traversal | 9.1v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37087 | Huawei HarmonyOS There is a path traversal | 9.1v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37086 | Huawei HarmonyOS There is a improper preservation of permissions | 8.6v3.1 | 0.6% | 2021-12-07 | Fix |
| CVE-2021-37085 | Huawei HarmonyOS race condition | 5.9v3.1 | 0.5% | 2021-12-07 | Fix |
| CVE-2021-37084 | Huawei HarmonyOS There is a improper input validation | 9.8v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37083 | Huawei HarmonyOS There is a null pointer dereference | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37082 | Huawei HarmonyOS There is a race condition | 5.9v3.1 | 0.4% | 2021-12-07 | Fix |
| CVE-2021-37081 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37080 | Huawei HarmonyOS There is a incomplete cleanup | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37079 | Huawei HarmonyOS There is a improper input validation | 9.1v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37078 | Huawei HarmonyOS There is a improper error handling | 7.5v3.1 | 0.9% | 2021-12-07 | Fix |
| CVE-2021-37077 | Huawei HarmonyOS There is a null pointer dereference | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37076 | Huawei HarmonyOS There is a out-of-bounds read | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37073 | Huawei HarmonyOS There is a race condition | 3.7v3.1 | 0.3% | 2021-12-07 | Fix |
| CVE-2021-37072 | Huawei HarmonyOS There is a incorrect buffer size calculation | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37071 | Huawei HarmonyOS denial of service | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37070 | Huawei HarmonyOS There is a out-of-bounds read | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37068 | Huawei HarmonyOS denial of service | 7.5v3.1 | 0.7% | 2021-12-07 | |
| CVE-2021-37067 | Huawei HarmonyOS There is a information disclosure | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37066 | Huawei HarmonyOS There is a out-of-bounds read | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37065 | Huawei HarmonyOS There is a integer overflow | 9.1v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37064 | Huawei HarmonyOS There is a path traversal | 9.1v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37063 | There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices. | 9.8v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37062 | Huawei HarmonyOS There is a improper array index validation | 9.1v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37061 | Huawei HarmonyOS There is a resource exhaustion | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37060 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37059 | There is a Weaknesses Introduced During Design | 9.8v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37058 | Huawei HarmonyOS improper access control | 5.3v3.1 | 0.5% | 2021-12-07 | Fix |
| CVE-2021-37057 | Huawei HarmonyOS There is a improper array index validation | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37056 | Improper permission control vulnerability in some Huawei devices | 5.3v3.1 | 0.5% | 2021-12-07 | Fix |
| CVE-2021-37055 | Logic bypass vulnerability in some Huawei devices | 5.3v3.1 | 0.6% | 2021-12-07 | Fix |
| CVE-2021-37048 | Huawei HarmonyOS There is a improper input validation | 7.5v3.1 | 0.6% | 2021-12-07 | Fix |
| CVE-2021-37047 | Input verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37046 | Memory leak vulnerability with the codec detection module in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37043 | Huawei HarmonyOS There is a stack-based buffer overflow | 7.5v3.1 | 0.6% | 2021-12-07 | Fix |
| CVE-2021-37042 | Improper verification vulnerability in some Huawei devices | 9.1v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37041 | Improper verification vulnerability in some Huawei devices | 9.1v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37038 | Improper access control vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37021 | Improper verification vulnerability in some Huawei devices | 9.1v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37020 | Improper verification vulnerability in some Huawei devices | 9.1v3.1 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-37014 | Integer overflow vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-37011 | Improper verification vulnerability in some Huawei devices | 9.1v3.1 | 0.9% | 2021-12-07 | Fix |
| CVE-2021-36760 | WSO2 Identity Server cross-site scripting | 6.1v3.1 | 0.7% | 2021-12-07 | Fix |
| CVE-2021-36133 | TrustedFirmware OP-TEE incorrect permission assignment | 7.1v3.1 | 0.3% | 2021-12-07 | |
| CVE-2021-34544 | Bkw Solar-log 500 cleartext storage of sensitive information | 6.5v3.1 | 1.0% | 2021-12-07 | Fix |
| CVE-2021-34543 | Bkw Solar-log 500 missing authentication | 7.5v3.1 | 2.9% | 2021-12-07 | Fix |
| CVE-2021-29116 | Esri ArcGIS Server bug-000142180 Hosted feature services vulnerable to stored XSS | 6.1CNA v3.0 | 0.8% | 2021-12-07 | Fix |
| CVE-2021-29115 | Esri ArcGIS Server an information disclosure | 5.3CNA v3.0 | 2.2% | 2021-12-07 | Fix |
| CVE-2021-29114 | SQL injection vulnerability in ArcGIS Server | 7.3CNA v3.0 | 1.0% | 2021-12-07 | Fix |
| CVE-2021-29113 | Remote file inclusion vulnerability in ArcGIS Server help documentation | 4.7CNA v3.0 | 0.8% | 2021-12-07 | |
| CVE-2021-28703 | Xen grant table v2 status pages race condition | 7.0v3.1 | 0.3% | 2021-12-07 | Fix |
| CVE-2021-28680 | Devise Masquerade improper privilege management in devise_masquerade | 8.1v3.1 | 1.2% | 2021-12-07 | Fix |
| CVE-2021-24041 | Facebook WhatsApp Business heap-based buffer overflow | 9.8v3.1 | 1.4% | 2021-12-07 | Fix |
| CVE-2021-22956 | Citrix ADC An resource exhaustion | 7.5v3.1 | 0.9% | 2021-12-07 | Fix |
| CVE-2021-22955 | Citrix ADC, Citrix Gateway unauthenticated denial of service | 7.5v3.1 | 0.9% | 2021-12-07 | Fix |
| CVE-2021-4049 | Cross-site request forgery (CSRF) in livehelperchat/livehelperchat | 6.5v3.1 | 0.4% | 2021-12-07 | Fix |
| CVE-2021-44682 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-44681 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-44680 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-44679 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-44678 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-44677 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-43936 | Distributed Data Systems WebHMI unrestricted file upload | 9.8v3.1 | 35.8% | 2021-12-06 | Exploit codeFix |
| CVE-2021-43931 | Distributed Data Systems WebHMI authentication bypass | 9.8v3.1 | 1.4% | 2021-12-06 | Fix |
| CVE-2021-43800 | Requarks wiki asset directory traversal with some storage modules on Windows | 7.5CNA v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-43784 | Linux Foundation runc netlink encoder integer overflow | 6.0CNA v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-43781 | Invenio-Drafts-Resources REST API record publishing missing authorization | 6.4CNA v3.1 | 0.7% | 2021-12-06 | Fix |
| CVE-2021-43471 | Canon LBP223DW weak password requirements | 7.5v3.1 | 1.4% | 2021-12-06 | Exploit code |
| CVE-2021-43469 | Vinga Wr-n300u command injection | 8.8NVD v3.1 | 2.4% | 2021-12-06 | |
| CVE-2021-43044 | Kaseya Unitrends Backup hard-coded credentials | 9.8v3.1 | 1.9% | 2021-12-06 | Fix |
| CVE-2021-43043 | Kaseya Unitrends Backup arbitrary file read | 6.5v3.1 | 1.4% | 2021-12-06 | Fix |
| CVE-2021-43042 | Kaseya Unitrends Backup buffer overflow | 9.8v3.1 | 2.9% | 2021-12-06 | Fix |
| CVE-2021-43041 | Kaseya Unitrends Backup format string | 8.8v3.1 | 2.3% | 2021-12-06 | Fix |
| CVE-2021-43040 | Kaseya Unitrends Backup privilege escalation | 8.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-43039 | Kaseya Unitrends Backup Samba file sharing service vulnerability | 6.5v3.1 | 1.2% | 2021-12-06 | Fix |
| CVE-2021-43038 | Kaseya Unitrends Backup privilege escalation | 8.8v3.1 | 2.2% | 2021-12-06 | Fix |
| CVE-2021-43037 | Kaseya Unitrends Backup uncontrolled search path | 7.8v3.1 | 0.5% | 2021-12-06 | Fix |
| CVE-2021-43036 | Kaseya Unitrends Backup weak password requirements | 9.8v3.1 | 1.9% | 2021-12-06 | Fix |
| CVE-2021-43035 | Kaseya Unitrends Backup SQL injection | 9.8v3.1 | 3.3% | 2021-12-06 | Fix |
| CVE-2021-43034 | Kaseya Unitrends Backup incorrect permission assignment | 7.8v3.1 | 0.4% | 2021-12-06 | Fix |
| CVE-2021-43033 | Kaseya Unitrends Backup OS command injection | 9.8v3.1 | 6.0% | 2021-12-06 | Fix |
| CVE-2021-40313 | Piwigo SQL injection | 8.8v3.1 | 1.1% | 2021-12-06 | |
| CVE-2021-40091 | Squaredup An server-side request forgery | 9.8v3.1 | 1.1% | 2021-12-06 | Fix |
| CVE-2021-39890 | GitLab improper authentication | 3.1CNA v3.1 | 1.1% | 2021-12-06 | Fix |
| CVE-2021-36567 | ThinkPHP deserialization of untrusted data in topthink/framework | 9.8v3.1 | 2.4% | 2021-12-06 | Fix |
| CVE-2021-36564 | ThinkPHP deserialization of untrusted data in topthink/framework | 9.8v3.1 | 1.8% | 2021-12-06 | Fix |
| CVE-2021-36198 | Johnson Controls Kantech Entrapass information disclosure | 8.3CNA v3.1 | 1.1% | 2021-12-06 | Fix |
| CVE-2021-35245 | Broken access control vulnerability for SolarWinds Serv-U | 8.4CNA v3.1 | 1.2% | 2021-12-06 | Fix |
| CVE-2021-35242 | SolarWinds Serv-U Server A valid CSRF token is present in response to an invalid request | 8.3CNA v3.1 | 0.8% | 2021-12-06 | Fix |
| CVE-2021-31632 | b2evolution CMS SQL injection | 9.8v3.1 | 1.8% | 2021-12-06 | |
| CVE-2021-31631 | b2evolution CMS cross-site request forgery | 8.8v3.1 | 0.5% | 2021-12-06 | |
| CVE-2021-25041 | Photo Gallery by 10Web WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.9% | 2021-12-06 | Fix |
| CVE-2021-24943 | Registrations for the Events Calendar WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 7.3% | 2021-12-06 | NucleiFix |
| CVE-2021-24939 | LoginWP WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-06 | Fix |
| CVE-2021-24938 | WooCommerce Currency Switcher WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-06 | Fix |
| CVE-2021-24935 | WP Google Fonts WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2021-12-06 | Fix |
| CVE-2021-24931 | Secure Copy Content Protection and Content Locking WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 78.8% | 2021-12-06 | NucleiMetasploitExploit codeFix |
| CVE-2021-24930 | Bookly WordPress plugin Staff Member stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-12-06 | Fix |
| CVE-2021-24924 | Email Log WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2021-12-06 | Fix |
| CVE-2021-24917 | WPS Hide Login WordPress plugin Protection bypass with Referer-Header | 7.5NVD v3.1 | 72.2% | 2021-12-06 | NucleiExploit codeFix |
| CVE-2021-24914 | Tawk.to Live Chat WordPress plugin Subscriber+ Visitor Monitoring and Chat Removal | 8.0NVD v3.1 | 0.5% | 2021-12-06 | Fix |
| CVE-2021-24866 | WP Data Access WordPress plugin Admin+ SQL injection | 9.8NVD v3.1 | 1.6% | 2021-12-06 | Fix |
| CVE-2021-24759 | PDF.js Viewer WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2021-12-06 | Fix |
| CVE-2021-24718 | ARForms Form Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-06 | Fix |
| CVE-2021-24714 | WP All Import WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2021-12-06 | Fix |
| CVE-2021-22170 | GitLab weak cryptographic algorithm | 6.2CNA v3.1 | 0.6% | 2021-12-06 | Fix |
| CVE-2021-4075 | Server-side request forgery (SSRF) in snipe/Snipe-IT | 7.2v3.1 | 0.9% | 2021-12-06 | Fix |
| CVE-2021-4069 | vim/vim use-after-free | 7.8v3.1 | 1.3% | 2021-12-06 | Fix |
| CVE-2021-44048 | Opendesign Drawings Explorer out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-05 | Fix |
| CVE-2021-44047 | Opendesign Drawings SDK use-after-free | 7.8v3.1 | 0.9% | 2021-12-05 | Fix |
| CVE-2021-44046 | Opendesign Prc SDK out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-05 | |
| CVE-2021-44045 | Opendesign Drawings SDK out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-05 | Fix |
| CVE-2021-44044 | Opendesign Drawings SDK out-of-bounds write | 7.8v3.1 | 0.8% | 2021-12-05 | Fix |
| CVE-2021-37253 | M-Files Web HTTP request smuggling | 7.5v3.1 | 2.8% | 2021-12-05 | Fix |
| CVE-2021-4005 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 4.3v3.1 | 0.4% | 2021-12-04 | Fix |
| CVE-2021-44352 | Tendacn AC15 stack-based buffer overflow | 9.8v3.1 | 13.4% | 2021-12-03 | |
| CVE-2021-44349 | Yejiao TuziCMS SQL injection | 9.8v3.1 | 1.1% | 2021-12-03 | |
| CVE-2021-44348 | Yejiao TuziCMS SQL injection | 9.8v3.1 | 1.1% | 2021-12-03 | |
| CVE-2021-44347 | Yejiao TuziCMS SQL injection | 9.8v3.1 | 1.1% | 2021-12-03 | |
| CVE-2021-44278 | Path traversal in librenms/librenms | 9.8v3.1 | 1.4% | 2021-12-03 | Fix |
| CVE-2021-44022 | Trend Micro Apex One reachable assertion | 5.5v3.1 | 0.2% | 2021-12-03 | Fix |
| CVE-2021-44021 | Trend Micro Worry-Free Business Security improper privilege management | 7.8v3.1 | 0.3% | 2021-12-03 | Fix |
| CVE-2021-44020 | Trend Micro Worry-Free Business Security improper privilege management | 7.8v3.1 | 0.3% | 2021-12-03 | Fix |
| CVE-2021-44019 | Trend Micro Worry-Free Business Security improper privilege management | 7.8v3.1 | 0.3% | 2021-12-03 | Fix |
| CVE-2021-43991 | Persistent XSS via Avatar upload in Kentico Xperience CMS | 5.4v3.1 | 0.5% | 2021-12-03 | Fix |
| CVE-2021-43772 | Trend Micro Security 2021 (Consumer) files accessible to external parties | 5.5v3.1 | 0.2% | 2021-12-03 | Fix |
| CVE-2021-43676 | Path manipulation in matyhtf/framework | 9.8v3.1 | 1.4% | 2021-12-03 | Fix |
| CVE-2021-43674 | Thinkupapp Thinkup path traversal | 9.8v3.1 | 1.4% | 2021-12-03 | |
| CVE-2021-43673 | Dzzoffice cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-03 | |
| CVE-2021-43415 | Improper authentication in HashiCorp Nomad | 8.8v3.1 | 1.2% | 2021-12-03 | Fix |
| CVE-2021-38909 | IBM Cognos Analytics cross-site scripting | 5.4CNA v3.0 | 0.7% | 2021-12-03 | Fix |
| CVE-2021-35415 | chamilo-lms cross-site scripting | 4.8v3.1 | 0.9% | 2021-12-03 | Fix |
| CVE-2021-35414 | chamilo-lms SQL injection | 9.8v3.1 | 1.8% | 2021-12-03 | Fix |
| CVE-2021-35413 | chamilo-lms course_intro_pdf_import.php remote code execution | 8.8v3.1 | 2.5% | 2021-12-03 | Fix |
| CVE-2021-35346 | tsMuxer out-of-bounds write | 9.8v3.1 | 1.7% | 2021-12-03 | |
| CVE-2021-35344 | tsMuxer out-of-bounds write | 9.8v3.1 | 1.7% | 2021-12-03 | |
| CVE-2021-29867 | IBM Cognos Analytics Jupyter notebook access vulnerability | 5.4CNA v3.0 | 0.8% | 2021-12-03 | Fix |
| CVE-2021-29756 | IBM Cognos Analytics cross-site request forgery | 4.3CNA v3.0 | 0.6% | 2021-12-03 | Fix |
| CVE-2021-29719 | IBM Cognos Analytics web response headers vulnerability | 5.3CNA v3.0 | 1.2% | 2021-12-03 | Fix |
| CVE-2021-29716 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087. | 2.7CNA v3.0 | 1.0% | 2021-12-03 | Fix |
| CVE-2021-23758 | Ajax.NET Professional deserialization of untrusted data | 9.8v3.1 | 82.6% | 2021-12-03 | KEVMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-23562 | plupload arbitrary file upload | 8.8v3.1 | 1.0% | 2021-12-03 | Fix |
| CVE-2021-20493 | IBM Cognos Analytics cross-site scripting | 6.1CNA v3.0 | 0.9% | 2021-12-03 | Fix |
| CVE-2021-20470 | IBM Cognos Analytics weak password requirements | 5.9CNA v3.0 | 1.4% | 2021-12-03 | Fix |
| CVE-2021-4000 | Open redirect in star7th/ShowDoc | 6.1v3.1 | 0.8% | 2021-12-03 | Fix |
| CVE-2021-3980 | Exposure of private personal information to an unauthorized actor in Elgg/Elgg | 7.5v3.1 | 1.5% | 2021-12-03 | Fix |
| CVE-2021-44518 | Digipas Egeetouch Manager cleartext transmission of sensitive information | 6.8v3.1 | 0.3% | 2021-12-02 | |
| CVE-2021-44227 | Cross-site request forgery in Mailman | 8.8v3.1 | 0.7% | 2021-12-02 | Fix |
| CVE-2021-44050 | CA Network Flow Analysis (NFA) SQL injection | 6.5v3.1 | 0.9% | 2021-12-02 | Fix |
| CVE-2021-43795 | Improper limitation of a pathname to a restricted directory in com.Linecorp.Armeria:Armeria | 7.5CNA v3.1 | 1.7% | 2021-12-02 | Fix |
| CVE-2021-43791 | Ineffective expiration validation for invitation links in Zulip | 6.5CNA v3.1 | 0.7% | 2021-12-02 | Fix |
| CVE-2021-43686 | Nzedb cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-02 | |
| CVE-2021-43683 | Haschek pictshare cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-02 | |
| CVE-2021-43682 | Thinkphp-bjyblog cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-02 | |
| CVE-2021-43681 | Zerodream Sakurapanel cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-02 | |
| CVE-2021-43679 | ShopEx ECShop SQL injection | 9.8v3.1 | 1.6% | 2021-12-02 | |
| CVE-2021-43327 | Renesas RX65 and RX65N security ID key information disclosure | 4.6v3.1 | 0.3% | 2021-12-02 | |
| CVE-2021-40334 | Hitachi Energy FOX61x SSH activation problem in the proprietary management protocol (port TCP 5558) | 8.6CNA v3.1 | 1.0% | 2021-12-02 | Fix |
| CVE-2021-40333 | Hitachi Energy FOX61x weak default credential associated with TCP port 26 | 9.0CNA v3.1 | 0.7% | 2021-12-02 | Fix |
| CVE-2021-28237 | GNU LibreDWG out-of-bounds write | 9.8v3.1 | 1.4% | 2021-12-02 | Fix |
| CVE-2021-28236 | GNU LibreDWG null pointer dereference | 7.5v3.1 | 1.2% | 2021-12-02 | |
| CVE-2021-26777 | CIRCUTOR COMPACT DC-S BASIC function SetFirewall in index.cgi buffer overflow | 9.8v3.1 | 2.4% | 2021-12-02 | |
| CVE-2021-25785 | Taogogo taoCMS cross-site scripting | 4.8v3.1 | 0.6% | 2021-12-02 | |
| CVE-2021-25784 | Taogogo taoCMS SQL injection | 7.2v3.1 | 1.1% | 2021-12-02 | |
| CVE-2021-25783 | Taogogo taoCMS SQL injection | 7.2v3.1 | 1.1% | 2021-12-02 | |
| CVE-2021-23264 | Crafter CMS exposure of resource to wrong sphere in org.CrafterCMS:crafter-search | 9.1v3.1 | 1.1% | 2021-12-02 | Fix |
| CVE-2021-23263 | Transmission of private resources into a new sphere (resource leak) in Crafter Engine | 7.5v3.1 | 1.6% | 2021-12-02 | Fix |
| CVE-2021-23262 | Crafter CMS snakeyaml deserialization vulnerability bypass | 7.2v3.1 | 0.6% | 2021-12-02 | Fix |
| CVE-2021-23261 | Crafter CMS overriding the system configuration file causes a denial of service | 4.9v3.1 | 0.6% | 2021-12-02 | Fix |
| CVE-2021-23260 | Crafter CMS stored XSS vulnerability in File Name of the file upload function | 5.4v3.1 | 0.4% | 2021-12-02 | Fix |
| CVE-2021-23259 | Crafter CMS groovy sandbox bypass | 7.2v3.1 | 0.7% | 2021-12-02 | Fix |
| CVE-2021-23258 | Crafter CMS spring SPEL expression language injection | 7.2v3.1 | 0.7% | 2021-12-02 | Fix |
| CVE-2021-3944 | Cross-site request forgery (CSRF) in bookstackapp/BookStack | 6.8v3.1 | 0.6% | 2021-12-02 | Fix |
| CVE-2021-44480 | Wokkalokka Wokka Watch Q50 insecure default initialization | 8.1v3.1 | 1.0% | 2021-12-01 | |
| CVE-2021-44479 | NXP Kinetis K82 out-of-bounds read | 5.5v3.1 | 0.3% | 2021-12-01 | |
| CVE-2021-44280 | Attendance-Management-System SQL injection | 9.8v3.1 | 1.9% | 2021-12-01 | |
| CVE-2021-44279 | Cross-site scripting in LibreNMS | 6.1v3.1 | 0.6% | 2021-12-01 | |
| CVE-2021-44277 | Cross-site scripting in LibreNMS | 6.1v3.1 | 0.6% | 2021-12-01 | |
| CVE-2021-43794 | Anonymous user cache poisoning via development-mode header in Discourse | 5.3CNA v3.1 | 1.1% | 2021-12-01 | Fix |
| CVE-2021-43793 | Bypass of Poll voting limits in Discourse | 4.3CNA v3.1 | 0.8% | 2021-12-01 | Fix |
| CVE-2021-43792 | Discourse tag group notifications information disclosure | 4.3CNA v3.1 | 0.9% | 2021-12-01 | Fix |
| CVE-2021-43690 | Yurunproxy cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-01 | |
| CVE-2021-43689 | Manage cross-site scripting | 6.1v3.1 | 0.6% | 2021-12-01 | |
| CVE-2021-43687 | Chamilo cross-site scripting | 6.1v3.1 | 1.2% | 2021-12-01 | Fix |
| CVE-2021-43685 | Libretime Hv externally controlled resource reference | 9.8v3.1 | 1.2% | 2021-12-01 | |
| CVE-2021-43451 | PHPGurukul Employee Record Management System SQL injection | 9.8v3.1 | 2.2% | 2021-12-01 | |
| CVE-2021-43360 | Sunnet eHRD insecure deserialization | 8.8CNA v3.1 | 2.4% | 2021-12-01 | Fix |
| CVE-2021-43359 | Sunnet eHRD broken access control | 8.8CNA v3.1 | 2.5% | 2021-12-01 | Fix |
| CVE-2021-43358 | Sunnet eHRD path traversal | 7.5v3.1 | 2.3% | 2021-12-01 | Fix |
| CVE-2021-43137 | PHPGurukul Hostel Management System cross-site request forgery | 8.8v3.1 | 0.5% | 2021-12-01 | |
| CVE-2021-42776 | Cloverdx XML external entity injection | 7.7v3.1 | 0.8% | 2021-12-01 | Fix |
| CVE-2021-42711 | Barracuda Network Access Client incorrect default permissions | 7.8v3.1 | 0.3% | 2021-12-01 | |
| CVE-2021-41039 | The Eclipse Foundation Eclipse Mosquitto denial of service | 7.5v3.1 | 1.3% | 2021-12-01 | Fix |
| CVE-2021-40809 | Jamf server-side request forgery | 8.8v3.1 | 1.4% | 2021-12-01 | Fix |
| CVE-2021-40154 | NXP LPC55S69JBD100 out-of-bounds read | 5.5v3.1 | 0.7% | 2021-12-01 | Exploit code |
| CVE-2021-38575 | TianoCore EDK II buffer underflow | 8.1v3.1 | 1.9% | 2021-12-01 | Fix |
| CVE-2021-34599 | Improper certificate validation in CODESYS Git | 7.4v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-33274 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 3.8% | 2021-12-01 | |
| CVE-2021-33271 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 3.8% | 2021-12-01 | |
| CVE-2021-33270 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 3.8% | 2021-12-01 | |
| CVE-2021-33269 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 3.8% | 2021-12-01 | |
| CVE-2021-33268 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 3.9% | 2021-12-01 | |
| CVE-2021-33267 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 3.8% | 2021-12-01 | |
| CVE-2021-33266 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 16.9% | 2021-12-01 | |
| CVE-2021-33265 | D-Link Dir-809 out-of-bounds write | 9.8v3.1 | 13.7% | 2021-12-01 | |
| CVE-2021-32592 | Fortinet FortiClientWindows, FortiClientEMS uncontrolled search path | 7.8CNA v3.1 | 0.3% | 2021-12-01 | Fix |
| CVE-2021-29863 | IBM QRadar SIEM server-side request forgery | 5.4CNA v3.0 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-29849 | IBM QRadar SIEM cross-site scripting | 5.4CNA v3.0 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-29779 | IBM QRadar SIEM key exchange without authentication | 5.9CNA v3.0 | 1.2% | 2021-12-01 | Fix |
| CVE-2021-26334 | AMD Chipset driver information disclosure | 9.9v3.1 | 1.2% | 2021-12-01 | Fix |
| CVE-2021-25967 | CKAN stored cross-site scripting (XSS) via SVG file upload | 5.4v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-20864 | ELECOM routers improper access control | 8.8v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-20863 | ELECOM routers OS command injection | 8.0v3.1 | 0.9% | 2021-12-01 | Fix |
| CVE-2021-20862 | ELECOM routers improper access control | 4.3v3.1 | 0.4% | 2021-12-01 | Fix |
| CVE-2021-20861 | ELECOM LAN routers improper access control | 8.8v3.1 | 0.4% | 2021-12-01 | Fix |
| CVE-2021-20860 | ELECOM LAN routers cross-site request forgery | 8.8v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-20859 | ELECOM LAN routers OS command injection | 8.0v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-20858 | ELECOM Wrc-2533ghbk-i Firmware ELECOM LAN router cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-20857 | ELECOM Wrc-2533ghbk-i Firmware ELECOM LAN router cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-20856 | ELECOM LAN routers cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-20855 | ELECOM LAN routers cross-site scripting | 5.4v3.1 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-20854 | ELECOM LAN routers OS command injection | 6.8v3.1 | 0.4% | 2021-12-01 | Fix |
| CVE-2021-20853 | ELECOM LAN routers OS command injection | 6.8v3.1 | 0.4% | 2021-12-01 | Fix |
| CVE-2021-20852 | ELECOM LAN routers buffer overflow | 6.8v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-20851 | Aftab Muni Browser and Operating System Finder cross-site request forgery | 8.8v3.1 | 0.8% | 2021-12-01 | Fix |
| CVE-2021-20847 | NTT DOCOMO Wi-Fi STATION SH-52A cross-site scripting | 6.1v3.1 | 0.8% | 2021-12-01 | Fix |
| CVE-2021-20611 | Mitsubishi Electric MELSEC iQ-R Series R00CPU improper input validation | 7.5CNA v3.1 | 3.2% | 2021-12-01 | Fix |
| CVE-2021-20610 | Mitsubishi Electric MELSEC iQ-R Series R00CPU improper length parameter handling | 7.5CNA v3.1 | 3.3% | 2021-12-01 | Fix |
| CVE-2021-20609 | Mitsubishi Electric MELSEC iQ-R Series R00CPU resource exhaustion | 7.5CNA v3.1 | 3.3% | 2021-12-01 | Fix |
| CVE-2021-20400 | IBM QRadar SIEM inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2021-12-01 | Fix |
| CVE-2021-4019 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.8% | 2021-12-01 | Fix |
| CVE-2021-4018 | Cross-site scripting (XSS) Stored in snipe/Snipe-IT | 5.4v3.1 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-4017 | Cross-site request forgery (CSRF) in star7th/ShowDoc | 8.8v3.1 | 0.6% | 2021-12-01 | Fix |
| CVE-2021-4015 | Cross-site request forgery (CSRF) in firefly-iii/firefly-iii | 4.3v3.1 | 0.4% | 2021-12-01 | Fix |
| CVE-2021-3994 | Cross-site scripting (XSS) Stored in django-helpdesk/django-helpdesk | 9.6v3.1 | 1.4% | 2021-12-01 | Fix |
| CVE-2021-3993 | Cross-site request forgery (CSRF) in star7th/ShowDoc | 6.5v3.1 | 0.5% | 2021-12-01 | Fix |
| CVE-2021-3992 | Improper access control in kevinpapst/Kimai2 | 6.5v3.1 | 1.0% | 2021-12-01 | Fix |
| CVE-2021-3990 | ShowDoc is vulnerable to use of cryptographically weak pseudo-random number generator (PRNG) | 6.5v3.1 | 0.9% | 2021-12-01 | Fix |
| CVE-2021-3989 | Open redirect in star7th/ShowDoc | 6.1v3.1 | 0.8% | 2021-12-01 | Fix |
| CVE-2021-3985 | Cross-site scripting (XSS) Stored in kevinpapst/Kimai2 | 9.0v3.1 | 1.2% | 2021-12-01 | Fix |
| CVE-2021-3984 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.5% | 2021-12-01 | Fix |
| CVE-2021-3983 | Cross-site scripting (XSS) Stored in kevinpapst/Kimai2 | 6.1v3.1 | 0.8% | 2021-12-01 | Fix |
| CVE-2021-3964 | Authorization bypass through user-controlled key in Elgg/Elgg | 5.9v3.1 | 0.8% | 2021-12-01 | Fix |