CVE-2021 records published after 2021
Page two of seven: records 1,001 to 2,000 of the 6,408 published after 2021, newest first. The first page carries the figures for After 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-47184 | Linux kernel i40e Ethernet driver VSI filter sync null pointer dereference | 8.8CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2021-47183 | Linux kernel lpfc null pointer dereference | 8.8CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2021-47182 | Linux kernel SCSI mode sense buffer handling vulnerability | 5.5v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2021-47181 | Linux kernel MUSB TUSB6010 USB driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2021-28656 | Apache Zeppelin: CSRF vulnerability in the Credentials page | 5.4CISA ADP v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2021-47208 | Mojolicious denial of service | 4.3CISA ADP v3.1 | 0.6% | 2024-04-08 | Fix |
| CVE-2021-4438 | Kyivstar react-native-sms-user-consent SMS user consent broadcast receiver vulnerability | 5.3v3.1 | 0.3% | 2024-04-07 | Fix |
| CVE-2021-27312 | Gleez Cms server side request forgery (SSRF) | 9.4CISA ADP v3.1 | 1.0% | 2024-04-03 | |
| CVE-2021-31156 | Allied Telesis AT-S115 boot loader path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-03-28 | |
| CVE-2021-47180 | Linux kernel NFC NCI device allocation memory leak | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47179 | Linux kernel NFSv4 pNFS layout return null pointer dereference | 7.5CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2021-47178 | Linux kernel SCSI target core incomplete cleanup | 7.5CNA v3.1 | 0.6% | 2024-03-25 | Fix |
| CVE-2021-47177 | Linux kernel iommu/vt-d memory leak | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47176 | Linux kernel s390 DASD FBA and DIAG path verification vulnerability | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47175 | Linux kernel fq_pie out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47174 | Linux kernel nftables pipapo AVX2 set backend vulnerability | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47173 | Linux kernel uss720 USB parallel port driver memory leak | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47172 | Linux kernel ad7124 ADC driver buffer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47171 | Linux kernel smsc75xx USB Ethernet driver memory leak | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47170 | Linux kernel USB usbfs driver resource exhaustion | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47169 | Linux kernel rp2 serial driver firmware loading null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47168 | Linux kernel NFS memory corruption | 9.8CNA v3.1 | 0.8% | 2024-03-25 | Fix |
| CVE-2021-47167 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oopsable condition in __nfs_pageio_add_request() Ensure that nfs_pageio_error_cleanup() resets the mirror array contents, so that the structure reflects the fact that it is now empty. Also change the test in nfs_pageio | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47166 | Linux kernel NFS out-of-bounds write | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47165 | Linux kernel Meson DRM driver shutdown handler null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47164 | Linux kernel mlx5e bonding driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47163 | Linux kernel TIPC UDP bearer module unload vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47162 | Linux kernel TIPC message reassembly use-after-free | 9.8CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2021-47161 | Linux kernel spi-fsl-dspi driver DMA error handling resource leak | 5.5CISA ADP v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47160 | Linux kernel mt7530 DSA switch driver vulnerability | 8.1CNA v3.1 | 0.3% | 2024-03-25 | Fix |
| CVE-2021-47159 | Linux kernel dsa crash | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47158 | Linux kernel sja1105 DSA switch driver memory leak | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47153 | Linux kernel i801 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47152 | Linux kernel MPTCP data fragment handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47151 | In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: bcm-voter: add a missing of_node_put() Add a missing of_node_put() in of_bcm_voter_get() to avoid the reference leak. | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47150 | Linux kernel FEC Ethernet driver initialization memory leak | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47149 | Linux kernel fujitsu null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47148 | Linux kernel octeontx2 Ethernet driver RSS context out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47147 | Linux kernel PTP OCP timecard driver memory leak | 6.2v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47146 | Linux kernel MLD packet allocation denial of service | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47145 | Linux kernel btrfs tree log directory fixup denial of service | 5.5v3.1 | 0.3% | 2024-03-25 | Fix |
| CVE-2021-47143 | Linux kernel SMC device registration vulnerability | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47142 | Linux kernel amdgpu TTM backend use-after-free | 7.8CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47141 | Linux kernel gve null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47140 | Linux kernel AMD IOMMU domain switching null pointer dereference | 5.3CISA ADP v3.1 | 0.6% | 2024-03-25 | Fix |
| CVE-2021-47139 | Linux kernel hns3 Ethernet driver netdev registration vulnerability | 5.5v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47138 | Linux kernel cxgb4 Ethernet driver filter clearing out-of-bounds write | 7.1v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2021-47137 | Linux kernel lantiq Ethernet driver RX ring memory corruption | 9.8CNA v3.1 | 0.6% | 2024-03-25 | Fix |
| CVE-2021-47136 | Linux kernel net uninitialized memory use | 8.6CNA v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2021-33632 | TOCTOU race condition problem in iSulad | 7.0CNA v3.1 | 0.1% | 2024-03-25 | |
| CVE-2021-33633 | Command injection in aops-ceres | 7.3CNA v3.1 | 0.8% | 2024-03-23 | |
| CVE-2021-47157 | Kossy module for Perl X-Requested-With header handling origin validation error | 9.8CISA ADP v3.1 | 0.4% | 2024-03-18 | |
| CVE-2021-47156 | Net::IPAddress::Util module for Perl improper input validation | 6.5CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2021-47155 | The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses. | 9.1CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2021-47154 | The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses. | 6.3CISA ADP v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2021-47135 | Linux kernel mt7921 Wi-Fi driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47134 | Linux kernel efi/fdt kernel panic | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47133 | Linux kernel amd_sfh sensor hub driver memory leak | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47132 | Linux kernel MPTCP retransmission out-of-bounds write | 7.5CNA v3.1 | 0.5% | 2024-03-15 | Fix |
| CVE-2021-47131 | Linux kernel TLS device offload use-after-free | 8.1CNA v3.1 | 0.8% | 2024-03-15 | Fix |
| CVE-2021-47130 | Linux kernel NVMe target peer-to-peer memory pool vulnerability | 7.5CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2021-47129 | Linux kernel netfilter conntrack expectations vulnerability | 7.8CNA v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2021-47128 | Linux kernel SELinux lockdown hook deadlock | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47127 | Linux kernel ice AF_XDP zero-copy queues null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47126 | Linux kernel IPv6 routing exception cache out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47125 | Linux kernel sch_htb resource leak | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47124 | Linux kernel io_uring linked timeout vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47123 | Linux kernel io_uring linked timeout double free | 7.8CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47122 | Linux kernel CAIF device notifier memory leak | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47121 | Linux kernel CAIF USB link driver memory leak | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47120 | Linux kernel magicmouse null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47119 | Linux kernel ext4 superblock mount memory leak | 5.5v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2021-47118 | Linux kernel cad_pid reference handling use-after-free | 7.8v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47117 | Linux kernel ext4 extent status cache denial of service | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47116 | Linux kernel ext4 memory leak | 5.5v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47114 | Linux kernel OCFS2 fallocate vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47113 | Linux kernel Btrfs rename exchange use-after-free | 7.1CNA v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2021-47112 | Linux kernel KVM paravirtual features vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47111 | Linux kernel Xen netback driver use-after-free | 8.8CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47110 | Linux kernel KVM guest clock incomplete cleanup | 7.1v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47109 | Linux kernel IPv6 neighbour table vulnerability | 7.5CNA v3.1 | 0.7% | 2024-03-15 | Fix |
| CVE-2021-38938 | IBM Host Access Transformation Services information disclosure | 6.2CNA v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2021-47108 | Linux kernel MediaTek HDMI driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47107 | Linux kernel NFS server READDIR buffer overflow | 9.8CNA v3.1 | 0.8% | 2024-03-04 | Fix |
| CVE-2021-47106 | Linux kernel nf_tables catch-all sets use-after-free | 7.8CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47105 | Linux kernel xsk memory leak | 5.5v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2021-47104 | Linux kernel IB/qib memory leak | 5.5v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47103 | Linux kernel TCP receive dst cache use-after-free | 9.8CNA v3.1 | 1.0% | 2024-03-04 | Fix |
| CVE-2021-47102 | Linux kernel Marvell Prestera driver out-of-bounds read | 7.1CNA v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2021-47101 | Linux kernel asix USB Ethernet driver vulnerability | 7.1v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47100 | Linux kernel IPMI system interface driver use-after-free | 5.5v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47099 | Linux kernel veth GRO handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47098 | Linux kernel hwmon integer overflow | 7.8v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47097 | Linux kernel Elantech touchpad driver out-of-bounds read | 7.1v3.1 | 0.4% | 2024-03-04 | Fix |
| CVE-2021-47096 | Linux kernel ALSA rawmidi interface use of uninitialized resource | 4.0CISA ADP v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47095 | Linux kernel IPMI SSIF driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47094 | Linux kernel KVM TDP MMU page table iterator vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47093 | Linux kernel intel_pmc_core memory leak | 5.5v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2021-47092 | Linux kernel KVM VMX guest state emulation vulnerability | 5.5v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2021-47091 | Linux kernel mac80211 access point startup improper locking | 5.5v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47090 | Linux kernel mm/hwpoison kernel panic | 5.5v3.1 | 0.4% | 2024-03-04 | Fix |
| CVE-2021-47089 | Linux kernel KFENCE debugfs interface memory leak | 3.3CISA ADP v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47088 | Linux kernel DAMON debugfs interface use-after-free | 7.0v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47087 | Linux kernel OP-TEE driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47086 | Linux kernel Phonet pipe end point (PEP) socket vulnerability | 5.5v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47083 | Linux kernel mediatek out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2021-47082 | Linux kernel tun double free | 7.8CNA v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2021-47081 | Linux kernel habanalabs Gaudi driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47080 | Linux kernel RDMA core GID table query divide by zero | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47079 | Linux kernel ideapad-laptop driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47078 | Linux kernel RXE RDMA queue pair creation use-after-free | 7.8CNA v3.1 | 0.3% | 2024-03-01 | Fix |
| CVE-2021-47077 | Linux kernel qedf null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47076 | Linux kernel RXE RDMA completion queue vulnerability | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47075 | Linux kernel nvmet memory leak | 5.3CISA ADP v3.1 | 0.9% | 2024-03-01 | Fix |
| CVE-2021-47074 | Linux kernel NVMe loopback transport memory leak | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47073 | Linux kernel Dell SMBIOS WMI driver denial of service | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47072 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix removed dentries still existing after log is synced When we move one inode from one directory to another and both the inode and its previous parent directory were logged before, we are not supposed to have the dentry fo | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47071 | Linux kernel uio_hv_generic memory leak | 5.5v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47070 | Linux kernel uio_hv_generic memory leak | 5.5CISA ADP v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2021-47069 | Linux kernel operation on a released resource | 7.8CNA v3.1 | 0.3% | 2024-03-01 | Fix |
| CVE-2021-47068 | Linux kernel NFC LLCP socket use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47067 | Linux kernel Tegra voltage regulator coupler vulnerability | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47066 | In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when dropping destination page Now we support sharing one page if PAGE_SIZE is not equal stripe size. To support this, it needs to support calculating xor value with different offsets for each r5dev. O | 7.1CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47065 | Linux kernel rtw88 Wi-Fi driver vulnerability | 7.8v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47064 | Linux kernel mt76 Wi-Fi driver memory leak | 5.3CISA ADP v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2021-47063 | Linux kernel DRM bridge panel driver use-after-free | 7.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2021-47062 | Linux kernel KVM SVM SEV vCPU handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47061 | Linux kernel KVM I/O bus use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47060 | Linux kernel KVM coalesced MMIO vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47059 | Linux kernel sun8i-ss crypto driver memory leak | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47058 | Linux kernel regmap debugfs use-after-free | 7.8v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47057 | Linux kernel sun8i-ss crypto driver memory leak | 5.5CISA ADP v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47056 | Linux kernel crypto uninitialized resource use | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47055 | Linux kernel MTD locking ioctls vulnerability | 7.1CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47054 | Linux kernel QCOM bus driver resource leak | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47020 | Linux kernel SoundWire stream configuration memory leak | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-47016 | Linux kernel m68k PCC timer driver denial of service | 5.5v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-46959 | Linux kernel SPI subsystem use-after-free | 7.8v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2021-39090 | IBM Cloud Pak for Security information disclosure | 5.9CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2021-47053 | Linux kernel sun8i-ss crypto driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47052 | Linux kernel SA2UL crypto driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47051 | Linux kernel LPSPI driver vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47050 | Linux kernel renesas-rpc-if null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47049 | Linux kernel vmbus use-after-free | 8.4CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47048 | Linux kernel ZynqMP QSPI driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47047 | Linux kernel ZynqMP GQSPI driver vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47046 | Linux kernel AMD display HDCP handling vulnerability | 7.8v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47045 | Linux kernel lpfc null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47044 | Linux kernel sched/fair out-of-bounds read | 7.7CISA ADP v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47043 | In the Linux kernel, the following vulnerability has been resolved: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' If an error occurs after a successful 'of_icc_get()' call, it must be undone. Use 'devm_of_icc_get()' instead of 'of_icc_get()' to avoid the leak. U | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47042 | Linux kernel AMD display driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47041 | Linux kernel nvmet-tcp target deadlock | 7.5CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2021-47040 | Linux kernel io_uring buffer provisioning vulnerability | 7.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47039 | Linux kernel ataflop driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47038 | Linux kernel Bluetooth HCI socket layer deadlock | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47037 | Linux kernel q6afe clock driver vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47036 | Linux kernel UDP tunnel GRO handling vulnerability | 9.8CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2021-47035 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as th | 8.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47034 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix pte update for kernel memory on radix When adding a PTE a ptesync is needed to order the update of the PTE with subsequent accesses otherwise a spurious fault may be raised. radix__set_pte_at() does not do this f | 4.4CISA ADP v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47033 | Linux kernel mt7615 Wi-Fi driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47032 | Linux kernel mt7915 Wi-Fi driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47031 | Linux kernel mt7921 Wi-Fi driver memory leak | 4.3CISA ADP v3.1 | 0.6% | 2024-02-28 | Fix |
| CVE-2021-47030 | Linux kernel mt7615 Wi-Fi driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47029 | Linux kernel mt76 connac Wi-Fi driver vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47028 | Linux kernel mt7915 Wi-Fi driver vulnerability | 7.1CNA v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2021-47027 | Linux kernel mt7921 Wi-Fi driver denial of service | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47026 | Linux kernel RDMA rtrs client sysfs use-after-free | 7.8v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47025 | Linux kernel MediaTek IOMMU driver vulnerability | 7.8v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47024 | Linux kernel vsock virtio transport memory leak | 5.5v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47023 | Linux kernel Prestera port event handling denial of service | 8.2CISA ADP v3.1 | 0.8% | 2024-02-28 | Fix |
| CVE-2021-47022 | Linux kernel mt7615 Wi-Fi driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47021 | Linux kernel mt7915 Wi-Fi driver memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47019 | Linux kernel mt7921 Wi-Fi driver vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47018 | Linux kernel powerpc fixmap area vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47017 | Linux kernel ath10k Wi-Fi driver use-after-free | 8.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47015 | Linux kernel bnxt_en Ethernet driver denial of service | 5.5v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47014 | Linux kernel act_ct crash | 7.8CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47013 | Linux kernel emac Ethernet driver use-after-free | 9.8CNA v3.1 | 0.8% | 2024-02-28 | Fix |
| CVE-2021-47012 | Linux kernel RDMA/siw use-after-free | 7.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47011 | Linux kernel memory control group slab accounting vulnerability | 7.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47010 | Linux kernel TCP congestion control vulnerability | 7.8CISA ADP v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47009 | Linux kernel trusted keys subsystem memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47008 | Linux kernel SVM null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47007 | Linux kernel f2fs filesystem resize denial of service | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47006 | Linux kernel ARM hardware breakpoint handling vulnerability | 5.5CISA ADP v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-47005 | Linux kernel PCI endpoint framework null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47004 | Linux kernel f2fs kernel panic | 7.1CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47003 | Linux kernel idxd null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47002 | Linux kernel SUNRPC service request handling null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-47001 | Linux kernel xprtrdma injection | 7.5CNA v3.1 | 0.7% | 2024-02-28 | Fix |
| CVE-2021-47000 | Linux kernel Ceph client vulnerability | 3.3CISA ADP v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46999 | Linux kernel SCTP use-after-free | 9.8CNA v3.1 | 0.7% | 2024-02-28 | Fix |
| CVE-2021-46998 | Linux kernel enic Ethernet driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46997 | Linux kernel arm64 exception entry vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46996 | Linux kernel nftables object userdata memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46995 | Linux kernel mcp251xfd CAN driver probe null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46994 | Linux kernel mcp251x CAN driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46993 | Linux kernel scheduler utilization clamping out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46992 | Linux kernel nftables hash bucket sizing vulnerability | 7.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-46991 | Linux kernel i40e client subtask use-after-free | 7.8v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46990 | Linux kernel PowerPC entry flush mitigation vulnerability | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46989 | Linux kernel HFS+ extents overflow file vulnerability | 7.1CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46988 | Linux kernel userfaultfd use-after-free | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46987 | Linux kernel Btrfs inline extent cloning deadlock | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46986 | Linux kernel dwc3 USB gadget driver use-after-free | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46985 | Linux kernel ACPI device scan memory leak | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46984 | Linux kernel kyber I/O scheduler vulnerability | 7.8CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-46983 | Linux kernel NVMe target RDMA transport null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-02-28 | Fix |
| CVE-2021-46982 | Linux kernel f2fs compression writeback race condition | 4.7v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46981 | Linux kernel NBD device disconnect null pointer dereference | 5.5v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2021-46980 | Linux kernel ucsi out-of-bounds read | 7.1v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46979 | Linux kernel IIO ioctl handler cleanup double free | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46978 | Linux kernel KVM nested VMX enlightened VMCS vulnerability | 7.8CISA ADP v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46977 | Linux kernel KVM VMX user return MSRs vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46976 | Linux kernel drm/i915 crash | 5.5v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2021-46974 | Linux kernel BPF verifier pointer arithmetic vulnerability | 7.1CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46973 | Linux kernel qrtr MHI transport use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46972 | Linux kernel overlayfs metacopy lookup memory leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46971 | Linux kernel perf events lockdown check vulnerability | 3.3v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46970 | Linux kernel MHI PCI generic driver workqueue vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46969 | Linux kernel MHI bus core queueing use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46968 | Linux kernel s390 zcrypt driver memory leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46967 | Linux kernel vhost-vdpa driver denial of service | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46966 | Linux kernel ACPI custom_method interface use-after-free | 7.8v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46965 | Linux kernel physmap-bt1-rom out-of-bounds access | 7.1v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46964 | Linux kernel qla2xxx SCSI driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46963 | Linux kernel qla2xxx SCSI driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46962 | Linux kernel uniphier-sd resource leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46961 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Do not enable irqs when handling spurious interrups We triggered the following error while running our 4.19 kernel with the pseudo-NMI patches backported to it: [ 14.816231] ------------[ cut here ]------------ | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46960 | Linux kernel CIFS SMB2 encryption key handling vulnerability | 7.5CNA v3.1 | 0.6% | 2024-02-27 | Fix |
| CVE-2021-46958 | Linux kernel Btrfs transaction and fsync handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46957 | Linux kernel RISC-V kprobe denial of service | 5.5CISA ADP v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46956 | Linux kernel virtiofs driver memory leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46955 | Linux kernel openvswitch out-of-bounds read | 8.2CNA v3.1 | 0.7% | 2024-02-27 | Fix |
| CVE-2021-46954 | Linux kernel traffic control packet fragmentation out-of-bounds read | 7.1v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46953 | Linux kernel ACPI GTDT watchdog driver vulnerability | 6.7v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46952 | Linux kernel NFS mount option parsing out-of-bounds read | 7.1v3.1 | 0.3% | 2024-02-27 | Fix |
| CVE-2021-46951 | Linux kernel TPM EFI event log integer underflow | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46950 | Linux kernel RAID1 driver vulnerability | 7.8v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46949 | Linux kernel farch null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46948 | Linux kernel farch null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-02-27 | Fix |
| CVE-2021-46947 | Linux kernel sfc null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46945 | Linux kernel ext4 filesystem vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46944 | Linux kernel intel-ipu3 image driver memory leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46943 | Linux kernel intel-ipu3 image driver incorrect buffer size calculation | 7.8v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46942 | Linux kernel io_uring SQPOLL cancellation denial of service | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46941 | Linux kernel dwc3 USB controller mode switching denial of service | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46940 | Linux kernel turbostat power tool integer overflow | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46939 | Linux kernel ftrace global clock denial of service | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46938 | Linux kernel device-mapper request queue double free | 7.8v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46937 | Linux kernel DAMON debugfs interface vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46936 | Linux kernel TCP time-wait timer use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46935 | Linux kernel binder resource exposure | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46934 | Linux kernel I2C compat ioctl vulnerability | 3.3v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46933 | Linux kernel use-after-free | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46932 | Linux kernel Input improper initialization | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46931 | Linux kernel mlx5e TX reporter out-of-bounds write | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46930 | Linux kernel mtu3 USB driver use-after-free | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46929 | Linux kernel SCTP endpoint use-after-free | 7.8CNA v3.1 | 0.3% | 2024-02-27 | Fix |
| CVE-2021-46928 | Linux kernel PA-RISC trap handler vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46927 | Linux kernel Nitro Enclaves memory mapping improper locking | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46926 | Linux kernel SoundWire ACPI controller detection vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46925 | Linux kernel SMC socket race condition | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46924 | Linux kernel st21nfca NFC driver memory leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46923 | Linux kernel mount_setattr handling memory leak | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46922 | Linux kernel TPM trusted keys vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46921 | Linux kernel queued read-write lock vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46920 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver avoids clobbering the OVERFLOW bit that c | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46919 | Linux kernel idxd driver workqueue size control vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46918 | Linux kernel idxd driver MSIX permission cleanup vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46917 | Linux kernel idxd driver WQCFG register cleanup vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46916 | Linux kernel ixgbe ethtool loopback test null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46915 | Linux kernel nft_limit expression divide-by-zero | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46914 | Linux kernel ixgbe driver power management vulnerability | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46913 | Linux kernel nftables connlimit expression denial of service | 7.8CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46912 | Linux kernel TCP congestion control sysctl null pointer dereference | 7.3CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46911 | Linux kernel ch_ktls driver denial of service | 9.8CNA v3.1 | 0.6% | 2024-02-27 | Fix |
| CVE-2021-46910 | Linux kernel ARM kmap_local debugging code vulnerability | 7.0CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46909 | Linux kernel footbridge PCI interrupt mapping denial of service | 5.5v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46908 | Linux kernel BPF verifier vulnerability | 7.1CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2021-46906 | Linux kernel USB HID driver information disclosure | 5.5v3.1 | 0.2% | 2024-02-26 | Fix |
| CVE-2021-46905 | Linux kernel hso USB driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2021-46904 | Linux kernel hso USB driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2021-33162 | Intel Ethernet Adapters and Ethernet Controller I225 manageability firmware improper access control | 8.4CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2021-33161 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. | 7.2CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2021-33158 | Intel Ethernet Adapters and Ethernet Controller I225 manageability firmware improper neutralization | 7.2CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2021-33157 | Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. | 7.2CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2021-33146 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable information disclosure via network access. | 5.3CNA v3.1 | 0.5% | 2024-02-23 | Fix |
| CVE-2021-33145 | Intel Ethernet Adapters and Ethernet Controller I225 manageability firmware uncaught exception | 7.2CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2021-33142 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable denial of service via local access. | 6.0CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2021-33141 | Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable denial of service via network access. | 8.6CNA v3.1 | 0.8% | 2024-02-23 | Fix |
| CVE-2021-29050 | Liferay portal and Liferay DXP vulnerable to cross-site request forgery in Terms of Use page | 8.8CISA ADP v3.1 | 0.3% | 2024-02-20 | Fix |
| CVE-2021-29038 | Liferay Portal and Liferay DXP Does not Obfuscate Password Reminder Answers | 6.3CISA ADP v3.1 | 0.3% | 2024-02-20 | Fix |
| CVE-2021-46757 | AMD Ryzen™ Embedded 5000 privilege escalation | 7.8v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2021-4437 | dbartholomae Lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos | 6.5v3.1 | 0.4% | 2024-02-12 | Fix |
| CVE-2021-4436 | 3DPrint Lite WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 6.6% | 2024-02-05 | NucleiEmerging ThreatsFix |
| CVE-2021-46903 | Meinbergglobal Lantime Firmware improper access control | 6.5v3.1 | 0.5% | 2024-02-04 | Fix |
| CVE-2021-46902 | Meinbergglobal Lantime Firmware path traversal | 7.2v3.1 | 0.7% | 2024-02-04 | Fix |
| CVE-2021-4435 | Yarn: Untrusted search path | 7.8NVD v3.1 | 0.3% | 2024-02-04 | Fix |
| CVE-2021-22282 | RCE in B&R Automation Studio with crafted project files | 8.3CNA v3.1 | 0.4% | 2024-02-02 | Fix |
| CVE-2021-22281 | Zip Slip vulnerability in B&R Automation Studio Project Import | 6.3CNA v3.1 | 0.4% | 2024-02-02 | Fix |
| CVE-2021-21575 | Dell BSAFE Micro Edition Suite timing side channel | 5.9CNA v3.1 | 0.5% | 2024-02-02 | Fix |
| CVE-2021-43584 | Nagios Cross Platform Agent 'Tail Event Logs' functionality DOM-based cross-site scripting | 4.8v3.1 | 1.2% | 2024-01-24 | |
| CVE-2021-42147 | Contiki-NG Tinydtls dtls_sha256_update function buffer over-read | 9.1v3.1 | 0.8% | 2024-01-24 | |
| CVE-2021-42146 | Contiki-NG Tinydtls flawed authentication | 7.5v3.1 | 0.7% | 2024-01-24 | |
| CVE-2021-42145 | Contiki-NG Tinydtls in check_certificate_request reachable assertion | 7.5v3.1 | 0.4% | 2024-01-24 | |
| CVE-2021-42144 | Contiki-ng Tinydtls buffer over-read | 9.8v3.1 | 0.7% | 2024-01-24 | |
| CVE-2021-42143 | Contiki-NG Tinydtls infinite loop | 9.1v3.1 | 0.8% | 2024-01-24 | |
| CVE-2021-42142 | Contiki-NG Tinydtls improper exception handling | 9.8v3.1 | 1.0% | 2024-01-23 | |
| CVE-2021-42141 | Contiki-NG Tinydtls improper exception handling | 9.8v3.1 | 1.2% | 2024-01-22 | |
| CVE-2021-31314 | Ejinshan Terminal Security System ejinshan v8+ file upload | 9.8v3.1 | 0.7% | 2024-01-20 | |
| CVE-2021-33631 | Kernel crash in EXT4 filesystem | 5.5CNA v3.1 | 0.4% | 2024-01-18 | Fix |
| CVE-2021-33630 | openEuler kernel null-ptr-deref in network sched | 5.5CNA v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2021-4433 | Karjasoft Sami HTTP Server HTTP HEAD Rrequest denial of service | 7.5v3.1 | 1.3% | 2024-01-18 | |
| CVE-2021-4434 | Social Warfare WordPress plugin remote code execution | 9.8v3.1 | 1.9% | 2024-01-17 | Fix |
| CVE-2021-25117 | Lester Chan WP-PostRatings options page stored cross-site scripting | 4.8NVD v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2021-24870 | WP Fastest Cache WordPress plugin CSRF to stored cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2021-24869 | WP Fastest Cache WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.2% | 2024-01-16 | Fix |
| CVE-2021-24567 | Simple Post WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.5% | 2024-01-16 | |
| CVE-2021-24566 | FOX WordPress plugin path traversal | 8.8NVD v3.1 | 1.3% | 2024-01-16 | Fix |
| CVE-2021-24559 | Qyrr WordPress plugin authenticated (contributor+) stored XSS | 5.4NVD v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2021-24433 | Simple Sort&Search WordPress plugin Ccontributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-01-16 | |
| CVE-2021-24432 | Advanced AJAX Product Filters WordPress plugin unauthenticated reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2021-24151 | WP Editor WordPress plugin authenticated SQL injection | 7.2NVD v3.1 | 0.8% | 2024-01-16 | Fix |
| CVE-2021-4432 | PCMan FTP Server user command denial of service | 7.5v3.1 | 1.3% | 2024-01-16 | |
| CVE-2021-4227 | Ark Comment Editor WordPress plugin Iframe injection via comment | 5.3NVD v3.1 | 0.6% | 2024-01-16 | |
| CVE-2021-3600 | The Linux Kernel Organization linux out-of-bounds read | 7.8NVD v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2021-45465 | Siemens syngo fastView write-what-where condition | 7.8CNA v3.1 | 0.3% | 2024-01-04 | Fix |
| CVE-2021-42028 | Siemens syngo fastView out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-01-04 | Fix |
| CVE-2021-40367 | Siemens syngo fastView out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-01-04 | Fix |
| CVE-2021-46901 | Cetic-6lbr out-of-bounds write | 7.5v3.1 | 0.7% | 2023-12-31 | |
| CVE-2021-46900 | Sympa weak cryptographic algorithm | 7.5v3.1 | 0.4% | 2023-12-31 | Fix |
| CVE-2021-38927 | IBM Aspera Console cross-site scripting | 7.2CNA v3.1 | 0.3% | 2023-12-25 | Fix |
| CVE-2021-22962 | Ivanti Avalanche denial of service | 9.1v3.1 | 91.0% | 2023-12-19 | Fix |
| CVE-2021-42797 | AVEVA Edge path traversal | 7.5v3.1 | 1.0% | 2023-12-16 | |
| CVE-2021-42796 | AVEVA Edge OS command injection | 9.8v3.1 | 1.1% | 2023-12-16 | |
| CVE-2021-42794 | AVEVA Edge connection string parser vulnerability | 5.3v3.1 | 1.2% | 2023-12-16 | |
| CVE-2021-3187 | BeyondTrust Privilege Management For Mac incorrect default permissions | 8.8v3.1 | 0.6% | 2023-12-11 | Fix |
| CVE-2021-46899 | Antonymale SyncTrayzor CEF remote debugging vulnerability | 7.8v3.1 | 0.2% | 2023-12-09 | Fix |
| CVE-2021-27795 | Brocade Switches weak cryptographic algorithm | 6.4CNA v3.1 | 0.2% | 2023-12-06 | Fix |
| CVE-2021-36806 | Sophos Email Appliance cross-site scripting | 4.7CNA v3.1 | 0.4% | 2023-11-30 | |
| CVE-2021-35975 | Systematica SMTP Adapter absolute path traversal | 5.3v3.1 | 1.1% | 2023-11-30 | |
| CVE-2021-39008 | IBM QRadar WinCollect Agent information disclosure | 2.7CNA v3.1 | 0.6% | 2023-11-23 | Fix |
| CVE-2021-37942 | APM Java Agent local privilege escalation | 7.0CNA v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2021-37937 | Elasticsearch privilege escalation | 5.9CNA v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2021-22151 | Kibana path traversal issue | 3.1CNA v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2021-22150 | Kibana code execution issue | 6.6CNA v3.1 | 1.2% | 2023-11-22 | Fix |
| CVE-2021-22143 | Elastic APM .NET Agent information disclosure | 2.1CNA v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2021-22142 | Elastic Kibana Reporting feature vulnerability | 6.6CNA v3.1 | 1.0% | 2023-11-22 | Fix |
| CVE-2021-38405 | Siemens JT2Go and Teamcenter Visualization Datalogics APDFL library memory corruption | 7.8v3.1 | 1.3% | 2023-11-21 | Fix |
| CVE-2021-27504 | Texas Instruments FREERTOS integer overflow or wraparound | 7.8v3.1 | 0.3% | 2023-11-21 | Fix |
| CVE-2021-27502 | Texas Instruments TI-RTOS integer overflow or wraparound | 7.8v3.1 | 0.3% | 2023-11-21 | Fix |
| CVE-2021-27429 | Texas Instruments TI-RTOS integer overflow or wraparound | 7.8v3.1 | 0.3% | 2023-11-20 | Fix |
| CVE-2021-22636 | Texas Instruments TI-RTOS integer overflow or wraparound | 7.8v3.1 | 0.3% | 2023-11-20 | Fix |
| CVE-2021-35437 | lmxcms SQL injection | 9.8v3.1 | 1.0% | 2023-11-16 | |
| CVE-2021-46774 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” denial of service | 6.7CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2021-46766 | AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS incomplete cleanup | 2.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2021-46758 | AMD processors ASP bootloader vulnerability | 6.1v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2021-46748 | AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards denial of service | 5.5v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2021-26345 | AMD 2nd Gen AMD EPYC™ Processors out-of-bounds read | 1.9CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2021-43609 | Spiceworks Help Desk Server SQL injection | 8.8NVD v3.1 | 2.0% | 2023-11-09 | Exploit codeFix |
| CVE-2021-43419 | Opayweb Opay An information disclosure | 7.5v3.1 | 0.7% | 2023-11-07 | |
| CVE-2021-4431 | msyk FMDataAPI FMDataAPI_Sample.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2021-4430 | Ortus Solutions ColdBox Elixir ENV variable defaultConfig.js information disclosure | 7.5v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2021-39810 | Google Android CardEmulationManager.java privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2021-25736 | Kubernetes windows kube-proxy LoadBalancer contention | 5.8CNA v3.1 | 0.9% | 2023-10-30 | Fix |
| CVE-2021-33638 | openEuler iSulad run copy with container in a malicious directory may cause container escaping | 8.4CNA v3.1 | 0.2% | 2023-10-29 | Fix |
| CVE-2021-33637 | openEuler iSulad export container in a malicious directory may cause process to be hijacked | 8.4CNA v3.1 | 0.2% | 2023-10-29 | Fix |
| CVE-2021-33636 | openEuler iSulad load malicious images may cause process to be hijacked | 8.4CNA v3.1 | 0.3% | 2023-10-29 | Fix |
| CVE-2021-33635 | openEuler iSulad pull malicious images may cause process to be hijacked | 9.8CNA v3.1 | 0.6% | 2023-10-29 | Fix |
| CVE-2021-33634 | openEuler lcr malicious image running containers may cause DoS attacks | 6.3CNA v3.1 | 0.2% | 2023-10-29 | Fix |
| CVE-2021-26738 | Zscaler Client Connector privilege escalation for ZCC macOS via path variable | 7.8CNA v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2021-26737 | Zscaler Client Connector privilege escalation using PID Reuse in ZCC macOS | 5.5CNA v3.1 | 0.1% | 2023-10-23 | Fix |
| CVE-2021-26736 | Zscaler Client Connector ZApp Installer privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2021-26735 | Zscaler Client Connector untrusted search path While Executing REG delete by Uninstaller | 6.7CNA v3.1 | 0.1% | 2023-10-23 | Fix |
| CVE-2021-26734 | Zscaler Client Connector junction Delete leading to elevation of privilege | 4.4CNA v3.1 | 0.1% | 2023-10-23 | Fix |
| CVE-2021-46898 | Django Grappelli open redirect | 6.1v3.1 | 0.5% | 2023-10-22 | Fix |
| CVE-2021-46897 | Wagtail CRX CodeRed Extensions vulnerable to path traversal | 6.5v3.1 | 0.7% | 2023-10-22 | Fix |
| CVE-2021-4418 | Custom CSS, JS and PHP WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2021-4353 | WooCommerce Dynamic Pricing and Discounts WordPress plugin unauthenticated settings Import/Export | 5.3v3.1 | 0.6% | 2023-10-20 | Fix |
| CVE-2021-4335 | Fancy Product Designer WordPress plugin insufficient authorization on Mulitple AJAX actions | 6.3v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2021-4334 | Fancy Product Designer WordPress plugin insufficient authorization to arbitrary options update | 8.8v3.1 | 0.7% | 2023-10-20 | Fix |
| CVE-2021-38859 | IBM Security Verify Privilege information disclosure | 4.3CNA v3.1 | 0.5% | 2023-10-17 | Fix |
| CVE-2021-29913 | IBM Security Verify Privilege improper input validation | 6.5CNA v3.1 | 0.4% | 2023-10-17 | Fix |
| CVE-2021-20581 | IBM Security Verify Privilege information disclosure | 5.3CNA v3.1 | 0.4% | 2023-10-17 | Fix |
| CVE-2021-3784 | Garuda Linux improper authorization | 7.0v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2021-38243 | XunRuiCMS code injection | 9.8v3.1 | 1.3% | 2023-09-27 | |
| CVE-2021-26837 | Fortra Delivernow SearchTextBox parameter SQL injection | 9.8v3.1 | 0.9% | 2023-09-19 | |
| CVE-2021-28485 | Ericsson Mobile Switching Center Server Bc 18A path traversal | 4.3v3.1 | 0.5% | 2023-09-14 | |
| CVE-2021-44172 | Fortinet FortiClientEMS information disclosure | 3.6CNA v3.1 | 0.9% | 2023-09-13 | Fix |
| CVE-2021-45811 | Enhancesoft osTicket "Search" functionality of "tickets.php" page SQL injection | 6.5v3.1 | 2.5% | 2023-09-08 | Nuclei |
| CVE-2021-33834 | Insyde Iscflashx64.sys out-of-bounds write | 7.1v3.1 | 0.2% | 2023-09-08 | Fix |
| CVE-2021-27715 | Mofinetwork Mofi4500-4gxelte-v2 improper authentication | 9.8v3.1 | 1.0% | 2023-09-08 | |
| CVE-2021-44195 | Adobe After Effects JPEG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44194 | Adobe After Effects 3GP File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44193 | Adobe After Effects MOV File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44192 | Adobe After Effects MOV File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44191 | Adobe After Effects MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44190 | Adobe After Effects MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44189 | Adobe After Effects JPEG2000 Parsing use-after-free information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-44188 | Adobe After Effects 3GP File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-43753 | Adobe Lightroom TIF File Parsing use-after-free information disclosure | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2021-43751 | Adobe Premiere Pro MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-43027 | Adobe After Effects TIF File Parsing out-of-bounds read information disclosure | 7.8CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-43018 | Adobe Photoshop JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-42734 | Adobe Photoshop TIF File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.5% | 2023-09-07 | Fix |
| CVE-2021-42265 | Adobe Premiere Pro MP4 File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-40795 | Adobe Premiere Pro 3GP File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-40791 | Adobe Premiere Pro JPEG File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-40790 | Adobe Premiere Pro MOV File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-40723 | Adobe Acrobat Reader DC out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2021-40699 | Adobe ColdFusion CFIDE improper access control leads to privilege escalation | 7.4CNA v3.1 | 0.5% | 2023-09-07 | Fix |
| CVE-2021-40698 | Adobe ColdFusion Use of Inherently Dangerous function leads to security feature bypass | 7.4CNA v3.1 | 0.6% | 2023-09-07 | Fix |
| CVE-2021-39859 | Adobe Acrobat Reader DC use-after-free | 5.5CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2021-36646 | kodcloud KodExplorer Cross Site Scrtpting ( cross-site scripting | 6.1v3.1 | 0.7% | 2023-09-06 | Nuclei |
| CVE-2021-36060 | Adobe Media Encoder MPEG File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2021-36036 | Magento Commerce Media Gallery upload improper access control could lead to remote code execution | 7.2CNA v3.1 | 2.1% | 2023-09-06 | Fix |
| CVE-2021-36023 | Magento XML injection vulnerability in the Widgets Update Layout | 9.1CNA v3.1 | 2.4% | 2023-09-06 | Fix |
| CVE-2021-36021 | Magento Commerce CMS page improper input validation could lead to remote code execution | 7.2CNA v3.1 | 2.0% | 2023-09-06 | Fix |
| CVE-2021-35980 | Adobe Acrobat Reader SpellDictionaryExport path traversal remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2021-28644 | Adobe Acrobat SpellDictionaryCreate path traversal remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2021-21088 | Adobe Acrobat Pro DC use-after-free remote code execution | 7.8CNA v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2021-40546 | Tenda AC6 improper resource release | 4.9v3.1 | 0.7% | 2023-09-05 | |
| CVE-2021-32050 | MongoDB Driver may publish events containing authentication-related data | 4.2CNA v3.1 | 0.6% | 2023-08-29 | Fix |
| CVE-2021-3262 | Trispark Veo Transportation SQL injection | 9.8v3.1 | 1.0% | 2023-08-29 | |
| CVE-2021-27932 | Stormshield SSL VPN Client insecure permissions | 7.8v3.1 | 0.2% | 2023-08-25 | Fix |
| CVE-2021-46312 | djvulibre divide by zero | 6.5v3.1 | 1.0% | 2023-08-22 | Fix |
| CVE-2021-46310 | djvulibre divide by zero | 6.5v3.1 | 1.0% | 2023-08-22 | Fix |
| CVE-2021-46179 | upx reachable assertion | 6.5v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2021-46174 | GNU Binutils function bfd_getl32 heap-based buffer overflow | 7.5v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2021-43171 | E.foundation App Lounge improper signature verification | 6.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2021-40266 | FreeImage null pointer dereference | 6.5v3.1 | 1.0% | 2023-08-22 | Fix |
| CVE-2021-40265 | FreeImage out-of-bounds write | 8.8v3.1 | 0.9% | 2023-08-22 | |
| CVE-2021-40264 | FreeImage null pointer dereference | 6.5v3.1 | 0.7% | 2023-08-22 | |
| CVE-2021-40263 | FreeImage heap-based buffer overflow | 8.8v3.1 | 1.2% | 2023-08-22 | Fix |
| CVE-2021-40262 | FreeImage uncontrolled recursion | 6.5v3.1 | 0.7% | 2023-08-22 | |
| CVE-2021-40211 | ImageMagick divide by zero | 7.5v3.1 | 1.0% | 2023-08-22 | Fix |
| CVE-2021-35309 | Samsung Syncthru Web Service improper privilege management | 7.5v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2021-34193 | OpenSC stack-based buffer overflow | 7.5v3.1 | 1.4% | 2023-08-22 | Fix |
| CVE-2021-33390 | Dpic use-after-free | 9.8v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2021-33388 | Dpic out-of-bounds write | 9.8v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2021-32422 | Dpic buffer overflow | 7.5v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2021-32421 | dpic delete string box function use-after-free | 7.5v3.1 | 0.7% | 2023-08-22 | Fix |
| CVE-2021-32420 | Dpic out-of-bounds write | 7.5v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2021-32292 | Json-c out-of-bounds write | 9.8NVD v3.1 | 1.4% | 2023-08-22 | Fix |
| CVE-2021-30047 | vsftpd denial of service | 7.5v3.1 | 3.2% | 2023-08-22 | Nuclei |
| CVE-2021-29390 | libjpeg-turbo out-of-bounds write | 7.1v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2021-46895 | Huawei HarmonyOS Multi-Device Task Center vulnerability | 9.1v3.1 | 0.5% | 2023-08-13 | Fix |
| CVE-2021-29378 | Pear Admin Think pear-admin-think version SQL injection | 8.8v3.1 | 0.8% | 2023-08-11 | |
| CVE-2021-29057 | SUCHMOKUO Node-worker-threads-pool denial of service | 6.5v3.1 | 0.6% | 2023-08-11 | |
| CVE-2021-28835 | XnView buffer overflow | 7.8v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2021-28429 | FFmpeg integer overflow | 5.5v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2021-28427 | XnView buffer overflow | 7.8v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2021-28411 | RuoYi improper privilege management | 9.8v3.1 | 1.0% | 2023-08-11 | |
| CVE-2021-28025 | Qt qsvghandler.cpp in Qt qtsvg versions integer overflow | 5.5v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2021-27524 | Margox Braft-editor cross-site scripting | 6.1v3.1 | 0.6% | 2023-08-11 | |
| CVE-2021-27523 | Open-Falcon Dashboard register interface vulnerability | 9.8v3.1 | 1.2% | 2023-08-11 | |
| CVE-2021-26505 | MrSwitch hello.js vulnerable to prototype pollution | 9.8v3.1 | 1.1% | 2023-08-11 | Fix |
| CVE-2021-26504 | Dgtl Huemagic Foddy node-red-contrib- path traversal | 7.5v3.1 | 1.4% | 2023-08-11 | |
| CVE-2021-25857 | Supermicro-cms arbitrary code execution | 7.2v3.1 | 0.9% | 2023-08-11 | |
| CVE-2021-25856 | SuperMicro-CMS images.php vulnerability | 4.9v3.1 | 0.6% | 2023-08-11 | |
| CVE-2021-25786 | Qpdf use-after-free | 5.3v3.1 | 0.5% | 2023-08-11 | Fix |
| CVE-2021-3236 | Vim null pointer dereference | 5.5v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2021-41544 | Siemens Software Center uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2023-08-08 | Fix |
| CVE-2021-24916 | Qubely WordPress plugin unauthenticated arbitrary E-mail Sending | 7.5NVD v3.1 | 1.7% | 2023-08-07 | NucleiFix |
| CVE-2021-31681 | Ultralytics Yolov3 deserialization of untrusted data | 7.8v3.1 | 0.4% | 2023-07-31 | |
| CVE-2021-31680 | Ultralytics Yolov5 deserialization of untrusted data | 7.8v3.1 | 0.4% | 2023-07-31 | |
| CVE-2021-31651 | Neofrag neofarg-cms cross-site scripting | 4.8v3.1 | 0.3% | 2023-07-31 | |
| CVE-2021-4324 | Google Chrome Google Update insufficient policy enforcement | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2021-4323 | Google Chrome extensions vulnerability | 6.5v3.1 | 0.5% | 2023-07-29 | Fix |
| CVE-2021-4322 | Google Chrome DevTools use-after-free | 8.8v3.1 | 0.5% | 2023-07-29 | Fix |
| CVE-2021-4321 | Google Chrome Blink vulnerability | 4.3v3.1 | 0.5% | 2023-07-29 | Fix |
| CVE-2021-4320 | Google Chrome Blink use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2021-4319 | Google Chrome Blink use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2021-4318 | Google Chrome Blink vulnerability | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2021-4317 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2021-4316 | Google Chrome Cast UI inappropriate implementation | 4.3v3.1 | 0.5% | 2023-07-29 | Fix |
| CVE-2021-36580 | Icewarp Server IceWarp MailServer open redirect | 6.1v3.1 | 1.6% | 2023-07-27 | Nuclei |
| CVE-2021-39421 | Seeddms A cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2021-35391 | Deskpro server-side request forgery | 7.2v3.1 | 1.0% | 2023-07-21 | |
| CVE-2021-45094 | Okta Imprivata Privileged Access Management cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2021-39822 | Adobe InDesign BMP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-07-20 | Fix |
| CVE-2021-39425 | Seeddms open redirect | 6.1v3.1 | 0.5% | 2023-07-20 | |
| CVE-2021-38933 | IBM Sterling Connect:Express for UNIX information disclosure | 5.9CNA v3.1 | 0.4% | 2023-07-19 | Fix |
| CVE-2021-43072 | Fortinet FortiAnalyzer buffer overflow | 6.3CNA v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2021-37522 | Locke-bot HKing2802 SQL injection | 9.8v3.1 | 1.0% | 2023-07-18 | |
| CVE-2021-34123 | Atasm out-of-bounds write | 9.8v3.1 | 0.7% | 2023-07-18 | |
| CVE-2021-34121 | htmldoc out-of-bounds read | 7.8v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2021-34119 | htmldoc out-of-bounds write | 7.8v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2021-33294 | elfutils infinite loop | 5.5NVD v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2021-32256 | GNU Binutils out-of-bounds write | 6.5v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2021-4428 | what3words Autosuggest plugin for WordPress settings handler information disclosure | 7.5v3.1 | 15.8% | 2023-07-18 | Exploit codeFix |
| CVE-2021-37386 | Furukawa 423-41w/ac cross-site scripting | 7.5v3.1 | 0.5% | 2023-07-17 | |
| CVE-2021-37384 | Furukawa 423-41w/ac some remote code execution | 9.8v3.1 | 1.7% | 2023-07-17 | |
| CVE-2021-31294 | redis reachable assertion | 5.9v3.1 | 1.3% | 2023-07-15 | Fix |
| CVE-2021-0948 | Google Android uninitialized resource use | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2021-44696 | Adobe Prelude JPEG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2021-43760 | Adobe Media Encoder MOV File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2021-43759 | Adobe Media Encoder MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2021-43758 | Adobe Media Encoder MP4 File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2021-43757 | Adobe Media Encoder 3GP File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4427 | Vuukle Comments, Reactions, Share Bar, Revenue WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2021-4426 | Absolute Reviews WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2021-4425 | Defender Security WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2021-4424 | Slider Hero WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4423 | RAYS Grid WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4422 | POST SMTP Mailer WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2021-4421 | Advanced Popups WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4420 | Sell Media WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4419 | WP-Backgrounds Lite WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4417 | Forminator WordPress plugin cross-site request forgery | 4.3v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4416 | wp-mpdf WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4415 | Sunshine Photo Cart WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4414 | Abandoned Cart Lite for WooCommerce WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4413 | Process Steps Template Designer WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4412 | WP Prayer WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4411 | WP EasyPay Square for WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4410 | Qtranslate Slug WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4409 | WooCommerce Etsy Integration WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4408 | DW Question and Answer WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-4407 | Custom Banners WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2021-42083 | Authenticated stored XSS in OSNEXUS QuantaStor | 5.4NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2021-42082 | Local privilege escalation to root in OSNEXUS QuantaStor | 7.8v3.1 | 0.2% | 2023-07-10 | Fix |
| CVE-2021-42081 | Authenticated remote command execution vulnerability in OSNEXUS QuantaStor | 7.2NVD v3.1 | 1.2% | 2023-07-10 | Fix |
| CVE-2021-42080 | Reflected XSS vulnerability in OSNEXUS QuantaStor | 7.4v3.1 | 0.7% | 2023-07-10 | Fix |
| CVE-2021-42079 | SSRF vulnerability in OSNEXUS QuantaStor | 4.9v3.1 | 0.7% | 2023-07-10 | Fix |
| CVE-2021-4406 | Authenticated remote command execution as root in OSNEXUS QuantaStor and others | 7.2NVD v3.1 | 1.0% | 2023-07-10 | |
| CVE-2021-39014 | IBM Cloud Object Storage System cross-site scripting | 6.4CNA v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2021-33798 | libpano13 null pointer dereference | 6.5NVD v3.1 | 0.5% | 2023-07-07 | |
| CVE-2021-33796 | Artifex MuJS regexp source property use-after-free | 7.5NVD v3.1 | 0.7% | 2023-07-07 | Fix |
| CVE-2021-32495 | radare2 pyc parser's get_none_object function use-after-free | 9.1NVD v3.1 | 0.8% | 2023-07-07 | Fix |
| CVE-2021-32494 | radare2 Mach-O parser's rebase_buffer function divide by zero | 7.5NVD v3.1 | 0.8% | 2023-07-07 | Fix |
| CVE-2021-46896 | Dronecode PX4 Drone Autopilot PX4-Autopilot buffer overflow | 7.5v3.1 | 0.8% | 2023-07-06 | |
| CVE-2021-46894 | Huawei HarmonyOS use-after-free (UAF) vulnerability in the uinput module | 9.8v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2021-46892 | Huawei HarmonyOS encryption bypass vulnerability in Maintenance mode | 7.5v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2021-46893 | Huawei HarmonyOS vulnerability of unstrict data verification and parameter check | 7.5v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2021-46891 | Huawei HarmonyOS information disclosure | 9.8v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2021-46890 | Huawei HarmonyOS incorrect authorization | 9.8v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2021-42307 | Microsoft Edge (Chromium-based) information disclosure | 4.3CNA v3.1 | 1.0% | 2023-07-01 | Fix |
| CVE-2021-34506 | Microsoft Edge (Chromium-based) security feature bypass | 6.1CNA v3.1 | 2.2% | 2023-07-01 | Fix |
| CVE-2021-34475 | Microsoft Edge (Chromium-based) elevation of privilege | 5.4CNA v3.1 | 0.6% | 2023-07-01 | Fix |
| CVE-2021-31982 | Microsoft Edge (Chromium-based) security feature bypass | 8.8CNA v3.1 | 1.3% | 2023-07-01 | Fix |
| CVE-2021-4405 | ElasticPress WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4404 | Event Espresso 4 Decaf WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4403 | The Remove Schema plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the validate() function. This makes it possible for unauthenticated attackers to modify the plugins settings via a forged | 4.3CNA v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4402 | Multiple Roles WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4401 | Style Kits WordPress plugin cross-site request forgery bypass | 8.8v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4400 | Better Search WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4399 | Edwiser Bridge WordPress plugin cross-site request forgery bypass | 8.8v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4398 | Amministrazione Trasparente WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4397 | Staff Directory WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4396 | Rucy WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4395 | Abandoned Cart Recovery for WooCommerce WordPress plugin cross-site request forgery bypass | 6.5v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4394 | Locations WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4393 | eCommerce Product Catalog Plugin for WordPress cross-site request forgery bypass | 4.3CNA v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4392 | eCommerce Product Catalog Plugin for WordPress cross-site request forgery bypass | 4.3CNA v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4391 | Ultimate Gift Cards for WooCommerce WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4390 | Contact Form 7 Style WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.5% | 2023-07-01 | |
| CVE-2021-4389 | WP Travel WordPress plugin cross-site request forgery bypass | 4.3CNA v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2021-4388 | Opal Estate WordPress plugin missing authorization | 5.3v3.1 | 0.7% | 2023-07-01 | |
| CVE-2021-4387 | Opal Estate WordPress plugin cross-site request forgery bypass | 8.8v3.1 | 0.6% | 2023-07-01 | |
| CVE-2021-4386 | WP Security Question WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-01 | |
| CVE-2021-4385 | WP Private Content Plus WordPress plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-01 | Fix |
| CVE-2021-4384 | WordPress Photo Gallery Image Gallery plugin cross-site request forgery bypass | 4.3v3.1 | 0.4% | 2023-07-01 | |
| CVE-2021-31937 | Microsoft Edge (Chromium-based) elevation of privilege | 8.2CNA v3.1 | 0.9% | 2023-06-28 | Fix |
| CVE-2021-25828 | Emby cross-site scripting | 6.1v3.1 | 0.5% | 2023-06-28 | |
| CVE-2021-25827 | Emby authentication bypass by spoofing | 9.8v3.1 | 1.5% | 2023-06-28 | |
| CVE-2021-30205 | Dzzoffice incorrect authorization | 5.3v3.1 | 0.5% | 2023-06-27 | |
| CVE-2021-30203 | Dzzoffice zero parameter reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-27 | Nuclei |
| CVE-2021-31635 | JFinal server-side template injection | 9.8v3.1 | 1.2% | 2023-06-26 | Fix |
| CVE-2021-0945 | Android out-of-bounds write | 9.8v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2021-0701 | Android integer overflow | 9.8v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2021-31280 | TP5CMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-06-14 | |
| CVE-2021-46889 | 10web PhotoGallery cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-33223 | Seeddms insecure direct object reference | 8.8v3.1 | 0.8% | 2023-06-07 | |
| CVE-2021-4383 | WP Quick FrontEnd Editor WordPress plugin authenticated (Subscriber+) content injection | 4.3NVD v3.1 | 0.8% | 2023-06-07 | |
| CVE-2021-4382 | Recently WordPress plugin arbitrary file upload to remote code Exectution | 8.8v3.1 | 1.6% | 2023-06-07 | Fix |
| CVE-2021-4381 | uListing WordPress plugin unauthenticated options Changes via wp_route | 9.8v3.1 | 1.4% | 2023-06-07 | Fix |
| CVE-2021-4380 | Pinterest Automatic WordPress plugin Unuathenticated arbitrary options update | 9.8v3.1 | 4.5% | 2023-06-07 | NucleiFix |
| CVE-2021-4379 | WooCommerce Multi Currency WordPress plugin missing authorization | 6.5v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2021-4378 | WP Quick FrontEnd Editor WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-07 | |
| CVE-2021-4377 | Doneren met Mollie WordPress plugin information disclosure | 6.5v3.1 | 1.0% | 2023-06-07 | Fix |
| CVE-2021-4376 | WooCommerce Multi Currency WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-4375 | Welcart e-Commerce WordPress plugin missing Capabilities check to information disclosure | 4.3v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-4374 | WordPress Automatic plugin unauthenticated arbitrary options update | 9.8v3.1 | 16.4% | 2023-06-07 | NucleiMetasploitExploit codeFix |
| CVE-2021-4373 | Better Search WordPress plugin cross-site request forgery to settings import | 4.3NVD v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2021-4372 | WooCommerce Dynamic Pricing and Discounts WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-4371 | WP Quick FrontEnd Editor WordPress plugin authenticated settings Change | 4.3v3.1 | 0.7% | 2023-06-07 | |
| CVE-2021-4370 | uListing WordPress plugin missing authorization | 9.8v3.1 | 1.4% | 2023-06-07 | Fix |
| CVE-2021-4369 | Frontend File Manager WordPress plugin unauthenticated content injection | 5.3v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2021-4368 | Frontend File Manager WordPress plugin settings Change leading to arbitrary file upload | 8.8NVD v3.1 | 1.9% | 2023-06-07 | Fix |
| CVE-2021-4367 | Flo Forms WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4366 | PWA for WP and AMP WordPress plugin authorization bypass | 4.3v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-4365 | Frontend File Manager WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2021-4364 | JobSearch WP Job Board WordPress plugin authorization bypass | 4.3v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4363 | WP Quick FrontEnd Editor WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.8% | 2023-06-07 | |
| CVE-2021-4362 | Kiwi Social Share WordPress plugin authorization bypass | 9.8v3.1 | 1.4% | 2023-06-07 | Fix |
| CVE-2021-4361 | JobSearch WP Job Board WordPress plugin missing authorization to arbitrary options update | 8.8v3.1 | 1.2% | 2023-06-07 | Fix |
| CVE-2021-4360 | Controlled Admin Access WordPress plugin privilege escalation | 8.8NVD v3.1 | 1.2% | 2023-06-07 | Fix |
| CVE-2021-4359 | Frontend File Manager WordPress plugin unauthenticated arbitrary post deletion | 5.3v3.1 | 0.9% | 2023-06-07 | Fix |
| CVE-2021-4358 | WP DSGVO Tools (GDPR) WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2021-4357 | uListing WordPress plugin unauthenticated arbitrary Post/Page deletion | 5.3NVD v3.1 | 1.0% | 2023-06-07 | Fix |
| CVE-2021-4356 | Frontend File Manager WordPress plugin unauthenticated arbitrary file download | 9.8v3.1 | 1.5% | 2023-06-07 | Fix |
| CVE-2021-4355 | Welcart e-Commerce WordPress plugin missing Capabilities check to information disclosure | 5.3NVD v3.1 | 0.8% | 2023-06-07 | Fix |
| CVE-2021-4354 | PWA for WP and AMP WordPress plugin arbitrary file upload | 8.8v3.1 | 1.8% | 2023-06-07 | Fix |
| CVE-2021-4352 | JobSearch WP Job Board WordPress plugin missing authorization to settings Change | 5.3v3.1 | 0.9% | 2023-06-07 | Fix |
| CVE-2021-4351 | Frontend File Manager WordPress plugin unauthenticated post Meta Change | 5.3v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4350 | Frontend File Manager WordPress plugin unauthenticated HTML injection leading to Spam Emails | 5.3NVD v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4349 | Process Steps Template Designer WordPress plugin cross-site request forgery | 8.8v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-4348 | Ultimate GDPR and CCPA WordPress plugin unauthenticated settings import and export | 6.1NVD v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4347 | Advanced Shipment Tracking for WooCommerce WordPress plugin authenticated WordPress options Change | 6.5NVD v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4346 | uListing WordPress plugin unauthenticated arbitrary account Changes | 7.5NVD v3.1 | 1.2% | 2023-06-07 | Fix |
| CVE-2021-4345 | uListing WordPress plugin unauthenticated arbitrary roles and Capabilities Creation/Deletion | 5.3v3.1 | 0.7% | 2023-06-07 | Fix |
| CVE-2021-4344 | Frontend File Manager WordPress plugin privilege escalation | 5.4v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2021-4343 | uListing WordPress plugin unauthenticated arbitrary account creation | 9.8v3.1 | 1.4% | 2023-06-07 | Fix |
| CVE-2021-4341 | uListing WordPress plugin unauthenticated Wordpress options Changes via AJAX | 9.8v3.1 | 1.1% | 2023-06-07 | Fix |
| CVE-2021-4340 | uListing WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 1.2% | 2023-06-07 | Fix |
| CVE-2021-4339 | uListing WordPress plugin unauthenticated information disclosure | 5.3NVD v3.1 | 0.9% | 2023-06-07 | Fix |
| CVE-2021-4338 | 404 to 301 WordPress plugin authorization bypass | 5.4v3.1 | 0.6% | 2023-06-07 | Fix |
| CVE-2021-4337 | Multiple XforWooCommerce Add-On plugins (various Versions) missing authorization | 8.8v3.1 | 1.3% | 2023-06-07 | Fix |
| CVE-2021-45039 | Uniview Camera Firmware buffer overflow | 9.8v3.1 | 4.2% | 2023-05-31 | Fix |
| CVE-2021-31233 | Fighting Cock Information System SQL injection | 7.5v3.1 | 1.1% | 2023-05-31 | |
| CVE-2021-37845 | Citadel WebCit STARTTLS negotiation vulnerability | 3.7v3.1 | 0.7% | 2023-05-29 | |
| CVE-2021-27825 | Mercurycom MAC1200R path traversal | 7.5v3.1 | 7.8% | 2023-05-29 | Exploit code |
| CVE-2021-4336 | ITRS Group monitor-ninja scheduled_reports.php SQL injection | 9.8v3.1 | 0.6% | 2023-05-28 | Fix |
| CVE-2021-46887 | Huawei EMUI lack of length check vulnerability in the HW_KEYMASTER module | 9.8v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2021-46886 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2021-46885 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2021-46884 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2021-46883 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2021-46882 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2021-46881 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2021-25749 | Kubernetes runAsNonRoot logic bypass for Windows containers | 7.8CNA v3.1 | 0.2% | 2023-05-24 | Fix |
| CVE-2021-25748 | Ingress-nginx `path` sanitization can be bypassed with newline character | 7.6CNA v3.1 | 0.7% | 2023-05-24 | Fix |
| CVE-2021-46888 | Hledger cross-site scripting | 5.4v3.1 | 0.8% | 2023-05-21 | Fix |
| CVE-2021-27131 | Moodle vulnerable to stored cross-site scripting | 5.4v3.1 | 0.7% | 2023-05-16 | Fix |
| CVE-2021-0877 | Product: AndroidVersions: Android SoCAndroid ID: A-273754094 | 9.8v3.1 | 0.3% | 2023-05-15 | Fix |
| CVE-2021-39036 | IBM Cognos Analytics cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-05-12 | Fix |
| CVE-2021-34076 | PHPOK unrestricted file upload | 8.8v3.1 | 0.9% | 2023-05-11 | |
| CVE-2021-45345 | Webcamserver En3rgy buffer overflow | 7.5v3.1 | 1.3% | 2023-05-10 | |
| CVE-2021-46794 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 out-of-bounds read | 7.5v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46792 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 time-of-check time-of-use race condition | 5.9v3.1 | 0.4% | 2023-05-09 | Fix |
| CVE-2021-46775 | AMD 2nd Gen AMD EPYC™ ABL improper input validation | 6.8v3.1 | 0.3% | 2023-05-09 | Fix |
| CVE-2021-46773 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 ABL improper input validation | 8.8v3.1 | 0.8% | 2023-05-09 | Fix |
| CVE-2021-46769 | AMD 2nd Gen AMD EPYC™ code execution | 8.8v3.1 | 0.8% | 2023-05-09 | Fix |
| CVE-2021-46765 | AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 out-of-bounds read | 7.5v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46764 | AMD 2nd Gen AMD EPYC™ SMU improper input validation | 7.5v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46763 | AMD 2nd Gen AMD EPYC™ SMU improper input validation | 7.5v3.1 | 0.5% | 2023-05-09 | Fix |
| CVE-2021-46762 | AMD 2nd Gen AMD EPYC™ SMU improper input validation | 3.9CNA v3.1 | 0.3% | 2023-05-09 | Fix |
| CVE-2021-46760 | AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT resource exhaustion | 9.8v3.1 | 0.8% | 2023-05-09 | Fix |
| CVE-2021-46759 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 out-of-bounds write | 6.1v3.1 | 0.3% | 2023-05-09 | Fix |
| CVE-2021-46756 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 denial of service | 9.1v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46755 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 denial of service | 7.5v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46754 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 ASP improper input validation | 9.1v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46753 | AMD processors ASP sensor fusion hub vulnerability | 9.1v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-46749 | AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” out-of-bounds read | 7.5v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-44283 | Shieldstore buffer overflow | 7.5v3.1 | 0.7% | 2023-05-09 | |
| CVE-2021-31711 | Responsive FileManager Trippo cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-09 | |
| CVE-2021-31240 | Libming memory leak | 7.8v3.1 | 0.3% | 2023-05-09 | |
| CVE-2021-31239 | SQLite out-of-bounds read | 7.5NVD v3.1 | 2.4% | 2023-05-09 | Fix |
| CVE-2021-26406 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 crash | 7.5v3.1 | 0.4% | 2023-05-09 | Fix |
| CVE-2021-26397 | Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability. | 7.1v3.1 | 0.2% | 2023-05-09 | Fix |
| CVE-2021-26379 | AMD 2nd Gen AMD EPYC™ SMU improper input validation | 9.8v3.1 | 0.7% | 2023-05-09 | Fix |
| CVE-2021-26371 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 information disclosure | 5.5v3.1 | 0.2% | 2023-05-09 | Fix |
| CVE-2021-26365 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 out-of-bounds read | 8.2v3.1 | 0.6% | 2023-05-09 | Fix |
| CVE-2021-26356 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 time-of-check time-of-use race condition | 7.4v3.1 | 0.4% | 2023-05-09 | Fix |
| CVE-2021-26354 | AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 buffer overflow | 5.5v3.1 | 0.2% | 2023-05-09 | Fix |
| CVE-2021-28999 | CMS Made Simple SQL injection | 8.8v3.1 | 1.3% | 2023-05-08 | |
| CVE-2021-28998 | CMS Made Simple file upload | 7.2v3.1 | 1.3% | 2023-05-08 | |
| CVE-2021-27280 | mblog OS command injection | 7.8v3.1 | 1.0% | 2023-05-08 | |
| CVE-2021-40331 | Permissions problem in the Apache Ranger Hive Plugin | 8.1v3.1 | 0.9% | 2023-05-05 | Fix |
| CVE-2021-45111 | Odoo Community improper access control | 7.1CNA v3.0 | 0.8% | 2023-04-25 | Fix |
| CVE-2021-45071 | Odoo Community cross-site scripting | 5.3CNA v3.0 | 0.7% | 2023-04-25 | Fix |
| CVE-2021-44775 | Odoo Community Website app cross-site scripting | 6.5CNA v3.0 | 0.5% | 2023-04-25 | Fix |
| CVE-2021-44547 | Odoo Community unsafe privilege definition | 8.7CNA v3.0 | 0.7% | 2023-04-25 | Fix |
| CVE-2021-44476 | Odoo Community unsafe privilege definition | 6.8CNA v3.0 | 0.5% | 2023-04-25 | Fix |
| CVE-2021-44465 | Odoo Community improper access control | 5.3CNA v3.0 | 0.5% | 2023-04-25 | Fix |
| CVE-2021-44461 | Odoo Enterprise Accounting app cross-site scripting | 6.5CNA v3.0 | 0.5% | 2023-04-25 | Fix |
| CVE-2021-44460 | Odoo Community improper access control | 7.4CNA v3.0 | 0.7% | 2023-04-25 | Fix |
| CVE-2021-26947 | Odoo Community cross-site scripting | 6.5CNA v3.0 | 1.4% | 2023-04-25 | NucleiFix |
| CVE-2021-26263 | Odoo Community Discuss app cross-site scripting | 7.5CNA v3.0 | 0.6% | 2023-04-25 | Fix |
| CVE-2021-23203 | Odoo Community reporting engine improper access control | 7.5CNA v3.1 | 0.9% | 2023-04-25 | Fix |
| CVE-2021-23186 | Odoo Community unsafe privilege definition | 8.7CNA v3.0 | 0.6% | 2023-04-25 | Fix |
| CVE-2021-23178 | Odoo Community improper access control | 7.5CNA v3.0 | 0.6% | 2023-04-25 | Fix |
| CVE-2021-23176 | Odoo Community reporting engine of l10n_fr_fec module improper access control | 6.5CNA v3.0 | 0.8% | 2023-04-25 | Fix |
| CVE-2021-23166 | Odoo Community unsafe privilege definition | 8.7CNA v3.0 | 0.6% | 2023-04-25 | Fix |
| CVE-2021-33589 | Ribose RNP insufficiently protected credentials | 7.5v3.1 | 0.5% | 2023-04-21 | Fix |
| CVE-2021-38364 | Opennetworking ONOS incorrect comparison | 6.5v3.1 | 0.8% | 2023-04-20 | |
| CVE-2021-38363 | Opennetworking ONOS improper exception handling | 7.5v3.1 | 0.7% | 2023-04-20 | |
| CVE-2021-36436 | Mobicint weak password recovery | 5.3v3.1 | 0.5% | 2023-04-20 | |
| CVE-2021-43819 | Stargate-Bukkit improperly handles vehicles causing data duplication | 7.5CNA v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2021-33975 | Browser.360 Safe Browser Qihoo buffer overflow | 10.0v3.1 | 1.4% | 2023-04-19 | |
| CVE-2021-33974 | 360 Total Security buffer overflow | 8.8v3.1 | 1.0% | 2023-04-19 | |
| CVE-2021-33973 | 360 Total Security Qihoo buffer overflow | 7.8v3.1 | 0.4% | 2023-04-19 | |
| CVE-2021-33972 | Browser.360 Safe Browser Qihoo buffer overflow | 10.0v3.1 | 1.3% | 2023-04-19 | |
| CVE-2021-33971 | 360 Total Security buffer overflow | 7.8v3.1 | 0.4% | 2023-04-19 | |
| CVE-2021-33970 | Browser.360 Chrome Qihoo buffer overflow | 10.0v3.1 | 3.1% | 2023-04-19 | |
| CVE-2021-28254 | Laravel destruct function deserialization of untrusted data | 9.8v3.1 | 1.3% | 2023-04-19 | Fix |
| CVE-2021-3429 | Sensitive data exposure in cloud-init logs | 5.5CNA v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2021-0885 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0884 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0883 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0882 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0881 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0880 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0879 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0878 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0876 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0875 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0874 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0873 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-0872 | Android integer overflow | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2021-41614 | Openrisc MOR1KX incorrect default permissions | 7.8v3.1 | 0.2% | 2023-04-18 | |
| CVE-2021-41613 | OpenRISC mor1kx exception effective address register write logic vulnerability | 4.3v3.1 | 0.4% | 2023-04-18 | |
| CVE-2021-41612 | OpenRISC mor1kx ALU unit vulnerability | 8.8v3.1 | 1.1% | 2023-04-18 | |
| CVE-2021-40507 | Openrisc OR1200 improper authentication | 9.8v3.1 | 0.7% | 2023-04-18 | |
| CVE-2021-40506 | Openrisc OR1200 improper authentication | 9.8v3.1 | 0.7% | 2023-04-18 | |
| CVE-2021-33797 | mujs integer overflow | 9.8NVD v3.1 | 0.8% | 2023-04-17 | Fix |
| CVE-2021-36520 | Washington I-tech Trainsmart SQL injection | 7.5v3.1 | 2.7% | 2023-04-16 | Exploit code |
| CVE-2021-33990 | Liferay Portal improper preservation of permissions | 9.8v3.1 | 11.9% | 2023-04-16 | Exploit code |
| CVE-2021-46880 | OpenBSD LibreSSL improper certificate validation | 9.8v3.1 | 0.6% | 2023-04-15 | Fix |
| CVE-2021-45464 | Kvmtool out-of-bounds write | 8.8v3.1 | 0.4% | 2023-04-15 | Fix |
| CVE-2021-43612 | lldpd out-of-bounds write | 7.5v3.1 | 1.1% | 2023-04-15 | Fix |
| CVE-2021-39295 | OpenBMC denial of service | 7.5v3.1 | 1.3% | 2023-04-15 | |
| CVE-2021-34337 | Mailman Core vulnerable to timing attacks | 6.3v3.1 | 0.3% | 2023-04-15 | Fix |
| CVE-2021-30153 | mediawiki resource exposure | 4.3v3.1 | 0.8% | 2023-04-15 | Fix |
| CVE-2021-46879 | treasure-data Fluent Bit out-of-bounds write | 7.8v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2021-46878 | treasure-data Fluent Bit type confusion | 7.8v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2021-45985 | Lua out-of-bounds write | 7.5v3.1 | 1.4% | 2023-04-10 | Fix |
| CVE-2021-31707 | Kitesky Kitecms unrestricted file upload | 9.8v3.1 | 1.3% | 2023-04-04 | |
| CVE-2021-28235 | etcd etcd-io improper authentication | 9.8v3.1 | 1.6% | 2023-04-04 | Exploit codeFix |
| CVE-2021-3267 | Kitesky Kitecms file upload | 7.2v3.1 | 1.3% | 2023-04-04 | |
| CVE-2021-41526 | Flexera Revenera Installshield privilege escalation | 7.8NVD v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2021-3923 | kernel information disclosure | 2.3NVD v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2021-43317 | upx memory corruption | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-43316 | upx A heap-based buffer overflow | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-43315 | upx memory corruption | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-43314 | upx memory corruption | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-43313 | upx A heap-based buffer overflow | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-43312 | upx A heap-based buffer overflow | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-43311 | upx A heap-based buffer overflow | 7.5NVD v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2021-3844 | Rapid7 InsightVM insufficient session expiration | 5.7CNA v3.1 | 0.4% | 2023-03-24 | Fix |
| CVE-2021-3684 | OpenShift Assisted Installer leaks image pull secrets as plaintext in installation logs | 5.5v3.1 | 0.2% | 2023-03-24 | Fix |
| CVE-2021-3674 | rizin memory corruption | 7.8NVD v3.1 | 0.4% | 2023-03-24 | |
| CVE-2021-46877 | jackson-databind possible denial of service if using JDK serialization to serialize JsonNode | 7.5v3.1 | 1.1% | 2023-03-18 | Fix |
| CVE-2021-21548 | Dell Unisphere for PowerMax improper certificate validation | 7.4CNA v3.1 | 0.3% | 2023-03-17 | Fix |
| CVE-2021-36821 | Forminator WordPress plugin stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2021-31637 | Uwamp uncontrolled search path | 7.8v3.1 | 0.3% | 2023-03-16 | |
| CVE-2021-4195 | XSS in Firmanet Software and Technology Customer Relation Manager | 6.1v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2021-45423 | Pev A buffer overflow | 9.8v3.1 | 1.1% | 2023-03-13 | Fix |
| CVE-2021-46876 | ibexa Ez Platform Kernel /user/sessions endpoint allows detecting valid accounts | 5.3v3.1 | 0.5% | 2023-03-12 | Fix |
| CVE-2021-46875 | Cross-site scripting in eZ Platform Kernel | 6.1v3.1 | 0.4% | 2023-03-12 | Fix |
| CVE-2021-33360 | Stoqey/Gnuplot is vulnerable to command injection | 9.8v3.1 | 1.1% | 2023-03-10 | |
| CVE-2021-27788 | HCL Verse is susceptible to a cross-site scripting (XSS) | 8.3CNA v3.1 | 0.6% | 2023-03-10 | Fix |
| CVE-2021-34125 | Yuneec Mantis Q information disclosure | 7.5v3.1 | 1.0% | 2023-03-09 | |
| CVE-2021-33639 | kernel exposed dangerous method | 7.5NVD v3.1 | 0.5% | 2023-03-08 | |
| CVE-2021-33353 | Wyomind Helpdesk path traversal | 9.8v3.1 | 2.2% | 2023-03-08 | |
| CVE-2021-33352 | Wyomind Helpdesk unrestricted file upload | 9.8v3.1 | 1.4% | 2023-03-08 | |
| CVE-2021-33351 | Wyomind Helpdesk cross-site scripting | 9.0v3.1 | 1.0% | 2023-03-08 | |
| CVE-2021-44197 | XSS in Ubit Information Technologies Student Information Management System | 6.1v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2021-44196 | XSS in Ubit Information Technologies Student Information Management System | 6.1v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2021-4333 | WP Statistics WordPress plugin cross-site request forgery | 6.5v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2021-4332 | POSIMYTH The Plus Addons for Elementor Info Box widget arbitrary file read | 6.5v3.1 | 0.8% | 2023-03-07 | Fix |
| CVE-2021-4331 | Plus Addons for Elementor WordPress plugin privilege escalation | 8.8v3.1 | 0.9% | 2023-03-07 | Fix |
| CVE-2021-4330 | Envato Elements and Template Kit zip file extraction unrestricted file upload | 8.8v3.1 | 1.5% | 2023-03-07 | Fix |
| CVE-2021-36713 | Sprymedia DataTables cross-site scripting | 6.1v3.1 | 0.8% | 2023-03-06 | Fix |
| CVE-2021-36403 | Moodle has a hidden functionality | 5.3NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2021-36402 | Moodle improper input validation | 5.3NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2021-36401 | Moodle vulnerable to stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2021-36400 | Moodle has incorrect default permissions | 5.3NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2021-36399 | Moodle cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2021-36398 | Moodle cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2021-36397 | Moodle has incorrect default permissions | 5.3NVD v3.1 | 0.6% | 2023-03-06 | Fix |
| CVE-2021-36396 | Moodle vulnerable to server-side request forgery | 7.5NVD v3.1 | 1.4% | 2023-03-06 | Exploit codeFix |
| CVE-2021-36395 | Moodle vulnerable to uncontrolled resource consumption | 7.5NVD v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2021-36394 | Moodle session fixation | 9.8NVD v3.1 | 7.0% | 2023-03-06 | Exploit codeFix |
| CVE-2021-36393 | Moodle SQL injection | 9.8NVD v3.1 | 52.3% | 2023-03-06 | Exploit codeFix |
| CVE-2021-36392 | Moodle SQL injection | 9.8NVD v3.1 | 0.8% | 2023-03-06 | Fix |
| CVE-2021-35377 | VICIdial cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2021-20251 | samba race condition | 5.9NVD v3.1 | 0.8% | 2023-03-06 | Fix |
| CVE-2021-4329 | json-logic-js logic.js command injection | 9.8v3.1 | 2.2% | 2023-03-05 | Fix |
| CVE-2021-36689 | Samourai-wallet-android weak password requirements | 5.5v3.1 | 0.3% | 2023-03-04 | |
| CVE-2021-45479 | XSS in Yordam Library Automation System | 5.4v3.1 | 0.4% | 2023-03-02 | Fix |
| CVE-2021-45478 | IDOR in Yordam Library Automation System | 6.5v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2021-45477 | IDOR in Yordam Library Automation System | 6.5v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2021-4328 | 狮子鱼CMS ApiController.class.php goods_detail SQL injection | 9.8v3.1 | 0.7% | 2023-03-02 | |
| CVE-2021-3854 | SQLi in Glox Technology's Useroam Hotspot | 9.8v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2021-4327 | SerenityOS TypedArray.cpp initialize_typed_array_from_array_buffer integer overflow | 9.8v3.1 | 0.9% | 2023-03-01 | |
| CVE-2021-4326 | Open Mainframe Project Zowe Imperative Local command injection allows Activity Masking | 3.3CNA v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2021-3855 | Command injection in Liman Central Management System | 8.8v3.1 | 1.8% | 2023-03-01 | Fix |
| CVE-2021-22283 | ABB Relion protection relays improper initialization | 6.2CNA v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2021-46841 | Apple Music information disclosure | 5.9v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2021-32302 | Irz RUH2 IRZ Electronics cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-27 | |
| CVE-2021-3329 | Zephyr Bluetooth host stack initialization vulnerability | 9.6CNA v3.1 | 0.6% | 2023-02-26 | |
| CVE-2021-35370 | Txjia Imcat incomplete filtering | 9.8v3.1 | 1.0% | 2023-02-24 | |
| CVE-2021-35369 | Txjia Imcat Peacexie arbitrary file read | 6.5v3.1 | 0.6% | 2023-02-24 | |
| CVE-2021-35290 | Balero Cms balerocms-src file upload | 7.2v3.1 | 0.9% | 2023-02-24 | |
| CVE-2021-34249 | Online Book Store sourcecodester online-book-store SQL injection | 7.5v3.1 | 1.2% | 2023-02-24 | |
| CVE-2021-34167 | Taogogo taoCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-02-24 | |
| CVE-2021-33387 | 1234n MiniCMS cross-site scripting | 9.6v3.1 | 0.8% | 2023-02-24 | |
| CVE-2021-33224 | UmbracoForms file upload | 9.8v3.1 | 0.7% | 2023-02-24 | Fix |
| CVE-2021-4105 | Unauthenticated remote code execution on COSLAT Firewall | 9.8v3.1 | 0.9% | 2023-02-24 | Fix |
| CVE-2021-33367 | FreeImage buffer overflow | 5.5v3.1 | 0.3% | 2023-02-22 | Fix |
| CVE-2021-4325 | NHN TOAST UI Chart Legend cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-22 | Fix |
| CVE-2021-32860 | iziModal vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-02-21 | Fix |
| CVE-2021-32859 | Baremetrics Date Range Picker vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2021-32858 | esdoc-publish-html-plugin vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-02-21 | |
| CVE-2021-32857 | Cockpit vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.7% | 2023-02-21 | |
| CVE-2021-32856 | Microweber vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-02-21 | |
| CVE-2021-32855 | vditor vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-02-21 | Fix |
| CVE-2021-32854 | textAngular text editor vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2021-32853 | Erxes vulnerable to cross-site scripting | 9.6NVD v3.1 | 3.1% | 2023-02-20 | Nuclei |
| CVE-2021-32852 | countly-server vulnerable to cross-site scripting | 9.0NVD v3.1 | 0.9% | 2023-02-20 | Fix |
| CVE-2021-32851 | npm mind-elixir jQuery MiniColors vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.7% | 2023-02-20 | Fix |
| CVE-2021-32850 | npm @claviska/jquery-minicolors jQuery MiniColors vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-02-20 | Fix |
| CVE-2021-32848 | Octobox search query parsing denial of service | 7.5NVD v3.1 | 1.0% | 2023-02-20 | Fix |
| CVE-2021-32847 | Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx | 6.5NVD v3.1 | 0.4% | 2023-02-20 | |
| CVE-2021-35261 | Bearadmin Yupoxion file upload | 9.8v3.1 | 0.8% | 2023-02-17 | |
| CVE-2021-34182 | Ttyd incorrect default permissions | 9.8v3.1 | 0.9% | 2023-02-17 | Fix |
| CVE-2021-34164 | Lizhifaka incorrect default permissions | 8.8v3.1 | 0.8% | 2023-02-17 | |
| CVE-2021-33983 | flatcc Dvidelabs buffer overflow | 7.8v3.1 | 0.3% | 2023-02-17 | |
| CVE-2021-33950 | OpenKM XML external entity injection | 7.5v3.1 | 0.7% | 2023-02-17 | |
| CVE-2021-33949 | WMS filename parameter code injection | 9.8v3.1 | 1.0% | 2023-02-17 | |
| CVE-2021-33948 | Hotels Server FantasticLBP SQL injection | 9.8v3.1 | 0.8% | 2023-02-17 | |
| CVE-2021-33926 | Server-side request forgery in Plone CMS | 8.8v3.1 | 1.0% | 2023-02-17 | Fix |
| CVE-2021-33391 | HTACG Tidy use-after-free | 9.8v3.1 | 1.1% | 2023-02-17 | Fix |
| CVE-2021-33226 | SaltStack Salt buffer overflow | 9.8v3.1 | 1.6% | 2023-02-17 | Fix |
| CVE-2021-32846 | Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx | 7.8NVD v3.1 | 0.3% | 2023-02-17 | |
| CVE-2021-32845 | Moby HyperKit uninitialized memory use vtrnd pci_vtrnd_notify | 7.8NVD v3.1 | 0.3% | 2023-02-17 | |
| CVE-2021-32844 | moby hyperkit null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-02-17 | |
| CVE-2021-32843 | moby hyperkit null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-02-17 | |
| CVE-2021-32441 | Exponent CMS Exponent-CMS v.2.6.0 fixed in SQL injection | 7.5v3.1 | 0.6% | 2023-02-17 | |
| CVE-2021-32419 | Schism Tracker out-of-bounds write | 5.3v3.1 | 0.6% | 2023-02-17 | Fix |
| CVE-2021-32163 | Linux Foundation Modular Open Smart Network privilege escalation in MOSN | 9.8v3.1 | 0.9% | 2023-02-17 | Fix |
| CVE-2021-32142 | LibRaw buffer overflow | 7.8v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2021-26277 | vivo Frame service Security Advisory PendingIntent hijacking vulnerability in Framework services | 5.6CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2021-3172 | PHPFusion incorrect permission assignment | 8.1v3.1 | 0.6% | 2023-02-17 | |
| CVE-2021-43529 | Mozilla Thunderbird out-of-bounds write | 9.8v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2021-43074 | Fortinet FortiSwitch improper signature verification | 4.1CNA v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2021-42761 | Fortinet FortiWeb session fixation | 8.5CNA v3.1 | 1.5% | 2023-02-16 | Fix |
| CVE-2021-42756 | Fortinet FortiWeb stack-based buffer overflow | 9.3CNA v3.1 | 35.0% | 2023-02-16 | Exploit codeFix |
| CVE-2021-40555 | Flatcore cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-16 | |
| CVE-2021-33104 | Intel(R) OFU software improper access control | 6.5CNA v3.1 | 0.3% | 2023-02-16 | Exploit codeFix |
| CVE-2021-23980 | Cross-site scripting in Bleach | 6.1v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2021-0187 | Intel(R) Processors BIOS firmware for some improper access control | 3.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2021-38239 | dataease SQL injection | 7.5v3.1 | 0.7% | 2023-02-15 | |
| CVE-2021-34117 | SEO Panel SQL injection | 7.5v3.1 | 0.9% | 2023-02-15 | |
| CVE-2021-33925 | Cms-corephp nitinparashar30 SQL injection | 9.8v3.1 | 1.0% | 2023-02-15 | |
| CVE-2021-33396 | Baijiacms cross-site request forgery | 6.5v3.1 | 0.3% | 2023-02-15 | |
| CVE-2021-33304 | Altran Picotcp-ng virtualsquare picoTCP v1.7.0 and double free | 9.8v3.1 | 0.8% | 2023-02-15 | |
| CVE-2021-46023 | mruby function mrb_vm_exec untrusted pointer dereference | 7.5v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2021-37492 | Ravencoin Core wallet information disclosure | 7.5v3.1 | 0.8% | 2023-02-07 | |
| CVE-2021-37491 | Dogecoin Core wallet information disclosure | 7.5v3.1 | 0.9% | 2023-02-07 | |
| CVE-2021-36471 | AdminLTE path traversal | 9.8v3.1 | 1.8% | 2023-02-07 | |
| CVE-2021-36226 | Western Digital My Cloud PR4100 improper signature verification | 9.8v3.1 | 0.8% | 2023-02-06 | |
| CVE-2021-36225 | Western Digital My Cloud PR4100 missing authorization | 8.8v3.1 | 1.0% | 2023-02-06 | |
| CVE-2021-36224 | Western Digital My Cloud PR4100 hard-coded credentials | 9.8v3.1 | 1.2% | 2023-02-06 | |
| CVE-2021-31578 | MediaTek EN7528, EN7580 Boa privilege escalation | 9.8v3.1 | 1.3% | 2023-02-06 | Fix |
| CVE-2021-31577 | MediaTek EN7528, EN7580 Boa privilege escalation | 9.8v3.1 | 1.1% | 2023-02-06 | Fix |
| CVE-2021-31576 | MediaTek EN7528, EN7580 Boa information disclosure | 7.5v3.1 | 1.0% | 2023-02-06 | Fix |
| CVE-2021-31575 | MediaTek EN7528, EN7580 Config Manager command injection | 9.8v3.1 | 1.7% | 2023-02-06 | Fix |
| CVE-2021-31574 | MediaTek EN7528, EN7580 Config Manager command injection | 9.8v3.1 | 1.7% | 2023-02-06 | Fix |
| CVE-2021-31573 | MediaTek EN7528, EN7580 Config Manager command injection | 9.8v3.1 | 1.7% | 2023-02-06 | Fix |
| CVE-2021-37519 | Memcached authfile.c buffer overflow | 5.5v3.1 | 0.4% | 2023-02-03 | Fix |
| CVE-2021-37518 | Vimium Universal cross-site scripting | 6.1v3.1 | 0.7% | 2023-02-03 | |
| CVE-2021-37502 | Cross-site scripting in Automad/Automad | 5.4v3.1 | 0.5% | 2023-02-03 | Fix |
| CVE-2021-37501 | HDFGroup hdf5 buffer overflow | 7.5v3.1 | 1.5% | 2023-02-03 | Fix |
| CVE-2021-37497 | PbootCMS route SQL injection | 9.8v3.1 | 1.3% | 2023-02-03 | |
| CVE-2021-37379 | Teradek Sphere cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-37378 | Teradke Cube Pro Firmware Teradek Cube and cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-37377 | Teradek Brik Firmware cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-37376 | Teradek Bond Pro Firmware cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | Fix |
| CVE-2021-37375 | Teradek Vidiu Mini Firmware cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-37374 | Teradek Clip cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-37373 | Teradek Slice cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-37317 | ASUS RT-AC68U Cloud Disk path traversal | 9.1v3.1 | 1.5% | 2023-02-03 | |
| CVE-2021-37316 | ASUS RT-AC68U Cloud Disk SQL injection | 7.5v3.1 | 1.0% | 2023-02-03 | |
| CVE-2021-37315 | ASUS RT-AC68U Cloud Disk improper access control | 9.1v3.1 | 1.1% | 2023-02-03 | |
| CVE-2021-37311 | Fcitx 5 buffer overflow | 7.5v3.1 | 0.9% | 2023-02-03 | Fix |
| CVE-2021-37306 | Jeecg insecure permissions issue in jeecg-boot | 7.5v3.1 | 0.8% | 2023-02-03 | |
| CVE-2021-37305 | Jeecg insecure permissions issue in jeecg-boot | 7.5v3.1 | 3.5% | 2023-02-03 | Reported exploitedNuclei |
| CVE-2021-37304 | Jeecg insecure permissions issue in jeecg-boot | 7.5v3.1 | 4.0% | 2023-02-03 | Nuclei |
| CVE-2021-37234 | Modern Honey Network missing authentication | 6.5v3.1 | 0.4% | 2023-02-03 | |
| CVE-2021-36712 | YzmCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-03 | |
| CVE-2021-36570 | Thedaylightstudio Fuel CMS cross-site request forgery | 8.8v3.1 | 0.7% | 2023-02-03 | |
| CVE-2021-36569 | Thedaylightstudio Fuel CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-02-03 | |
| CVE-2021-36546 | Kitesky Kitecms Incorrect improper access control | 7.5v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36545 | Tpcms cross-site scripting | 5.4v3.1 | 0.5% | 2023-02-03 | |
| CVE-2021-36544 | Tpcms Incorrect improper access control | 7.5v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36538 | Gurock Testrail cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-36535 | Cesanta mJS buffer overflow | 5.5v3.1 | 0.4% | 2023-02-03 | |
| CVE-2021-36532 | Portfoliocms race condition | 8.1v3.1 | 0.8% | 2023-02-03 | |
| CVE-2021-36503 | native-php-cms SQL injection | 9.8v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36493 | Xpdfreader Xpdf pdfimages buffer overflow | 7.5v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36489 | Liballeg allegro buffer overflow | 6.5v3.1 | 0.6% | 2023-02-03 | Fix |
| CVE-2021-36484 | jizhiCMS SQL injection | 9.8v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36444 | Txjia Imcat cross-site request forgery | 8.8v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-36443 | Txjia Imcat cross-site request forgery | 8.8v3.1 | 0.6% | 2023-02-03 | |
| CVE-2021-36434 | Jocms getmask.php SQL injection | 9.1v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36433 | Jocms mask.php SQL injection | 9.1v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36432 | Jocms mask.php SQL injection | 7.5v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36431 | Jocms mask.php SQL injection | 9.1v3.1 | 0.9% | 2023-02-03 | |
| CVE-2021-36426 | Phpwcms unrestricted file upload | 8.8v3.1 | 1.1% | 2023-02-03 | |
| CVE-2021-36425 | Phpwcms phpcms path traversal | 5.4v3.1 | 1.0% | 2023-02-03 | |
| CVE-2021-36424 | Phpwcms code injection | 9.8v3.1 | 1.2% | 2023-02-03 | |
| CVE-2021-22786 | Schneider Electric Modicon M340 CPU information disclosure | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2021-3809 | HP PC BIOS improper privilege management | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2021-3808 | HP PC BIOS improper privilege management | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2021-3439 | HP PC BIOS improper privilege management | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2021-46873 | Wireguard race condition | 5.3v3.1 | 0.5% | 2023-01-29 | |
| CVE-2021-4315 | NYUCCL psiTurk experiment.py special elements used in a template engine | 8.8v3.1 | 0.9% | 2023-01-28 | Fix |
| CVE-2021-41231 | OpenMage LTS DataFlow upload remote code execution | 7.2CNA v3.1 | 1.2% | 2023-01-27 | Fix |
| CVE-2021-41144 | OpenMage LTS authenticated remote code execution through layout update | 8.8CNA v3.1 | 1.2% | 2023-01-27 | Fix |
| CVE-2021-41143 | OpenMage Magento LTS customer media remote code execution | 7.2CNA v3.1 | 1.3% | 2023-01-27 | Fix |
| CVE-2021-39217 | OpenMage LTS arbitrary command execution in custom layout update through blocks | 7.2CNA v3.1 | 1.3% | 2023-01-27 | Fix |
| CVE-2021-21395 | OpenMage magento-lts magneto-lts vulnerable to cross-site request forgery | 4.2CNA v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2021-41989 | QlikView insecure permissions | 7.8v3.1 | 0.3% | 2023-01-26 | |
| CVE-2021-41988 | Qlik Nprinting Designer insecure permissions | 7.8v3.1 | 0.3% | 2023-01-26 | |
| CVE-2021-36686 | Ymfe Yapi cross-site scripting in yapi-vendor | 5.4v3.1 | 0.5% | 2023-01-26 | |
| CVE-2021-36539 | Instructure Canvas Learning Management Service insecure direct object reference | 6.5v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2021-28510 | Arista EOS PTP agent denial of service | 5.3CNA v3.1 | 1.0% | 2023-01-26 | |
| CVE-2021-43449 | ONLYOFFICE Server server-side request forgery | 8.1v3.1 | 1.2% | 2023-01-23 | |
| CVE-2021-43448 | ONLYOFFICE Server improper input validation | 5.3v3.1 | 1.0% | 2023-01-23 | |
| CVE-2021-43447 | ONLYOFFICE Server missing authentication | 7.5v3.1 | 1.3% | 2023-01-23 | |
| CVE-2021-43446 | ONLYOFFICE Server cross-site scripting | 6.1v3.1 | 0.8% | 2023-01-23 | |
| CVE-2021-43445 | ONLYOFFICE Server improper authentication | 9.8v3.1 | 1.7% | 2023-01-23 | |
| CVE-2021-43444 | ONLYOFFICE Server improper authentication | 7.5v3.1 | 1.2% | 2023-01-23 | |
| CVE-2021-24881 | Passster WordPress plugin Protection bypass and arbitrary post access | 7.5NVD v3.1 | 0.8% | 2023-01-23 | Fix |
| CVE-2021-24837 | Passster WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-01-23 | Fix |
| CVE-2021-39089 | IBM Cloud Pak for Security information disclosure | 4.3CNA v3.1 | 0.7% | 2023-01-20 | Fix |
| CVE-2021-39011 | IBM Cloud Pak for Security information disclosure | 4.2CNA v3.1 | 0.6% | 2023-01-20 | Fix |
| CVE-2021-37500 | Reprisesoftware Reprise License Manager path traversal | 8.1v3.1 | 1.0% | 2023-01-20 | |
| CVE-2021-37499 | Reprisesoftware Reprise License Manager injection | 6.5v3.1 | 0.7% | 2023-01-20 | |
| CVE-2021-37498 | Reprisesoftware Reprise License Manager server-side request forgery | 6.5v3.1 | 0.6% | 2023-01-20 | |
| CVE-2021-33642 | byacc infinite loop | 5.5NVD v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2021-33641 | byacc use-after-free | 7.8NVD v3.1 | 0.3% | 2023-01-20 | Fix |
| CVE-2021-29368 | Cuppacms session fixation | 8.8v3.1 | 0.7% | 2023-01-20 | |
| CVE-2021-27782 | HCL BigFix Mobile admin and config UI login vulnerability | 5.4CNA v3.1 | 0.3% | 2023-01-20 | Fix |
| CVE-2021-26644 | Hometory Mangboard WP BASIC SQL injection | 9.8v3.1 | 0.9% | 2023-01-20 | |
| CVE-2021-26642 | XpressEngine file upload | 9.8v3.1 | 1.2% | 2023-01-20 | Fix |
| CVE-2021-37774 | TP-Link Tl-wdr7660 code injection | 8.0v3.1 | 0.9% | 2023-01-19 | |
| CVE-2021-36630 | Ruckus Wireless Sz-100 resource exhaustion | 7.5v3.1 | 2.2% | 2023-01-18 | Exploit codeFix |
| CVE-2021-33959 | Plex Media Server origin validation error | 7.5v3.1 | 15.0% | 2023-01-18 | Exploit code |
| CVE-2021-4314 | Open Mainframe Project Zowe improper privilege management | 5.3v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2021-36647 | Arm mbed TLS function mbedtls_mpi_exp_mod in lignum.c weak cryptographic algorithm | 4.7v3.1 | 0.2% | 2023-01-17 | Fix |
| CVE-2021-32837 | mechanize vulnerable to ReDoS | 7.5NVD v3.1 | 28.9% | 2023-01-17 | Fix |
| CVE-2021-4313 | NethServer phonenehome index.php get_country_coor SQL injection | 9.8v3.1 | 0.7% | 2023-01-16 | |
| CVE-2021-46872 | nim-lang Nimforum cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2021-36204 | Insufficiently protected credentials in Metasys | 7.8CNA v3.1 | 0.4% | 2023-01-13 | Fix |
| CVE-2021-4312 | Th3-822 Rapidleech zip.php zip_go cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-13 | |
| CVE-2021-46795 | AMD Ryzen 5000 Series time-of-check time-of-use race condition | 4.7v3.1 | 0.1% | 2023-01-11 | Fix |
| CVE-2021-46791 | AMD 3rd Gen EPYC out-of-bounds write | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-46779 | AMD 1st Gen EPYC improper input validation | 7.1v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-46768 | AMD 2nd Gen EPYC SEV firmware improper input validation | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-46767 | AMD 2nd Gen EPYC ASP improper input validation | 6.1v3.1 | 0.3% | 2023-01-11 | Fix |
| CVE-2021-26409 | AMD 3rd Gen EPYC buffer overflow | 7.8v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26407 | AMD 2nd Gen EPYC insufficient randomness | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26404 | AMD 3rd Gen EPYC SEV firmware improper input validation | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26403 | AMD 1st Gen EPYC insufficient verification of data authenticity | 6.5v3.1 | 0.1% | 2023-01-11 | Fix |
| CVE-2021-26402 | AMD 2nd Gen EPYC out-of-bounds write | 7.1v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26398 | AMD 1st Gen EPYC improper input validation | 7.8v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26396 | AMD 3rd Gen EPYC insufficient verification of data authenticity | 4.4v3.1 | 0.1% | 2023-01-11 | Fix |
| CVE-2021-26355 | AMD 3rd Gen EPYC denial of service | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26346 | AMD Ryzen 5000 Series integer overflow | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26343 | AMD 3rd Gen EPYC information disclosure | 5.5v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26328 | AMD 3rd Gen EPYC improperly implemented security check | 4.4v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2021-26316 | AMD Ryzen 5000 Series arbitrary code execution | 7.8v3.1 | 0.3% | 2023-01-11 | Fix |
| CVE-2021-3966 | zephyrproject-rtos Zephyr usb bluetooth device ACL read cb buffer overflow | 9.6CNA v3.1 | 0.5% | 2023-01-11 | |
| CVE-2021-46871 | phoenixframework PHOENIX HTML phoenix_html allows cross-site scripting in HEEx class attributes | 6.1v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2021-36603 | Tasmota cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-09 | |
| CVE-2021-4311 | Talend Open Studio for MDM XML XML external entity reference | 9.8v3.1 | 0.7% | 2023-01-09 | |
| CVE-2021-4310 | 01-Scripts 01-Artikelsystem 01article.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-09 | |
| CVE-2021-4309 | 01-Scripts 01ACP cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-08 | |
| CVE-2021-4308 | Lboro WebPA SQL injection | 9.8v3.1 | 0.7% | 2023-01-08 | Fix |
| CVE-2021-4307 | Yomguithereal Baobab prototype pollution | 9.8v3.1 | 1.3% | 2023-01-07 | Fix |
| CVE-2021-4306 | cronvel terminal-kit redos | 7.5v3.1 | 0.9% | 2023-01-07 | Fix |
| CVE-2021-4301 | slackero Phpwcms SQL injection | 9.8v3.1 | 0.7% | 2023-01-07 | Fix |
| CVE-2021-46868 | Huawei HarmonyOS the HW_KEYMASTER module does not release memory | 7.5v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2021-46867 | Huawei HarmonyOS the HW_KEYMASTER module does not release memory | 7.5v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2021-40342 | Hitachi Energy FOXMAN-UN use of default key for encryption | 7.1CNA v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2021-40341 | Hitachi Energy FOXMAN-UN weak DES encryption | 7.1CNA v3.1 | 0.1% | 2023-01-05 | Fix |
| CVE-2021-32828 | Hyland Nuxeo regular expression denial of service in MooTools | 6.1NVD v3.1 | 0.7% | 2023-01-05 | |
| CVE-2021-4305 | Woorank robots-txt-guard patterns.js makePathPattern redos | 7.5v3.1 | 0.9% | 2023-01-05 | Fix |
| CVE-2021-4304 | eprintsug ulcc-core toolbox command injection | 9.8v3.1 | 2.1% | 2023-01-05 | |
| CVE-2021-4303 | shannah Xataface Installer install_form.js.php testftp cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2021-38928 | IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing | 5.4CNA v3.1 | 0.4% | 2023-01-04 | Fix |
| CVE-2021-4302 | slackero Phpwcms SVG file cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-04 | Fix |
| CVE-2021-4300 | ghostlander Halcyon Block Verification main.cpp AddToBlockIndex access control | 9.8v3.1 | 0.7% | 2023-01-04 | Fix |
| CVE-2021-32824 | Apache Dubbo regular expression denial of service in MooTools | 9.8NVD v3.1 | 2.8% | 2023-01-03 | Fix |
| CVE-2021-32821 | Regular expression denial of service in MooTools | 7.5NVD v3.1 | 0.6% | 2023-01-03 | |
| CVE-2021-30558 | Google Chrome content security policy insufficient policy enforcement | 8.8v3.1 | 11.5% | 2023-01-02 | Fix |
| CVE-2021-21200 | Google Chrome WebUI settings out-of-bounds read | 5.4v3.1 | 0.4% | 2023-01-02 | Fix |
| CVE-2021-4299 | cronvel string-kit naturalSort.js naturalSort redos | 7.5v3.1 | 0.9% | 2023-01-02 | Fix |
| CVE-2021-4298 | Sipity SearchCriteriaForWorksParameter SQL injection | 9.8v3.1 | 0.7% | 2023-01-02 | Fix |
| CVE-2021-41823 | Kemptechnologies Web Application Firewall cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-01 | |
| CVE-2021-4297 | trampgeek jobe Restapi.php runs_post privilege escalation | 9.8v3.1 | 0.6% | 2023-01-01 | |
| CVE-2021-4296 | w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-29 | |
| CVE-2021-4295 | ONC code-validator-api XML Handler XML external entity injection | 9.8v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2021-4294 | OpenShift OSIN CheckClientSecret timing discrepancy | 5.9v3.1 | 0.7% | 2022-12-28 | Fix |
| CVE-2021-4293 | gnuboard youngcart5 menu_list_update.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-28 | Fix |