CVE-2021 records published after 2021
Page three of seven: records 2,001 to 3,000 of the 6,408 published after 2021, newest first. The first page carries the figures for After 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-4292 | OpenMRS Admin UI Module Manage Privilege page privilege.gsp cross-site scripting | 6.1v3.1 | 0.9% | 2022-12-27 | Fix |
| CVE-2021-4291 | OpenMRS Admin UI Module location.gsp cross-site scripting | 6.1v3.1 | 0.9% | 2022-12-27 | Fix |
| CVE-2021-4290 | DHBW Fallstudie Login passport.js SQL injection | 9.8v3.1 | 0.6% | 2022-12-27 | |
| CVE-2021-4289 | OpenMRS Reference Application User App Page cross-site scripting | 6.1v3.1 | 1.0% | 2022-12-27 | Fix |
| CVE-2021-4288 | OpenMRS openmrs-module-referenceapplication userApp.gsp cross-site scripting | 6.1v3.1 | 0.9% | 2022-12-27 | Fix |
| CVE-2021-4287 | ReFirm Labs binwalk Archive Extraction extractor.py symlink | 6.5v3.1 | 1.9% | 2022-12-27 | Fix |
| CVE-2021-4286 | cocagne pysrp _ctsrp.py calculate_x information exposure | 7.5v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2021-4285 | Nagios NCPA tail.html cross-site scripting | 6.1v3.1 | 1.7% | 2022-12-27 | Fix |
| CVE-2021-4284 | OpenMRS HTML Form Entry UI Framework Integration Module cross-site scripting | 6.1v3.1 | 0.9% | 2022-12-27 | Fix |
| CVE-2021-4283 | FreeBPX voicemail settings ssettings.php cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2021-4282 | FreePBX voicemail page.voicemail.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2021-4239 | Weak encryption and denial of service in github.com/flynn/Noise | 7.5v3.1 | 0.4% | 2022-12-27 | Fix |
| CVE-2021-4238 | Insufficient randomness in github.com/Masterminds/Goutils | 9.1v3.1 | 1.3% | 2022-12-27 | Fix |
| CVE-2021-4236 | Panic or authentication bypass in github.com/ecnepsnai/web | 9.8v3.1 | 1.1% | 2022-12-27 | Fix |
| CVE-2021-4235 | Denial of service in gopkg.in/yaml.v2 | 5.5v3.1 | 0.4% | 2022-12-27 | Fix |
| CVE-2021-45467 | Control Web Panel Webpanel missing authorization | 9.8v3.1 | 70.9% | 2022-12-26 | NucleiFix |
| CVE-2021-45466 | Control Web Panel Webpanel incorrect authorization | 9.8v3.1 | 55.3% | 2022-12-26 | Fix |
| CVE-2021-44856 | mediawiki improper check for exceptional conditions | 5.3v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2021-44855 | mediawiki cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-26 | Fix |
| CVE-2021-44854 | mediawiki sensitive information in cache | 5.3v3.1 | 0.6% | 2022-12-26 | Fix |
| CVE-2021-44758 | heimdal null pointer dereference | 7.5v3.1 | 1.2% | 2022-12-26 | Fix |
| CVE-2021-43395 | Openindiana improper locking | 5.5v3.1 | 0.3% | 2022-12-26 | Fix |
| CVE-2021-39369 | Philips Vue PACS path traversal | 6.5v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2021-38561 | Golang.org/x/Text/language out-of-bounds read | 7.5v3.1 | 1.4% | 2022-12-26 | Fix |
| CVE-2021-35954 | fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug (SWD) feature. | 8.1v3.1 | 0.3% | 2022-12-26 | |
| CVE-2021-35953 | Fastrack Reflex 2.0 denial of service | 7.5v3.1 | 0.8% | 2022-12-26 | |
| CVE-2021-35952 | fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017. | 5.3v3.1 | 0.6% | 2022-12-26 | |
| CVE-2021-35951 | fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device. | 7.5v3.1 | 0.9% | 2022-12-26 | |
| CVE-2021-35065 | glob-parent vulnerable to regular expression denial of service | 7.5v3.1 | 1.6% | 2022-12-26 | Fix |
| CVE-2021-30134 | Php-mod/curl allows cross-site scripting | 6.1v3.1 | 1.3% | 2022-12-26 | Reported exploitedNucleiFix |
| CVE-2021-24942 | Menu Item Visibility Control WordPress plugin Admin+ arbitrary PHP code execution | 7.2NVD v3.1 | 1.2% | 2022-12-26 | |
| CVE-2021-4281 | Brave UX for-the-badge combine-prs.yml os command injection | 9.8v3.1 | 1.8% | 2022-12-26 | |
| CVE-2021-4280 | styler_praat_scripts Slash file_segmenter.praat denial of service | 6.5v3.1 | 0.7% | 2022-12-25 | |
| CVE-2021-4279 | Starcounter-Jack JSON-Patch prototype pollution | 9.8v3.1 | 1.1% | 2022-12-25 | Fix |
| CVE-2021-4278 | cronvel tree-kit prototype pollution | 7.8v3.1 | 0.4% | 2022-12-25 | Fix |
| CVE-2021-4277 | fredsmith utils Filename screenshot_sync predictable state | 5.3v3.1 | 0.5% | 2022-12-25 | |
| CVE-2021-4276 | dns-stats hedgehog SQL injection | 8.8v3.1 | 0.6% | 2022-12-25 | |
| CVE-2021-32692 | Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt | 9.6CNA v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2021-43657 | Simple Client Management System cross-site scripting | 5.4v3.1 | 0.7% | 2022-12-22 | Exploit code |
| CVE-2021-36631 | Baidunetdisk untrusted search path | 6.7v3.1 | 0.3% | 2022-12-22 | |
| CVE-2021-4221 | Mozilla Firefox spoofing | 4.3v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2021-4140 | Mozilla Firefox ESR XML injection | 10.0v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2021-4129 | Mozilla Firefox out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2021-4128 | Mozilla Firefox use-after-free | 6.5v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2021-4127 | Mozilla Thunderbird and Firefox ESR ANGLE graphics library vulnerability | 9.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2021-4126 | Mozilla Thunderbird OpenPGP/MIME signature verification vulnerability | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2021-4275 | katlings pyambic-pentameter cross-site request forgery | 8.8v3.1 | 0.2% | 2022-12-21 | |
| CVE-2021-4274 | sileht bird-lg layout.html cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2021-4273 | Studygolang search.go Search cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2021-4272 | Studygolang topics.js cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-21 | |
| CVE-2021-4271 | panicsteve w2wiki Markdown index.php toHTML cross-site scripting | 6.1v3.1 | 0.3% | 2022-12-21 | |
| CVE-2021-4270 | Imprint CMS ViewHelpers.cs SearchForm cross-site scripting | 6.1v3.1 | 0.3% | 2022-12-21 | |
| CVE-2021-4269 | SimpleRisk common.js checkAndSetValidation cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | Fix |
| CVE-2021-4268 | phpRedisAdmin cross-site request forgery | 8.8v3.1 | 0.4% | 2022-12-21 | Fix |
| CVE-2021-4267 | tad_discuss cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2021-4266 | Webdetails cpf DependenciesPackage.java cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-21 | Fix |
| CVE-2021-4265 | siwapp-ror cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2021-4264 | LinkedIn dustjs prototype pollution | 8.8v3.1 | 1.1% | 2022-12-21 | Fix |
| CVE-2021-4263 | Leanote history.js define cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2021-46856 | Huawei HarmonyOS path traversal vulnerability in the Multi-screen Collaboration module | 7.5v3.1 | 0.6% | 2022-12-20 | Fix |
| CVE-2021-33640 | openEuler use-after-free | 6.2CNA v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2021-4262 | laravel-jqgrid EloquentRepositoryAbstract.php getRows SQL injection | 9.8v3.1 | 0.6% | 2022-12-19 | |
| CVE-2021-4261 | pacman-canvas db-handler.php addHighscore SQL injection | 9.8v3.1 | 0.6% | 2022-12-19 | Fix |
| CVE-2021-4260 | oils-js oils JS vulnerable to open redirect | 6.1v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2021-4259 | phpRedisAdmin login.inc.php authHttpDigest wrong operator in string comparison | 9.8v3.1 | 0.8% | 2022-12-19 | Fix |
| CVE-2021-4258 | whohas Package Information cleartext transmission | 7.5v3.1 | 0.4% | 2022-12-19 | |
| CVE-2021-4257 | ctrlo lenio Task task.tt cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2021-4256 | ctrlo lenio index.tt cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2021-4255 | ctrlo lenio contractor.tt cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2021-4254 | ctrlo lenio Notice main.tt cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2021-4253 | ctrlo lenio Ticket Handler cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2021-4252 | WP-Ban ban-options.php toggle_checkbox cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-18 | |
| CVE-2021-4251 | as include.cdn.php getFullURL cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2021-4250 | cgriego active_attr Regex boolean_typecaster.rb call denial of service | 7.5v3.1 | 1.1% | 2022-12-18 | Fix |
| CVE-2021-4249 | xml-conduit DOCTYPE Entity Expansion Parse.hs infinite loop | 7.5v3.1 | 0.8% | 2022-12-18 | Fix |
| CVE-2021-4248 | DNS NuGet package uses insufficiently random values | 9.8v3.1 | 0.8% | 2022-12-18 | Fix |
| CVE-2021-4247 | OWASP NodeGoat Query parameter research.js denial of service | 7.5v3.1 | 1.0% | 2022-12-18 | |
| CVE-2021-4246 | roxlukas LMeve login page SQL injection | 9.8v3.1 | 0.5% | 2022-12-17 | |
| CVE-2021-38241 | RuoYi deserialization of untrusted data | 9.8v3.1 | 1.0% | 2022-12-16 | |
| CVE-2021-35252 | Common Key vulnerability in Serv-U FTP Server | 7.5CNA v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2021-31650 | Online Grading System Sourcecodester SQL injection | 9.8v3.1 | 1.4% | 2022-12-16 | |
| CVE-2021-28655 | Apache Zeppelin: Arbitrary file deletion | 6.5v3.1 | 1.5% | 2022-12-16 | Fix |
| CVE-2021-39428 | EyouCMS Users.php cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2021-39427 | Vtimecn 188jianzhan cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-15 | |
| CVE-2021-39426 | Seacms code injection | 9.8v3.1 | 0.9% | 2022-12-15 | |
| CVE-2021-36573 | FeehiCMS unrestricted upload | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2021-36572 | FeehiCMS cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-15 | |
| CVE-2021-33420 | Replicator vulnerable to deserialization of untrusted data | 9.8v3.1 | 1.6% | 2022-12-15 | Fix |
| CVE-2021-4245 | chbrown rfc6902 pointer.ts prototype pollution | 9.8v3.1 | 1.3% | 2022-12-15 | Fix |
| CVE-2021-4226 | RSFirewall WordPress plugin IP block bypass | 9.8NVD v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2021-44695 | Siemens SIMATIC Drive Controller CPU 1504D TF improper syntax validation | 4.9CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2021-44694 | Siemens SIMATIC Drive Controller CPU 1504D TF improper type validation | 5.5CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2021-44693 | Siemens SIMATIC Drive Controller CPU 1504D TF improper quantity validation | 4.9CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2021-41943 | Logrhythm cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-13 | |
| CVE-2021-40365 | Siemens SIMATIC Drive Controller CPU 1504D TF denial of service | 7.5CNA v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2021-39660 | Android TBD arbitrary code execution | 7.0v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2021-32415 | MSI Wrapper local privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | |
| CVE-2021-0934 | Android AccountsDb.java denial of service | 5.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2021-46846 | HPE Integrated Lights-Out 5 cross-site scripting | 6.4CNA v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2021-38997 | IBM API Connect host header injection | 5.4CNA v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2021-4244 | yikes-inc-easy-mailchimp-extender Plugin add_field_to_form.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2021-3942 | HP Print products and Digital Sending products buffer overflow | 9.8v3.1 | 1.4% | 2022-12-12 | Fix |
| CVE-2021-3919 | HP OMEN Gaming Hub and HP Command Center improper privilege management | 9.8v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2021-3821 | HP FutureSmart denial of service | 9.8v3.1 | 0.9% | 2022-12-12 | Fix |
| CVE-2021-3661 | HP Workstation BIOS code injection | 8.4v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2021-3437 | HP OMEN Gaming Hub SDK incorrect default permissions | 9.8v3.1 | 15.6% | 2022-12-12 | Fix |
| CVE-2021-39434 | ZKTeco Zktime weak password requirements | 7.5v3.1 | 0.5% | 2022-12-06 | |
| CVE-2021-34181 | Tomexam cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-05 | |
| CVE-2021-37533 | Apache Commons Net's FTP client trusts the host from PASV response by default | 6.5v3.1 | 1.9% | 2022-12-03 | Fix |
| CVE-2021-31740 | SEPPmail cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-30 | |
| CVE-2021-4242 | Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection | 8.8v3.1 | 3.0% | 2022-11-30 | |
| CVE-2021-31693 | 10web PhotoGallery cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-29 | Fix |
| CVE-2021-45036 | Velneo vClient improper authentication | 7.4v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2021-25059 | Download WordPress plugin Subscriber+ Website download | 4.3NVD v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2021-46854 | ProFTPD mod_radius module vulnerability | 7.5v3.1 | 1.1% | 2022-11-23 | Fix |
| CVE-2021-43258 | Churchdb Churchinfo unrestricted file upload | 8.8v3.1 | 11.6% | 2022-11-23 | MetasploitExploit code |
| CVE-2021-35284 | Cms-php SQL injection | 9.8v3.1 | 0.7% | 2022-11-23 | |
| CVE-2021-35246 | SolarWinds Engineer's Toolset unprotected transport of credentials (HSTS) | 5.3CNA v3.1 | 0.4% | 2022-11-23 | Fix |
| CVE-2021-29334 | jizhiCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2022-11-23 | |
| CVE-2021-24649 | WP User Frontend WordPress plugin Obscure Registration as admin | 9.8NVD v3.1 | 0.7% | 2022-11-21 | Fix |
| CVE-2021-37936 | Elastic Kibana cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2021-33621 | HTTP response splitting in CGI | 8.8v3.1 | 2.4% | 2022-11-18 | Fix |
| CVE-2021-31739 | SEPPmail cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-18 | |
| CVE-2021-22141 | Elastic Kibana open redirect | 6.1v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2021-38819 | Simple Image Gallery Web App SQL injection | 8.8v3.1 | 0.9% | 2022-11-17 | Exploit code |
| CVE-2021-36905 | Quiz And Survey Master WordPress plugin Multiple Auth. stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2021-33897 | Synthesiagame Synthesia buffer overflow | 5.5v3.1 | 0.2% | 2022-11-17 | Fix |
| CVE-2021-31608 | Proofpoint enterprise_protection protection mechanism failure | 4.3v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2021-4241 | phpservermon User.php setUserLoggedIn predictable algorithm in random number generator | 5.3v3.1 | 0.8% | 2022-11-15 | Fix |
| CVE-2021-4240 | phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator | 5.3v3.1 | 0.8% | 2022-11-15 | Fix |
| CVE-2021-40272 | OP5 Monitor cross-site scripting | 6.1v3.1 | 1.0% | 2022-11-14 | Nuclei |
| CVE-2021-38828 | Xiongmaitech Xm-jpr2-lx cleartext transmission of sensitive information | 5.3v3.1 | 0.3% | 2022-11-14 | |
| CVE-2021-38827 | Xiongmaitech Xm-jpr2-lx authentication bypass by replay | 7.5v3.1 | 0.6% | 2022-11-14 | |
| CVE-2021-33164 | Intel(R) NUCs BIOS firmware for some improper access control | 8.2CNA v3.1 | 0.2% | 2022-11-11 | Fix |
| CVE-2021-33159 | Intel(R) AMT subsystem improper authentication | 7.4CNA v3.1 | 0.2% | 2022-11-11 | Fix |
| CVE-2021-33064 | Intel(R) System Studio software installer uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2022-11-11 | Fix |
| CVE-2021-26251 | Intel(R) Distribution of OpenVINO(TM) Toolkit improper input validation | 5.3CNA v3.1 | 0.6% | 2022-11-11 | Fix |
| CVE-2021-40289 | Mm-wki mm-wiki is vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 0.5% | 2022-11-10 | |
| CVE-2021-40226 | Glyphandcog Xpdfreader out-of-bounds write | 7.5v3.1 | 0.7% | 2022-11-10 | Fix |
| CVE-2021-0185 | Intel(R) Server Board M10JNP Family firmware for some improper input validation | 7.5CNA v3.1 | 0.2% | 2022-11-10 | Fix |
| CVE-2021-46852 | Huawei HarmonyOS logic bypass vulnerability in the memory management module | 7.5v3.1 | 0.5% | 2022-11-09 | Fix |
| CVE-2021-46851 | Huawei HarmonyOS improper access control | 9.8v3.1 | 0.5% | 2022-11-09 | Fix |
| CVE-2021-34579 | Phoenix Contact: Fl Mguard Dm and improper privilege management | 7.5v3.1 | 0.6% | 2022-11-09 | Fix |
| CVE-2021-34577 | Hard-coded credentials in Kaden PICOFLUX AiR | 6.5CNA v3.1 | 0.3% | 2022-11-09 | |
| CVE-2021-34569 | WAGO I/O-Check service prone to out-of-bounds write | 9.8CNA v3.1 | 0.9% | 2022-11-09 | Fix |
| CVE-2021-34568 | WAGO I/O-Check service prone to allocation of resources without limits or throttling | 7.5CNA v3.1 | 1.1% | 2022-11-09 | Fix |
| CVE-2021-34567 | WAGO I/O-Check service prone to out-of-bounds read | 8.2CNA v3.1 | 0.8% | 2022-11-09 | Fix |
| CVE-2021-34566 | WAGO I/O-Check service prone to Memory Overflow | 9.1CNA v3.1 | 1.1% | 2022-11-09 | Fix |
| CVE-2021-26393 | AMD Radeon RX 5000 Series and PRO W5000 Series memory leak | 5.5v3.1 | 0.3% | 2022-11-09 | Fix |
| CVE-2021-26392 | AMD Radeon RX 5000 Series and PRO W5000 Series out-of-bounds write | 7.8v3.1 | 0.3% | 2022-11-09 | Fix |
| CVE-2021-26391 | AMD Radeon RX 5000 Series and PRO W5000 Series improper signature verification | 7.8v3.1 | 0.2% | 2022-11-09 | Fix |
| CVE-2021-26360 | AMD Radeon RX 6000 Series and PRO W6000 Series arbitrary code execution | 7.8v3.1 | 0.2% | 2022-11-09 | Fix |
| CVE-2021-40303 | Perfex CRM cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-08 | Exploit code |
| CVE-2021-39661 | Android the PowerVR kernel driver out-of-bounds write | 7.8v3.1 | 0.1% | 2022-11-08 | Fix |
| CVE-2021-1050 | Android the PowerVR kernel driver out-of-bounds write | 7.8v3.1 | 0.2% | 2022-11-08 | Fix |
| CVE-2021-42205 | Lenovo Elan Miniport Touchpad Driver crash | 4.7v3.1 | 0.3% | 2022-11-07 | Exploit code |
| CVE-2021-39473 | Hotelmanager cross-site scripting | 5.4v3.1 | 0.6% | 2022-11-04 | Exploit code |
| CVE-2021-39432 | Diplib double free | 6.5v3.1 | 0.7% | 2022-11-04 | Fix |
| CVE-2021-34055 | jhead buffer overflow | 7.8v3.1 | 0.4% | 2022-11-04 | Fix |
| CVE-2021-46853 | alpine time-of-check time-of-use race condition | 5.9v3.1 | 0.9% | 2022-11-03 | Fix |
| CVE-2021-44862 | Sensitive Information store in NSClient logs | 8.4CNA v3.1 | 0.2% | 2022-11-03 | Fix |
| CVE-2021-39077 | IBM Security Guardium information disclosure | 4.4CNA v3.1 | 0.1% | 2022-11-03 | Fix |
| CVE-2021-37823 | OpenCart SQL injection | 4.9v3.1 | 0.7% | 2022-11-03 | Fix |
| CVE-2021-36906 | Quiz And Survey Master WordPress plugin Multiple insecure direct object references (IDOR) | 8.8v3.1 | 0.5% | 2022-11-03 | Fix |
| CVE-2021-45448 | Hitachi Vantara Pentaho Business Analytics Server Analyzer plugin template service path traversal | 6.5NVD v3.1 | 0.6% | 2022-11-02 | Fix |
| CVE-2021-45447 | Hitachi Vantara Pentaho Business Analytics Server Data Lineage feature information disclosure | 7.5v3.1 | 0.3% | 2022-11-02 | Fix |
| CVE-2021-45446 | Pentaho Business Analytics Server exposure of information through directory listing | 7.5v3.1 | 0.4% | 2022-11-02 | Fix |
| CVE-2021-37789 | stb out-of-bounds write | 8.1v3.1 | 0.8% | 2022-11-02 | Fix |
| CVE-2021-40661 | Mt IND780 path traversal | 7.5v3.1 | 5.1% | 2022-10-31 | NucleiFix |
| CVE-2021-40241 | Xfig buffer overflow | 9.8v3.1 | 1.0% | 2022-10-31 | Fix |
| CVE-2021-27784 | HCL Launch container images may contain non-unique HTTPS certificates and database encryption key | 5.9CNA v3.1 | 0.2% | 2022-10-31 | Fix |
| CVE-2021-42777 | Stimulsoft Reports information disclosure through error messages | 9.8v3.1 | 1.0% | 2022-10-29 | |
| CVE-2021-38737 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-38736 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-38734 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-38733 | SEMCMS SQL injection | 9.8v3.1 | 0.7% | 2022-10-28 | Fix |
| CVE-2021-38732 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-38731 | SEMCMS SQL injection | 9.8v3.1 | 0.7% | 2022-10-28 | Fix |
| CVE-2021-38730 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-38729 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-38728 | SEMCMS cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-28 | Fix |
| CVE-2021-38399 | Honeywell Experion PKS and ACE Controllers relative path traversal | 7.5v3.1 | 0.8% | 2022-10-28 | |
| CVE-2021-38397 | Honeywell Experion PKS and ACE Controllers unrestricted upload of file with dangerous type | 10.0v3.1 | 0.9% | 2022-10-28 | |
| CVE-2021-38395 | Honeywell Experion PKS and ACE Controllers injection | 9.8v3.1 | 0.9% | 2022-10-28 | |
| CVE-2021-38217 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | |
| CVE-2021-37782 | PHPGurukul Employee Record Management System SQL injection | 9.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-37781 | PHPGurukul Employee Record Management System cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2021-36898 | Quiz And Survey Master WordPress plugin Auth. SQL injection (SQLi) | 7.2v3.1 | 0.9% | 2022-10-28 | Fix |
| CVE-2021-36864 | Quiz And Survey Master WordPress plugin Auth. reflected cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2021-36863 | Quiz And Survey Master WordPress plugin Auth. stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-10-28 | Fix |
| CVE-2021-36858 | Testimonials WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2021-36206 | Johnson Controls CEVAS cross-site scripting | 10.0CNA v3.1 | 0.5% | 2022-10-28 | Fix |
| CVE-2021-35388 | PHPGurukul Hospital Management System cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2021-35387 | PHPGurukul Hospital Management System SQL injection | 8.8v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2021-45476 | Information disclosure in Yordam Library Information Document Automation Program | 6.1NVD v3.1 | 0.4% | 2022-10-27 | Fix |
| CVE-2021-45475 | Information disclosure in Yordam Library Information Document Automation Program | 7.5NVD v3.1 | 0.6% | 2022-10-27 | Fix |
| CVE-2021-46850 | VestaCP Vesta Control Panel argument injection | 7.2v3.1 | 6.4% | 2022-10-24 | |
| CVE-2021-46848 | GNU libtasn1 off-by-one error | 9.1NVD v3.1 | 2.3% | 2022-10-24 | Fix |
| CVE-2021-46279 | Lanner IAC-AST2500A session fixation and insufficient session expiration | 8.8NVD v3.1 | 0.4% | 2022-10-24 | |
| CVE-2021-45925 | Lanner IAC-AST2500A BMC login process vulnerability | 5.3NVD v3.1 | 0.6% | 2022-10-24 | |
| CVE-2021-44776 | Lanner IAC-AST2500A spx_restservice SubNet_handler_func broken access control | 5.3NVD v3.1 | 0.5% | 2022-10-24 | |
| CVE-2021-44769 | Lanner IAC-AST2500A TLS Certificate Generation function improper input validation | 6.5NVD v3.1 | 0.5% | 2022-10-24 | |
| CVE-2021-44467 | Lanner IAC-AST2500A spx_restservice KillDupUsr_func broken access control | 7.5NVD v3.1 | 0.7% | 2022-10-24 | |
| CVE-2021-42010 | Apache Heron (Incubating) CRLF log injection | 9.8v3.1 | 1.6% | 2022-10-24 | Fix |
| CVE-2021-26733 | Lanner IAC-AST2500A spx_restservice FirstReset_handler_func broken access control | 7.5NVD v3.1 | 0.7% | 2022-10-24 | |
| CVE-2021-26732 | Lanner IAC-AST2500A spx_restservice First_network_func broken access control | 5.3NVD v3.1 | 0.5% | 2022-10-24 | |
| CVE-2021-26731 | Lanner IAC-AST2500A spx_restservice user management handler command injection | 9.8NVD v3.1 | 2.4% | 2022-10-24 | |
| CVE-2021-26730 | Lanner IAC-AST2500A spx_restservice Login_handler_func Subfunction stack-based buffer overflow | 9.8NVD v3.1 | 1.1% | 2022-10-24 | |
| CVE-2021-26729 | Lanner IAC-AST2500A spx_restservice login handler command injection | 9.8NVD v3.1 | 2.4% | 2022-10-24 | |
| CVE-2021-26728 | Lanner IAC-AST2500A KillDupUsr_func function of spx_restservice command injection | 9.8NVD v3.1 | 2.4% | 2022-10-24 | |
| CVE-2021-26727 | Lanner IAC-AST2500A spx_restservice SubNet handler command injection | 9.8NVD v3.1 | 2.4% | 2022-10-24 | |
| CVE-2021-4228 | Lanner IAC-AST2500A hard-coded TLS Certificate | 7.4NVD v3.1 | 9.9% | 2022-10-24 | |
| CVE-2021-42553 | STM32 USB Host Library buffer overflow | 9.8NVD v3.1 | 1.1% | 2022-10-21 | Fix |
| CVE-2021-33231 | Easyvista Service Manager New equipment page cross-site scripting | 5.4v3.1 | 0.6% | 2022-10-20 | |
| CVE-2021-3305 | feishu untrusted search path | 7.8v3.1 | 0.3% | 2022-10-18 | |
| CVE-2021-46840 | Huawei HarmonyOS out-of-bounds read | 9.1v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2021-46839 | Huawei HarmonyOS lack of length check vulnerability in the HW_KEYMASTER module | 9.1v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2021-27406 | PerFact OpenVPN-Client config command handler vulnerability | 8.8v3.1 | 1.0% | 2022-10-14 | Fix |
| CVE-2021-22685 | Cassia Networks Access Controller path traversal | 7.5v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2021-0699 | Android TBD out-of-bounds write | 7.8v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2021-20030 | SonicWall GMS path traversal | 7.5v3.1 | 0.8% | 2022-10-13 | Fix |
| CVE-2021-36369 | Dropbear SSH improper authentication | 7.5v3.1 | 1.5% | 2022-10-12 | Fix |
| CVE-2021-36915 | Profile Builder WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2021-36913 | Redirection for Contact Form 7 WordPress plugin unauthenticated options Change and content injection | 7.5v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2021-36899 | Asset CleanUp: Page Speed Booster WordPress plugin reflected cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2021-36201 | CCURE observable response discrepancy | 4.3CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2021-0951 | Android TBD arbitrary code execution | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2021-0696 | Android TBD use-after-free | 7.0v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2021-44171 | Fortinet FortiOS OS command injection | 9.0CNA v3.1 | 1.5% | 2022-10-10 | Fix |
| CVE-2021-35226 | SolarWinds Network Configuration Manager hashed credential exposure | 6.5CNA v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2021-25044 | Cryptocurrency Pricing list and Ticker WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-10-10 | |
| CVE-2021-40166 | Revit use-after-free | 7.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2021-40165 | Revit out-of-bounds write | 7.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2021-40164 | Revit out-of-bounds write | 7.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2021-40163 | Revit out-of-bounds write | 7.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2021-40162 | Revit out-of-bounds read | 7.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2021-40556 | ASUS RT-AX56U httpd service stack-based buffer overflow | 8.8v3.1 | 1.4% | 2022-10-06 | Fix |
| CVE-2021-36865 | Quiz And Survey Master WordPress plugin insecure direct object references (IDOR) | 4.3v3.1 | 0.4% | 2022-09-30 | Fix |
| CVE-2021-36855 | Booking Ultra Pro WordPress plugin cross-site scripting (XSS) via cross-site request forgery (CSRF) | 6.1v3.1 | 0.2% | 2022-09-30 | Fix |
| CVE-2021-36854 | Booking Ultra Pro WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-09-30 | Fix |
| CVE-2021-36839 | Social Media Follow Buttons Bar WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-09-30 | Fix |
| CVE-2021-36830 | Comment Guestbook WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-09-30 | |
| CVE-2021-33354 | HTMLy path traversal | 8.1v3.1 | 1.4% | 2022-09-30 | |
| CVE-2021-45843 | Glfusion cross-site scripting | 6.1v3.1 | 0.7% | 2022-09-29 | |
| CVE-2021-45790 | metersphere unrestricted file upload | 9.8v3.1 | 1.9% | 2022-09-29 | |
| CVE-2021-45789 | metersphere arbitrary file read | 6.5v3.1 | 0.9% | 2022-09-29 | |
| CVE-2021-45788 | metersphere SQL injection | 8.8v3.1 | 3.0% | 2022-09-29 | |
| CVE-2021-43403 | FusionPBX log viewer vulnerability | 6.5v3.1 | 0.9% | 2022-09-29 | |
| CVE-2021-42049 | MediaWiki Translate extension vulnerability | 6.5v3.1 | 1.0% | 2022-09-29 | Fix |
| CVE-2021-42048 | mediawiki cross-site scripting | 4.8v3.1 | 0.7% | 2022-09-29 | Fix |
| CVE-2021-42047 | mediawiki cross-site scripting | 5.4v3.1 | 0.7% | 2022-09-29 | Fix |
| CVE-2021-42046 | mediawiki cross-site scripting | 6.1v3.1 | 0.9% | 2022-09-29 | Fix |
| CVE-2021-42045 | mediawiki cross-site scripting | 5.4v3.1 | 0.7% | 2022-09-29 | Fix |
| CVE-2021-40695 | Moodle exposure of sensitive information to an unauthorized actor | 4.3NVD v3.1 | 0.9% | 2022-09-29 | Fix |
| CVE-2021-40694 | Moodle improper encoding or escaping of output | 4.9NVD v3.1 | 0.9% | 2022-09-29 | Fix |
| CVE-2021-40693 | moodle authentication bypass | 6.5NVD v3.1 | 0.8% | 2022-09-29 | Fix |
| CVE-2021-40692 | Moodle incorrect authorization | 4.3NVD v3.1 | 0.6% | 2022-09-29 | Fix |
| CVE-2021-40691 | Moodle improper authentication | 4.3NVD v3.1 | 0.7% | 2022-09-29 | Fix |
| CVE-2021-43980 | Apache Tomcat: Information disclosure | 3.7v3.1 | 1.9% | 2022-09-28 | Fix |
| CVE-2021-41434 | oretnom23 Expense Management System version stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-09-28 | |
| CVE-2021-41433 | Resumes Management And Job Application Website Application version SQL injection | 9.8v3.1 | 1.0% | 2022-09-27 | |
| CVE-2021-27862 | IEEE 802.2 improper length parameter handling | 4.7v3.1 | 0.6% | 2022-09-27 | Fix |
| CVE-2021-27861 | IEEE 802.2 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths | 4.7v3.1 | 0.6% | 2022-09-27 | Fix |
| CVE-2021-27854 | IETF P802.1Q authentication bypass by spoofing | 4.7v3.1 | 0.7% | 2022-09-27 | Fix |
| CVE-2021-27853 | IEEE 802.2 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers | 4.7v3.1 | 0.7% | 2022-09-27 | Fix |
| CVE-2021-41437 | ASUS RT-AX88U web application HTTP response splitting | 6.5v3.1 | 1.0% | 2022-09-26 | Fix |
| CVE-2021-28052 | Hitachi Content Platform information disclosure | 7.5CNA v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2021-24890 | scripts-organizer WordPress plugin cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2021-45035 | Velneo vClient improper authentication | 5.9v3.1 | 0.4% | 2022-09-23 | Fix |
| CVE-2021-41803 | HashiCorp Consul missing authorization | 7.1v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2021-3782 | wayland integer overflow | 6.6NVD v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2021-39190 | SCCM plugin for GLPI vulnerable to exposure of sensitive information to an unauthorized actor | 5.3CNA v3.1 | 0.6% | 2022-09-22 | Fix |
| CVE-2021-27774 | An injection vulnerability affects HCL Digital Experience | 3.1CNA v3.1 | 0.4% | 2022-09-22 | Fix |
| CVE-2021-43310 | keylime authentication bypass by spoofing | 9.8NVD v3.1 | 2.2% | 2022-09-21 | |
| CVE-2021-46835 | WS7200-10 authentication bypass by replay | 4.3v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2021-46834 | Huawei JAD-AL50 insecure permissions | 5.5v3.1 | 0.2% | 2022-09-20 | Fix |
| CVE-2021-33081 | Intel(R) SSD DC firmware for some protection mechanism failure | 7.9CNA v3.1 | 0.2% | 2022-09-20 | Fix |
| CVE-2021-33079 | Intel(R) SSD DC firmware for some protection mechanism failure | 4.1CNA v3.1 | 0.2% | 2022-09-20 | Fix |
| CVE-2021-33076 | Intel(R) SSD DC firmware for some improper authentication | 5.3CNA v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2021-46836 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2021-42949 | digitaldruid HotelDruid improper authentication | 9.8v3.1 | 7.1% | 2022-09-16 | Fix |
| CVE-2021-42948 | digitaldruid HotelDruid cleartext transmission of sensitive information | 3.7v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2021-42597 | Storage Unit Rental Management System Sourcecodester cross-site scripting | 5.4v3.1 | 0.4% | 2022-09-16 | |
| CVE-2021-41731 | NEWS247 News Magazine Project NEWS247 News Magazine (cms) cross-site scripting | 4.8v3.1 | 0.8% | 2022-09-16 | |
| CVE-2021-40024 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2021-40023 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2021-40019 | Huawei EMUI out-of-bounds heap read vulnerability in the HW_KEYMASTER module | 9.1v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2021-40017 | HarmonyOS vunerability of not verifying the validity of the key's format in the HW_KEYMASTER module | 9.8v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2021-44076 | CrushFTP cross-site scripting | 4.8v3.1 | 0.6% | 2022-09-15 | |
| CVE-2021-38924 | IBM Maximo Asset Management information disclosure through error messages | 5.3CNA v3.0 | 1.0% | 2022-09-14 | Fix |
| CVE-2021-36568 | Moodle cross-site scripting | 5.4v3.1 | 0.8% | 2022-09-13 | Fix |
| CVE-2021-0943 | Android TBD out-of-bounds write | 7.8v3.1 | 0.1% | 2022-09-13 | Fix |
| CVE-2021-0942 | Android out-of-bounds read | 9.8v3.1 | 0.3% | 2022-09-13 | Fix |
| CVE-2021-0871 | Android integer overflow | 7.8v3.1 | 0.1% | 2022-09-13 | Fix |
| CVE-2021-0697 | Android rgxtransfer.c privilege escalation | 7.0v3.1 | 0.1% | 2022-09-13 | Fix |
| CVE-2021-44426 | AnyDesk unrestricted file upload | 8.8v3.1 | 1.0% | 2022-09-12 | Fix |
| CVE-2021-44425 | AnyDesk unauthorized access | 6.5v3.1 | 0.6% | 2022-09-12 | Fix |
| CVE-2021-44835 | Aivhub Active Intelligence Visualization SQL injection | 9.8v3.1 | 1.0% | 2022-09-09 | |
| CVE-2021-40648 | MAN2HTML improper input validation | 5.5v3.1 | 0.3% | 2022-09-09 | |
| CVE-2021-40647 | MAN2HTML out-of-bounds write | 5.5v3.1 | 0.3% | 2022-09-09 | Fix |
| CVE-2021-37819 | Pdftk-java infinite loop | 7.5v3.1 | 0.7% | 2022-09-09 | Fix |
| CVE-2021-34236 | NETGEAR R8000 buffer overflow | 9.8v3.1 | 1.2% | 2022-09-08 | |
| CVE-2021-36783 | Rancher: Failure to properly sanitize credentials in cluster template answers | 9.9CNA v3.1 | 0.8% | 2022-09-07 | Fix |
| CVE-2021-36782 | SUSE Rancher cleartext storage of sensitive information | 9.9CNA v3.1 | 4.2% | 2022-09-07 | MetasploitFix |
| CVE-2021-43565 | X/crypto/SSH vulnerable to panic via malformed packets | 7.5v3.1 | 1.0% | 2022-09-06 | Fix |
| CVE-2021-43080 | Fortinet FortiOS cross-site scripting | 4.6CNA v3.1 | 0.4% | 2022-09-06 | Fix |
| CVE-2021-43076 | Fortinet FortiADC improper privilege management | 6.3CNA v3.1 | 0.5% | 2022-09-06 | Fix |
| CVE-2021-36829 | Launcher: Coming Soon and Maintenance Mode WordPress plugin stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-09-06 | Fix |
| CVE-2021-28398 | OSGeo GeoNetwork OS command injection | 7.2v3.1 | 1.2% | 2022-09-05 | Fix |
| CVE-2021-44718 | wolfSSL infinite loop | 5.9v3.1 | 0.7% | 2022-09-02 | Fix |
| CVE-2021-35135 | Qualcomm Snapdragon null pointer dereference in QTEE | 6.2CNA v3.1 | 0.1% | 2022-09-02 | Fix |
| CVE-2021-35134 | Qualcomm Snapdragon incorrect calculation of buffer size in Boot | 8.4CNA v3.1 | 0.1% | 2022-09-02 | Fix |
| CVE-2021-35133 | Qualcomm Snapdragon use-after-free in Automotive OS | 6.7CNA v3.1 | 0.1% | 2022-09-02 | Fix |
| CVE-2021-35132 | Qualcomm Snapdragon use of out-of-range pointer offset in DSP service | 8.4CNA v3.1 | 0.1% | 2022-09-02 | Fix |
| CVE-2021-35122 | Qualcomm Snapdragon improper input validation in Core | 9.3CNA v3.1 | 0.1% | 2022-09-02 | Fix |
| CVE-2021-35113 | Qualcomm Snapdragon Cryptographic issues in Key Provisioning | 7.3CNA v3.1 | 0.1% | 2022-09-02 | Fix |
| CVE-2021-35109 | Qualcomm Snapdragon improper input validation in Core | 6.8CNA v3.1 | 0.2% | 2022-09-02 | Fix |
| CVE-2021-35108 | Qualcomm Snapdragon improper input validation in Core | 6.8CNA v3.1 | 0.2% | 2022-09-02 | Fix |
| CVE-2021-35097 | Qualcomm Snapdragon Cryptographic issues in Content Protection | 7.3CNA v3.1 | 0.2% | 2022-09-02 | Fix |
| CVE-2021-27693 | PublicCMS server-side request forgery | 9.8v3.1 | 1.0% | 2022-09-02 | |
| CVE-2021-25657 | Avaya IP Office privilege escalation | 7.8CNA v3.1 | 0.3% | 2022-09-02 | Fix |
| CVE-2021-45027 | Softlinkint Oliver V5 Library An arbitrary file read | 7.5v3.1 | 1.9% | 2022-09-01 | NucleiFix |
| CVE-2021-39045 | IBM Cognos Analytics insufficiently protected credentials | 6.2CNA v3.0 | 0.2% | 2022-09-01 | Fix |
| CVE-2021-39009 | IBM Cognos Analytics cleartext storage of sensitive information | 4.4CNA v3.0 | 0.2% | 2022-09-01 | Fix |
| CVE-2021-29823 | IBM Cognos Analytics cross-site request forgery | 4.3CNA v3.0 | 0.5% | 2022-09-01 | Fix |
| CVE-2021-20468 | IBM Cognos Analytics cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2022-09-01 | Fix |
| CVE-2021-3826 | gcc Heap/ stack-based buffer overflow | 6.5NVD v3.1 | 1.4% | 2022-09-01 | Fix |
| CVE-2021-46837 | Certified Asterisk null pointer dereference | 6.5v3.1 | 2.2% | 2022-08-30 | Fix |
| CVE-2021-29864 | IBM Security Identity Manager open redirect | 6.8CNA v3.0 | 0.5% | 2022-08-30 | Fix |
| CVE-2021-41785 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 2.0% | 2022-08-29 | Fix |
| CVE-2021-41784 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 1.1% | 2022-08-29 | Exploit codeFix |
| CVE-2021-41783 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 2.0% | 2022-08-29 | Fix |
| CVE-2021-41782 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 2.0% | 2022-08-29 | Fix |
| CVE-2021-41781 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 2.0% | 2022-08-29 | Fix |
| CVE-2021-41780 | Foxit PhantomPDF use-after-free | 7.8v3.1 | 0.8% | 2022-08-29 | Fix |
| CVE-2021-40326 | Foxit PhantomPDF improper signature verification | 5.5v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2021-38934 | IBM Engineering Test Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-08-29 | Fix |
| CVE-2021-40285 | HTMLy path traversal | 8.1v3.1 | 0.9% | 2022-08-26 | |
| CVE-2021-39394 | Mm-wiki cross-site request forgery | 6.5v3.1 | 0.3% | 2022-08-26 | |
| CVE-2021-39393 | Mm-wiki cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-26 | |
| CVE-2021-35939 | RPM file permission checks vulnerability | 6.7v3.1 | 0.5% | 2022-08-26 | Fix |
| CVE-2021-32570 | Ericsson NetworkManager sensitive information in log files | 4.9v3.1 | 0.8% | 2022-08-26 | |
| CVE-2021-20260 | foreman information disclosure | 7.8v3.1 | 0.2% | 2022-08-26 | |
| CVE-2021-4216 | mupdf divide by zero | 5.5NVD v3.1 | 0.2% | 2022-08-26 | Fix |
| CVE-2021-3864 | Linux kernel SUID dumpable flag handling privilege escalation | 7.0NVD v3.1 | 0.8% | 2022-08-26 | |
| CVE-2021-3859 | Undertow vulnerable to denial of service (DoS) attacks | 7.5v3.1 | 1.6% | 2022-08-26 | Fix |
| CVE-2021-3856 | Keycloak has files or directories accessible to external parties | 4.3v3.1 | 1.1% | 2022-08-26 | Fix |
| CVE-2021-3754 | Keycloak's improper input validation allows using email as username | 5.3v3.1 | 2.4% | 2022-08-26 | Exploit codeFix |
| CVE-2021-3735 | QEMU AHCI controller device deadlock | 4.4NVD v3.1 | 0.2% | 2022-08-26 | Fix |
| CVE-2021-3703 | It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA for Serverless 1.16.0 and Serverless client kn 1.16.0. These have been fixed with Serverless 1.17.0. | 7.5NVD v3.1 | 0.8% | 2022-08-26 | Fix |
| CVE-2021-3688 | Red Hat JBCS HTTP Server information disclosure | 4.8v3.1 | 0.5% | 2022-08-26 | Fix |
| CVE-2021-3669 | kernel resource exhaustion | 5.5NVD v3.1 | 0.3% | 2022-08-26 | Fix |
| CVE-2021-3644 | wildfly-core information disclosure | 3.3v3.1 | 0.9% | 2022-08-26 | Fix |
| CVE-2021-3632 | keycloak improper authentication | 7.5v3.1 | 1.1% | 2022-08-26 | Fix |
| CVE-2021-3585 | openstack-tripleo-heat-templates information disclosure | 5.5NVD v3.1 | 0.3% | 2022-08-26 | Fix |
| CVE-2021-3574 | ImageMagick memory leak | 3.3NVD v3.1 | 0.5% | 2022-08-26 | Fix |
| CVE-2021-3563 | OpenStack Keystone incorrect authorization | 7.4NVD v3.1 | 1.7% | 2022-08-26 | Fix |
| CVE-2021-3427 | Deluge Web-UI vulnerable to XSS through a crafted torrent file | 6.1NVD v3.1 | 0.9% | 2022-08-26 | Fix |
| CVE-2021-3414 | Satellite improper preservation of permissions | 8.1v3.1 | 0.6% | 2022-08-26 | |
| CVE-2021-3020 | ClusterLabs Hawk improper privilege management | 8.8v3.1 | 1.2% | 2022-08-26 | Fix |
| CVE-2021-43767 | Odyssey insufficiently protected credentials | 5.9NVD v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2021-43766 | Odyssey SQL injection | 8.1NVD v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2021-43329 | Mumara Classic license_update.php SQL injection | 9.8v3.1 | 2.9% | 2022-08-25 | |
| CVE-2021-42523 | colord There are two information disclosure | 7.5NVD v3.1 | 0.9% | 2022-08-25 | Fix |
| CVE-2021-42522 | GNOME anjuta There is a information disclosure | 7.5NVD v3.1 | 0.8% | 2022-08-25 | |
| CVE-2021-42521 | VTK null pointer dereference | 7.5NVD v3.1 | 1.3% | 2022-08-25 | Fix |
| CVE-2021-35938 | RPM file permission handling vulnerability | 6.7v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2021-35937 | RPM file permission checks race condition | 6.4v3.1 | 0.3% | 2022-08-25 | Fix |
| CVE-2021-33844 | SoX (Sound eXchange) divide by zero | 5.5NVD v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2021-25642 | Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler | 8.8v3.1 | 2.2% | 2022-08-25 | Exploit codeFix |
| CVE-2021-23210 | SoX (Sound eXchange) divide by zero | 5.5NVD v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2021-23172 | SoX (Sound eXchange) buffer overflow | 5.5NVD v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2021-23159 | SoX (Sound eXchange) buffer overflow | 5.5NVD v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2021-20224 | ImageMagick An integer overflow | 5.5NVD v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2021-4112 | ansible-tower files accessible to external parties | 8.8v3.1 | 0.2% | 2022-08-25 | Fix |
| CVE-2021-4022 | rizin ELF HPPA binary analysis denial of service | 5.5NVD v3.1 | 0.3% | 2022-08-25 | Fix |
| CVE-2021-3979 | ceph weak cryptographic algorithm | 6.5v3.1 | 0.6% | 2022-08-25 | Fix |
| CVE-2021-3929 | QEMU NVMe controller emulation use-after-free | 8.2NVD v3.1 | 0.7% | 2022-08-25 | Exploit codeFix |
| CVE-2021-3914 | smallrye-health SmallRye Health UI cross-site scripting | 6.1v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2021-43309 | ReDoS in uri-template-lite URI.expand function | 7.5NVD v3.1 | 1.0% | 2022-08-24 | Fix |
| CVE-2021-39815 | Android use-after-free | 9.8v3.1 | 0.4% | 2022-08-24 | Fix |
| CVE-2021-4218 | kernel improper initialization | 5.5NVD v3.1 | 0.3% | 2022-08-24 | |
| CVE-2021-4217 | unzip null pointer dereference | 3.3NVD v3.1 | 0.6% | 2022-08-24 | Fix |
| CVE-2021-4214 | libpng A heap-based buffer overflow | 5.5NVD v3.1 | 0.5% | 2022-08-24 | Fix |
| CVE-2021-4213 | JSS memory leak | 7.5v3.1 | 1.6% | 2022-08-24 | Fix |
| CVE-2021-4209 | gnutls A null pointer dereference | 6.5NVD v3.1 | 1.9% | 2022-08-24 | Fix |
| CVE-2021-4204 | kernel improper input validation | 7.1NVD v3.1 | 1.2% | 2022-08-24 | Exploit codeFix |
| CVE-2021-4189 | python unchecked return value | 5.3NVD v3.1 | 3.4% | 2022-08-24 | Fix |
| CVE-2021-4178 | kubernetes-client Fabric arbitrary code execution | 6.7NVD v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-4159 | kernel information disclosure through data queries | 4.4NVD v3.1 | 0.2% | 2022-08-24 | Fix |
| CVE-2021-4158 | QEMU ACPI code null pointer dereference | 6.0NVD v3.1 | 0.4% | 2022-08-24 | Fix |
| CVE-2021-4155 | kernel A information disclosure | 5.5NVD v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-4142 | candlepin insecure direct object reference | 5.5v3.1 | 0.2% | 2022-08-24 | Fix |
| CVE-2021-4125 | kube-reporting/hive improper input validation | 8.1NVD v3.1 | 1.5% | 2022-08-24 | Fix |
| CVE-2021-4122 | cryptsetup insufficient verification of data authenticity | 4.3NVD v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-4041 | ansible-runner vulnerable to shell command injection | 7.8v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-4040 | AMQ Broker org.Apache.activemq:artemis-core-client Vulnerable to out-of-bounds write | 5.3v3.1 | 3.1% | 2022-08-24 | Fix |
| CVE-2021-4037 | Linux kernel XFS inode ownership vulnerability | 7.8NVD v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-4028 | kernel use-after-free | 7.8NVD v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-3999 | glibc off-by-one error | 7.8NVD v3.1 | 0.8% | 2022-08-24 | Fix |
| CVE-2021-3998 | glibc out-of-bounds read | 7.5NVD v3.1 | 2.2% | 2022-08-24 | Fix |
| CVE-2021-0947 | Android missing resource initialization | 7.5v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-0946 | Android missing resource initialization | 7.5v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-0891 | Android improper privilege management | 7.5v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2021-0887 | Android PVRSRVBridgeHeapCfgHeapConfigName information disclosure | 5.5v3.1 | 0.1% | 2022-08-24 | Fix |
| CVE-2021-0698 | Android PVRSRVBridgeHeapCfgHeapDetails information disclosure | 5.5v3.1 | 0.1% | 2022-08-24 | Fix |
| CVE-2021-42627 | D-Link DIR-615 wan.htm configuration page missing authentication | 9.8v3.1 | 63.1% | 2022-08-23 | Nuclei |
| CVE-2021-42232 | TP-Link Archer A7 OS command injection | 9.8v3.1 | 4.2% | 2022-08-23 | |
| CVE-2021-31566 | libarchive link following | 7.8NVD v3.1 | 0.4% | 2022-08-23 | Fix |
| CVE-2021-28861 | Python open redirect | 7.4NVD v3.1 | 2.7% | 2022-08-23 | Fix |
| CVE-2021-23177 | libarchive link following | 7.8NVD v3.1 | 0.4% | 2022-08-23 | Fix |
| CVE-2021-20316 | samba race condition | 6.8NVD v3.1 | 1.0% | 2022-08-23 | Fix |
| CVE-2021-20304 | OpenEXR integer overflow | 7.5NVD v3.1 | 1.9% | 2022-08-23 | Fix |
| CVE-2021-20298 | OpenEXR resource exhaustion | 7.5NVD v3.1 | 1.5% | 2022-08-23 | Fix |
| CVE-2021-3997 | systemd uncontrolled recursion | 5.5NVD v3.1 | 1.7% | 2022-08-23 | Fix |
| CVE-2021-3996 | util-linux libmount library logic flaw | 5.5NVD v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2021-3995 | util-linux libmount library logic flaw | 5.5NVD v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2021-3975 | libvirt A use-after-free | 6.5v3.1 | 1.5% | 2022-08-23 | Exploit codeFix |
| CVE-2021-3917 | coreos-installer writes world-readable Ignition config to installed system | 5.5NVD v3.1 | 0.2% | 2022-08-23 | Fix |
| CVE-2021-3905 | openvswitch (ovs) memory leak | 7.5NVD v3.1 | 2.0% | 2022-08-23 | Fix |
| CVE-2021-3839 | dpdk out-of-bounds read | 7.5NVD v3.1 | 1.6% | 2022-08-23 | Fix |
| CVE-2021-3827 | keycloak ECP SAML binding bypasses authentication flows | 6.8v3.1 | 1.1% | 2022-08-23 | Fix |
| CVE-2021-3800 | Glib information disclosure | 5.5NVD v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2021-3798 | opencryptoki information disclosure | 5.5NVD v3.1 | 0.3% | 2022-08-23 | Fix |
| CVE-2021-3764 | Linux kernel A memory leak | 5.5NVD v3.1 | 0.3% | 2022-08-23 | Fix |
| CVE-2021-3763 | AMQ Broker incorrect authorization | 4.3v3.1 | 0.7% | 2022-08-23 | Fix |
| CVE-2021-3759 | kernel denial of service | 5.5NVD v3.1 | 0.4% | 2022-08-23 | Fix |
| CVE-2021-3736 | Linux kernel VFIO mdev mbochs driver memory leak | 5.5NVD v3.1 | 0.2% | 2022-08-23 | Fix |
| CVE-2021-3714 | kernel information disclosure | 5.9NVD v3.1 | 1.5% | 2022-08-23 | |
| CVE-2021-3702 | ansible-runner vulnerable to race condition | 6.3v3.1 | 0.2% | 2022-08-23 | Fix |
| CVE-2021-3701 | ansible-runner has default temporary files written to world R/W locations | 6.6v3.1 | 0.3% | 2022-08-23 | Fix |
| CVE-2021-3690 | Undertow vulnerable to memory exhaustion due to buffer leak | 7.5v3.1 | 1.7% | 2022-08-23 | Fix |
| CVE-2021-3670 | samba resource exhaustion | 6.5NVD v3.1 | 2.2% | 2022-08-23 | Fix |
| CVE-2021-37289 | Planex Mzk-dp150n administration interface insecure permissions | 7.2v3.1 | 1.7% | 2022-08-22 | Fix |
| CVE-2021-36857 | Testimonial Builder WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2021-36852 | WP Hotel Booking WordPress plugin cross-site request forgery (CSRF) | 8.0v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2021-36847 | Webba Booking WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2021-29891 | IBM Power 9 AC922 unrestricted file upload | 4.5CNA v3.0 | 0.5% | 2022-08-22 | Fix |
| CVE-2021-24912 | Transposh WordPress Translation plugin CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2021-24911 | Transposh WordPress Translation plugin stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2022-08-22 | Fix |
| CVE-2021-24910 | Transposh WordPress Translation plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.6% | 2022-08-22 | NucleiFix |
| CVE-2021-3659 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2021-3639 | mod_auth_mellon open redirect | 6.1NVD v3.1 | 1.0% | 2022-08-22 | Fix |
| CVE-2021-3590 | foreman information disclosure | 8.8v3.1 | 0.7% | 2022-08-22 | |
| CVE-2021-3586 | servicemesh-operator insecure default initialization | 9.8NVD v3.1 | 1.0% | 2022-08-22 | Fix |
| CVE-2021-3521 | RPM improper signature verification | 4.7v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2021-3513 | Incorrect implementation of lockout feature in Keycloak | 7.5v3.1 | 0.8% | 2022-08-22 | Fix |
| CVE-2021-3481 | qt out-of-bounds read | 7.1NVD v3.1 | 0.5% | 2022-08-22 | Fix |
| CVE-2021-3442 | Red Hat OpenShift API Management cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-22 | Fix |
| CVE-2021-44545 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper input validation | 6.5v3.1 | 0.5% | 2022-08-18 | Fix |
| CVE-2021-44470 | Intel(R) Connect M Android application incorrect default permissions | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-37409 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products incorrect authorization | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-33847 | Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products privilege escalation | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-33128 | Intel(R) E810 Ethernet Controllers firmware for some improper access control | 4.4v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-33126 | Intel(R) 700 and 722 Series Ethernet Controllers and Adapters improper access control | 4.4v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-33060 | Intel(R) Processors BIOS firmware for some out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2021-32862 | nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths | 7.5CNA v3.1 | 1.4% | 2022-08-18 | Fix |
| CVE-2021-30071 | hestiacp Control Panel /admin/list_key.html cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-18 | |
| CVE-2021-30070 | HestiaCP package update feature vulnerability | 7.5v3.1 | 0.7% | 2022-08-18 | |
| CVE-2021-26950 | Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products out-of-bounds read | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-26257 | Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products denial of service | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-26254 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products out-of-bounds read | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-23223 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper initialization | 7.8v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2021-23188 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper access control | 3.3v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-23179 | Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products out-of-bounds read | 7.1v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2021-23168 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products out-of-bounds read | 6.5v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2021-45454 | Amperecomputing Ampere Altra information disclosure | 7.5v3.1 | 0.7% | 2022-08-17 | Fix |
| CVE-2021-26639 | WISA Smart Wing CMS download without integrity check | 7.5v3.1 | 0.5% | 2022-08-17 | Fix |
| CVE-2021-42052 | Ipesa E-Flow path traversal | 7.5v3.1 | 1.1% | 2022-08-16 | |
| CVE-2021-39087 | IBM Sterling B2B Integrator incorrect default permissions | 4.3CNA v3.0 | 0.6% | 2022-08-16 | Fix |
| CVE-2021-39086 | IBM Sterling File Gateway information disclosure through error messages | 4.3CNA v3.0 | 0.9% | 2022-08-16 | Fix |
| CVE-2021-39085 | IBM Sterling B2B Integrator SQL injection | 6.3CNA v3.0 | 0.9% | 2022-08-16 | Fix |
| CVE-2021-39035 | IBM Sterling B2B Integrator cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-08-16 | Fix |
| CVE-2021-30490 | Power-software-download ViewPower incorrect default permissions | 7.8v3.1 | 0.3% | 2022-08-16 | Fix |
| CVE-2021-44720 | Pulse Secure Pulse Connect Secure hard-coded credentials | 7.2v3.1 | 2.6% | 2022-08-12 | Fix |
| CVE-2021-42751 | ThingsBoard Rule Engine cross-site scripting | 4.8v3.1 | 3.1% | 2022-08-12 | Exploit code |
| CVE-2021-42750 | ThingsBoard Rule Engine cross-site scripting | 4.8v3.1 | 3.1% | 2022-08-12 | Exploit code |
| CVE-2021-29118 | Esri ArcReader PMF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 0.3% | 2022-08-12 | Fix |
| CVE-2021-29117 | ArcReader use-after-free | 7.8CNA v3.0 | 0.4% | 2022-08-12 | Fix |
| CVE-2021-29112 | Esri ArcReader PMF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 0.3% | 2022-08-12 | Fix |
| CVE-2021-22289 | B&R Industrial Automation Automation Studio RCE through Project upload from Target | 8.3CNA v3.1 | 0.8% | 2022-08-11 | |
| CVE-2021-0975 | Android USB Manager information disclosure | 5.5v3.1 | 0.1% | 2022-08-11 | Fix |
| CVE-2021-0735 | Android PackageManager information disclosure | 5.5v3.1 | 0.1% | 2022-08-11 | Fix |
| CVE-2021-0734 | Android settings information disclosure | 5.5v3.1 | 0.1% | 2022-08-11 | Fix |
| CVE-2021-46778 | AMD Processors observable discrepancy | 5.6v3.1 | 0.2% | 2022-08-10 | Fix |
| CVE-2021-46304 | Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C missing authentication | 7.5v3.1 | 0.7% | 2022-08-10 | Fix |
| CVE-2021-40040 | HarmonyOS vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module | 7.5v3.1 | 0.5% | 2022-08-10 | Fix |
| CVE-2021-40034 | Huawei HarmonyOS memory overwriting vulnerability caused by addition overflow in the video framework | 7.5v3.1 | 0.6% | 2022-08-10 | Fix |
| CVE-2021-40030 | Vulnerability of defects being introduced in the design process in the My Huawei app | 7.5v3.1 | 0.5% | 2022-08-10 | Fix |
| CVE-2021-39696 | Android Task.java privilege escalation | 7.8v3.1 | 0.2% | 2022-08-10 | Exploit codeFix |
| CVE-2021-37150 | Apache Traffic Server protocol vs scheme mismatch | 7.5v3.1 | 2.1% | 2022-08-10 | Fix |
| CVE-2021-33646 | libtar tar header reader memory leak | 7.5NVD v3.1 | 1.9% | 2022-08-10 | Fix |
| CVE-2021-33645 | libtar tar header reader memory leak | 7.5NVD v3.1 | 1.9% | 2022-08-10 | Fix |
| CVE-2021-33644 | libtar out-of-bounds read | 8.1NVD v3.1 | 1.5% | 2022-08-10 | Fix |
| CVE-2021-33643 | libtar out-of-bounds read | 9.1NVD v3.1 | 1.8% | 2022-08-10 | Fix |
| CVE-2021-41615 | Embedthis GoAhead insufficient entropy | 9.8v3.1 | 1.4% | 2022-08-08 | Fix |
| CVE-2021-46681 | Artica PFMS Pandora FMS vulnerability XSS in module mass operation name field | 6.1v3.1 | 0.4% | 2022-08-05 | Fix |
| CVE-2021-46680 | Artica PFMS Pandora FMS vulnerability XSS in module form name field | 6.1v3.1 | 0.4% | 2022-08-05 | Fix |
| CVE-2021-46679 | Artica PFMS Pandora FMS vulnerability XSS in service elements | 6.1v3.1 | 0.4% | 2022-08-05 | Fix |
| CVE-2021-46678 | Artica PFMS Pandora FMS vulnerability XSS in service form name field | 6.1v3.1 | 0.4% | 2022-08-05 | Fix |
| CVE-2021-46677 | Artica PFMS Pandora FMS vulnerability XSS in Event filter name field | 6.1v3.1 | 0.4% | 2022-08-05 | Fix |
| CVE-2021-46676 | Artica PFMS Pandora FMS vulnerability XSS in Transaction Map name field | 6.1v3.1 | 0.4% | 2022-08-05 | Fix |
| CVE-2021-36861 | Rich Reviews by Starfish WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-08-05 | Fix |
| CVE-2021-28511 | Arista EOS NAT and security ACL improper access control | 5.8CNA v3.1 | 0.6% | 2022-08-05 | |
| CVE-2021-27798 | Privileged directory transversal.in Brocade Fabric OS and.x | 5.5v3.1 | 0.2% | 2022-08-05 | Fix |
| CVE-2021-32771 | Buffer overflow in Contiki-NG | 8.1CNA v3.1 | 1.3% | 2022-08-04 | Fix |
| CVE-2021-23385 | Flask-Security open redirect | 6.1v3.1 | 1.1% | 2022-08-02 | Fix |
| CVE-2021-27785 | HCL Commerce could allow a local attacker to obtain sensitive personal information | 3.9CNA v3.1 | 0.2% | 2022-07-30 | Fix |
| CVE-2021-41556 | Squirrel-lang Squirrel out-of-bounds read | 10.0v3.1 | 2.7% | 2022-07-28 | Fix |
| CVE-2021-39088 | IBM QRadar SIEM local privilege escalation | 7.4CNA v3.0 | 0.2% | 2022-07-28 | Fix |
| CVE-2021-33371 | Kabir-m-alhasan Student Management System /nav_bar_action.php stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-28 | |
| CVE-2021-22650 | Ovarro TBox relative path traversal | 9.8v3.1 | 1.3% | 2022-07-28 | Fix |
| CVE-2021-22648 | Ovarro TBox incorrect permission assignment for critical resource | 9.8v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2021-22646 | Ovarro TBox code injection | 9.8v3.1 | 1.3% | 2022-07-28 | Fix |
| CVE-2021-22644 | Ovarro TBox use of hard-coded cryptographic key | 9.8v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2021-22642 | Ovarro TBox uncontrolled resource consumption | 7.5v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2021-22640 | Ovarro TBox insufficiently protected credentials | 9.8v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2021-46830 | Helpsystems Goanywhere Managed File Transfer path traversal | 6.5v3.1 | 1.0% | 2022-07-27 | Fix |
| CVE-2021-42537 | VISAM VBASE Editor Improper Restriction of XML | 7.5v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2021-42535 | VISAM VBASE Editor cross-site scripting | 6.1v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2021-38417 | VISAM VBASE Editor improper access control | 7.5v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2021-38410 | AVEVA PCS Portal uncontrolled search path element | 7.8v3.1 | 0.2% | 2022-07-27 | Fix |
| CVE-2021-43959 | Atlassian Jira Service Management Server server-side request forgery | 5.7v3.1 | 0.7% | 2022-07-26 | Fix |
| CVE-2021-40180 | Tencent WeChat information disclosure | 7.5v3.1 | 1.3% | 2022-07-26 | |
| CVE-2021-33468 | Tortall Yasm use-after-free | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33467 | Tortall Yasm use-after-free | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33466 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33465 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33464 | Tortall Yasm out-of-bounds write | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33463 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33462 | Tortall Yasm use-after-free | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33461 | Tortall Yasm use-after-free | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33460 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33459 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33458 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33457 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33456 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33455 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33454 | Tortall Yasm null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33453 | Long Range ZIP use-after-free | 7.8v3.1 | 0.4% | 2022-07-26 | |
| CVE-2021-33452 | NASM Netwide Assembler memory leak | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33451 | Long Range ZIP memory leak | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33450 | NASM Netwide Assembler memory leak | 5.5v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2021-33449 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33448 | Cesanta mJS out-of-bounds write | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33447 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33446 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33445 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33444 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33443 | Cesanta mJS out-of-bounds write | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33442 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33441 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33440 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33439 | Cesanta mJS integer overflow | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33438 | Cesanta mJS out-of-bounds write | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33437 | Cesanta mJS memory leak | 5.5v3.1 | 0.3% | 2022-07-26 | |
| CVE-2021-33057 | Tencent Qq missing authorization | 7.5v3.1 | 1.3% | 2022-07-26 | |
| CVE-2021-40336 | HTTP response splitting in Hitachi Energy’s MSM Product | 5.0CNA v3.1 | 0.5% | 2022-07-25 | Fix |
| CVE-2021-40335 | Cross-site request forgery (CSRF) in Hitachi Energy’s MSM Product | 5.0CNA v3.1 | 0.2% | 2022-07-25 | Fix |
| CVE-2021-23451 | otp-generator insecurely generates random one-time passwords | 9.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2021-23397 | @ianwalter/merge prototype pollution | 9.8v3.1 | 0.8% | 2022-07-25 | |
| CVE-2021-23373 | All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality. | 9.8v3.1 | 1.1% | 2022-07-25 | |
| CVE-2021-46829 | GNOME Gdk-Pixbuf integer overflow | 7.8v3.1 | 0.8% | 2022-07-24 | Fix |
| CVE-2021-36200 | Johnson Controls Metasys web API missing authentication | 5.3CNA v3.1 | 0.7% | 2022-07-22 | Fix |
| CVE-2021-46828 | libtirpc improper exception handling | 7.5NVD v3.1 | 3.2% | 2022-07-20 | Fix |
| CVE-2021-38936 | IBM QRadar SIEM information disclosure | 4.9CNA v3.0 | 0.8% | 2022-07-20 | Fix |
| CVE-2021-36849 | Social Media Share Buttons WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-07-20 | Fix |
| CVE-2021-31858 | dnnsoftware DotNetNuke cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-20 | |
| CVE-2021-29755 | IBM QRadar SIEM improper certificate validation | 5.9CNA v3.0 | 0.5% | 2022-07-20 | Fix |
| CVE-2021-32504 | SICK FTMg missing authorization | 5.3v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2021-44954 | Qvis DVR privilege escalation | 7.8v3.1 | 0.3% | 2022-07-18 | |
| CVE-2021-44170 | Fortinet FortiProxy, FortiOS out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2022-07-18 | Fix |
| CVE-2021-42923 | Showmypc uncontrolled search path | 7.3v3.1 | 0.2% | 2022-07-18 | |
| CVE-2021-42755 | Fortinet FortiSwitch integer overflow | 4.3CNA v3.1 | 0.4% | 2022-07-18 | Fix |
| CVE-2021-41419 | Qvis DVR deserialization of untrusted data | 9.8v3.1 | 8.5% | 2022-07-18 | Nuclei |
| CVE-2021-41031 | Fortinet FortiClientWindows path traversal | 7.8CNA v3.1 | 0.5% | 2022-07-18 | Fix |
| CVE-2021-40874 | lemonldap-ng Lemonldap improper authentication | 9.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2021-38868 | IBM Engineering Requirements Quality Assistant On-Premises cross-site request forgery | 6.5CNA v3.0 | 0.4% | 2022-07-18 | Fix |
| CVE-2021-33656 | openEuler:kernel out-of-bounds write | 6.8NVD v3.1 | 0.6% | 2022-07-18 | Fix |
| CVE-2021-33655 | kernel out-of-bounds write | 6.7NVD v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2021-29799 | IBM Engineering Requirements Quality Assistant On-Premises information disclosure | 6.5CNA v3.0 | 0.9% | 2022-07-18 | Fix |
| CVE-2021-29790 | IBM Engineering Requirements Quality Assistant On-Premises cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-07-18 | Fix |
| CVE-2021-29788 | IBM Engineering Requirements Quality Assistant On-Premises cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-07-18 | Fix |
| CVE-2021-22131 | Fortinet FortiTokenAndroid improper certificate host validation | 6.4CNA v3.1 | 0.1% | 2022-07-18 | Fix |
| CVE-2021-46784 | squid-cache squid reachable assertion | 6.5v3.1 | 4.5% | 2022-07-17 | Fix |
| CVE-2021-40150 | Reolink E1 Zoom files accessible to external parties | 7.5v3.1 | 3.7% | 2022-07-17 | Nuclei |
| CVE-2021-40149 | Reolink E1 Zoom files accessible to external parties | 5.9v3.1 | 7.4% | 2022-07-17 | Nuclei |
| CVE-2021-24655 | WP User Manager WordPress plugin arbitrary user password reset to account Compromise | 7.5NVD v3.1 | 1.0% | 2022-07-17 | Fix |
| CVE-2021-36711 | Octobot mishandles Tentacles upload | 9.8v3.1 | 16.6% | 2022-07-16 | Exploit codeFix |
| CVE-2021-34538 | Apache Hive `CREATE` and `DROP` function operations do not check for necessary authorization | 7.5v3.1 | 1.6% | 2022-07-16 | Fix |
| CVE-2021-36461 | microweber An arbitrary file upload | 8.8v3.1 | 0.9% | 2022-07-15 | |
| CVE-2021-34987 | Parallels Desktop buffer overflow | 8.2v3.1 | 0.3% | 2022-07-15 | Fix |
| CVE-2021-34986 | Parallels Desktop time-of-check time-of-use race condition | 7.8v3.1 | 0.3% | 2022-07-15 | Fix |
| CVE-2021-45492 | Sage 300 incorrect permission assignment | 7.8v3.1 | 0.3% | 2022-07-14 | |
| CVE-2021-39028 | IBM Engineering Lifecycle Optimization Publishing HTTP header injection | 5.4CNA v3.0 | 0.5% | 2022-07-14 | Fix |
| CVE-2021-39019 | IBM Engineering Lifecycle Optimization Publishing information disclosure | 6.5CNA v3.0 | 0.8% | 2022-07-14 | Fix |
| CVE-2021-39018 | IBM Engineering Lifecycle Optimization Publishing information disclosure through error messages | 4.3CNA v3.0 | 0.7% | 2022-07-14 | Fix |
| CVE-2021-39017 | IBM Engineering Lifecycle Optimization Publishing arbitrary file upload | 5.7CNA v3.0 | 0.9% | 2022-07-14 | Fix |
| CVE-2021-39016 | IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722. | 4.3CNA v3.0 | 0.6% | 2022-07-14 | Fix |
| CVE-2021-39015 | IBM Engineering Lifecycle Optimization Publishing cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-07-14 | Fix |
| CVE-2021-26384 | AMD Ryzen™ Series out-of-bounds read | 7.8v3.1 | 0.2% | 2022-07-14 | Fix |
| CVE-2021-26382 | AMD Ryzen™ Series denial of service | 4.4v3.1 | 0.2% | 2022-07-14 | Fix |
| CVE-2021-4135 | kernel memory leak | 5.5NVD v3.1 | 0.2% | 2022-07-14 | Fix |
| CVE-2021-46827 | Sync Oxygen Publishing Engine cross-site scripting | 6.1v3.1 | 0.4% | 2022-07-13 | Fix |
| CVE-2021-46741 | Huawei HarmonyOS settings module vulnerability | 7.5v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2021-44222 | Siemens SIMATIC eaSie Core Package missing authentication | 9.1v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2021-44221 | Siemens SIMATIC eaSie Core Package denial of service | 7.5v3.1 | 1.4% | 2022-07-12 | Fix |
| CVE-2021-41396 | LIVE555 out-of-bounds write | 7.5v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2021-40016 | Huawei EMUI improper permission control vulnerability in the Bluetooth module | 6.5v3.1 | 0.3% | 2022-07-12 | Fix |
| CVE-2021-40013 | Huawei EMUI improper permission control vulnerability in the Bluetooth module | 6.5v3.1 | 0.3% | 2022-07-12 | Fix |
| CVE-2021-40012 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2021-39999 | eSE620X vESS There is a buffer overflow | 7.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2021-39041 | IBM QRadar SIEM denial of service | 3.7CNA v3.0 | 1.0% | 2022-07-12 | Fix |
| CVE-2021-38289 | Novastar Novaicare incorrect permission assignment | 8.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2021-36668 | Druva Insync Client Driva inSync injection | 7.8v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2021-36667 | Druva Insync Client command injection | 7.8v3.1 | 2.8% | 2022-07-12 | Fix |
| CVE-2021-36666 | Druva Insync Client untrusted search path | 7.8v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2021-36665 | Druva Insync Client deserialization of untrusted data | 7.8v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2021-41037 | The Eclipse Foundation Eclipse Equinox p2 inclusion of untrusted functionality | 10.0CNA v3.1 | 0.8% | 2022-07-08 | Fix |
| CVE-2021-46825 | Advance Secure Gateway and ProxySG HTTP request smuggling | 9.1NVD v3.1 | 1.6% | 2022-07-07 | Fix |
| CVE-2021-44791 | Apache Druid reflected XSS on certain HTTP endpoints | 6.1v3.1 | 2.1% | 2022-07-07 | Fix |
| CVE-2021-41042 | XML external entity Reference in Eclipse Lyo | 5.3v3.1 | 1.0% | 2022-07-07 | Fix |
| CVE-2021-35283 | Atoms183 Cms product_admin.php SQL injection | 9.8v3.1 | 1.0% | 2022-07-07 | |
| CVE-2021-31645 | Glftpd resource exhaustion | 7.5v3.1 | 1.9% | 2022-07-07 | |
| CVE-2021-29281 | GFI Archiver GFI Mail file upload | 9.8v3.1 | 2.5% | 2022-07-07 | |
| CVE-2021-46687 | JFrog Artifactory personal information exposure | 4.9CNA v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2021-45721 | JFrog Artifactory cross-site scripting | 6.1CNA v3.1 | 0.6% | 2022-07-06 | Fix |
| CVE-2021-37839 | Apache Superset improper access to dataset metadata information | 4.3v3.1 | 1.3% | 2022-07-06 | Fix |
| CVE-2021-31679 | Pescms Team cross-site request forgery | 6.5v3.1 | 0.5% | 2022-07-06 | |
| CVE-2021-31678 | Pescms Team cross-site request forgery | 6.5v3.1 | 0.5% | 2022-07-06 | |
| CVE-2021-31677 | Pescms Team cross-site request forgery | 6.5v3.1 | 0.6% | 2022-07-06 | |
| CVE-2021-31676 | Pescms Team reflected cross-site scripting | 6.1v3.1 | 0.9% | 2022-07-06 | |
| CVE-2021-23163 | JFrog Artifactory cross-site request forgery | 3.1CNA v3.1 | 0.4% | 2022-07-06 | Fix |
| CVE-2021-4234 | OpenVPN Access Server network amplification | 7.5v3.1 | 0.9% | 2022-07-06 | Fix |
| CVE-2021-3697 | grub2 out-of-bounds write | 7.0NVD v3.1 | 0.5% | 2022-07-06 | Fix |
| CVE-2021-3696 | grub2 out-of-bounds write | 4.5NVD v3.1 | 0.5% | 2022-07-06 | Fix |
| CVE-2021-3695 | grub2 out-of-bounds write | 4.5NVD v3.1 | 0.5% | 2022-07-06 | Fix |
| CVE-2021-44915 | Taogogo taoCMS SQL injection | 7.2v3.1 | 0.9% | 2022-07-05 | |
| CVE-2021-43702 | ASUS 4g-ac53u cross-site scripting | 9.0v3.1 | 0.9% | 2022-07-05 | Fix |
| CVE-2021-43116 | Alibaba nacos improper authentication | 8.8v3.1 | 7.2% | 2022-07-05 | Exploit codeFix |
| CVE-2021-25066 | Ninja Forms WordPress plugin Admin+ stored cross-site scripting via import | 4.8NVD v3.1 | 0.6% | 2022-07-04 | Fix |
| CVE-2021-25056 | Ninja Forms WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-04 | Fix |
| CVE-2021-37524 | FusionPBX cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-01 | Fix |
| CVE-2021-32428 | VIAVIWEB Ebook SQL injection | 9.8v3.1 | 1.2% | 2022-07-01 | |
| CVE-2021-41995 | PingID Mac Login vulnerable to pre-computed dictionary attacks | 7.7CNA v3.1 | 0.8% | 2022-06-30 | Fix |
| CVE-2021-41506 | Xiongmaitech Ahb7008t-mh-v2 improper authentication | 9.8v3.1 | 2.3% | 2022-06-30 | Fix |
| CVE-2021-40663 | Prototype pollution in Deep.assign | 9.8v3.1 | 1.7% | 2022-06-30 | Fix |
| CVE-2021-40643 | EyesOfNetwork remote code execution | 9.8v3.1 | 2.8% | 2022-06-30 | Fix |
| CVE-2021-38954 | IBM Sterling B2B Integrator information disclosure | 4.3CNA v3.0 | 0.7% | 2022-06-30 | Fix |
| CVE-2021-38941 | IBM Cloud Pak for Multicloud Management Monitoring arbitrary command execution | 5.3CNA v3.0 | 0.9% | 2022-06-30 | Fix |
| CVE-2021-37791 | Myadmin improper access control | 4.9v3.1 | 0.8% | 2022-06-30 | |
| CVE-2021-37778 | Gps-sdr-sim There is a buffer overflow | 9.8v3.1 | 1.6% | 2022-06-30 | |
| CVE-2021-37770 | Nucleus Cms unrestricted file upload | 7.2v3.1 | 1.3% | 2022-06-30 | |
| CVE-2021-40642 | Textpattern missing encryption | 4.3v3.1 | 0.5% | 2022-06-29 | |
| CVE-2021-40597 | Edimax IC-3140W hard-coded credentials | 9.8v3.1 | 2.0% | 2022-06-29 | Fix |
| CVE-2021-39074 | IBM Security Guardium cross-site scripting | 6.1CNA v3.0 | 0.6% | 2022-06-29 | Fix |
| CVE-2021-41690 | OFFIS DCMTK memory leak | 7.5v3.1 | 1.7% | 2022-06-28 | Fix |
| CVE-2021-41689 | OFFIS DCMTK null pointer dereference | 7.5v3.1 | 1.8% | 2022-06-28 | Fix |
| CVE-2021-41688 | OFFIS DCMTK double free | 7.5v3.1 | 1.7% | 2022-06-28 | Fix |
| CVE-2021-41687 | OFFIS DCMTK memory leak | 7.5v3.1 | 1.7% | 2022-06-28 | Fix |
| CVE-2021-41559 | Silverstripe quadratic blowup in Convert::xml2array | 6.5v3.1 | 1.0% | 2022-06-28 | Fix |
| CVE-2021-41460 | ShopEx ECShop SQL injection | 7.5v3.1 | 6.8% | 2022-06-28 | Nuclei |
| CVE-2021-40944 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2021-40943 | Axiosys Bento4 null pointer dereference | 5.5v3.1 | 0.6% | 2022-06-28 | |
| CVE-2021-40609 | gpac resource exhaustion | 5.5v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2021-40608 | gpac uninitialized resource use | 5.5v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2021-40607 | gpac resource exhaustion | 5.5v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2021-40606 | gpac out-of-bounds read | 5.5v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2021-40553 | Piwigo code injection | 8.8v3.1 | 2.3% | 2022-06-28 | |
| CVE-2021-3779 | Ruby-MySQL Gem client File Read | 6.5NVD v3.1 | 1.2% | 2022-06-28 | Fix |
| CVE-2021-3435 | zephyrproject-rtos Zephyr L2CAP: Information leakage in le_ecred_conn_req | 4.0CNA v3.1 | 0.2% | 2022-06-28 | Fix |
| CVE-2021-3434 | zephyrproject-rtos Zephyr L2CAP: Stack based buffer overflow in le_ecred_conn_req | 4.9CNA v3.1 | 0.2% | 2022-06-28 | Fix |
| CVE-2021-3433 | zephyrproject-rtos Zephyr BT: Invalid channel map in CONNECT_IND results to deadlock | 4.0CNA v3.1 | 0.2% | 2022-06-28 | Fix |
| CVE-2021-3432 | zephyrproject-rtos Zephyr BT: Invalid interval in CONNECT_IND leads to division by zero | 4.3CNA v3.1 | 0.9% | 2022-06-28 | Fix |
| CVE-2021-3431 | zephyrproject-rtos Zephyr BT: Assertion failure on repeated LL_FEATURE_REQ | 4.3CNA v3.1 | 0.9% | 2022-06-28 | Fix |
| CVE-2021-3430 | zephyrproject-rtos Zephyr BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ | 6.5CNA v3.1 | 0.9% | 2022-06-28 | |
| CVE-2021-40942 | gpac out-of-bounds write | 5.5v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2021-40941 | Axiosys Bento4 resource exhaustion | 7.5v3.1 | 1.1% | 2022-06-27 | |
| CVE-2021-40901 | Scniro-validator regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-27 | |
| CVE-2021-40900 | Regexfn regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-27 | |
| CVE-2021-40899 | Repo-git-downloader regular expression denial of service | 7.5v3.1 | 1.1% | 2022-06-27 | |
| CVE-2021-40898 | Scaffold-helper regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-27 | |
| CVE-2021-40897 | Split-html-to-chars regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-27 | |
| CVE-2021-40896 | That-value regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-27 | |
| CVE-2021-40895 | Todo-regex regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-27 | |
| CVE-2021-33654 | openEuler:mindspore divide by zero | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33653 | openEuler:mindspore divide by zero | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33652 | openEuler:mindspore divide by zero | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33651 | openEuler:mindspore divide by zero | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33650 | openEuler:mindspore out-of-bounds read | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33649 | openEuler:mindspore out-of-bounds read | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33648 | openEuler:mindspore out-of-bounds read | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-33647 | openEuler:mindspore out-of-bounds write | 7.5NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2021-42056 | Thalesgroup SafeNet Authentication Client link following | 6.7v3.1 | 1.0% | 2022-06-24 | Exploit code |
| CVE-2021-41639 | Melag FTP Server cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2022-06-24 | |
| CVE-2021-41638 | Melag FTP Server improper authentication | 7.5v3.1 | 1.7% | 2022-06-24 | |
| CVE-2021-41637 | Melag FTP Server incorrect default permissions | 7.1v3.1 | 0.3% | 2022-06-24 | |
| CVE-2021-41636 | Melag FTP Server path traversal | 6.5v3.1 | 1.4% | 2022-06-24 | |
| CVE-2021-41635 | Melag FTP Server incorrect default permissions | 8.8v3.1 | 2.1% | 2022-06-24 | |
| CVE-2021-41634 | Melag FTP Server observable discrepancy | 5.3v3.1 | 0.9% | 2022-06-24 | |
| CVE-2021-40894 | Underscore-99xp regular expression denial of service | 7.5v3.1 | 1.0% | 2022-06-24 | |
| CVE-2021-40893 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails. | 7.5v3.1 | 1.2% | 2022-06-24 | |
| CVE-2021-40892 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgb(a) strings. | 7.5v3.1 | 1.1% | 2022-06-24 | |
| CVE-2021-39409 | A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated. | 9.8v3.1 | 2.8% | 2022-06-24 | Exploit code |
| CVE-2021-39408 | Online Student Rate System cross-site scripting | 6.1v3.1 | 1.3% | 2022-06-24 | Exploit code |
| CVE-2021-39047 | IBM Cognos Analytics cross-site scripting | 6.1CNA v3.0 | 0.9% | 2022-06-24 | Fix |
| CVE-2021-38945 | IBM Cognos Analytics unrestricted file upload | 6.3CNA v3.0 | 1.7% | 2022-06-24 | Fix |
| CVE-2021-38879 | IBM Jazz Team Server incorrect permission assignment | 3.7CNA v3.0 | 1.1% | 2022-06-24 | Fix |
| CVE-2021-38871 | IBM Jazz Team Server cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-06-24 | Fix |
| CVE-2021-30651 | Broadcom Symantec Messaging Gateway information disclosure | 4.9NVD v3.1 | 0.7% | 2022-06-24 | Fix |
| CVE-2021-29865 | IBM Jazz Team Server clickjacking | 5.4CNA v3.0 | 0.6% | 2022-06-24 | Fix |
| CVE-2021-29768 | IBM Cognos Analytics information disclosure | 4.3CNA v3.0 | 1.0% | 2022-06-24 | Fix |
| CVE-2021-20551 | IBM Jazz Team Server resource exposure | 4.0CNA v3.0 | 0.2% | 2022-06-24 | Fix |
| CVE-2021-20544 | IBM Jazz Team Server server-side request forgery | 5.4CNA v3.0 | 0.5% | 2022-06-24 | Fix |
| CVE-2021-20543 | IBM Jazz Team Server cross-site scripting | 5.4CNA v3.0 | 0.6% | 2022-06-24 | Fix |
| CVE-2021-20421 | IBM Jazz Team Server server-side request forgery | 5.4CNA v3.0 | 0.5% | 2022-06-24 | Fix |
| CVE-2021-20355 | IBM Jazz Team Server incorrect permission assignment | 3.7CNA v3.0 | 1.1% | 2022-06-24 | Fix |
| CVE-2021-46824 | School File Management System sourcecodester cross-site scripting | 5.4v3.1 | 0.9% | 2022-06-23 | |
| CVE-2021-41432 | FlatPress stored cross-site scripting | 5.4v3.1 | 1.7% | 2022-06-23 | Nuclei |
| CVE-2021-40956 | LaikeTui SQL injection | 7.5v3.1 | 1.1% | 2022-06-23 | |
| CVE-2021-40955 | LaikeTui SQL injection | 7.2v3.1 | 1.0% | 2022-06-23 | |
| CVE-2021-40954 | LaikeTui unrestricted file upload | 9.8v3.1 | 1.7% | 2022-06-23 | |
| CVE-2021-29055 | School File Management System sourcecodester cross-site scripting | 6.1v3.1 | 0.9% | 2022-06-23 | |
| CVE-2021-26638 | Xi Smarthome wallpad authentication bypass | 9.8v3.1 | 3.6% | 2022-06-23 | |
| CVE-2021-26637 | SiHAS improper authentication | 9.8v3.1 | 1.8% | 2022-06-23 | |
| CVE-2021-26636 | MaxBoard remote code execution | 9.6v3.1 | 1.4% | 2022-06-23 | |
| CVE-2021-41924 | Cross-site scripting in Krayin/laravel-crm | 6.1v3.1 | 0.6% | 2022-06-21 | Fix |
| CVE-2021-40511 | Obdasystems Mastro billion laughs | 7.5v3.1 | 0.9% | 2022-06-21 | Fix |
| CVE-2021-40510 | Obdasystems Mastro XML external entity injection | 7.5v3.1 | 1.3% | 2022-06-21 | Fix |
| CVE-2021-39006 | IBM QRadar WinCollect Agent information disclosure | 5.3CNA v3.0 | 0.9% | 2022-06-21 | Fix |
| CVE-2021-36761 | Qlik Sense server-side request forgery | 5.3v3.1 | 1.2% | 2022-06-21 | |
| CVE-2021-45918 | NHI’s health insurance web service component heap-based buffer overflow | 7.5v3.1 | 1.5% | 2022-06-20 | Fix |
| CVE-2021-41683 | JerryScript out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-20 | |
| CVE-2021-41682 | JerryScript use-after-free | 7.8v3.1 | 0.7% | 2022-06-20 | |
| CVE-2021-25121 | Rating by BestWebSoft WordPress plugin Rating denial of service | 6.5NVD v3.1 | 1.2% | 2022-06-20 | Fix |
| CVE-2021-25104 | Ocean Extra WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-06-20 | NucleiFix |
| CVE-2021-25088 | Google XML Sitemaps WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2021-46823 | Denial of service in python-ldap | 6.5v3.1 | 1.8% | 2022-06-18 | Fix |
| CVE-2021-46822 | libjpeg-turbo out-of-bounds write | 5.5v3.1 | 1.0% | 2022-06-18 | Fix |
| CVE-2021-45026 | Rocket Software Ags-zena cross-site scripting | 6.1v3.1 | 1.2% | 2022-06-17 | Exploit codeFix |
| CVE-2021-45025 | Rocket Software Ags-zena cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2022-06-17 | Fix |
| CVE-2021-45024 | Rocket Software Ags-zena XML external entity injection | 9.8v3.1 | 1.0% | 2022-06-17 | Fix |
| CVE-2021-41490 | Rice Open Motion Planning Library memory leak | 7.5v3.1 | 1.0% | 2022-06-17 | |
| CVE-2021-41408 | Voipmonitor SQL injection | 9.8v3.1 | 1.1% | 2022-06-17 | Fix |
| CVE-2021-40903 | Antminer Monitor hard-coded credentials | 9.8v3.1 | 4.6% | 2022-06-17 | Exploit code |
| CVE-2021-46820 | Xos Shop System arbitrary file deletion | 8.1v3.1 | 0.8% | 2022-06-16 | |
| CVE-2021-41654 | WuzhiCMS SQL injection | 9.8v3.1 | 1.0% | 2022-06-16 | |
| CVE-2021-41487 | Nokia Vitalsuite SQL injection | 9.8v3.1 | 1.7% | 2022-06-16 | |
| CVE-2021-41458 | GPAC MP4BOX out-of-bounds write | 5.5v3.1 | 0.6% | 2022-06-16 | Fix |
| CVE-2021-41421 | Maian Media Maianaffiliate PHP code injection | 4.8v3.1 | 0.5% | 2022-06-16 | |
| CVE-2021-41420 | Maian Media Maianaffiliate stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-06-16 | |
| CVE-2021-41411 | XML external entity Reference in Drools | 9.8v3.1 | 1.2% | 2022-06-16 | Fix |
| CVE-2021-41402 | Flatcore-cms code injection | 8.8v3.1 | 1.4% | 2022-06-16 | |
| CVE-2021-37764 | Xos Shop System arbitrary file deletion | 8.1v3.1 | 0.7% | 2022-06-16 | |
| CVE-2021-36827 | Ninja Forms Contact Form WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-06-16 | Fix |
| CVE-2021-36609 | WebTareas cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-16 | |
| CVE-2021-36608 | WebTareas cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-16 | |
| CVE-2021-33295 | Joplin cross-site scripting vulnerability via NOSCRIPT tags | 5.4v3.1 | 0.8% | 2022-06-16 | Fix |
| CVE-2021-3675 | Synaptics Fingerprint Driver synaTEE.signed.dll Out-Of-Bounds Heap Write | 5.5CNA v3.1 | 0.3% | 2022-06-16 | Fix |
| CVE-2021-43756 | Adobe Media Encoder memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 2.0% | 2022-06-15 | Fix |
| CVE-2021-43755 | Adobe After Effects memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2021-43754 | Adobe Prelude Corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.6% | 2022-06-15 | Fix |
| CVE-2021-42735 | Adobe Photoshop memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 2.1% | 2022-06-15 | Fix |
| CVE-2021-42732 | Adobe InDesign crashes when parsing the GIF file | 7.8CNA v3.1 | 2.0% | 2022-06-15 | Fix |
| CVE-2021-41672 | PEEL Shopping SQL injection | 6.5v3.1 | 1.4% | 2022-06-15 | |
| CVE-2021-41418 | Ariang missing authentication | 9.8v3.1 | 1.0% | 2022-06-15 | |
| CVE-2021-41415 | subscription-manager cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-15 | |
| CVE-2021-41413 | Ok-file-formats buffer overflow | 7.8v3.1 | 0.9% | 2022-06-15 | |
| CVE-2021-41403 | Flatcore-cms server-side request forgery | 9.8v3.1 | 19.1% | 2022-06-15 | |
| CVE-2021-40940 | Monstra unrestricted file upload | 9.8v3.1 | 1.6% | 2022-06-15 | |
| CVE-2021-40910 | Phpcms There is a reflective cross-site scripting | 6.1v3.1 | 0.7% | 2022-06-15 | |
| CVE-2021-40776 | Adobe Lightroom Classic DLL hijacking local privilege escalation | 6.1CNA v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2021-40727 | Adobe InDesign crashes when parsing the TIF file | 7.8CNA v3.1 | 1.5% | 2022-06-15 | Fix |
| CVE-2021-40212 | Daum Potplayer exploitable out-of-bounds write | 9.8v3.1 | 2.1% | 2022-06-15 | |
| CVE-2021-39820 | Adobe InDesign memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 3.5% | 2022-06-15 | Fix |
| CVE-2021-39806 | Android label_backends_android.c privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2021-39691 | Android WindowManager privilege escalation | 7.3v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2021-36901 | Age Gate WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2021-36891 | Supsystic Photo Gallery by Supsystic (WordPress plugin) cross-site request forgery | 4.3v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2021-33036 | Apache Hadoop privilege escalation | 8.8v3.1 | 3.8% | 2022-06-15 | Fix |
| CVE-2021-25261 | Yandex Browser (Desktop) link following | 7.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2021-42675 | Kreado Kreasfero unrestricted file upload | 9.8v3.1 | 2.4% | 2022-06-14 | |
| CVE-2021-40678 | Piwigo cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-14 | |
| CVE-2021-40660 | Regular expression denial of service in Delight Nashorn Sandbox | 7.5v3.1 | 1.0% | 2022-06-14 | Fix |
| CVE-2021-40658 | Textpattern cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-14 | |
| CVE-2021-40650 | Softwareag Connx missing encryption | 6.5v3.1 | 0.8% | 2022-06-14 | |
| CVE-2021-40649 | Softwareag Connx incorrect permission assignment | 6.5v3.1 | 0.8% | 2022-06-14 | |
| CVE-2021-40633 | giflib gif2rgb in util/gif2rgb.c memory leak | 8.8v3.1 | 1.7% | 2022-06-14 | Fix |
| CVE-2021-40616 | Incorrect authorization in ThinkCMF | 6.5v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2021-37182 | Siemens SCALANCE XM408-4C improper integrity check validation | 7.5v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35130 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35129 | Qualcomm Snapdragon buffer copy without checking size of input in BT controller | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35126 | Qualcomm Snapdragon improper validation of array index in DSP service | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35123 | Qualcomm Snapdragon buffer copy without checking size of input in Bluetooth host | 8.8CNA v3.1 | 0.3% | 2022-06-14 | Fix |
| CVE-2021-35121 | Qualcomm Snapdragon improper validation of array index in MM Framework | 6.7CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35120 | Qualcomm Snapdragon double free in MM Frameworks | 6.7CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35119 | Qualcomm Snapdragon buffer over-read in WLAN host | 5.5CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35118 | Qualcomm Snapdragon use of out-of-range pointer offset in Camera | 6.7CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35116 | Qualcomm Snapdragon improper input validation in Neural Networks | 7.7CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35114 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35112 | Qualcomm Snapdragon improper access control in Graphics | 8.4CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35111 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Modem | 7.5CNA v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2021-35104 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 9.8CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2021-35102 | Qualcomm Snapdragon buffer over-read in Data Modem | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35101 | Qualcomm Snapdragon reachable assertion in Kernel | 7.1CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35100 | Qualcomm Snapdragon buffer over-read in Video | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35098 | Qualcomm Snapdragon use of out-of-range pointer offset in Audio | 6.7CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35096 | Qualcomm Snapdragon improper input validation in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35095 | Qualcomm Snapdragon time-of-check time-of-use race condition in Kernel | 8.4CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35094 | Qualcomm Snapdragon improper authorization in HLOS | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35092 | Qualcomm Snapdragon improper input validation in Modem | 6.7CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35091 | Qualcomm Snapdragon incorrect type conversion or cast in Linux Graphics | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35090 | Qualcomm Snapdragon time-of-check time-of-use race condition in Kernel | 9.3CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35087 | Qualcomm Snapdragon improper input validation in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35086 | Qualcomm Snapdragon use of uninitialized variable in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35085 | Qualcomm Snapdragon buffer over-read in WLAN | 5.5CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35084 | Qualcomm Snapdragon buffer over-read in WLAN | 5.5CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35083 | Qualcomm Snapdragon buffer over-read in Data Modem | 8.2CNA v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2021-35082 | Qualcomm Snapdragon time-of-check time-of-use race condition in Modem | 9.1CNA v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2021-35081 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 9.8CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2021-35080 | Qualcomm Snapdragon information exposure in Kernel | 6.5CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35079 | Qualcomm Snapdragon Permissions, Privileges and Access Controls in Telephony | 6.2CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35078 | Qualcomm Snapdragon memory leak in Data Modem | 7.5CNA v3.1 | 0.4% | 2022-06-14 | Fix |
| CVE-2021-35076 | Qualcomm Snapdragon null pointer dereference in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35073 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-35072 | Qualcomm Snapdragon improper validation of array index in Modem | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-35071 | Qualcomm Snapdragon buffer over-read in WLAN | 5.5CNA v3.1 | 0.1% | 2022-06-14 | Fix |
| CVE-2021-35070 | Qualcomm Snapdragon information exposure in Kernel | 6.5CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30350 | Qualcomm Snapdragon improper authentication in Core | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30349 | Qualcomm Snapdragon improper access control in Core | 8.2CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30347 | Qualcomm Snapdragon time-of-check time-of-use race condition in Modem | 9.1CNA v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2021-30346 | Qualcomm Snapdragon RPM secure stream SMMU configuration vulnerability | 6.5CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30345 | Qualcomm Snapdragon SMMU configuration vulnerability | 6.5CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30344 | Qualcomm Snapdragon improper authorization in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-30343 | Qualcomm Snapdragon time-of-check time-of-use race condition in Modem | 9.1CNA v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2021-30342 | Qualcomm Snapdragon time-of-check time-of-use race condition in Modem | 9.1CNA v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2021-30341 | Qualcomm Snapdragon stack-based buffer overflow in Data Modem | 9.8CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2021-30340 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2021-30339 | Qualcomm Snapdragon Key Management Errors in Key Provisioning | 9.0CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30338 | Qualcomm Snapdragon improper input validation in Core | 7.1CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30334 | Qualcomm Snapdragon use-after-free in Display | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-30327 | Qualcomm Snapdragon buffer overflow in EDL Sahara protocol | 7.5CNA v3.1 | 0.2% | 2022-06-14 | Exploit codeFix |
| CVE-2021-30281 | Qualcomm Snapdragon improper access control in Core | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2021-46818 | Adobe Media Encoder M4A file memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 2.0% | 2022-06-13 | Fix |
| CVE-2021-46817 | Adobe Media Encoder M4A file memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 1.9% | 2022-06-13 | Fix |
| CVE-2021-46816 | Adobe Premiere Pro M4A file memory corruption vulnerability could lead to remote code execution | 7.8CNA v3.1 | 1.5% | 2022-06-13 | Fix |
| CVE-2021-46814 | Huawei HarmonyOS out-of-bounds memory read and write vulnerability in the video framework | 7.5v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2021-46813 | Huawei EMUI vulnerability of residual files not being deleted after an update in the ChinaDRM module | 7.5v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2021-46812 | Huawei HarmonyOS device manager vulnerability in the multi-device task center | 7.5v3.1 | 0.5% | 2022-06-13 | Fix |
| CVE-2021-46811 | Huawei HarmonyOS improper permission management vulnerability in the HwSEServiceAPP module | 5.3v3.1 | 0.5% | 2022-06-13 | Fix |
| CVE-2021-41663 | 1234n MiniCMS Mini CMS V1.11 cross-site scripting | 6.1v3.1 | 0.8% | 2022-06-13 | |
| CVE-2021-41662 | South Gate Inn Online Reservation System SQL injection | 9.8v3.1 | 2.1% | 2022-06-13 | |
| CVE-2021-41661 | Church Management System SQL injection | 9.8v3.1 | 1.3% | 2022-06-13 | |
| CVE-2021-40902 | Flatcore-cms cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-13 | |
| CVE-2021-40604 | invisioncommunity IPS Community Suite A server-side request forgery | 9.1v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2021-40036 | HarmonyOS out-of-bounds write | 9.8v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2021-37404 | Apache Hadoop heap buffer overflow in libhdfs native library | 9.8v3.1 | 3.2% | 2022-06-13 | Fix |
| CVE-2021-25116 | Enqueue Anything WordPress plugin Subscriber+ arbitrary Asset/Post deletion | 6.5NVD v3.1 | 0.4% | 2022-06-13 | |
| CVE-2021-41750 | Cross-site scripting in SEOmatic plugin | 6.1v3.1 | 1.1% | 2022-06-12 | Fix |
| CVE-2021-41749 | Code injection in SEOmatic | 9.8v3.1 | 16.8% | 2022-06-12 | NucleiFix |
| CVE-2021-41641 | Link following in Deno | 8.4v3.1 | 0.4% | 2022-06-12 | Fix |
| CVE-2021-44266 | gunet Open Eclass Platform cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-11 | Fix |
| CVE-2021-41738 | Zeroshell OS command injection | 8.8v3.1 | 1.8% | 2022-06-11 | |
| CVE-2021-41502 | Cross-site scripting in Intelliants/subrion | 5.4v3.1 | 0.6% | 2022-06-11 | |
| CVE-2021-44582 | Money Transfer Management System Sourcecodester privilege escalation | 8.8v3.1 | 1.4% | 2022-06-10 | Exploit code |
| CVE-2021-44117 | Thedaylightstudio Fuel CMS cross-site request forgery | 8.8v3.1 | 1.4% | 2022-06-10 | Exploit code |
| CVE-2021-42811 | Thales SafeNet KeySecure path traversal | 3.3CNA v3.1 | 0.5% | 2022-06-10 | Fix |
| CVE-2021-41756 | Dynamicvision Dynamicmarkt SQL injection | 9.8v3.1 | 1.2% | 2022-06-10 | |
| CVE-2021-41755 | Dynamicvision Dynamicmarkt SQL injection | 9.8v3.1 | 1.3% | 2022-06-10 | |
| CVE-2021-41754 | Dynamicvision Dynamicmarkt SQL injection | 9.8v3.1 | 1.2% | 2022-06-10 | |
| CVE-2021-40961 | CMS Made Simple SQL injection | 8.8v3.1 | 1.8% | 2022-06-09 | |
| CVE-2021-40668 | HTTP File Server path traversal | 8.1v3.1 | 1.2% | 2022-06-09 | |
| CVE-2021-40610 | Emlog Pro cross-site scripting | 5.4v3.1 | 0.4% | 2022-06-09 | |
| CVE-2021-27786 | HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted | 4.6CNA v3.1 | 0.6% | 2022-06-09 | Fix |
| CVE-2021-40592 | GPAC ISOBMFF reader filter denial of service | 5.5v3.1 | 0.9% | 2022-06-08 | Fix |
| CVE-2021-40589 | Zangband-data integer underflow | 9.8v3.1 | 1.2% | 2022-06-08 | |
| CVE-2021-36710 | Toaruos resource exposure | 8.8v3.1 | 0.3% | 2022-06-08 | |
| CVE-2021-37589 | Virtuasoftware Cobranca SQL injection | 7.5v3.1 | 32.7% | 2022-06-07 | NucleiExploit code |
| CVE-2021-35532 | Firmware upload verification bypass in TXpert Hub CoreTec 4 | 6.7v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2021-35531 | Remote code execution in TXpert Hub CoreTec 4 | 6.7v3.1 | 0.3% | 2022-06-07 | Fix |
| CVE-2021-35530 | User authentication bypass in TXpert Hub CoreTec 4 | 6.0CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2021-42245 | Flatcore-cms cross-site scripting | 6.1v3.1 | 0.7% | 2022-06-06 | |
| CVE-2021-41932 | Wolterskluwer Teammate+ Audit search form blind SQL injection | 8.8v3.1 | 1.1% | 2022-06-06 | |
| CVE-2021-39947 | GitLab Runner job trace buffer vulnerability | 5.3CNA v3.1 | 0.9% | 2022-06-06 | Fix |
| CVE-2021-43271 | Riverbed Technology Appresponse sensitive information in log files | 6.8v3.1 | 0.8% | 2022-06-03 | Fix |
| CVE-2021-42893 | TOTOLINK EX1200T missing authentication | 7.5v3.1 | 1.4% | 2022-06-03 | |
| CVE-2021-42892 | TOTOLINK EX1200T hard-coded credentials | 4.3v3.1 | 0.7% | 2022-06-03 | |
| CVE-2021-42891 | TOTOLINK EX1200T missing authentication | 7.5v3.1 | 1.4% | 2022-06-03 | |
| CVE-2021-42890 | TOTOLINK EX1200T OS command injection | 9.8v3.1 | 1.9% | 2022-06-03 | |
| CVE-2021-42889 | TOTOLINK EX1200T missing authentication | 7.5v3.1 | 1.4% | 2022-06-03 | |
| CVE-2021-42888 | TOTOLINK EX1200T OS command injection | 9.8v3.1 | 1.9% | 2022-06-03 | |
| CVE-2021-42887 | TOTOLINK EX1200T firmware formLoginAuth.htm authentication bypass | 9.8v3.1 | 44.7% | 2022-06-03 | Nuclei |
| CVE-2021-42886 | TOTOLINK EX1200T information disclosure | 7.5v3.1 | 2.1% | 2022-06-03 | |
| CVE-2021-42885 | TOTOLINK EX1200T OS command injection | 9.8v3.1 | 2.4% | 2022-06-03 | |
| CVE-2021-42884 | TOTOLINK EX1200T OS command injection | 9.8v3.1 | 2.4% | 2022-06-03 | |
| CVE-2021-45983 | Netscout Ngeniusone code execution | 9.8v3.1 | 1.4% | 2022-06-02 | Fix |
| CVE-2021-45982 | Netscout Ngeniusone unrestricted file upload | 8.8v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2021-45981 | Netscout Ngeniusone XML external entity injection | 9.8v3.1 | 1.1% | 2022-06-02 | Fix |
| CVE-2021-44098 | Egavilanmedia Expense Management System SQL injection | 9.8v3.1 | 1.5% | 2022-06-02 | |
| CVE-2021-44097 | Contact-form-with-messages-entry-management SQL injection | 9.8v3.1 | 1.5% | 2022-06-02 | |
| CVE-2021-44096 | Egavilanmedia User Registration And Login System With Admin Panel SQL injection | 9.8v3.1 | 1.3% | 2022-06-02 | |
| CVE-2021-44095 | Hospital Management System ProjectWorlds SQL injection | 9.8v3.1 | 2.2% | 2022-06-02 | |
| CVE-2021-44080 | Sercomm H500S httpd web server command injection | 7.2v3.1 | 24.9% | 2022-06-02 | |
| CVE-2021-43512 | Flightradar24 Flight Tracker insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2022-06-02 | |
| CVE-2021-43308 | Exponential ReDoS in markdown-link-extractor | 7.5NVD v3.1 | 1.1% | 2022-06-02 | Fix |
| CVE-2021-43307 | Exponential ReDoS in semver-regex | 7.5NVD v3.1 | 1.5% | 2022-06-02 | Fix |
| CVE-2021-43306 | Exponential ReDoS in jquery-validation | 7.5NVD v3.1 | 1.5% | 2022-06-02 | Fix |
| CVE-2021-42877 | TOTOLINK EX1200T denial of service | 7.5v3.1 | 1.7% | 2022-06-02 | |
| CVE-2021-42875 | TOTOLINK EX1200T OS command injection | 9.8v3.1 | 4.4% | 2022-06-02 | |
| CVE-2021-42872 | TOTOLINK EX1200T OS command injection | 9.8v3.1 | 6.8% | 2022-06-02 | |
| CVE-2021-42204 | swftools out-of-bounds write | 7.8v3.1 | 1.3% | 2022-06-02 | |
| CVE-2021-42203 | swftools use-after-free | 7.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2021-42202 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2022-06-02 | |
| CVE-2021-42201 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2021-42200 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2022-06-02 | |
| CVE-2021-42199 | swftools out-of-bounds write | 7.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2021-42198 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2022-06-02 | |
| CVE-2021-42197 | swftools memory leak | 7.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2021-42196 | swftools null pointer dereference | 5.5v3.1 | 0.7% | 2022-06-02 | |
| CVE-2021-42195 | swftools out-of-bounds write | 7.8v3.1 | 1.0% | 2022-06-02 | |
| CVE-2021-40186 | dnnsoftware Dnn.Platform DNN CMS server-side request forgery (SSRF) | 7.5v3.1 | 1.1% | 2022-06-02 | Fix |
| CVE-2021-38221 | bbs-go cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-02 | |
| CVE-2021-36890 | Social Share Buttons by Supsystic WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2022-06-02 | Fix |
| CVE-2021-36866 | Easy Pricing Tables WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-06-02 | Fix |
| CVE-2021-34084 | OS command injection in S3-uploader | 9.8v3.1 | 3.1% | 2022-06-02 | |
| CVE-2021-34083 | Command injection in Google-it | 8.1v3.1 | 2.1% | 2022-06-02 | |
| CVE-2021-34082 | OS command injection in Proctree | 9.8v3.1 | 5.1% | 2022-06-02 | |
| CVE-2021-34081 | OS command injection in Gitsome | 8.8v3.1 | 3.6% | 2022-06-02 | |
| CVE-2021-34080 | OS command injection in Ssl-utils | 9.8v3.1 | 3.3% | 2022-06-02 | |
| CVE-2021-34079 | Command injection in Docker-tester | 9.8v3.1 | 4.4% | 2022-06-02 | |
| CVE-2021-34078 | Adp Lifion-verifiy-dependencies OS command injection in lifion-verify-deps | 8.8v3.1 | 2.6% | 2022-06-02 | Fix |
| CVE-2021-33615 | RSA Archer unrestricted file upload | 7.5v3.1 | 1.3% | 2022-06-02 | |
| CVE-2021-33504 | Couchbase Server before 7.1.0 has Incorrect Access Control. | 4.9v3.1 | 0.8% | 2022-06-02 | Fix |
| CVE-2021-33473 | Arbitrary file write in dragonfly | 9.1v3.1 | 1.1% | 2022-06-02 | Fix |
| CVE-2021-33254 | Embedthis Appweb null pointer dereference | 7.5v3.1 | 1.5% | 2022-06-02 | |
| CVE-2021-32546 | OS command injection in gogs | 8.8v3.1 | 2.1% | 2022-06-02 | Fix |
| CVE-2021-26635 | Bandisoft ARK library buffer overflow | 7.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2021-26634 | Max Yi MaxBoard SQL injection | 9.8v3.1 | 1.3% | 2022-06-02 | |
| CVE-2021-26633 | MaxBoard SQL injection and LFI | 9.8v3.1 | 0.9% | 2022-06-02 | |
| CVE-2021-27914 | Mautic installer component cross-site scripting | 7.6CNA v3.1 | 0.5% | 2022-06-01 | Fix |
| CVE-2021-27778 | HCL Traveler administration web pages cross-site scripting | 4.9CNA v3.1 | 0.4% | 2022-06-01 | |
| CVE-2021-3555 | Eufy Indoor 2K Indoor Camera RSTP server component buffer overflow | 8.8NVD v3.1 | 0.8% | 2022-05-31 | |
| CVE-2021-27781 | HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting | 6.6CNA v3.1 | 0.4% | 2022-05-27 | Fix |
| CVE-2021-27780 | HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction | 5.3CNA v3.1 | 0.8% | 2022-05-27 | Fix |
| CVE-2021-42860 | Mini-XML A stack-based buffer overflow | 7.5v3.1 | 1.0% | 2022-05-26 | |
| CVE-2021-42859 | Mini-XML A memory leak | 7.5v3.1 | 1.0% | 2022-05-26 | |
| CVE-2021-42692 | Tinytoml out-of-bounds write | 6.5v3.1 | 0.8% | 2022-05-26 | |
| CVE-2021-40317 | Piwigo SQL injection | 8.8v3.1 | 1.0% | 2022-05-26 | |
| CVE-2021-34360 | CSRF Bypass in Proxy Server | 5.3CNA v3.1 | 0.5% | 2022-05-26 | Fix |
| CVE-2021-33016 | KUKA KR C4 use of hard-coded credentials | 9.8v3.1 | 1.0% | 2022-05-26 | |
| CVE-2021-33014 | KUKA KR C4 use of hard-coded credentials | 8.8v3.1 | 0.9% | 2022-05-26 | |
| CVE-2021-28509 | TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP | 6.1CNA v3.1 | 0.5% | 2022-05-26 | |
| CVE-2021-28508 | TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP | 6.8CNA v3.1 | 0.5% | 2022-05-26 | |
| CVE-2021-4232 | PHPGurukul Zoo Management System manage-ticket.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-26 | |
| CVE-2021-4231 | Angular Comment cross-site scripting | 5.4v3.1 | 1.2% | 2022-05-26 | Fix |
| CVE-2021-44974 | radare2 null pointer dereference | 5.5v3.1 | 0.9% | 2022-05-25 | Fix |
| CVE-2021-44719 | Docker Desktop 4.3.0 has Incorrect Access Control. | 8.4v3.1 | 0.3% | 2022-05-25 | Fix |
| CVE-2021-35487 | Nokia Broadcast Message Center SQL injection | 6.5v3.1 | 1.0% | 2022-05-25 | Fix |
| CVE-2021-32997 | Baker Hughes Bently Nevada 3500 use of password hash with insufficient computational effort | 7.5v3.1 | 0.3% | 2022-05-25 | |
| CVE-2021-32989 | LCDS LAquis SCADA cross-site scripting | 6.1NVD v3.1 | 2.5% | 2022-05-25 | Fix |
| CVE-2021-32966 | Philips Interoperability Solution XDS Clear Text Transmission of Sensitive Information | 7.5v3.1 | 0.5% | 2022-05-25 | Fix |
| CVE-2021-27783 | HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure | 6.8CNA v3.1 | 0.4% | 2022-05-25 | Fix |
| CVE-2021-27779 | HCL VersionVault Express missing encryption | 9.1CNA v3.1 | 0.6% | 2022-05-25 | Fix |
| CVE-2021-45915 | In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. | 9.8v3.1 | 1.6% | 2022-05-24 | Fix |
| CVE-2021-45914 | In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. | 9.8v3.1 | 1.6% | 2022-05-24 | Fix |
| CVE-2021-44975 | radare2 buffer overflow | 5.5v3.1 | 1.0% | 2022-05-24 | Fix |
| CVE-2021-42659 | Tenda AC9 Web server httpd of the router buffer overflow | 6.5v3.1 | 0.8% | 2022-05-24 | |
| CVE-2021-42656 | Cross-site scripting in SiteServer CMS | 5.4v3.1 | 0.7% | 2022-05-24 | Fix |
| CVE-2021-42655 | SQL injection in SiteServer CMS | 8.8v3.1 | 1.2% | 2022-05-24 | Fix |
| CVE-2021-42654 | Sscms Siteserver Cms unrestricted file upload | 9.8v3.1 | 1.7% | 2022-05-24 | Fix |
| CVE-2021-42614 | Halibut info_width_internal in bk_info.c use-after-free | 7.8v3.1 | 0.9% | 2022-05-24 | Fix |
| CVE-2021-42613 | Halibut cleanup_index in index.c double free | 7.8v3.1 | 0.9% | 2022-05-24 | Fix |
| CVE-2021-42612 | Halibut cleanup_index in index.c use-after-free | 7.8v3.1 | 0.9% | 2022-05-24 | Fix |
| CVE-2021-32969 | Delta Electronics DIAScreen type confusion, out-of-bounds write | 7.8v3.1 | 1.1% | 2022-05-24 | Fix |
| CVE-2021-32965 | Delta Electronics DIAScreen type confusion, out-of-bounds write | 7.8v3.1 | 1.1% | 2022-05-24 | Fix |
| CVE-2021-32964 | AGG Software Web Server claroty Secure Remote Access Site authentication bypass | 5.3v3.1 | 0.8% | 2022-05-24 | Fix |
| CVE-2021-32962 | AGG Software Web Server claroty Secure Remote Access Site authentication bypass | 6.1NVD v3.1 | 0.8% | 2022-05-24 | Fix |
| CVE-2021-4230 | Airfield Online MySQL Backup improper authentication | 7.5v3.1 | 0.9% | 2022-05-24 | |
| CVE-2021-4229 | ua-parser-js Crypto Mining backdoor | 8.8v3.1 | 1.4% | 2022-05-24 | Fix |
| CVE-2021-3717 | Wildfly-Core user account mismanagement | 7.8v3.1 | 0.3% | 2022-05-24 | Fix |
| CVE-2021-3629 | Undertow uncontrolled resource consumption | 5.9v3.1 | 1.3% | 2022-05-24 | Fix |
| CVE-2021-3597 | undertow race condition | 5.9v3.1 | 1.1% | 2022-05-24 | Fix |
| CVE-2021-42586 | GNU LibreDWG copy_bytes in decode_r2007.c in dwgread heap-based buffer overflow | 8.8v3.1 | 1.0% | 2022-05-23 | |
| CVE-2021-42585 | GNU LibreDWG heap-based buffer overflow | 8.8v3.1 | 1.0% | 2022-05-23 | |
| CVE-2021-42233 | Simple Blog cross-site scripting | 5.4v3.1 | 0.9% | 2022-05-23 | |
| CVE-2021-41834 | jfrog artifactory missing authorization | 5.3CNA v3.1 | 0.6% | 2022-05-23 | Fix |
| CVE-2021-41714 | Tipask download without integrity check | 6.5NVD v3.1 | 0.7% | 2022-05-23 | |
| CVE-2021-32958 | Claroty Secure Remote Access Site authentication bypass using an alternate path or channel | 5.5v3.1 | 0.2% | 2022-05-23 | Fix |
| CVE-2021-32941 | Annke Network Video Recorder stack-based buffer overflow | 9.8v3.1 | 14.6% | 2022-05-23 | Fix |
| CVE-2021-32935 | Cognex In-Sight OPC Server deserialization of untrusted data | 9.8v3.1 | 1.8% | 2022-05-23 | Fix |
| CVE-2021-43729 | Pix-Link Lv-wr09 cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-20 | Fix |
| CVE-2021-43728 | Pix-Link Lv-wr09 cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-20 | Fix |
| CVE-2021-39043 | IBM Jazz Team Server cross-site scripting | 6.4CNA v3.0 | 0.5% | 2022-05-20 | Fix |
| CVE-2021-36833 | MC4WP WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2021-34111 | Thecus N4800ECO OS command injection | 9.8v3.1 | 2.7% | 2022-05-20 | |
| CVE-2021-30028 | Sooteway Wi-fi Range Extender improper authentication | 7.2v3.1 | 1.4% | 2022-05-20 | |
| CVE-2021-45730 | jfrog artifactory missing authorization | 6.0CNA v3.1 | 0.5% | 2022-05-19 | Fix |
| CVE-2021-41938 | Arbitrary file upload in ShopXO | 7.2v3.1 | 1.1% | 2022-05-19 | |
| CVE-2021-37413 | Grandcom Dynweb SQL injection | 9.8v3.1 | 1.9% | 2022-05-19 | |
| CVE-2021-32934 | ThroughTek P2P SDK cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.6% | 2022-05-19 | KCVFix |