CVE-2021 records published after 2021
Page four of seven: records 3,001 to 4,000 of the 6,408 published after 2021, newest first. The first page carries the figures for After 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-26631 | Hometory Mangboard commerce package improper input validation | 7.5v3.1 | 1.0% | 2022-05-19 | |
| CVE-2021-26630 | HANDY Groupware file download and execute vulnerability | 9.8v3.1 | 0.8% | 2022-05-19 | |
| CVE-2021-42852 | Lenovo Personal Cloud Storage A1 OS command injection | 8.0CNA v3.1 | 0.8% | 2022-05-18 | Fix |
| CVE-2021-42851 | Lenovo Personal Cloud Storage A1 missing authorization | 6.3CNA v3.1 | 0.6% | 2022-05-18 | Fix |
| CVE-2021-42850 | Lenovo Personal Cloud Storage A1 hard-coded credentials | 8.8CNA v3.1 | 0.2% | 2022-05-18 | Fix |
| CVE-2021-42849 | Lenovo Personal Cloud Storage A1 hard-coded credentials | 6.8CNA v3.1 | 0.2% | 2022-05-18 | Fix |
| CVE-2021-42848 | Lenovo Personal Cloud Storage A1 missing authorization | 4.3CNA v3.1 | 0.7% | 2022-05-18 | Fix |
| CVE-2021-42704 | Inkscape out-of-bounds write | 7.8v3.1 | 1.5% | 2022-05-18 | Fix |
| CVE-2021-42702 | Inkscape access of uninitialized pointer | 3.3v3.1 | 0.9% | 2022-05-18 | Fix |
| CVE-2021-42700 | Inkscape out-of-bounds read | 3.3v3.1 | 0.7% | 2022-05-18 | Fix |
| CVE-2021-41946 | FiberHome Hg150-ub cross-site scripting | 5.4v3.1 | 2.7% | 2022-05-18 | Exploit code |
| CVE-2021-38944 | IBM DataPower Gateway cross-site scripting | 4.8CNA v3.0 | 0.6% | 2022-05-18 | Fix |
| CVE-2021-27548 | Xpdfreader Xpdf null pointer dereference | 5.5v3.1 | 0.7% | 2022-05-18 | Fix |
| CVE-2021-3969 | Lenovo IMController time-of-check time-of-use race condition | 7.8CNA v3.1 | 1.9% | 2022-05-18 | Fix |
| CVE-2021-3956 | Lenovo XClarity Controller (XCC) incorrect authorization | 4.3CNA v3.1 | 0.8% | 2022-05-18 | Fix |
| CVE-2021-3922 | Lenovo IMController time-of-check time-of-use race condition | 7.8CNA v3.1 | 1.9% | 2022-05-18 | Fix |
| CVE-2021-42943 | Ipplan admin/usermanager.php over stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-05-17 | |
| CVE-2021-42644 | CmsEasy files accessible to external parties | 6.5v3.1 | 1.0% | 2022-05-17 | |
| CVE-2021-42643 | CmsEasy path traversal | 8.8v3.1 | 1.6% | 2022-05-17 | |
| CVE-2021-38872 | IBM DataPower Gateway denial of service | 5.3CNA v3.0 | 1.5% | 2022-05-17 | Fix |
| CVE-2021-35249 | SolarWinds Serv-U domain Admin broken access control | 4.3CNA v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2021-29726 | IBM Secure External Authentication Server improper certificate validation | 5.3CNA v3.0 | 0.9% | 2022-05-17 | Fix |
| CVE-2021-42897 | Feminer Wms OS command injection | 9.8v3.1 | 2.5% | 2022-05-16 | |
| CVE-2021-42870 | accel-ppp out-of-bounds read | 7.5v3.1 | 1.0% | 2022-05-16 | |
| CVE-2021-33318 | Improper input validation in IpMatcher | 9.8v3.1 | 2.0% | 2022-05-16 | Fix |
| CVE-2021-33025 | xArrow SCADA path traversal | 7.8v3.1 | 0.3% | 2022-05-16 | |
| CVE-2021-33021 | xArrow SCADA cross-site scripting | 6.1v3.1 | 0.8% | 2022-05-16 | |
| CVE-2021-33001 | xArrow SCADA cross-site scripting | 6.1v3.1 | 0.8% | 2022-05-16 | |
| CVE-2021-27446 | Weintek EasyWeb cMT code injection | 9.8v3.1 | 2.9% | 2022-05-16 | Fix |
| CVE-2021-27444 | Weintek EasyWeb cMT improper access control | 9.8v3.1 | 1.1% | 2022-05-16 | Fix |
| CVE-2021-27442 | Weintek EasyWeb cMT cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-05-16 | Fix |
| CVE-2021-25119 | AGIL WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 1.5% | 2022-05-16 | |
| CVE-2021-23267 | Improper control of dynamically-managed code resources in Crafter Studio | 8.8v3.1 | 0.9% | 2022-05-16 | Fix |
| CVE-2021-23266 | Improper output neutralization for logs in Crafter Studio | 4.3v3.1 | 0.5% | 2022-05-16 | Fix |
| CVE-2021-23265 | Improper privilege management in Crafter Studio | 4.3v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2021-41965 | ChurchCRM A SQL injection | 8.8v3.1 | 1.2% | 2022-05-15 | |
| CVE-2021-46789 | EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2021-46788 | Huawei EMUI third-party pop-up window coverage vulnerability in the iConnect module | 7.5v3.1 | 0.5% | 2022-05-13 | Fix |
| CVE-2021-46787 | Huawei HarmonyOS improper permission control vulnerability in the AMS module | 7.5v3.1 | 0.7% | 2022-05-13 | Fix |
| CVE-2021-46786 | Huawei HarmonyOS out-of-bounds access | 9.8v3.1 | 0.7% | 2022-05-13 | Fix |
| CVE-2021-46785 | Huawei HarmonyOS improper permission control vulnerability in the Property module | 5.3v3.1 | 0.5% | 2022-05-13 | Fix |
| CVE-2021-42969 | Anaconda3 OS command injection | 8.8v3.1 | 1.9% | 2022-05-13 | |
| CVE-2021-42967 | xxyopen Novel-Plus arbitrary file upload | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2021-33013 | mySCADA myPRO improper access control | 7.5v3.1 | 0.8% | 2022-05-13 | Fix |
| CVE-2021-33009 | mySCADA myPRO unrestricted upload of file with dangerous type | 7.5v3.1 | 1.2% | 2022-05-13 | Fix |
| CVE-2021-33005 | mySCADA myPRO path traversal | 7.5v3.1 | 1.5% | 2022-05-13 | Fix |
| CVE-2021-27505 | mySCADA myPRO exposure of information through directory listing | 7.5v3.1 | 1.0% | 2022-05-13 | Fix |
| CVE-2021-22275 | Denial of service vulnerability on Automation Runtime webserver | 8.6CNA v3.1 | 1.0% | 2022-05-13 | Fix |
| CVE-2021-42863 | JerryScript ecma_builtin_typedarray_prototype_filter buffer overflow | 9.8v3.1 | 1.7% | 2022-05-12 | |
| CVE-2021-40399 | WPS Office exploitable use-after-free | 7.8v3.1 | 1.3% | 2022-05-12 | |
| CVE-2021-33149 | Intel(R) Processors observable discrepancy | 5.5v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-33135 | Intel(R) SGX Linux kernel drivers resource exhaustion | 5.5v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33130 | Intel(R) RealSense(TM) ID Solution F450 insecure default initialization | 4.6v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-33124 | Intel(R) Processors BIOS authenticated code module for some out-of-bounds write | 6.7v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33123 | Intel(R) Processors BIOS authenticated code module for some improper access control | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33122 | Intel(R) Processors BIOS firmware for some insufficient control flow management | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33117 | Intel(R) Xeon(R) Scalable Processors improper access control | 5.5v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33108 | Intel(R) In-Band Manageability software improper input validation | 6.7v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-33103 | Intel processors BIOS authenticated code module vulnerability | 6.7v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33083 | Intel(R) SSD firmware for some improper authentication | 4.4v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-33082 | Intel(R) SSD and Intel(R) Optane(TM) SSD Products improper removal of sensitive information | 4.6v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33080 | Intel SSD DC and Optane SSD DC firmware information disclosure | 6.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33078 | Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products firmware for some race condition | 4.7v3.1 | 0.1% | 2022-05-12 | Fix |
| CVE-2021-33077 | Intel SSD and Optane SSD DC firmware insufficient control flow management | 6.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33075 | Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products race condition | 4.7v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-33074 | Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products protection mechanism failure | 4.6v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-33069 | Intel(R) SSD firmware for some improper resource release | 5.5v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-27777 | HCL Unica Platform is vulnerable to XML external entity (XXE) injection | 7.5CNA v3.1 | 0.8% | 2022-05-12 | Fix |
| CVE-2021-27773 | HCL Sametime is vulnerable to clickjacking | 4.2CNA v3.1 | 0.5% | 2022-05-12 | Fix |
| CVE-2021-27772 | HCL Sametime is vulnerable to an information disclosure | 7.1CNA v3.1 | 0.7% | 2022-05-12 | Fix |
| CVE-2021-27771 | HCL Sametime is susceptible a file transfer service vulnerability | 8.2CNA v3.1 | 0.7% | 2022-05-12 | Fix |
| CVE-2021-27770 | HCL Sametime FaviconService vulnerability | 6.8CNA v3.1 | 0.7% | 2022-05-12 | Fix |
| CVE-2021-27769 | HCL Sametime is vulnerable to an information disclosure | 5.3CNA v3.1 | 0.8% | 2022-05-12 | Fix |
| CVE-2021-27768 | An SSL certificate host verification vulnerability affects HCL Verse for Android | 6.3CNA v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-27500 | EIPStackGroup OpENer Ethernet/IP reachable assertion | 7.5v3.1 | 1.3% | 2022-05-12 | Fix |
| CVE-2021-27498 | EIPStackGroup OpENer Ethernet/IP reachable assertion | 7.5v3.1 | 1.3% | 2022-05-12 | Fix |
| CVE-2021-27482 | EIPStackGroup OpENer Ethernet/IP out-of-bounds read | 7.5v3.1 | 1.3% | 2022-05-12 | Fix |
| CVE-2021-27478 | EIPStackGroup OpENer Ethernet/IP incorrect conversion between numeric types | 7.5v3.1 | 1.1% | 2022-05-12 | Fix |
| CVE-2021-26386 | AMD Ryzen™ Series out-of-bounds write | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-26369 | AMD Ryzen™ Series memory corruption | 7.8v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-26368 | AMD Ryzen™ Series insufficient verification of data authenticity | 4.4v3.1 | 0.1% | 2022-05-12 | Fix |
| CVE-2021-26366 | AMD Ryzen™ Series privilege escalation | 7.1v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-26363 | AMD Ryzen™ Series information disclosure | 4.4v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-26362 | A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability. | 7.1v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-26361 | AMD Ryzen™ Series information disclosure | 5.5v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-26351 | AMD Ryzen™ Series denial of service | 5.5v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2021-26317 | AMD Ryzen™ Series arbitrary code execution | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-26258 | Intel(R) Killer(TM) Control Center software improper access control | 7.8v3.1 | 0.7% | 2022-05-12 | Exploit codeFix |
| CVE-2021-22531 | NetIQ Access Manager cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-12 | |
| CVE-2021-0194 | Intel(R) In-Band Manageability software improper access control | 7.2v3.1 | 0.9% | 2022-05-12 | Fix |
| CVE-2021-0193 | Intel(R) In-Band Manageability software improper authentication | 7.2v3.1 | 1.0% | 2022-05-12 | Fix |
| CVE-2021-0190 | Intel(R) Processors BIOS firmware for some improper error handling | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0189 | Intel(R) Processors BIOS firmware for some out-of-range pointer offset | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0188 | Intel(R) Processors memory corruption | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0159 | Intel(R) Processors BIOS authenticated code module for some improper input validation | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0155 | Intel(R) Processors BIOS firmware for some unchecked return value | 5.5v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0154 | Intel(R) Processors BIOS firmware for some improper input validation | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0153 | Intel(R) Processors BIOS firmware for some out-of-bounds write | 7.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2021-0126 | Intel(R) Manageability Commander improper input validation | 8.0v3.1 | 0.4% | 2022-05-12 | Fix |
| CVE-2021-46744 | AMD Processors observable discrepancy | 6.5v3.1 | 0.3% | 2022-05-11 | Fix |
| CVE-2021-44167 | Fortinet FortiClientLinux incorrect permission assignment | 6.8CNA v3.1 | 0.5% | 2022-05-11 | Fix |
| CVE-2021-43081 | Fortinet FortiProxy cross-site scripting | 6.1CNA v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2021-43066 | Fortinet FortiClientWindows A external control of a file path | 8.4CNA v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-42651 | Pentest Collaboration Framework server-side template injection | 8.8v3.1 | 1.6% | 2022-05-11 | |
| CVE-2021-42648 | Cross-site scripting in code-server | 6.1v3.1 | 0.8% | 2022-05-11 | Fix |
| CVE-2021-42646 | WSO2 API Manager XML external entity injection | 9.1v3.1 | 3.7% | 2022-05-11 | |
| CVE-2021-39059 | IBM Jazz Team Server cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-05-11 | Fix |
| CVE-2021-38969 | IBM Spectrum Virtualize hard-coded credentials | 5.6CNA v3.0 | 0.7% | 2022-05-11 | Fix |
| CVE-2021-37851 | Local privilege escalation in ESET product for Windows | 7.3CNA v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-36614 | MikroTik RouterOS null pointer dereference | 6.5v3.1 | 2.2% | 2022-05-11 | |
| CVE-2021-36613 | MikroTik RouterOS null pointer dereference | 6.5v3.1 | 2.2% | 2022-05-11 | |
| CVE-2021-34606 | XINJE XD/E Series PLC Program Tool DLL hijacking | 7.3v3.1 | 0.4% | 2022-05-11 | |
| CVE-2021-34605 | Xinje XD/E Series PLC Program Tool Zip Slip | 7.3v3.1 | 2.5% | 2022-05-11 | |
| CVE-2021-34085 | Glensawyer MP3GAIN out-of-bounds read | 9.8v3.1 | 1.9% | 2022-05-11 | Fix |
| CVE-2021-33317 | TRENDnet Ti-pg1284i null pointer dereference | 7.5v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2021-33316 | TRENDnet Ti-pg1284i integer underflow | 9.8v3.1 | 1.0% | 2022-05-11 | Fix |
| CVE-2021-33315 | TRENDnet Ti-pg1284i integer underflow | 9.8v3.1 | 1.0% | 2022-05-11 | Fix |
| CVE-2021-31330 | ReviewBoard cross-site scripting | 5.4v3.1 | 0.8% | 2022-05-11 | Fix |
| CVE-2021-30361 | The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS. | 6.7NVD v3.1 | 4.5% | 2022-05-11 | Fix |
| CVE-2021-28290 | Identityserver4.admin Skoruba cross-site scripting | 6.1v3.1 | 0.6% | 2022-05-11 | |
| CVE-2021-26400 | AMD Processors information disclosure | 4.0v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26388 | AMD EPYC™ Processors out-of-bounds read | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26378 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26376 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26375 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26373 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26372 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26364 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26350 | AMD EPYC™ Processors SMU time-of-check time-of-use race condition | 4.7v3.1 | 0.1% | 2022-05-11 | Fix |
| CVE-2021-26349 | AMD EPYC processors SEV-SNP guest migration vulnerability | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26348 | AMD EPYC processors IOMMU TLB flush handling vulnerability | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26347 | AMD Ryzen 5000 Series improper quantity validation | 4.7v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26342 | AMD EPYC processors SEV guest TLB flush handling information disclosure | 3.3v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2021-26339 | AMD EPYC™ Processors denial of service | 5.5v3.1 | 0.3% | 2022-05-11 | Fix |
| CVE-2021-3611 | QEMU stack-based buffer overflow | 6.5NVD v3.1 | 0.5% | 2022-05-11 | Fix |
| CVE-2021-3254 | ASUS DSL-N14U_B1 denial of service | 7.5v3.1 | 1.8% | 2022-05-11 | |
| CVE-2021-46771 | AMD 3rd Gen AMD EPYC™ arbitrary code execution | 7.8v3.1 | 0.3% | 2022-05-10 | Fix |
| CVE-2021-43094 | OpenMRS Reference Application SQL injection | 9.8v3.1 | 1.3% | 2022-05-10 | Fix |
| CVE-2021-43010 | Safedog Apache SQL injection | 7.5v3.1 | 1.0% | 2022-05-10 | |
| CVE-2021-42645 | CMSimple_XH unrestricted file upload | 10.0v3.1 | 4.5% | 2022-05-10 | Fix |
| CVE-2021-42581 | Ramdajs Ramda prototype pollution | 9.1v3.1 | 1.4% | 2022-05-10 | Fix |
| CVE-2021-41545 | Siemens Desigo DXR2 uncaught exception | 7.5v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2021-39738 | Android CarSetings privilege escalation | 7.8v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2021-39700 | Android logic flaw | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2021-39670 | Android WallpaperManager.java denial of service | 5.5v3.1 | 0.2% | 2022-05-10 | Exploit codeFix |
| CVE-2021-39024 | IBM Guardium Data Encryption cross-site scripting | 4.8CNA v3.0 | 0.4% | 2022-05-10 | Fix |
| CVE-2021-26408 | Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality. | 7.1v3.1 | 0.3% | 2022-05-10 | Fix |
| CVE-2021-26390 | A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data. | 6.2v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2021-26370 | AMD 2nd Gen AMD EPYC™ improper input validation | 7.1v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2021-26353 | AMD 3rd Gen EPYC improper initialization | 7.8v3.1 | 0.3% | 2022-05-10 | Fix |
| CVE-2021-26352 | AMD Ryzen™ Series denial of service | 5.5v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2021-26332 | Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability. | 7.1v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2021-26324 | A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. | 7.8v3.1 | 0.3% | 2022-05-10 | Fix |
| CVE-2021-43712 | Employee Daily Task Management System stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-05-09 | |
| CVE-2021-20479 | IBM Cloud Pak System weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2022-05-09 | Fix |
| CVE-2021-42743 | Local privilege escalation via a default path in Splunk Enterprise Windows | 7.8v3.1 | 0.2% | 2022-05-06 | Fix |
| CVE-2021-39027 | IBM Guardium Data Encryption improper output encoding | 3.0CNA v3.0 | 0.3% | 2022-05-06 | Fix |
| CVE-2021-39023 | IBM Guardium Data Encryption information disclosure through error messages | 2.7CNA v3.0 | 0.9% | 2022-05-06 | Fix |
| CVE-2021-36912 | Andrea Pernici News Sitemap for Google WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-05-06 | |
| CVE-2021-33845 | Splunk Enterprise username enumeration through lockout message in REST API | 5.3v3.1 | 0.9% | 2022-05-06 | Fix |
| CVE-2021-31559 | Splunk Enterprise S2S TcpToken authentication bypass | 7.5v3.1 | 0.9% | 2022-05-06 | Fix |
| CVE-2021-27767 | HCL BigFix Platform console is affected by a privilege escalation | 6.7CNA v3.1 | 0.2% | 2022-05-06 | Fix |
| CVE-2021-27766 | HCL BigFix Platform client is affected by a privilege escalation | 6.7CNA v3.1 | 0.2% | 2022-05-06 | Fix |
| CVE-2021-27765 | HCL BigFix Platform Server API is affected by privilege escalation | 6.7CNA v3.1 | 0.3% | 2022-05-06 | Fix |
| CVE-2021-27764 | HCL BigFix WebUI Cookie missing attributes | 7.4CNA v3.1 | 0.6% | 2022-05-06 | Fix |
| CVE-2021-27762 | HCL BigFix Platform is affected by misconfigured security-related HTTP headers | 4.7CNA v3.1 | 0.7% | 2022-05-06 | Fix |
| CVE-2021-27761 | HCL BigFix Platform is affected by weak web transport security | 4.8CNA v3.1 | 0.4% | 2022-05-06 | Fix |
| CVE-2021-27760 | HCL Notes FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restart | 4.6CNA v3.1 | 0.7% | 2022-05-06 | |
| CVE-2021-27759 | HCL BigFix Inventory cross-site request forgery | 2.3CNA v3.1 | 0.3% | 2022-05-06 | Fix |
| CVE-2021-27758 | HCL BigFix Inventory cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2022-05-06 | Fix |
| CVE-2021-27751 | HCL Commerce is affected by an insufficient session expiration | 4.4CNA v3.1 | 0.2% | 2022-05-06 | Fix |
| CVE-2021-26253 | Bypass of Splunk Enterprise's implementation of DUO MFA | 8.1v3.1 | 0.8% | 2022-05-06 | Fix |
| CVE-2021-25746 | Ingress-nginx directive injection via annotations | 7.6CNA v3.1 | 1.4% | 2022-05-06 | Fix |
| CVE-2021-25745 | Ingress-nginx path can be pointed to service account token file | 7.6CNA v3.1 | 1.2% | 2022-05-06 | Fix |
| CVE-2021-23792 | com.twelvemonkeys.imageio:imageio-metadata XML external entity (XXE) injection | 9.8v3.1 | 1.0% | 2022-05-06 | Fix |
| CVE-2021-23592 | topthink/framework deserialization of untrusted data | 9.8v3.1 | 1.7% | 2022-05-06 | Fix |
| CVE-2021-45783 | Bookeen Notea Firmware path traversal | 4.6v3.1 | 1.9% | 2022-05-05 | Exploit code |
| CVE-2021-44057 | Improper authentication in Photo Station | 7.1CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2021-44056 | Improper authentication in Video Station | 7.1CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2021-44055 | Information leakage in Video Station | 5.3CNA v3.1 | 1.1% | 2022-05-05 | Fix |
| CVE-2021-44054 | QNAP Systems QuTScloud open redirect | 4.3CNA v3.1 | 0.6% | 2022-05-05 | Fix |
| CVE-2021-44053 | QNAP Systems QTS reflected XSS | 5.7CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2021-44052 | QNAP Systems QuTScloud arbitrary file read | 6.5CNA v3.1 | 1.6% | 2022-05-05 | Fix |
| CVE-2021-44051 | QNAP Systems QuTScloud command injection | 8.8CNA v3.1 | 1.7% | 2022-05-05 | Fix |
| CVE-2021-43547 | TwinOaks Computing CoreDX DDS Secure network amplification | 8.2v3.1 | 2.4% | 2022-05-05 | Fix |
| CVE-2021-42242 | jflyfox jfinal_cms command execution | 9.8v3.1 | 2.0% | 2022-05-05 | |
| CVE-2021-42183 | MasaCMS path traversal | 7.5v3.1 | 4.7% | 2022-05-05 | Exploit code |
| CVE-2021-41739 | Artica Tech Artica Proxy OS command injection | 9.8v3.1 | 2.6% | 2022-05-05 | |
| CVE-2021-39020 | IBM Guardium Data Encryption information disclosure | 2.0CNA v3.0 | 0.5% | 2022-05-05 | Fix |
| CVE-2021-38693 | QNAP Systems QuTScloud path traversal in thttpd | 5.3CNA v3.1 | 1.0% | 2022-05-05 | Fix |
| CVE-2021-38487 | RTI Connext Professional and Connext Micro denial of service | 9.1v3.1 | 3.4% | 2022-05-05 | Fix |
| CVE-2021-38447 | OCI OpenDDS denial of service | 7.5v3.1 | 2.1% | 2022-05-05 | Fix |
| CVE-2021-38445 | OCI OpenDDS Secure improper handling of length parameter inconsistency | 9.8v3.1 | 2.5% | 2022-05-05 | Fix |
| CVE-2021-38443 | Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure | 9.8v3.1 | 2.1% | 2022-05-05 | Fix |
| CVE-2021-38441 | Eclipse CycloneDDS write-what-where condition | 9.8v3.1 | 2.0% | 2022-05-05 | Fix |
| CVE-2021-38439 | GurumDDS heap-based buffer overflow | 9.8v3.1 | 2.6% | 2022-05-05 | Fix |
| CVE-2021-38435 | RTI Connext DDS Professional and Connext DDS Secure incorrect calculation of buffer size | 9.8v3.1 | 1.4% | 2022-05-05 | Fix |
| CVE-2021-38433 | RTI Connext DDS Professional and Connext DDS Secure stack-based buffer overflow | 7.8v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2021-38429 | OCI OpenDDS Secure network amplification | 9.1v3.1 | 1.4% | 2022-05-05 | Fix |
| CVE-2021-38427 | RTI Connext DDS Professional and Connext DDS Secure stack-based buffer overflow | 7.8v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2021-38425 | eProsima Fast DDS network amplification | 9.1v3.1 | 5.2% | 2022-05-05 | Fix |
| CVE-2021-38423 | GurumDDS Heap-based incorrect calculation of buffer size | 9.8v3.1 | 1.2% | 2022-05-05 | Fix |
| CVE-2021-25268 | Sophos Firewall Webadmin cross-site scripting | 8.4CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2021-25267 | Sophos Firewall Webadmin cross-site scripting | 6.8CNA v3.1 | 1.1% | 2022-05-05 | Fix |
| CVE-2021-43206 | Fortinet FortiOS, FortiProxy information disclosure through error messages | 4.3CNA v3.1 | 0.8% | 2022-05-04 | Fix |
| CVE-2021-43164 | Ruijie Networks Reyee OS A remote code execution | 8.8v3.1 | 35.0% | 2022-05-04 | Exploit code |
| CVE-2021-43163 | Ruijie Networks Reyee OS A remote code execution | 9.8v3.1 | 2.0% | 2022-05-04 | |
| CVE-2021-43162 | Ruijie Networks Reyee OS A remote code execution | 8.8v3.1 | 1.7% | 2022-05-04 | |
| CVE-2021-43161 | Ruijie Networks Reyee OS A remote code execution | 8.8v3.1 | 1.7% | 2022-05-04 | |
| CVE-2021-43160 | Ruijie Networks Reyee OS A remote code execution | 8.8v3.1 | 1.7% | 2022-05-04 | |
| CVE-2021-43159 | Ruijie Networks Reyee OS A remote code execution | 8.8v3.1 | 1.8% | 2022-05-04 | |
| CVE-2021-42235 | Enhancesoft osTicket SQL injection | 9.8v3.1 | 1.0% | 2022-05-04 | |
| CVE-2021-42192 | Konga incorrect authorization | 8.8v3.1 | 9.9% | 2022-05-04 | Nuclei |
| CVE-2021-42185 | Wdja search function SQL injection | 9.8v3.1 | 1.1% | 2022-05-04 | |
| CVE-2021-41032 | Fortinet FortiOS improper access control | 6.3CNA v3.1 | 0.6% | 2022-05-04 | Fix |
| CVE-2021-41020 | Fortinet FortiIsolator improper access control | 8.8CNA v3.1 | 0.6% | 2022-05-04 | Fix |
| CVE-2021-32010 | Clients may connect to a GateManager with TLS 1.0 | 5.6CNA v3.1 | 0.2% | 2022-05-04 | Fix |
| CVE-2021-20051 | SonicWall Global VPN Client uncontrolled search path | 7.8v3.1 | 0.7% | 2022-05-04 | Fix |
| CVE-2021-46440 | Insecure password handling vulnerability in Strapi | 7.5v3.1 | 2.8% | 2022-05-03 | Fix |
| CVE-2021-42218 | Rice Open Motion Planning Library memory leak | 7.5v3.1 | 1.0% | 2022-05-03 | |
| CVE-2021-42165 | MitraStar Gpt-2541gnac-n1 OS command injection | 8.8v3.1 | 13.7% | 2022-05-03 | Exploit code |
| CVE-2021-41959 | JerryScript memory leak | 7.5v3.1 | 1.2% | 2022-05-03 | |
| CVE-2021-39390 | PartKeepr stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-05-03 | |
| CVE-2021-29854 | IBM Maximo Asset Management HTTP header injection | 5.4CNA v3.0 | 1.1% | 2022-05-03 | Fix |
| CVE-2021-27439 | TencentOS-tiny integer overflow or wraparound | 9.8v3.1 | 1.5% | 2022-05-03 | Fix |
| CVE-2021-27435 | Arm mbed integer overflow or wraparound | 9.8v3.1 | 1.7% | 2022-05-03 | Fix |
| CVE-2021-27433 | Arm mbed-ualloc memory library integer overflow or wraparound | 9.8v3.1 | 1.7% | 2022-05-03 | Fix |
| CVE-2021-27431 | Arm CMSIS RTOS2 integer overflow or wraparound | 9.8v3.1 | 1.1% | 2022-05-03 | Fix |
| CVE-2021-27427 | RIOT OS integer overflow or wraparound | 9.8v3.1 | 1.6% | 2022-05-03 | Fix |
| CVE-2021-27425 | Cesanta Software Mongoose-OS integer overflow or wraparound | 9.8v3.1 | 1.6% | 2022-05-03 | Fix |
| CVE-2021-27421 | NXP MCUXpresso SDK integer overflow or wraparound | 9.8v3.1 | 0.9% | 2022-05-03 | Fix |
| CVE-2021-27419 | uClibc-ng integer overflow or wraparound | 9.8v3.1 | 1.7% | 2022-05-03 | Fix |
| CVE-2021-27417 | eCosCentric eCosPro RTOS integer overflow or wraparound | 9.8v3.1 | 0.6% | 2022-05-03 | Fix |
| CVE-2021-27411 | Micrium OS integer overflow or wraparound | 6.5v3.1 | 0.9% | 2022-05-03 | Fix |
| CVE-2021-22680 | NXP MQX integer overflow or wraparound | 9.8v3.1 | 1.5% | 2022-05-03 | Fix |
| CVE-2021-22573 | Incorrect signature verification on Google-oauth-java-client | 8.7CNA v3.1 | 0.3% | 2022-05-03 | Fix |
| CVE-2021-22556 | Google integer overflow in Fuchsia Kernel | 5.3CNA v3.1 | 0.2% | 2022-05-03 | Fix |
| CVE-2021-46790 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.5% | 2022-05-02 | Fix |
| CVE-2021-42532 | Adobe XMP Toolkit XMP-Toolkit SDK stack-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-05-02 | Fix |
| CVE-2021-42531 | Adobe XMP Toolkit XMP-Toolkit SDK stack-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-05-02 | Fix |
| CVE-2021-42530 | Adobe XMP Toolkit XMP-Toolkit SDK stack-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-05-02 | Fix |
| CVE-2021-42529 | Adobe XMP Toolkit XMP-Toolkit SDK stack-based buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-05-02 | Fix |
| CVE-2021-42528 | Adobe XMP Toolkit XMP-Toolkit null pointer dereference application denial of service | 5.5CNA v3.1 | 2.0% | 2022-05-02 | Fix |
| CVE-2021-41810 | Script injection in M-Files Admin | 5.2CNA v3.1 | 0.7% | 2022-05-02 | Fix |
| CVE-2021-40822 | GeoServer allows SSRF via the option for setting a proxy host | 7.5v3.1 | 18.9% | 2022-05-02 | NucleiExploit codeFix |
| CVE-2021-36844 | WP Subscribe WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2021-36784 | SUSE Rancher privilege escalation for users with create/update permissions in Global Roles | 7.2CNA v3.1 | 0.9% | 2022-05-02 | Fix |
| CVE-2021-36778 | SUSE Rancher exposure of repository credentials to external third-party sources | 7.3CNA v3.1 | 0.8% | 2022-05-02 | Fix |
| CVE-2021-31674 | Cyclos cross-site scripting | 6.1v3.1 | 3.9% | 2022-05-02 | Exploit code |
| CVE-2021-31673 | Cyclos cross-site scripting | 6.1v3.1 | 2.6% | 2022-05-02 | Exploit code |
| CVE-2021-29859 | IBM Cloud Pak for Business Automation unauthorized access | 3.5CNA v3.0 | 0.3% | 2022-05-02 | Fix |
| CVE-2021-25102 | All In One WP Security WordPress plugin authenticated reflected cross-site scripting | 4.7NVD v3.1 | 0.8% | 2022-05-02 | Fix |
| CVE-2021-25086 | Advanced Page Visit Counter WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.3% | 2022-05-02 | Fix |
| CVE-2021-25002 | Tipsacarrier WordPress plugin unauthenticated orders disclosure | 7.5NVD v3.1 | 1.5% | 2022-05-02 | Fix |
| CVE-2021-4200 | SUSE Rancher write access to the Catalog for any user when restricted-admin role is enabled | 5.4CNA v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2021-4138 | Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname. | 5.3v3.1 | 0.8% | 2022-05-02 | Fix |
| CVE-2021-3750 | QEMU USB EHCI controller emulation use-after-free | 8.2NVD v3.1 | 0.5% | 2022-05-02 | Fix |
| CVE-2021-3643 | sox out-of-bounds read | 9.1NVD v3.1 | 1.6% | 2022-05-02 | Fix |
| CVE-2021-42001 | PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure | 8.0CNA v3.1 | 0.5% | 2022-04-30 | Fix |
| CVE-2021-41994 | PingID iOS mobile application vulnerable to pre-computed dictionary attacks | 6.6CNA v3.1 | 0.2% | 2022-04-30 | Fix |
| CVE-2021-41993 | PingID Android mobile application vulnerable to pre-computed dictionary attacks | 6.6CNA v3.1 | 0.2% | 2022-04-30 | Fix |
| CVE-2021-41992 | PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass | 7.7CNA v3.1 | 0.5% | 2022-04-30 | Fix |
| CVE-2021-44596 | Wondershare Dr.Fone remote code execution | 9.8v3.1 | 22.3% | 2022-04-29 | Exploit code |
| CVE-2021-44595 | Wondershare Dr.Fone missing authorization | 8.8v3.1 | 20.6% | 2022-04-29 | Exploit code |
| CVE-2021-43938 | Elcomplus SmartPTT SCADA Server information exposure | 9.8v3.1 | 1.1% | 2022-04-29 | Fix |
| CVE-2021-43937 | Elcomplus SmartPTT SCADA Server cross-site request forgery | 8.8v3.1 | 0.4% | 2022-04-29 | Fix |
| CVE-2021-41948 | Subrion CMS cross-site scripting (XSS) vulnerability in the `contact us` plugin | 5.4v3.1 | 0.5% | 2022-04-29 | |
| CVE-2021-41942 | Msvod Cms SQL injection | 7.5v3.1 | 1.1% | 2022-04-29 | |
| CVE-2021-39082 | IBM UrbanCode Deploy weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2022-04-29 | Fix |
| CVE-2021-36207 | Johnson Controls Metasys privilege escalation | 8.8CNA v3.1 | 1.0% | 2022-04-29 | Fix |
| CVE-2021-4207 | QEMU QXL display device cursor handling race condition | 8.2NVD v3.1 | 0.4% | 2022-04-29 | Fix |
| CVE-2021-4206 | QEMU integer overflow | 8.2NVD v3.1 | 0.8% | 2022-04-29 | Fix |
| CVE-2021-3982 | gnome-shell privilege escalation | 5.5NVD v3.1 | 0.3% | 2022-04-29 | |
| CVE-2021-43939 | Elcomplus SmartPtt improper authorization | 8.8v3.1 | 0.6% | 2022-04-28 | Fix |
| CVE-2021-43934 | Elcomplus SmartPtt unrestricted upload of file with dangerous type | 9.8v3.1 | 1.2% | 2022-04-28 | Fix |
| CVE-2021-43932 | Elcomplus SmartPtt cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-04-28 | Fix |
| CVE-2021-43930 | Elcomplus SmartPtt path traversal | 4.9v3.1 | 1.0% | 2022-04-28 | Fix |
| CVE-2021-41945 | Improper input validation in Httpx | 9.1v3.1 | 2.1% | 2022-04-28 | Fix |
| CVE-2021-41921 | xxyopen Novel-Plus unrestricted file upload | 9.8v3.1 | 1.6% | 2022-04-28 | |
| CVE-2021-38952 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-04-28 | Fix |
| CVE-2021-33436 | NoMachine DLL hijacking | 7.3v3.1 | 0.3% | 2022-04-28 | Fix |
| CVE-2021-46442 | D-Link DIR-825 authentication bypass | 9.8v3.1 | 55.5% | 2022-04-27 | Emerging Threats |
| CVE-2021-46441 | D-Link DIR-825 OS command injection | 8.8v3.1 | 32.6% | 2022-04-27 | Emerging Threats |
| CVE-2021-46424 | Telesquare TLR-2005KSH arbitrary file deletion | 9.1v3.1 | 36.5% | 2022-04-27 | NucleiExploit code |
| CVE-2021-46423 | Telesquare TLR-2005KSH configuration file download vulnerability | 5.3v3.1 | 1.5% | 2022-04-27 | |
| CVE-2021-46422 | Telesquare SDT-CS3B1 OS command injection | 9.8NVD v3.1 | 94.4% | 2022-04-27 | Reported exploitedNucleiEmerging ThreatsExploit code |
| CVE-2021-46421 | Franklinfueling TS-550 EVO path traversal | 7.5v3.1 | 5.9% | 2022-04-27 | |
| CVE-2021-46420 | Franklinfueling TS-550 EVO path traversal | 7.5v3.1 | 5.6% | 2022-04-27 | |
| CVE-2021-41041 | The Eclipse Foundation Eclipse OpenJ9 unchecked return value | 5.3v3.1 | 1.0% | 2022-04-27 | Fix |
| CVE-2021-38939 | IBM QRadar SIEM sensitive information in log files | 3.7CNA v3.0 | 0.8% | 2022-04-27 | Fix |
| CVE-2021-38919 | IBM QRadar SIEM service tokens information disclosure | 5.9CNA v3.0 | 1.1% | 2022-04-27 | Fix |
| CVE-2021-38878 | IBM QRadar SIEM key exchange without authentication | 5.9CNA v3.0 | 1.2% | 2022-04-27 | Fix |
| CVE-2021-38874 | IBM QRadar SIEM tenant and domain boundaries vulnerability | 4.3CNA v3.0 | 0.7% | 2022-04-27 | Fix |
| CVE-2021-38869 | IBM QRadar SIEM session fixation | 4.3CNA v3.0 | 0.9% | 2022-04-27 | Fix |
| CVE-2021-34602 | Bender Charge Controller: Long URL could lead to webserver crash | 8.8v3.1 | 1.4% | 2022-04-27 | Fix |
| CVE-2021-34601 | Bender Charge Controller: Hard-coded credentials in Charge controller | 9.8v3.1 | 1.1% | 2022-04-27 | Fix |
| CVE-2021-34592 | Bender Charge controller: Command injection via Web interface | 8.8v3.1 | 1.4% | 2022-04-27 | Fix |
| CVE-2021-34591 | Bender Charge Controller: Local privilege escalation | 7.8v3.1 | 0.2% | 2022-04-27 | Fix |
| CVE-2021-34590 | Bender Charge Controller: Cross-site scripting | 5.4v3.1 | 0.4% | 2022-04-27 | Fix |
| CVE-2021-34589 | Bender Charge Controller: RFID leak | 7.5v3.1 | 1.0% | 2022-04-27 | Fix |
| CVE-2021-34588 | Bender Charge Controller: Unprotected data export | 8.6v3.1 | 0.9% | 2022-04-27 | Fix |
| CVE-2021-34587 | Bender Charge Controller: Long URL could lead to webserver crash | 5.3v3.1 | 0.9% | 2022-04-27 | Fix |
| CVE-2021-29776 | IBM QRadar SIEM information disclosure | 3.1CNA v3.0 | 0.6% | 2022-04-27 | Fix |
| CVE-2021-25266 | Sophos Intercept X for Mobile (Android) insecure storage of sensitive information | 3.9CNA v3.1 | 0.2% | 2022-04-27 | Fix |
| CVE-2021-3523 | apicast improper preservation of permissions | 7.5NVD v3.1 | 0.8% | 2022-04-27 | |
| CVE-2021-36895 | Tripetto WordPress plugin unauthenticated cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-04-26 | Fix |
| CVE-2021-36867 | Psychological tests and quizzes WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-04-26 | |
| CVE-2021-26629 | Tobesoft XPLATFORM path traversal | 8.8v3.1 | 1.5% | 2022-04-26 | |
| CVE-2021-26628 | MaxBoard XSS and file upload | 6.1NVD v3.1 | 0.8% | 2022-04-26 | |
| CVE-2021-46782 | Pricing Table by Supsystic WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-04-25 | Fix |
| CVE-2021-46781 | Coming Soon by Supsystic WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-04-25 | Fix |
| CVE-2021-46780 | Easy Google Maps WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-04-25 | Fix |
| CVE-2021-45842 | TerraMaster TOS wapNasIPS API endpoint information disclosure | 7.5v3.1 | 2.4% | 2022-04-25 | |
| CVE-2021-45841 | TerraMaster F2-210 improper authentication | 8.1v3.1 | 8.3% | 2022-04-25 | MetasploitExploit codeKCV |
| CVE-2021-45840 | TerraMaster F2-210 arbitrary command execution | 9.8v3.1 | 3.8% | 2022-04-25 | |
| CVE-2021-45839 | TerraMaster TOS webNasIPS API endpoint information disclosure | 6.5v3.1 | 9.7% | 2022-04-25 | MetasploitExploit codeKCV |
| CVE-2021-45837 | TerraMaster F2-210 arbitrary command execution | 9.8v3.1 | 15.7% | 2022-04-25 | MetasploitExploit codeKCV |
| CVE-2021-45836 | TerraMaster F2-210 arbitrary command execution | 8.8v3.1 | 2.4% | 2022-04-25 | |
| CVE-2021-40680 | Artica Tech WebProxy Artica Proxy path traversal | 8.1v3.1 | 1.3% | 2022-04-25 | |
| CVE-2021-39040 | IBM Planning Analytics Workspace unrestricted file upload | 6.3CNA v3.0 | 0.8% | 2022-04-25 | Fix |
| CVE-2021-36460 | Veryfitpro improper authentication | 7.8v3.1 | 0.4% | 2022-04-25 | |
| CVE-2021-35250 | SolarWinds Serv-U path traversal | 7.5CNA v3.1 | 12.8% | 2022-04-25 | NucleiExploit codeFix |
| CVE-2021-25111 | English WordPress Admin plugin unauthenticated open redirect | 6.1NVD v3.1 | 1.9% | 2022-04-25 | NucleiFix |
| CVE-2021-25094 | Tatsu WordPress plugin unauthenticated RCE | 8.1NVD v3.1 | 83.4% | 2022-04-25 | NucleiMetasploitExploit codeFix |
| CVE-2021-24957 | Advanced Page Visit Counter WordPress plugin Subscriber+ blind SQL injection | 8.8NVD v3.1 | 1.3% | 2022-04-25 | Fix |
| CVE-2021-24805 | DW Question and Answer Pro WordPress plugin Multiple CSRF | 4.3NVD v3.1 | 0.4% | 2022-04-25 | Fix |
| CVE-2021-24800 | DW Question and Answer Pro WordPress plugin arbitrary comment Edition via IDOR | 4.3NVD v3.1 | 0.7% | 2022-04-25 | Fix |
| CVE-2021-4225 | SP Project and Document Manager WordPress plugin Subscriber+ Shell upload | 8.8NVD v3.1 | 1.7% | 2022-04-25 | Fix |
| CVE-2021-38946 | IBM Cognos Analytics cross-site scripting | 5.4CNA v3.0 | 0.7% | 2022-04-22 | Fix |
| CVE-2021-38905 | IBM Cognos Analytics report access control vulnerability | 4.3CNA v3.0 | 0.9% | 2022-04-22 | Fix |
| CVE-2021-38904 | IBM Cognos Analytics browser autocomplete settings information disclosure | 4.6CNA v3.0 | 1.8% | 2022-04-22 | Fix |
| CVE-2021-38903 | IBM Cognos Analytics cross-site scripting | 5.4CNA v3.0 | 1.0% | 2022-04-22 | Fix |
| CVE-2021-38886 | IBM Cognos Analytics cross-site request forgery | 4.3CNA v3.0 | 0.6% | 2022-04-22 | Fix |
| CVE-2021-36203 | Metasys System Configuration Tool Pro server-side request forgery | 5.3CNA v3.1 | 0.9% | 2022-04-22 | Fix |
| CVE-2021-32929 | Uffizio GPS Tracker cross-site request forgery | 8.8v3.1 | 0.4% | 2022-04-22 | |
| CVE-2021-32927 | Uffizio GPS Tracker cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-04-22 | |
| CVE-2021-29824 | IBM Cognos Analytics Data Connections page vulnerability | 3.1CNA v3.0 | 0.9% | 2022-04-22 | Fix |
| CVE-2021-20464 | IBM Cognos Analytics XML entity expansion | 6.5CNA v3.0 | 1.4% | 2022-04-22 | Fix |
| CVE-2021-4212 | Lenovo BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2022-04-22 | Fix |
| CVE-2021-4211 | Lenovo BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2022-04-22 | Fix |
| CVE-2021-4210 | Lenovo BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2022-04-22 | Fix |
| CVE-2021-3972 | Lenovo Notebook BIOS active debug code | 6.7CNA v3.1 | 2.8% | 2022-04-22 | Exploit codeFix |
| CVE-2021-3971 | Lenovo Notebook BIOS active debug code | 6.7CNA v3.1 | 1.2% | 2022-04-22 | Fix |
| CVE-2021-3970 | Lenovo Notebook BIOS privilege escalation | 6.7CNA v3.1 | 1.3% | 2022-04-22 | Fix |
| CVE-2021-3898 | Motorola Device Help Android App improper certificate validation | 6.8CNA v3.1 | 0.5% | 2022-04-22 | |
| CVE-2021-3897 | Lenovo Fan Power Controller2 (FPC2) authentication bypass | 9.8CNA v3.1 | 1.3% | 2022-04-22 | Fix |
| CVE-2021-3849 | Lenovo Fan Power Controller2 (FPC2) authentication bypass | 9.8CNA v3.1 | 1.3% | 2022-04-22 | Fix |
| CVE-2021-3722 | Lenovo PC Manager incorrect default permissions | 5.0CNA v3.1 | 0.2% | 2022-04-22 | Fix |
| CVE-2021-3721 | Lenovo PC Manager out-of-bounds write | 5.5CNA v3.1 | 0.2% | 2022-04-22 | Fix |
| CVE-2021-43708 | Helpsystems Titus DATA Classification improper preservation of permissions | 5.5v3.1 | 0.3% | 2022-04-21 | |
| CVE-2021-41162 | Cross-site scripting in Combodo iTop | 9.3CNA v3.1 | 0.7% | 2022-04-21 | Fix |
| CVE-2021-41161 | Combodo iTop XSS in csvimport in versions | 9.3CNA v3.1 | 0.7% | 2022-04-21 | Fix |
| CVE-2021-35229 | SolarWinds Database Performance Monitor cross-site scripting vulnerability using SQL Query | 6.8CNA v3.1 | 3.2% | 2022-04-21 | Fix |
| CVE-2021-23055 | NGINX Ingress Controller incorrect permission assignment | 6.5v3.1 | 0.8% | 2022-04-21 | Fix |
| CVE-2021-43990 | ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform | 5.3v3.1 | 0.7% | 2022-04-20 | Fix |
| CVE-2021-43988 | ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform | 5.9v3.1 | 0.9% | 2022-04-20 | Fix |
| CVE-2021-43986 | ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform | 7.0v3.1 | 0.2% | 2022-04-20 | Fix |
| CVE-2021-43933 | ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform | 5.9v3.1 | 0.7% | 2022-04-20 | Fix |
| CVE-2021-43481 | WebTareas An SQL injection | 9.8v3.1 | 5.6% | 2022-04-20 | Exploit code |
| CVE-2021-38483 | ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform | 5.7v3.1 | 0.2% | 2022-04-20 | Fix |
| CVE-2021-37740 | Mdt Scn-ip000.03 denial of service | 7.5v3.1 | 4.5% | 2022-04-20 | Exploit codeFix |
| CVE-2021-44519 | Citrix Xenmobile Server path traversal | 8.8v3.1 | 2.7% | 2022-04-19 | Fix |
| CVE-2021-43129 | D2L Brightspace quiz right-click disable option vulnerability | 6.5v3.1 | 1.7% | 2022-04-19 | Exploit codeFix |
| CVE-2021-41570 | Veritas NetBackup cross-site scripting | 5.4v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2021-39078 | IBM Security Guardium cleartext storage of sensitive information | 4.1CNA v3.0 | 0.1% | 2022-04-19 | Fix |
| CVE-2021-39076 | IBM Security Guardium weak cryptographic algorithm | 3.7CNA v3.0 | 0.6% | 2022-04-19 | Fix |
| CVE-2021-39072 | IBM Security Guardium man-in-the-middle | 5.9CNA v3.0 | 1.3% | 2022-04-19 | Fix |
| CVE-2021-39033 | IBM Sterling B2B Integrator information disclosure through error messages | 4.3CNA v3.0 | 1.0% | 2022-04-19 | Fix |
| CVE-2021-26627 | EDrhyme Qcp 200W information exposure | 7.5v3.1 | 1.4% | 2022-04-19 | |
| CVE-2021-26626 | TOBESOFT XPLATFORM improper input validation | 8.8v3.1 | 1.2% | 2022-04-19 | Fix |
| CVE-2021-26625 | Tobesoft Nexacro arbitrary file download | 8.8v3.1 | 0.6% | 2022-04-19 | |
| CVE-2021-23283 | Eaton Intelligent Power Protector stored cross-site scripting | 5.2CNA v3.1 | 0.5% | 2022-04-19 | Fix |
| CVE-2021-4096 | Fancy Product Designer WordPress plugin cross-site request forgery to arbitrary file upload | 8.8v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2021-3101 | Hotdog privilege escalation | 8.8NVD v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2021-3100 | Amazon Web Services Log4j hotpatch package privilege escalation | 8.8NVD v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2021-46122 | TP-Link Tl-wr840n buffer overflow | 7.2v3.1 | 1.5% | 2022-04-18 | |
| CVE-2021-42782 | opensc stack-based buffer overflow | 5.3NVD v3.1 | 2.8% | 2022-04-18 | Fix |
| CVE-2021-42781 | opensc heap-based buffer overflow | 5.3NVD v3.1 | 2.9% | 2022-04-18 | Fix |
| CVE-2021-42780 | opensc unchecked return value | 5.3NVD v3.1 | 2.1% | 2022-04-18 | Fix |
| CVE-2021-42779 | opensc heap use-after-free | 5.3NVD v3.1 | 2.1% | 2022-04-18 | Fix |
| CVE-2021-42778 | opensc heap double free | 5.3NVD v3.1 | 2.1% | 2022-04-18 | Fix |
| CVE-2021-25120 | Easy Social Feed WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.9% | 2022-04-18 | NucleiFix |
| CVE-2021-23286 | Eaton Intelligent Power Manager Infrastructure CSV injection | 5.7CNA v3.1 | 0.4% | 2022-04-18 | Fix |
| CVE-2021-23285 | Eaton Intelligent Power Manager Infrastructure reflected cross-site scripting | 3.1CNA v3.1 | 0.4% | 2022-04-18 | Fix |
| CVE-2021-23284 | Eaton Intelligent Power Manager Infrastructure stored cross-site scripting | 5.7CNA v3.1 | 0.5% | 2022-04-18 | Fix |
| CVE-2021-3681 | ansible insufficiently protected credentials | 5.5v3.1 | 0.2% | 2022-04-18 | |
| CVE-2021-3652 | 389-ds-base improper authentication | 6.5v3.1 | 1.5% | 2022-04-18 | Fix |
| CVE-2021-3624 | dcraw There is an integer overflow | 7.8NVD v3.1 | 0.9% | 2022-04-18 | Fix |
| CVE-2021-3503 | Wildfly information disclosure | 4.3v3.1 | 1.1% | 2022-04-18 | Fix |
| CVE-2021-44510 | Fisglobal Gt.m incorrect buffer size calculation | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44509 | Fisglobal Gt.m integer underflow | 7.5v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2021-44508 | Fisglobal Gt.m null pointer dereference | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44507 | Fisglobal Gt.m null pointer dereference | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44506 | Yottadb Gt.m null pointer dereference | 7.5v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2021-44505 | Yottadb Gt.m null pointer dereference | 7.5v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2021-44504 | Fisglobal Gt.m incorrect calculation | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44503 | Fisglobal Gt.m memory corruption | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44502 | Fisglobal Gt.m resource exhaustion | 7.5v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2021-44501 | Fisglobal Gt.m null pointer dereference | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44500 | Fisglobal Gt.m divide by zero | 7.5v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2021-44499 | Fisglobal Gt.m buffer overflow | 7.5v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2021-44498 | Fisglobal Gt.m null pointer dereference | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44497 | Fisglobal Gt.m use-after-free | 7.5v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2021-44496 | Fisglobal Gt.m memory corruption | 9.8v3.1 | 2.0% | 2022-04-15 | Fix |
| CVE-2021-44495 | Yottadb null pointer dereference | 7.5v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2021-44494 | Yottadb null pointer dereference | 7.5v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2021-44493 | Yottadb buffer overflow | 7.5v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2021-44492 | Yottadb null pointer dereference | 7.5v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2021-44491 | Yottadb incorrect calculation | 7.5v3.1 | 1.0% | 2022-04-15 | |
| CVE-2021-44490 | Yottadb incorrect calculation | 7.5v3.1 | 1.0% | 2022-04-15 | |
| CVE-2021-44489 | Yottadb integer underflow | 7.5v3.1 | 1.0% | 2022-04-15 | |
| CVE-2021-44488 | Yottadb out-of-bounds write | 9.1v3.1 | 1.0% | 2022-04-15 | |
| CVE-2021-44487 | Yottadb null pointer dereference | 7.5v3.1 | 1.2% | 2022-04-15 | |
| CVE-2021-44486 | YottaDB op_write function pointer vulnerability | 9.8v3.1 | 1.8% | 2022-04-15 | |
| CVE-2021-44485 | Yottadb null pointer dereference | 7.5v3.1 | 1.2% | 2022-04-15 | |
| CVE-2021-44484 | Yottadb null pointer dereference | 7.5v3.1 | 1.2% | 2022-04-15 | |
| CVE-2021-44483 | Yottadb divide by zero | 7.5v3.1 | 1.2% | 2022-04-15 | |
| CVE-2021-44482 | Yottadb null pointer dereference | 7.5v3.1 | 1.0% | 2022-04-15 | |
| CVE-2021-44481 | Yottadb null pointer dereference | 7.5v3.1 | 1.1% | 2022-04-15 | |
| CVE-2021-42230 | Seowonintech 130-slc remote code execution | 9.8v3.1 | 5.9% | 2022-04-15 | |
| CVE-2021-40386 | Kaseya Unitrends Backup arbitrary code execution | 9.8v3.1 | 1.9% | 2022-04-15 | |
| CVE-2021-36828 | WP Maintenance WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2021-36205 | Johnson Controls Metasys session token vulnerability | 8.1CNA v3.1 | 1.0% | 2022-04-15 | Fix |
| CVE-2021-45228 | Coins-global Coins Construction Cloud An cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-14 | Fix |
| CVE-2021-45227 | Coins-global Coins Construction Cloud cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-14 | Fix |
| CVE-2021-44394 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-44375 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-44366 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-44357 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-44356 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-44355 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-44354 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.8% | 2022-04-14 | |
| CVE-2021-43633 | Messaging Web Application cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-14 | |
| CVE-2021-43290 | Thoughtworks gocd path traversal | 9.8v3.1 | 3.2% | 2022-04-14 | KCVFix |
| CVE-2021-43289 | Thoughtworks gocd path traversal | 7.5v3.1 | 2.3% | 2022-04-14 | Fix |
| CVE-2021-43288 | Thoughtworks gocd cross-site scripting | 5.4v3.1 | 0.9% | 2022-04-14 | Fix |
| CVE-2021-43287 | Thoughtworks gocd information disclosure | 7.5v3.1 | 28.0% | 2022-04-14 | NucleiExploit codeKCVFix |
| CVE-2021-43286 | Thoughtworks gocd command injection | 8.8v3.1 | 2.7% | 2022-04-14 | Fix |
| CVE-2021-43257 | MantisBT CSV injection unprivileged user access in csv_export.php | 7.8v3.1 | 0.9% | 2022-04-14 | Fix |
| CVE-2021-40426 | Sound Exchange libsox sphere.c start_read functionality heap-based buffer overflow | 8.8NVD v3.1 | 2.2% | 2022-04-14 | Fix |
| CVE-2021-40425 | Webroot Secure Anywhere IOCTL GetProcessCommand and B_03 out-of-bounds read | 6.5NVD v3.1 | 0.3% | 2022-04-14 | |
| CVE-2021-40424 | Webroot Secure Anywhere IOCTL GetProcessCommand and B_03 out-of-bounds read | 6.5NVD v3.1 | 0.3% | 2022-04-14 | |
| CVE-2021-40422 | Swift Sensors Gateway device password generation functionality authentication bypass | 10.0v3.1 | 5.8% | 2022-04-14 | |
| CVE-2021-40405 | Reolink RLC-410W cgiserver.cgi Upgrade API functionality denial of service | 6.5NVD v3.1 | 1.1% | 2022-04-14 | |
| CVE-2021-40402 | Gerbv out-of-bounds read | 7.5NVD v3.1 | 1.5% | 2022-04-14 | |
| CVE-2021-40400 | Gerbv out-of-bounds read | 7.5NVD v3.1 | 1.3% | 2022-04-14 | Fix |
| CVE-2021-40398 | Accusoft ImageGear parse_raster_data functionality out-of-bounds write | 7.8v3.1 | 0.7% | 2022-04-14 | |
| CVE-2021-40392 | Moxa MXView Series Web application functionality information disclosure | 7.5v3.1 | 0.6% | 2022-04-14 | |
| CVE-2021-40390 | Moxa MXView Series Web application functionality authentication bypass | 9.8v3.1 | 2.4% | 2022-04-14 | |
| CVE-2021-28505 | Arista EOS IPv4 access-list VXLAN matching improper access control | 7.5CNA v3.1 | 0.9% | 2022-04-14 | |
| CVE-2021-21967 | Sealevel Systems SeaConnect 370W OTA update task functionality out-of-bounds write | 5.9v3.1 | 0.7% | 2022-04-14 | |
| CVE-2021-21956 | CloudLinux Imunify360 deserialization of untrusted data | 7.8v3.1 | 1.3% | 2022-04-14 | |
| CVE-2021-21949 | Accusoft ImageGear JPEG-JFIF Scan header parser functionality improper array index validation | 8.8NVD v3.1 | 1.1% | 2022-04-14 | |
| CVE-2021-21948 | Chitubox AnyCubic Plugin readDatHeadVec functionality heap-based buffer overflow | 7.8v3.1 | 0.8% | 2022-04-14 | |
| CVE-2021-21947 | Accusoft ImageGear heap-based buffer overflow | 8.8NVD v3.1 | 1.1% | 2022-04-14 | |
| CVE-2021-21946 | Accusoft ImageGear heap-based buffer overflow | 8.8NVD v3.1 | 1.1% | 2022-04-14 | |
| CVE-2021-21945 | Accusoft ImageGear TIFF parser functionality heap-based buffer overflow | 8.8NVD v3.1 | 1.1% | 2022-04-14 | |
| CVE-2021-21944 | Accusoft ImageGear TIFF parser functionality heap-based buffer overflow | 8.8NVD v3.1 | 1.1% | 2022-04-14 | |
| CVE-2021-21943 | Accusoft ImageGear XWD parser functionality heap-based buffer overflow | 8.8NVD v3.1 | 1.6% | 2022-04-14 | |
| CVE-2021-21942 | Accusoft ImageGear TIFF YCbCr image parser functionality out-of-bounds write | 8.8NVD v3.1 | 2.0% | 2022-04-14 | |
| CVE-2021-21939 | Accusoft ImageGear XWD parser functionality heap-based buffer overflow | 8.8NVD v3.1 | 1.6% | 2022-04-14 | |
| CVE-2021-21938 | Accusoft ImageGear Palette box parser functionality heap-based buffer overflow | 8.8NVD v3.1 | 1.9% | 2022-04-14 | |
| CVE-2021-21914 | Accusoft ImageGear DecoderStream::Append functionality heap-based buffer overflow | 8.8NVD v3.1 | 1.6% | 2022-04-14 | |
| CVE-2021-46167 | Wizplat PD065 authentication module improper access control | 7.8v3.1 | 0.4% | 2022-04-13 | |
| CVE-2021-44520 | Citrix Xenmobile Server command injection | 8.8v3.1 | 5.8% | 2022-04-13 | Fix |
| CVE-2021-43742 | CMSimple cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-13 | |
| CVE-2021-43741 | CMSimple path traversal | 9.8v3.1 | 4.4% | 2022-04-13 | |
| CVE-2021-43154 | CMS Made Simple cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-13 | |
| CVE-2021-42136 | Vanderbilt REDCap Missing Data Codes functionality stored cross-site scripting | 9.0v3.1 | 4.7% | 2022-04-13 | Exploit codeFix |
| CVE-2021-41119 | DoS vulnerabiliity in wire-server json parser | 5.3CNA v3.1 | 1.4% | 2022-04-13 | |
| CVE-2021-22797 | Schneider Electric EcoStruxure Control Expert path traversal | 7.8CNA v3.1 | 26.1% | 2022-04-13 | Fix |
| CVE-2021-22795 | Schneider Electric StruxureWare Data Center Expert OS command injection | 9.1CNA v3.1 | 3.1% | 2022-04-13 | Fix |
| CVE-2021-22794 | Schneider Electric StruxureWare Data Center Expert path traversal | 9.1CNA v3.1 | 2.2% | 2022-04-13 | Fix |
| CVE-2021-42255 | Blueplanet-works Appguard insecure permissions | 7.8v3.1 | 0.3% | 2022-04-12 | |
| CVE-2021-42029 | Siemens SIMATIC STEP 7 (TIA Portal) V15 improper access control | 7.8v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2021-41005 | A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. | 6.5v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2021-41004 | A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. | 7.5v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2021-40368 | Siemens SIMATIC S7-400 CPU 412-1 DP V7 memory corruption | 7.5CNA v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2021-39814 | Android drm_fw.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39812 | Android TBD out-of-bounds read | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39809 | Android avrc_pars_ct.cc out-of-bounds read | 7.5v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2021-39808 | Android PreferencesHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39807 | Android SecureNfcEnabler.java privilege escalation | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39805 | Android l2c_ble.cc out-of-bounds read | 6.5v3.1 | 0.3% | 2022-04-12 | Fix |
| CVE-2021-39804 | Android HeifDecoderImpl.cpp crash | 6.5v3.1 | 0.4% | 2022-04-12 | Fix |
| CVE-2021-39803 | Android C2AllocatorIon.cpp out-of-bounds read | 6.5v3.1 | 0.6% | 2022-04-12 | Fix |
| CVE-2021-39802 | Android mprotect.c privilege escalation | 7.8v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2021-39801 | Android ion-ioctl.c use-after-free | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39800 | Android ion-ioctl.c information disclosure | 5.5v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39799 | Android AttributionSource.java insecure permissions | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39798 | Android Bitmap.cpp arbitrary code execution | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39797 | Android LauncherApps.java privilege escalation | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-39796 | Android HarmfulAppWarningActivity.java privilege escalation | 7.3v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2021-39794 | Android AdbService.java privilege escalation | 7.8v3.1 | 0.4% | 2022-04-12 | Fix |
| CVE-2021-36914 | CalderaWP License Manager reflected cross-site scripting | 6.1v3.1 | 0.5% | 2022-04-12 | |
| CVE-2021-32040 | MongoDB Server aggregation pipeline stack-based buffer overflow | 6.5CNA v3.1 | 2.0% | 2022-04-12 | Fix |
| CVE-2021-31805 | Expression language injection in Apache Struts | 9.8NVD v3.1 | 85.4% | 2022-04-12 | Reported exploitedNucleiExploit codeFix |
| CVE-2021-28544 | Apache Subversion SVN authz protected copyfrom paths regression | 4.3v3.1 | 2.8% | 2022-04-12 | Fix |
| CVE-2021-0707 | Android dma-buf.c memory corruption | 7.8v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2021-0694 | Android ActiveServices.java privilege escalation | 7.8v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2021-46742 | Huawei HarmonyOS tampering | 9.1v3.1 | 0.7% | 2022-04-11 | Fix |
| CVE-2021-46740 | Huawei HarmonyOS improper authentication | 7.5v3.1 | 0.8% | 2022-04-11 | Fix |
| CVE-2021-43442 | I3INTERNATIONAL AX46 logic flaw | 8.1v3.1 | 1.0% | 2022-04-11 | |
| CVE-2021-43177 | Improper one time password handling in devise-two-factor | 5.3v3.1 | 0.9% | 2022-04-11 | Fix |
| CVE-2021-40219 | Code injection in Bolt CMS | 8.8v3.1 | 3.4% | 2022-04-11 | Fix |
| CVE-2021-40065 | Huawei HarmonyOS service logic error vulnerability in the communication module | 7.5v3.1 | 0.8% | 2022-04-11 | Fix |
| CVE-2021-39068 | IBM Curam Social Program Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-04-11 | Fix |
| CVE-2021-38930 | IBM Hardware Management Console information disclosure | 5.3CNA v3.0 | 1.5% | 2022-04-11 | Fix |
| CVE-2021-38929 | IBM Hardware Management Console information disclosure | 5.3CNA v3.0 | 1.5% | 2022-04-11 | Fix |
| CVE-2021-38125 | Operations Bridge containerized Micro Focus unauthenticated remote code execution | 9.8v3.1 | 2.0% | 2022-04-11 | |
| CVE-2021-37293 | Kevinlab 4ST L-bems path traversal | 6.5v3.1 | 1.4% | 2022-04-11 | |
| CVE-2021-37292 | Kevinlab 4ST L-bems improper access control | 7.2v3.1 | 6.7% | 2022-04-11 | Nuclei |
| CVE-2021-37291 | Kevinlab 4ST L-bems An SQL injection | 9.8v3.1 | 6.5% | 2022-04-11 | Nuclei |
| CVE-2021-36910 | WP-Appbox WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2021-36896 | Pricing Table WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-04-11 | |
| CVE-2021-36893 | Responsive Tabs WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2021-36848 | Social Media Feather WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2021-36846 | Chaty WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2021-32162 | Webmin A cross-site request forgery | 8.8v3.1 | 2.6% | 2022-04-11 | Exploit code |
| CVE-2021-32161 | Webmin A cross-site scripting | 6.1v3.1 | 2.0% | 2022-04-11 | Exploit code |
| CVE-2021-32160 | Webmin A cross-site scripting | 6.1v3.1 | 2.0% | 2022-04-11 | Exploit code |
| CVE-2021-32159 | Webmin A cross-site request forgery | 8.8v3.1 | 2.3% | 2022-04-11 | Exploit code |
| CVE-2021-32158 | Webmin A cross-site scripting | 6.1v3.1 | 2.0% | 2022-04-11 | Exploit code |
| CVE-2021-32157 | Webmin A cross-site scripting | 9.6v3.1 | 4.0% | 2022-04-11 | Exploit code |
| CVE-2021-32156 | Webmin A cross-site request forgery | 8.8v3.1 | 2.3% | 2022-04-11 | Exploit code |
| CVE-2021-25090 | GridKit Portfolio WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2021-24987 | Super Socializer WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.9% | 2022-04-11 | NucleiFix |
| CVE-2021-24986 | Post Grid WordPress plugin reflected cross-site scripting via keyword | 6.1NVD v3.1 | 0.8% | 2022-04-11 | Fix |
| CVE-2021-22055 | VMware Photon OS SchedulerServer vulnerability | 5.3v3.1 | 1.0% | 2022-04-11 | |
| CVE-2021-4047 | Openshift improper input validation | 7.5v3.1 | 0.9% | 2022-04-11 | Fix |
| CVE-2021-46437 | zzcms cross-site scripting | 4.8v3.1 | 0.5% | 2022-04-08 | |
| CVE-2021-46436 | ZZCMS ad_manage.php SQL injection | 7.2v3.1 | 1.0% | 2022-04-08 | |
| CVE-2021-46367 | Ritecms unrestricted file upload | 7.2v3.1 | 29.7% | 2022-04-08 | |
| CVE-2021-43521 | Zlog A buffer overflow | 7.5v3.1 | 1.3% | 2022-04-08 | |
| CVE-2021-43517 | Foscam FI9805E hidden functionality | 9.8v3.1 | 1.7% | 2022-04-08 | |
| CVE-2021-43515 | Improper neutralization of formula elements in a CSV file in Kimai 2 | 7.8v3.1 | 1.0% | 2022-04-08 | Fix |
| CVE-2021-43498 | ATutor weak password recovery | 7.5v3.1 | 1.6% | 2022-04-08 | |
| CVE-2021-43483 | Claro Kaon CG3000 missing authentication | 8.0v3.1 | 0.6% | 2022-04-08 | |
| CVE-2021-43009 | Opservices Opmon A cross-site scripting | 6.1v3.1 | 2.3% | 2022-04-08 | Exploit code |
| CVE-2021-41715 | libsixel use-after-free | 8.8v3.1 | 1.0% | 2022-04-08 | Fix |
| CVE-2021-40656 | libsixel out-of-bounds write | 8.8v3.1 | 1.0% | 2022-04-08 | Fix |
| CVE-2021-36293 | Dell VNX2 OS command injection | 6.4CNA v3.1 | 0.2% | 2022-04-08 | Fix |
| CVE-2021-36290 | Dell VNX2 incorrect permission assignment | 6.4CNA v3.1 | 0.2% | 2022-04-08 | Fix |
| CVE-2021-36288 | Dell VNX2 path traversal | 8.6CNA v3.1 | 1.0% | 2022-04-08 | Fix |
| CVE-2021-36287 | Dell VNX2 OS command injection | 7.3CNA v3.1 | 2.6% | 2022-04-08 | Fix |
| CVE-2021-46419 | Telesquare Tlr-2855ks6 file deletion | 9.1v3.1 | 71.4% | 2022-04-07 | NucleiExploit code |
| CVE-2021-46418 | Telesquare TLR-2855KS6 PUT method handler vulnerability | 7.5v3.1 | 23.9% | 2022-04-07 | NucleiExploit code |
| CVE-2021-46417 | Franklinfueling Colibri path traversal | 7.5v3.1 | 59.8% | 2022-04-07 | Reported exploitedNucleiExploit code |
| CVE-2021-46416 | SMA Sunny Tripower insecure direct object reference | 8.1v3.1 | 4.2% | 2022-04-07 | Exploit codeFix |
| CVE-2021-43474 | D-Link DIR-823G command injection | 9.8v3.1 | 3.1% | 2022-04-07 | |
| CVE-2021-43453 | JerryScript A heap-based buffer overflow | 9.8v3.1 | 1.3% | 2022-04-07 | |
| CVE-2021-43432 | Exrick xmall cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-07 | |
| CVE-2021-43430 | BigAntSoft Bigant Office Messenger 5 unrestricted file upload | 8.8v3.1 | 1.1% | 2022-04-07 | |
| CVE-2021-43429 | Seagate Cortx-s3 Server denial of service | 7.5v3.1 | 0.9% | 2022-04-07 | |
| CVE-2021-43421 | elFinder unrestricted file upload | 9.8v3.1 | 42.8% | 2022-04-07 | NucleiFix |
| CVE-2021-36202 | Johnson Controls Metasys server-side request forgery | 8.4CNA v3.1 | 0.8% | 2022-04-07 | Fix |
| CVE-2021-45104 | wisc HTCondor cleartext transmission of sensitive information | 7.4v3.1 | 0.6% | 2022-04-06 | Fix |
| CVE-2021-45103 | wisc HTCondor sensitive information in log files | 8.1v3.1 | 0.9% | 2022-04-06 | Fix |
| CVE-2021-44169 | Fortinet FortiClientWindows improper initialization | 8.2CNA v3.1 | 0.4% | 2022-04-06 | Fix |
| CVE-2021-43205 | Fortinet FortiClientLinux information disclosure | 4.3CNA v3.1 | 0.9% | 2022-04-06 | Fix |
| CVE-2021-43138 | Prototype pollution in Async | 7.8v3.1 | 3.3% | 2022-04-06 | Fix |
| CVE-2021-41026 | Fortinet FortiWeb A relative path traversal | 6.5CNA v3.1 | 0.9% | 2022-04-06 | Fix |
| CVE-2021-40375 | Apperta Openeyes information disclosure | 6.5v3.1 | 1.6% | 2022-04-06 | Exploit code |
| CVE-2021-40374 | Apperta Openeye cross-site scripting | 5.4v3.1 | 1.2% | 2022-04-06 | Exploit code |
| CVE-2021-32593 | Fortinet FortiWAN weak cryptographic algorithm | 6.5CNA v3.1 | 0.6% | 2022-04-06 | Fix |
| CVE-2021-32585 | Fortinet FortiWAN cross-site scripting | 7.2CNA v3.1 | 0.7% | 2022-04-06 | Fix |
| CVE-2021-30497 | Ivanti Avalanche path traversal | 7.5v3.1 | 96.6% | 2022-04-06 | NucleiFix |
| CVE-2021-26116 | Fortinet FortiAuthenticator OS command injection | 6.7CNA v3.1 | 0.6% | 2022-04-06 | Fix |
| CVE-2021-26114 | Fortinet FortiWAN SQL injection | 9.8CNA v3.1 | 1.6% | 2022-04-06 | Fix |
| CVE-2021-26113 | Fortinet FortiWAN weak password hash | 6.2CNA v3.1 | 0.4% | 2022-04-06 | Fix |
| CVE-2021-26112 | Fortinet FortiWAN out-of-bounds write | 8.1CNA v3.1 | 1.7% | 2022-04-06 | Fix |
| CVE-2021-26104 | Fortinet FortiManager command line interface OS command injection | 7.8CNA v3.1 | 3.0% | 2022-04-06 | Fix |
| CVE-2021-24009 | Fortinet FortiWAN OS command injection | 7.2CNA v3.1 | 1.5% | 2022-04-06 | Fix |
| CVE-2021-22127 | Fortinet FortiClientLinux An improper input validation | 7.1CNA v3.1 | 0.5% | 2022-04-06 | Fix |
| CVE-2021-45894 | Zauner Arc cleartext transmission of sensitive information | 5.9v3.1 | 0.8% | 2022-04-05 | |
| CVE-2021-45893 | Zauner Arc case sensitivity bypass | 7.5v3.1 | 1.6% | 2022-04-05 | |
| CVE-2021-45892 | Zauner Arc insufficiently protected credentials | 5.9v3.1 | 0.9% | 2022-04-05 | |
| CVE-2021-45891 | Zauner Arc incorrect resource transfer | 8.8v3.1 | 1.4% | 2022-04-05 | |
| CVE-2021-44109 | Open5GS lib/sbi/message.c buffer overflow | 7.5v3.1 | 1.6% | 2022-04-05 | |
| CVE-2021-44108 | Open5GS src/amf/namf-handler.c null pointer dereference | 7.5v3.1 | 1.5% | 2022-04-05 | |
| CVE-2021-43008 | Files or directories accessible to external parties in Adminer | 7.5NVD v3.1 | 13.6% | 2022-04-05 | Exploit codeFix |
| CVE-2021-42324 | Dcnglobal S4600-10p-si OS command injection | 7.4v3.1 | 0.6% | 2022-04-05 | |
| CVE-2021-41752 | JerryScript stack-based buffer overflow | 9.8v3.1 | 1.2% | 2022-04-05 | |
| CVE-2021-41751 | JerryScript buffer overflow | 9.8v3.1 | 1.2% | 2022-04-05 | |
| CVE-2021-41245 | Possible cross-site request forgery in Combodo iTop | 6.5CNA v3.1 | 0.7% | 2022-04-05 | Fix |
| CVE-2021-39114 | Atlassian Confluence Server code injection | 8.8v3.1 | 1.7% | 2022-04-05 | Fix |
| CVE-2021-38834 | Easy Mock arbitrary command execution | 8.8v3.1 | 2.0% | 2022-04-05 | |
| CVE-2021-33207 | Softwareag Mashzone Nextgen deserialization of untrusted data | 9.8v3.1 | 1.6% | 2022-04-05 | Fix |
| CVE-2021-30080 | Access control bypass in Beego | 9.8v3.1 | 1.3% | 2022-04-05 | Fix |
| CVE-2021-28428 | Horizontcms file upload | 9.8v3.1 | 1.2% | 2022-04-05 | |
| CVE-2021-27117 | Privilege escalation in beego | 7.8v3.1 | 0.4% | 2022-04-05 | Fix |
| CVE-2021-27116 | Privilege escalation in beego | 7.8v3.1 | 0.4% | 2022-04-05 | Fix |
| CVE-2021-44138 | Path traversal in Caucho Resin | 7.5v3.1 | 12.3% | 2022-04-04 | Nuclei |
| CVE-2021-43464 | Remote code execution in Subrion | 8.8v3.1 | 1.4% | 2022-04-04 | |
| CVE-2021-43463 | EXT2 File System Driver Ext2Fsd v0.68 unquoted search path | 7.8v3.1 | 0.5% | 2022-04-04 | |
| CVE-2021-43462 | Rumble Mail Server cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-04 | |
| CVE-2021-43461 | Rumble Mail Server cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-04 | |
| CVE-2021-43460 | System Explorer An unquoted search path | 7.8v3.1 | 0.5% | 2022-04-04 | |
| CVE-2021-43459 | Rumble Mail Server cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-04 | |
| CVE-2021-43458 | Vembu Bdr Suite An unquoted search path | 7.8v3.1 | 0.5% | 2022-04-04 | |
| CVE-2021-43457 | Bvpn An unquoted search path | 7.8v3.1 | 0.3% | 2022-04-04 | |
| CVE-2021-43456 | Rumble Mail Server An unquoted search path | 7.8v3.1 | 0.4% | 2022-04-04 | |
| CVE-2021-43455 | FreeLAN unquoted search path | 7.8v3.1 | 0.5% | 2022-04-04 | |
| CVE-2021-43454 | Anytxt Searcher unquoted search path | 7.8v3.1 | 0.4% | 2022-04-04 | |
| CVE-2021-36851 | Testimonial Slider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-04-04 | Fix |
| CVE-2021-36826 | WP Project Manager WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-04-04 | Fix |
| CVE-2021-36776 | Rancher steve API proxy impersonation | 8.8CNA v3.1 | 1.1% | 2022-04-04 | Fix |
| CVE-2021-36775 | Rancher deleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings | 8.8CNA v3.1 | 1.0% | 2022-04-04 | Fix |
| CVE-2021-33616 | RSA Archer cross-site scripting | 5.4v3.1 | 0.8% | 2022-04-04 | Fix |
| CVE-2021-33010 | AVEVA System Platform uncaught exception | 7.5v3.1 | 1.1% | 2022-04-04 | |
| CVE-2021-33008 | AVEVA System Platform missing authentication for critical function | 9.8v3.1 | 1.2% | 2022-04-04 | |
| CVE-2021-32994 | Softing OPC-UA C++ SDK improper restriction of operations within the bounds of a memory buffer | 7.5v3.1 | 1.7% | 2022-04-04 | Fix |
| CVE-2021-32986 | Automation Direct CLICK PLC CPU modules authentication bypass using an alternate path or channel | 9.8v3.1 | 1.1% | 2022-04-04 | Fix |
| CVE-2021-32985 | AVEVA System Platform origin validation error | 7.2v3.1 | 0.5% | 2022-04-04 | |
| CVE-2021-32984 | Automation Direct CLICK PLC CPU modules authentication bypass using an alternate path or channel | 9.8v3.1 | 1.1% | 2022-04-04 | Fix |
| CVE-2021-32982 | Automation Direct CLICK PLC CPU modules cleartext transmission of sensitive information | 7.5v3.1 | 0.7% | 2022-04-04 | Fix |
| CVE-2021-32981 | AVEVA System Platform path traversal | 7.2v3.1 | 1.2% | 2022-04-04 | |
| CVE-2021-32980 | Automation Direct CLICK PLC CPU modules authentication bypass using an alternate path or channel | 9.8v3.1 | 1.1% | 2022-04-04 | Fix |
| CVE-2021-32978 | Automation Direct CLICK PLC CPU modules plaintext storage of a password | 7.5v3.1 | 1.0% | 2022-04-04 | Fix |
| CVE-2021-32977 | AVEVA System Platform improper verification of cryptographic signature | 7.2v3.1 | 0.6% | 2022-04-04 | |
| CVE-2021-25113 | Dropdown Menu Widget WordPress plugin Subscriber+ arbitrary settings update to stored XSS | 5.4NVD v3.1 | 0.6% | 2022-04-04 | |
| CVE-2021-25048 | KingComposer WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-04-04 | |
| CVE-2021-30066 | Belden Tofino Xenon Security Appliance improper signature verification | 6.8v3.1 | 0.2% | 2022-04-03 | Fix |
| CVE-2021-30065 | Schneider Electric ConneXium Tofino Firewall ModBus enforcer vulnerability | 7.5v3.1 | 0.9% | 2022-04-03 | Fix |
| CVE-2021-30064 | Belden Tofino Xenon Security Appliance hard-coded credentials | 9.8v3.1 | 0.9% | 2022-04-03 | Fix |
| CVE-2021-30063 | Belden Tofino Xenon Security Appliance denial of service | 7.5v3.1 | 1.0% | 2022-04-03 | Fix |
| CVE-2021-30062 | Schneider Electric ConneXium Tofino OPCLSM OPC enforcer vulnerability | 7.5v3.1 | 0.9% | 2022-04-03 | Fix |
| CVE-2021-30061 | Schneider Electric ConneXium Tofino Firewall USB file import code execution | 6.8v3.1 | 0.4% | 2022-04-03 | Fix |
| CVE-2021-44135 | SQL injection in Pagekit/Pagekit | 9.8v3.1 | 1.5% | 2022-04-01 | |
| CVE-2021-39908 | GitLab code injection | 6.5CNA v3.1 | 1.3% | 2022-04-01 | Fix |
| CVE-2021-35117 | Qualcomm Snapdragon buffer over-read in WLAN host | 8.2CNA v3.1 | 0.9% | 2022-04-01 | Fix |
| CVE-2021-35115 | Qualcomm Snapdragon use-after-free in Automotive Multimedia | 8.4CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-35110 | Qualcomm Snapdragon incorrect type conversion or cast in Boot | 8.1CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-35106 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.8CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-35105 | Qualcomm Snapdragon incorrect type conversion or cast in Graphics | 8.4CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-35103 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 7.8CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-35089 | Qualcomm Snapdragon buffer copy without checking size of input in Automotive Multimedia | 8.4CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-35088 | Qualcomm Snapdragon buffer over-read in WLAN | 8.2CNA v3.1 | 0.9% | 2022-04-01 | Fix |
| CVE-2021-33657 | SDL2 video/SDL_pixels.c in SDL heap-based buffer overflow | 8.8NVD v3.1 | 2.1% | 2022-04-01 | Fix |
| CVE-2021-33024 | Philips Vue PACS insufficiently protected credentials | 7.5v3.1 | 0.9% | 2022-04-01 | Fix |
| CVE-2021-33022 | Philips Vue PACS cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2022-04-01 | Fix |
| CVE-2021-33020 | Philips Vue PACS Use of a Key Past its Expiration Date | 7.5v3.1 | 0.6% | 2022-04-01 | Fix |
| CVE-2021-33018 | Philips Vue PACS use of a broken or risky cryptographic algorithm | 7.5v3.1 | 0.6% | 2022-04-01 | Fix |
| CVE-2021-32976 | Moxa NPort IAW5000A-I/O Series Serial Device Server stack-based buffer overflow | 9.8v3.1 | 2.8% | 2022-04-01 | Fix |
| CVE-2021-32974 | Moxa NPort IAW5000A-I/O Series Serial Device Server improper input validation | 9.8v3.1 | 2.7% | 2022-04-01 | Fix |
| CVE-2021-32970 | Moxa NPort IAW5000A-I/O Series Serial Device Server improper input validation | 7.5v3.1 | 1.7% | 2022-04-01 | Fix |
| CVE-2021-32968 | Moxa NPort IAW5000A-I/O Series Serial Device Server Classic buffer overflow | 7.5v3.1 | 1.7% | 2022-04-01 | Fix |
| CVE-2021-32961 | MDT AutoSave unrestricted upload of file with dangerous type | 7.5v3.1 | 1.3% | 2022-04-01 | Fix |
| CVE-2021-32960 | Rockwell Automation FactoryTalk Services Platform protection mechanism failure | 8.8v3.1 | 2.4% | 2022-04-01 | Fix |
| CVE-2021-32957 | MDT AutoSave uncontrolled search path element | 7.5v3.1 | 0.9% | 2022-04-01 | Fix |
| CVE-2021-32953 | MDT AutoSave SQL injection | 9.8v3.1 | 1.2% | 2022-04-01 | Fix |
| CVE-2021-32949 | MDT AutoSave relative path traversal | 7.5v3.1 | 1.1% | 2022-04-01 | Fix |
| CVE-2021-32945 | MDT AutoSave inadequate encryption strength | 7.5v3.1 | 0.4% | 2022-04-01 | Fix |
| CVE-2021-32937 | MDT AutoSave generation of error message containing sensitive information | 7.5v3.1 | 1.1% | 2022-04-01 | Fix |
| CVE-2021-32933 | MDT AutoSave command injection | 9.8v3.1 | 1.2% | 2022-04-01 | Fix |
| CVE-2021-32503 | SICK FTMg missing authorization | 4.9v3.1 | 0.8% | 2022-04-01 | Fix |
| CVE-2021-30333 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 7.8CNA v3.1 | 0.1% | 2022-04-01 | Fix |
| CVE-2021-30332 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-04-01 | Fix |
| CVE-2021-30331 | Qualcomm Snapdragon information exposure in Data Modem | 5.5CNA v3.1 | 0.1% | 2022-04-01 | Fix |
| CVE-2021-30329 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-04-01 | Fix |
| CVE-2021-30328 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-04-01 | Fix |
| CVE-2021-28504 | Arista EOS IPv4 access-list VXLAN matching improper access control | 7.5CNA v3.1 | 0.7% | 2022-04-01 | Fix |
| CVE-2021-27501 | Philips Vue PACS Improper Adherence to Coding Standards | 9.8v3.1 | 0.9% | 2022-04-01 | Fix |
| CVE-2021-27497 | Philips Vue PACS protection mechanism failure | 9.8v3.1 | 0.8% | 2022-04-01 | Fix |
| CVE-2021-27493 | Philips Vue PACS improper neutralization | 6.5v3.1 | 0.7% | 2022-04-01 | Fix |
| CVE-2021-27223 | Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security denial of service | 5.5NVD v3.1 | 0.2% | 2022-04-01 | |
| CVE-2021-26624 | eScan Anti-Virus local privilege escalation | 8.8v3.1 | 2.4% | 2022-04-01 | |
| CVE-2021-26623 | Bandisoft ARK Library Out-of-bound vulnerability | 9.8v3.1 | 1.1% | 2022-04-01 | |
| CVE-2021-23288 | Eaton Intelligent Power Protector cross-site scripting | 5.6CNA v3.1 | 0.3% | 2022-04-01 | Fix |
| CVE-2021-23287 | Eaton Intelligent Power Manager cross-site scripting | 5.6CNA v3.1 | 0.5% | 2022-04-01 | Fix |
| CVE-2021-23247 | OPPO Quick App quick game engine command injection | 9.8v3.1 | 1.8% | 2022-04-01 | Fix |
| CVE-2021-22277 | AC 800M MMS denial of service vulnerability in MMS communication | 7.5CNA v3.1 | 0.9% | 2022-04-01 | Fix |
| CVE-2021-20295 | QEMU out-of-bounds read | 6.5NVD v3.1 | 0.3% | 2022-04-01 | Fix |
| CVE-2021-20238 | openshift/machine-config-operator improper authentication | 3.7v3.1 | 0.8% | 2022-04-01 | |
| CVE-2021-3847 | kernel improper preservation of permissions | 7.8NVD v3.1 | 0.5% | 2022-04-01 | Fix |
| CVE-2021-3461 | Keycloak insufficient session expiration | 7.1v3.1 | 0.3% | 2022-04-01 | Fix |
| CVE-2021-1950 | Qualcomm Snapdragon improper access control in Content Protection | 7.8CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-1942 | Qualcomm Snapdragon Permissions, Privileges and Access Controls in Core | 9.3CNA v3.1 | 0.2% | 2022-04-01 | Fix |
| CVE-2021-43722 | D-Link DIR-645 out-of-bounds write | 9.8v3.1 | 3.2% | 2022-03-31 | |
| CVE-2021-43707 | MacCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-43663 | TOTOLINK EX300 V2 command injection | 7.5v3.1 | 1.0% | 2022-03-31 | |
| CVE-2021-43662 | TOTOLINK EX300 V2 resource exhaustion | 6.5v3.1 | 0.5% | 2022-03-31 | |
| CVE-2021-43661 | TOTOLINK EX300 V2 cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-43506 | Simple Client Management System Sourcecodester SQL injection | 9.8v3.1 | 1.6% | 2022-03-31 | |
| CVE-2021-43505 | Simple Client Management System Ssourcecodester cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-43484 | Simple Client Management System remote code execution | 9.8v3.1 | 3.5% | 2022-03-31 | |
| CVE-2021-43479 | Secretarycms The Secretary remote code execution | 9.8v3.1 | 2.5% | 2022-03-31 | |
| CVE-2021-43478 | Hoosk installer vulnerability | 5.4v3.1 | 0.8% | 2022-03-31 | |
| CVE-2021-42946 | HTMLy A cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-42869 | Chikitsa Patient Management Software Chikista cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-42868 | Chikitsa Patient Management Software Chikista cross-site scripting | 4.8v3.1 | 0.5% | 2022-03-31 | |
| CVE-2021-42867 | HTMLy DanPros cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-42866 | Pixelimity A cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-31 | |
| CVE-2021-37517 | Access control vulnerability in Dolibarr | 7.5v3.1 | 1.0% | 2022-03-31 | Fix |
| CVE-2021-36625 | SQL injection in Dolibarr | 8.8v3.1 | 0.9% | 2022-03-31 | Fix |
| CVE-2021-34257 | Unrestricted upload of file with dangerous type in WPanel 4 | 8.8v3.1 | 1.8% | 2022-03-31 | |
| CVE-2021-20729 | pfSense CE and pfSense Plus cross-site scripting | 6.1v3.1 | 2.9% | 2022-03-31 | |
| CVE-2021-46010 | TOTOLINK A3100R insufficient randomness | 8.8v3.1 | 1.2% | 2022-03-30 | |
| CVE-2021-46009 | TOTOLINK A3100R missing authentication | 9.8v3.1 | 12.2% | 2022-03-30 | |
| CVE-2021-46008 | TOTOLINK A3100R hard-coded credentials | 8.8v3.1 | 0.9% | 2022-03-30 | |
| CVE-2021-46007 | TOTOLINK AR3100R OS command injection | 9.8v3.1 | 2.6% | 2022-03-30 | |
| CVE-2021-46006 | TOTOLINK A3100R missing authentication | 6.5v3.1 | 5.4% | 2022-03-30 | |
| CVE-2021-45900 | Vivoh Webinar Manager improper authentication | 6.5v3.1 | 0.7% | 2022-03-30 | |
| CVE-2021-45031 | Weak authentication in Login function of USC+ | 9.8NVD v3.1 | 0.8% | 2022-03-30 | Fix |
| CVE-2021-44312 | Firmware Analysis And Comparison Tool cross-site request forgery | 8.8v3.1 | 0.4% | 2022-03-30 | |
| CVE-2021-44310 | Firmware Analysis And Comparison Tool cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-30 | |
| CVE-2021-43664 | TOTOLINK EX300 V2 command injection | 8.1v3.1 | 1.7% | 2022-03-30 | |
| CVE-2021-43142 | Improper restriction of XML external entity reference in wutka Jox | 9.8v3.1 | 1.5% | 2022-03-30 | |
| CVE-2021-41594 | RSA Archer TaskPermissions API vulnerability | 6.5v3.1 | 0.8% | 2022-03-30 | Fix |
| CVE-2021-40645 | JFinalOA glorylion SQL injection | 6.5v3.1 | 1.1% | 2022-03-30 | |
| CVE-2021-40644 | oasys An SQL injection | 6.5v3.1 | 1.1% | 2022-03-30 | |
| CVE-2021-39791 | Android WallpaperManagerService information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39790 | Android Dialer privilege escalation | 7.8v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2021-39789 | Android Telecom privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39788 | Android TelecomManager information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39787 | Android SystemUI privilege escalation | 7.8v3.1 | 0.4% | 2022-03-30 | Fix |
| CVE-2021-39786 | Android NFC out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39784 | Android CellBroadcastReceiver privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39783 | Android rcsservice privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39782 | Android Telephony unauthorized access | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39781 | Android SmsController information disclosure | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39780 | Android Traceur privilege escalation | 7.8v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2021-39779 | Android incorrect default permissions | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39778 | Android Telecomm information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39777 | Android Telephony information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39776 | Android NFC memory corruption | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39775 | Android People information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39774 | Android Bluetooth out-of-bounds read | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39773 | Android VpnManagerService information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39772 | Android Bluetooth privilege escalation | 8.8v3.1 | 0.2% | 2022-03-30 | Fix |
| CVE-2021-39771 | Android settings privilege escalation | 7.8v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2021-39770 | Android Framework information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39769 | Android Device Policy information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39768 | Android settings privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39767 | Android miniadb privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39766 | Android settings information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39765 | Android Gallery insecure permissions | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39764 | Android settings privilege escalation | 7.8v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2021-39763 | Android settings privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39762 | Android tremolo out-of-bounds read | 7.5v3.1 | 0.8% | 2022-03-30 | Fix |
| CVE-2021-39761 | Android Media information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39760 | Android AudioService information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39759 | Android libstagefright out-of-bounds write | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39758 | Android WindowManager privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39757 | Android PermissionController insecure permissions | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39756 | Android Framework information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39755 | Android DevicePolicyManager information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39754 | Android ContextImpl information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39753 | Android DomainVerificationService information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39752 | Android Bubbles privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39751 | Android settings information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39750 | Android PackageManager privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39749 | Android WindowManager privilege escalation | 7.8v3.1 | 0.2% | 2022-03-30 | Fix |
| CVE-2021-39748 | Android InputMethodEditor information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39747 | Android Settings Provider information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39746 | Android PermissionController privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39745 | Android DevicePolicyManager information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39744 | Android DevicePolicyManager information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39743 | Android PackageManager privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39742 | Android Voicemail information disclosure | 5.5v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2021-39741 | Android Keymaster out-of-bounds write | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39740 | Android Messaging information disclosure | 5.5v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-39739 | Android ArrayMap information disclosure | 3.3v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-38362 | RSA Archer insecure direct object reference | 6.5v3.1 | 1.0% | 2022-03-30 | |
| CVE-2021-33581 | Softwareag Mashzone Nextgen server-side request forgery | 7.2v3.1 | 1.3% | 2022-03-30 | Fix |
| CVE-2021-33523 | Softwareag Mashzone Nextgen arbitrary command execution | 7.2v3.1 | 1.8% | 2022-03-30 | Fix |
| CVE-2021-33208 | Softwareag Mashzone Nextgen XML external entity injection | 7.2v3.1 | 1.2% | 2022-03-30 | Fix |
| CVE-2021-23851 | Bosch CPP Firmware buffer overflow vulnerability in the recovery image web-based interface | 6.8CNA v3.1 | 1.6% | 2022-03-30 | Fix |
| CVE-2021-23850 | Bosch CPP Firmware buffer overflow vulnerability in the recovery image telnet server | 6.8CNA v3.1 | 1.6% | 2022-03-30 | Fix |
| CVE-2021-3456 | smart_proxy_salt incorrect authorization | 7.1NVD v3.1 | 0.2% | 2022-03-30 | Exploit code |
| CVE-2021-1033 | Android ConnectedDevicesSliceProvider.java insecure permissions | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-1000 | Android ConnectedDevicesSliceProvider.java insecure permissions | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2021-46743 | Google Firebase PHP-JWT key/algorithm type confusion | 9.1v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2021-45866 | Student Attendance Management System Sourcecodester stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-29 | |
| CVE-2021-45865 | Student Attendance Management System file upload | 9.8v3.1 | 1.4% | 2022-03-29 | |
| CVE-2021-44581 | Kreado Kreasfero SQL injection | 7.5v3.1 | 1.0% | 2022-03-29 | |
| CVE-2021-44082 | Textpattern cross-site scripting | 8.3v3.1 | 3.0% | 2022-03-29 | |
| CVE-2021-44081 | Open5GS AMF buffer overflow | 7.5v3.1 | 1.0% | 2022-03-29 | |
| CVE-2021-43701 | CSZ CMS SQL injection | 6.5v3.1 | 3.3% | 2022-03-29 | Exploit code |
| CVE-2021-43118 | DrayTek Vigor 2960 Remote command injection | 9.8v3.1 | 34.8% | 2022-03-29 | |
| CVE-2021-43110 | PuneethReddyHC Online Shopping System add_products vulnerability | 9.8v3.1 | 1.7% | 2022-03-29 | Fix |
| CVE-2021-43109 | Puneethreddyhc Online-shopping-system An SQL injection | 7.5v3.1 | 1.2% | 2022-03-29 | |
| CVE-2021-42970 | Cxuucms cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-29 | |
| CVE-2021-42911 | DrayTek Vigor 2960 format string | 9.8v3.1 | 3.5% | 2022-03-29 | |
| CVE-2021-22572 | Google Data-Transfer-Project information disclosure via tmp directory | 5.5CNA v3.1 | 0.1% | 2022-03-29 | Fix |
| CVE-2021-46434 | EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid | 5.3v3.1 | 0.9% | 2022-03-28 | |
| CVE-2021-46433 | Sandbox bypass in Fenom | 10.0v3.1 | 1.1% | 2022-03-28 | |
| CVE-2021-45491 | 3CX cleartext storage of sensitive information | 6.5v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2021-45490 | 3CX improper certificate validation | 9.1v3.1 | 1.1% | 2022-03-28 | Fix |
| CVE-2021-44617 | glpi Ramo plugin SQL injection | 9.8v3.1 | 2.1% | 2022-03-28 | |
| CVE-2021-44213 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-28 | |
| CVE-2021-44212 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-28 | |
| CVE-2021-44211 | Open-Xchange OX App Suite cross-site scripting | 5.4v3.1 | 0.7% | 2022-03-28 | |
| CVE-2021-44210 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-28 | |
| CVE-2021-44209 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-28 | |
| CVE-2021-44208 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-28 | |
| CVE-2021-44124 | Hiby R3 Pro path traversal | 7.5v3.1 | 1.9% | 2022-03-28 | |
| CVE-2021-43725 | spotweb SpotPage_login.php cross-site scripting | 6.1v3.1 | 2.6% | 2022-03-28 | Nuclei |
| CVE-2021-43721 | Leanote cross-site scripting | 6.1v3.1 | 1.1% | 2022-03-28 | |
| CVE-2021-43105 | Technitium DNS Server cache poisoning | 4.3v3.1 | 0.6% | 2022-03-28 | |
| CVE-2021-43103 | diyhi bbs A file upload | 7.2v3.1 | 1.6% | 2022-03-28 | |
| CVE-2021-43102 | diyhi bbs A file upload | 7.2v3.1 | 1.6% | 2022-03-28 | |
| CVE-2021-43101 | diyhi bbs A file upload | 7.2v3.1 | 1.6% | 2022-03-28 | |
| CVE-2021-43100 | diyhi bbs A file upload | 7.2v3.1 | 1.6% | 2022-03-28 | |
| CVE-2021-43099 | diyhi bbs path traversal | 4.9v3.1 | 1.1% | 2022-03-28 | |
| CVE-2021-43098 | diyhi bbs A file upload | 7.2v3.1 | 1.2% | 2022-03-28 | |
| CVE-2021-43097 | diyhi bbs A server-side template injection | 7.2v3.1 | 2.4% | 2022-03-28 | |
| CVE-2021-39876 | GitLab incorrect authorization | 4.3CNA v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2021-26601 | Path traversal in ImpressCMS | 8.1v3.1 | 3.2% | 2022-03-28 | Fix |
| CVE-2021-26600 | Type confusion in ImpressCMS | 9.8v3.1 | 5.5% | 2022-03-28 | Fix |
| CVE-2021-26599 | SQL injection in ImpressCMS | 9.8v3.1 | 21.5% | 2022-03-28 | NucleiExploit codeFix |
| CVE-2021-26598 | Incorrect Access Control in ImpressCMS | 5.3v3.1 | 10.5% | 2022-03-28 | NucleiFix |
| CVE-2021-25071 | Akismet Privacy Policies WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | |
| CVE-2021-25070 | WP Block and Stop Bad Bots WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.6% | 2022-03-28 | Fix |
| CVE-2021-25068 | Sync WooCommerce Product feed to Google Shopping WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.3% | 2022-03-28 | |
| CVE-2021-25064 | Wow Countdowns WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.3% | 2022-03-28 | |
| CVE-2021-25012 | Pz-LinkCard WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2021-24978 | OSMapper WordPress plugin unauthenticated arbitrary post deletion | 5.3NVD v3.1 | 0.5% | 2022-03-28 | |
| CVE-2021-24962 | WordPress File Upload plugin Contributor+ path traversal to RCE | 8.8NVD v3.1 | 2.8% | 2022-03-28 | Fix |
| CVE-2021-24746 | Sassy Social Share WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.2% | 2022-03-28 | NucleiFix |
| CVE-2021-4191 | GitLab GraphQL API vulnerability | 5.3CNA v3.1 | 80.0% | 2022-03-28 | NucleiExploit codeFix |
| CVE-2021-44127 | D-Link Dap-1360f1 Firmware arbitrary command execution | 9.8v3.1 | 3.4% | 2022-03-27 | |
| CVE-2021-46426 | phpipam cross-site request forgery | 6.1v3.1 | 0.9% | 2022-03-25 | |
| CVE-2021-44905 | Cef Fortessa Ftbtld Bluetooth services in the insecure permissions | 8.2v3.1 | 1.3% | 2022-03-25 | |
| CVE-2021-44768 | Delta Electronics CNCSoft out-of-bounds read | 5.5v3.1 | 0.7% | 2022-03-25 | Fix |
| CVE-2021-44751 | F-Secure SAFE Browser USSD dialer handling incorrect default permissions | 5.3v3.1 | 0.6% | 2022-03-25 | Fix |
| CVE-2021-44683 | Duckduckgo clickjacking | 8.2v3.1 | 1.0% | 2022-03-25 | |
| CVE-2021-44477 | GE Gas Power ToolBoxST improper restriction of XML external entity reference | 7.5v3.1 | 1.1% | 2022-03-25 | Fix |
| CVE-2021-44462 | Horner Automation Cscape EnvisionRV improper input validation | 7.1v3.1 | 0.7% | 2022-03-25 | Fix |
| CVE-2021-43636 | TOTOLINK T10 V2 Firmware Two buffer overflow | 9.8v3.1 | 1.1% | 2022-03-25 | |
| CVE-2021-43091 | SQL injection in YesWiki | 7.5v3.1 | 1.4% | 2022-03-25 | Fix |
| CVE-2021-43090 | Predic8 Soa Model improper restriction of XML external entity reference in soa-model | 9.8v3.1 | 1.9% | 2022-03-25 | Fix |
| CVE-2021-40906 | Checkmk cross-site scripting | 6.1v3.1 | 1.0% | 2022-03-25 | Exploit codeFix |
| CVE-2021-40905 | Checkmk unrestricted file upload | 8.8v3.1 | 3.0% | 2022-03-25 | Exploit codeKCV |
| CVE-2021-40904 | Checkmk incorrect default permissions | 8.8v3.1 | 3.7% | 2022-03-25 | Exploit codeKCV |
| CVE-2021-35254 | SolarWinds Web Help Desk authenticated remote code execution in WebHelpDesk | 8.2CNA v3.1 | 1.0% | 2022-03-25 | Fix |
| CVE-2021-26622 | Genian NAC remote code execution | 10.0v3.1 | 3.0% | 2022-03-25 | |
| CVE-2021-26621 | Netis Korea MEX01 buffer overflow | 9.8v3.1 | 1.7% | 2022-03-25 | |
| CVE-2021-26620 | Iptime NAS2dual improper authentication | 7.5v3.1 | 1.4% | 2022-03-25 | Fix |
| CVE-2021-22100 | Cloud Controller (CAPI) by cloud foundry denial of service | 5.3v3.1 | 0.9% | 2022-03-25 | Fix |
| CVE-2021-20323 | Cross-site scripting in Keycloak | 6.1v3.1 | 37.2% | 2022-03-25 | NucleiExploit codeFix |
| CVE-2021-20290 | smart_proxy_openscap incorrect authorization | 6.1NVD v3.1 | 0.2% | 2022-03-25 | |
| CVE-2021-4203 | kernel A use-after-free | 6.8NVD v3.1 | 1.7% | 2022-03-25 | Fix |
| CVE-2021-4202 | kernel A use-after-free | 7.0NVD v3.1 | 0.4% | 2022-03-25 | Fix |
| CVE-2021-4157 | Linux kernel NFS subsystem vulnerability | 8.0NVD v3.1 | 1.6% | 2022-03-25 | Fix |
| CVE-2021-4147 | libvirt improper locking | 6.5v3.1 | 0.2% | 2022-03-25 | Fix |
| CVE-2021-3941 | OpenEXR divide by zero | 6.5NVD v3.1 | 0.3% | 2022-03-25 | Fix |
| CVE-2021-3933 | OpenEXR integer overflow | 5.5NVD v3.1 | 0.9% | 2022-03-25 | Fix |
| CVE-2021-3814 | 3scale missing authorization | 7.5v3.1 | 1.2% | 2022-03-25 | Fix |
| CVE-2021-3582 | QEMU paravirtual RDMA device denial of service | 6.5NVD v3.1 | 0.4% | 2022-03-25 | Fix |
| CVE-2021-3567 | caribou improper input validation | 7.5NVD v3.1 | 1.2% | 2022-03-25 | Fix |
| CVE-2021-3422 | Splunk Enterprise indexer denial of service via malformed S2S request | 7.5v3.1 | 0.6% | 2022-03-25 | Fix |
| CVE-2021-43700 | Apimanager SQL injection | 9.8v3.1 | 1.1% | 2022-03-24 | |
| CVE-2021-43666 | Arm mbed TLS denial of service | 7.5v3.1 | 2.1% | 2022-03-24 | Fix |
| CVE-2021-43659 | halo cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-24 | |
| CVE-2021-43084 | iteachyou Dreamer CMS An SQL injection | 9.8v3.1 | 1.0% | 2022-03-24 | |
| CVE-2021-39491 | rengine Yogesh Ojha cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-24 | |
| CVE-2021-31326 | D-Link DIR-816 improper authentication | 9.8v3.1 | 2.2% | 2022-03-24 | |
| CVE-2021-46064 | IrfanView buffer overflow | 7.8v3.1 | 1.1% | 2022-03-23 | Fix |
| CVE-2021-45757 | ASUS RT-AC68U buffer overflow | 7.5v3.1 | 1.1% | 2022-03-23 | |
| CVE-2021-45756 | ASUS Rt-ac5300 buffer overflow | 9.8v3.1 | 1.2% | 2022-03-23 | |
| CVE-2021-44759 | Apache Traffic Server improper authentication vulnerability in TLS origin verification | 8.1v3.1 | 1.6% | 2022-03-23 | Fix |
| CVE-2021-44226 | Razer synapse uncontrolled search path | 7.3v3.1 | 0.9% | 2022-03-23 | Fix |
| CVE-2021-44139 | HashiCorp Sentinel server-side request forgery | 7.5v3.1 | 6.5% | 2022-03-23 | Nuclei |
| CVE-2021-44040 | Apache Traffic Server HTTP request line fuzzing attacks | 7.5v3.1 | 2.0% | 2022-03-23 | Fix |
| CVE-2021-43738 | Xiaohuanxiong Cms cross-site request forgery | 8.8v3.1 | 0.5% | 2022-03-23 | |
| CVE-2021-43737 | Xiaohuanxiong Cms cross-site request forgery | 6.5v3.1 | 0.4% | 2022-03-23 | |
| CVE-2021-43736 | Cmswing argument injection | 9.8v3.1 | 2.5% | 2022-03-23 | |
| CVE-2021-43735 | Cmswing SQL injection | 9.8v3.1 | 1.3% | 2022-03-23 | |
| CVE-2021-38772 | Tendacn AC10 buffer overflow | 7.5v3.1 | 1.2% | 2022-03-23 | |
| CVE-2021-38278 | Tendacn AC10 out-of-bounds write | 9.8v3.1 | 1.4% | 2022-03-23 | |
| CVE-2021-28278 | jhead heap-based buffer overflow | 7.8v3.1 | 0.9% | 2022-03-23 | Fix |
| CVE-2021-28277 | jhead heap-based buffer overflow | 7.8v3.1 | 0.9% | 2022-03-23 | Fix |
| CVE-2021-28276 | jhead denial of service | 7.5v3.1 | 1.1% | 2022-03-23 | Fix |
| CVE-2021-28275 | jhead denial of service | 5.5v3.1 | 0.7% | 2022-03-23 | Fix |
| CVE-2021-27476 | Rockwell Automation FactoryTalk AssetCentre OS command injection | 9.8v3.1 | 4.1% | 2022-03-23 | Fix |
| CVE-2021-27475 | Rockwell Automation Connected Components Workbench deserialization of untrusted data | 8.6v3.1 | 3.0% | 2022-03-23 | Fix |
| CVE-2021-27474 | Rockwell Automation FactoryTalk AssetCentre use of potentially dangerous function | 7.5NVD v3.1 | 1.6% | 2022-03-23 | Fix |
| CVE-2021-27473 | Rockwell Automation Connected Components Workbench improper input validation | 8.2v3.1 | 0.8% | 2022-03-23 | Fix |
| CVE-2021-27472 | Rockwell Automation FactoryTalk AssetCentre SQL injection | 9.8v3.1 | 5.3% | 2022-03-23 | Fix |
| CVE-2021-27471 | Rockwell Automation Connected Components Workbench path traversal | 8.6v3.1 | 2.9% | 2022-03-23 | Fix |
| CVE-2021-27470 | Rockwell Automation FactoryTalk AssetCentre deserialization of untrusted data | 9.8v3.1 | 3.8% | 2022-03-23 | Fix |
| CVE-2021-27468 | Rockwell Automation FactoryTalk AssetCentre SQL injection | 9.8v3.1 | 3.5% | 2022-03-23 | Fix |
| CVE-2021-27466 | Rockwell Automation FactoryTalk AssetCentre deserialization of untrusted data | 9.8v3.1 | 3.9% | 2022-03-23 | Fix |
| CVE-2021-27464 | Rockwell Automation FactoryTalk AssetCentre SQL injection | 9.8v3.1 | 3.5% | 2022-03-23 | Fix |
| CVE-2021-27462 | Rockwell Automation FactoryTalk AssetCentre deserialization of untrusted data | 9.8v3.1 | 3.8% | 2022-03-23 | Fix |
| CVE-2021-27460 | Rockwell Automation FactoryTalk AssetCentre deserialization of untrusted data | 9.8v3.1 | 3.2% | 2022-03-23 | Fix |
| CVE-2021-27456 | Philips Gemini PET/CT storage of sensitive data in a mechanism without access control | 2.4v3.1 | 0.2% | 2022-03-23 | Fix |
| CVE-2021-27430 | GE UR family hard-coded credentials | 6.8NVD v3.1 | 0.2% | 2022-03-23 | Fix |
| CVE-2021-27428 | GE UR family unrestricted upload of file with dangerous type | 9.8v3.1 | 1.2% | 2022-03-23 | Fix |
| CVE-2021-27426 | GE UR family insecure default variable initialization | 9.8v3.1 | 1.2% | 2022-03-23 | Fix |
| CVE-2021-27424 | GE UR family exposure of sensitive information to an unauthorized actor | 5.3v3.1 | 0.9% | 2022-03-23 | Fix |
| CVE-2021-27422 | GE UR family exposure of sensitive information to an unauthorized actor | 7.5v3.1 | 0.7% | 2022-03-23 | Fix |
| CVE-2021-27420 | GE UR family web server denial of service | 5.3v3.1 | 1.1% | 2022-03-23 | Fix |
| CVE-2021-27418 | GE UR family web interface cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-23 | Fix |
| CVE-2021-25220 | ISC BIND DNS forwarders cache poisoning | 6.8CNA v3.1 | 3.4% | 2022-03-23 | Fix |
| CVE-2021-4219 | ImageMagick denial of service | 5.5NVD v3.1 | 1.0% | 2022-03-23 | Fix |
| CVE-2021-4197 | kernel improper authentication | 7.8NVD v3.1 | 0.5% | 2022-03-23 | Fix |
| CVE-2021-4180 | Exposure of sensitive information to an unauthorized actor in OpenStack tripleo-heat-templates | 4.3NVD v3.1 | 0.8% | 2022-03-23 | Fix |
| CVE-2021-4156 | libsndfile An out-of-bounds read | 7.1NVD v3.1 | 1.8% | 2022-03-23 | Fix |
| CVE-2021-4150 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.3% | 2022-03-23 | |
| CVE-2021-4149 | kernel improper locking | 5.5NVD v3.1 | 0.4% | 2022-03-23 | Fix |
| CVE-2021-4148 | kernel improper integrity check validation | 5.5NVD v3.1 | 0.3% | 2022-03-23 | Fix |
| CVE-2021-3748 | QEMU (virtio-net) use-after-free | 7.5NVD v3.1 | 0.5% | 2022-03-23 | Fix |
| CVE-2021-3618 | ALPACA improper certificate validation | 7.4NVD v3.1 | 2.0% | 2022-03-23 | KCVFix |
| CVE-2021-3589 | Missing authentication for critical function in Foreman Ansible | 8.0v3.1 | 1.0% | 2022-03-23 | Fix |
| CVE-2021-45810 | GlobalProtect-openconnect GPService vulnerability | 7.5v3.1 | 0.8% | 2022-03-22 | |
| CVE-2021-45809 | GlobalProtect-openconnect GPService vulnerability | 9.8v3.1 | 1.6% | 2022-03-22 | |
| CVE-2021-43650 | Softwell Webrun SQL injection | 9.8v3.1 | 6.2% | 2022-03-22 | Exploit code |
| CVE-2021-41736 | Grame Faust out-of-bounds write | 9.8v3.1 | 1.4% | 2022-03-22 | |
| CVE-2021-33961 | Enhanced-github cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-22 | |
| CVE-2021-46390 | Lexar F35 authentication module improper access control | 6.8v3.1 | 0.5% | 2022-03-21 | Fix |
| CVE-2021-45878 | GARO Wallbox Glb missing authentication | 9.1v3.1 | 1.1% | 2022-03-21 | |
| CVE-2021-45877 | GARO Wallbox Glb hard-coded credentials | 9.8v3.1 | 1.1% | 2022-03-21 | |
| CVE-2021-45876 | GARO Wallbox Glb command injection | 9.8v3.1 | 1.5% | 2022-03-21 | |
| CVE-2021-45117 | OPC Foundation UA-Nodeset ANSI C stack stubs null pointer dereference | 6.5v3.1 | 1.4% | 2022-03-21 | Fix |
| CVE-2021-40662 | Chamilo cross-site request forgery | 8.8v3.1 | 1.1% | 2022-03-21 | Fix |
| CVE-2021-38745 | Chamilo code injection | 6.8v3.1 | 0.9% | 2022-03-21 | Fix |
| CVE-2021-36100 | OTRS authenticated remote code execution | 6.4CNA v3.1 | 1.3% | 2022-03-21 | Fix |
| CVE-2021-25019 | SEO Plugin by Squirrly SEO WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-21 | Fix |
| CVE-2021-24905 | Advanced Contact form 7 DB WordPress plugin Subscriber+ arbitrary file deletion | 8.0NVD v3.1 | 0.8% | 2022-03-21 | Fix |
| CVE-2021-44345 | Wvti One Card Integrated Management System SQL injection | 7.5v3.1 | 1.1% | 2022-03-20 | |
| CVE-2021-42194 | EyouCMS XML external entity injection | 7.2v3.1 | 1.1% | 2022-03-20 | |
| CVE-2021-39384 | diaowen DWSurvey unrestricted file upload | 9.8v3.1 | 1.2% | 2022-03-20 | |
| CVE-2021-39383 | diaowen DWSurvey code injection | 9.8v3.1 | 3.1% | 2022-03-20 | |
| CVE-2021-45968 | Pascom Cloud Phone System server-side request forgery | 7.5v3.1 | 10.7% | 2022-03-18 | NucleiFix |
| CVE-2021-45967 | Pascom Cloud Phone System path traversal | 9.8v3.1 | 20.8% | 2022-03-18 | NucleiFix |
| CVE-2021-45966 | Pascom Cloud Phone System OS command injection | 9.8v3.1 | 5.6% | 2022-03-18 | Fix |
| CVE-2021-45868 | Linux kernel use-after-free | 5.5v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2021-45835 | Online Admission System Project Online Admissions System unrestricted file upload | 9.8v3.1 | 3.2% | 2022-03-18 | |
| CVE-2021-45834 | OpenDocMan unrestricted file upload | 9.8v3.1 | 2.3% | 2022-03-18 | |
| CVE-2021-44760 | WP-DownloadManager WordPress plugin Auth. reflected cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-03-18 | Fix |
| CVE-2021-39046 | IBM Business Automation Workflow insufficiently protected credentials | 4.9CNA v3.0 | 0.9% | 2022-03-18 | Fix |
| CVE-2021-30771 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2021-29899 | IBM Engineering Requirements Quality Assistant denial of service | 6.5CNA v3.0 | 1.1% | 2022-03-18 | Fix |
| CVE-2021-27789 | Brocade Fabric OS web application debug output information disclosure | 6.5v3.1 | 0.8% | 2022-03-18 | Fix |
| CVE-2021-23209 | AMP for WP Accelerated Mobile Pages WordPress plugin Multiple Auth. stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-18 | Fix |
| CVE-2021-23150 | AMP for WP Accelerated Mobile Pages WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-03-18 | Fix |
| CVE-2021-22571 | Information leak in SA360-webquery-bigquery through read on /tmp | 5.5CNA v3.1 | 0.2% | 2022-03-18 | Fix |
| CVE-2021-4031 | Syltek insufficient verification of data authenticity | 7.5v3.1 | 0.5% | 2022-03-18 | Fix |
| CVE-2021-46107 | Ligeo-archives Ligeo Basics server-side request forgery | 7.5v3.1 | 7.4% | 2022-03-17 | Nuclei |
| CVE-2021-45794 | SLIMS Senayan Library Management System SQL injection | 7.5v3.1 | 1.1% | 2022-03-17 | |
| CVE-2021-45793 | SLIMS Senayan Library Management System SQL injection | 7.5v3.1 | 4.5% | 2022-03-17 | Nuclei |
| CVE-2021-45792 | SLIMS Senayan Library Management System cross-site scripting | 4.8v3.1 | 0.5% | 2022-03-17 | |
| CVE-2021-45791 | SLIMS Senayan Library Management System SQL injection | 8.8v3.1 | 1.0% | 2022-03-17 | |
| CVE-2021-45040 | spatie laravel-medialibrary unrestricted file upload | 9.8v3.1 | 3.2% | 2022-03-17 | Fix |
| CVE-2021-44908 | Sailsjs sails prototype pollution in Sails.js | 9.8v3.1 | 1.8% | 2022-03-17 | Fix |
| CVE-2021-44906 | Prototype pollution in minimist | 9.8NVD v3.1 | 4.6% | 2022-03-17 | Fix |
| CVE-2021-44262 | NETGEAR WAC104 missing authentication | 7.5v3.1 | 2.2% | 2022-03-17 | Fix |
| CVE-2021-44261 | NETGEAR WAC104 missing authentication | 5.3v3.1 | 20.8% | 2022-03-17 | Fix |
| CVE-2021-44260 | WAVLINK Wl-wn531g3 missing authentication | 7.5v3.1 | 6.4% | 2022-03-17 | Nuclei |
| CVE-2021-44259 | WAVLINK Wl-wn531g3 missing authentication | 9.8v3.1 | 2.0% | 2022-03-17 | |
| CVE-2021-44088 | Attendance and Payroll System Sourcecodester SQL injection | 9.8v3.1 | 3.0% | 2022-03-17 | |
| CVE-2021-44087 | Attendance and Payroll System Sourcecodester remote code execution | 9.8v3.1 | 4.1% | 2022-03-17 | |
| CVE-2021-43961 | Sonatype Nexus Repository Manager cross-site scripting | 4.3v3.1 | 0.7% | 2022-03-17 | Fix |
| CVE-2021-42219 | Denial of service in go-ethereum | 7.5v3.1 | 1.2% | 2022-03-17 | |
| CVE-2021-23771 | notevil sandbox bypass | 6.5v3.1 | 1.0% | 2022-03-17 | |
| CVE-2021-23632 | git remote code execution (RCE) | 9.8v3.1 | 2.4% | 2022-03-17 | |
| CVE-2021-23556 | guake exposed dangerous method or function | 8.0v3.1 | 1.1% | 2022-03-17 | Fix |
| CVE-2021-46705 | GNU GRUB2 grub2-once uses fixed file name in /var/tmp | 5.1CNA v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-45852 | Projectworlds hospital-management-system-in-php incorrect control flow | 5.3v3.1 | 0.7% | 2022-03-16 | |
| CVE-2021-45851 | Server-side request forgery in FUXA | 7.5v3.1 | 1.5% | 2022-03-16 | |
| CVE-2021-45822 | Btiteam Xbtit cross-site scripting | 6.1v3.1 | 1.1% | 2022-03-16 | |
| CVE-2021-45821 | Btiteam Xbtit blind SQL injection | 8.8v3.1 | 2.7% | 2022-03-16 | |
| CVE-2021-45787 | MacCMS There is a stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-16 | |
| CVE-2021-45786 | MacCMS improper authentication | 9.8v3.1 | 1.2% | 2022-03-16 | |
| CVE-2021-43958 | Atlassian Fisheye missing brute-force protection | 9.8v3.1 | 1.5% | 2022-03-16 | Fix |
| CVE-2021-43957 | Atlassian Fisheye insecure direct object reference | 7.5v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-43956 | Atlassian Fisheye prototype pollution | 6.1v3.1 | 0.7% | 2022-03-16 | Fix |
| CVE-2021-43955 | Atlassian Fisheye information disclosure | 4.3v3.1 | 0.9% | 2022-03-16 | Fix |
| CVE-2021-42730 | Adobe Bridge memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-42729 | Adobe Bridge memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-42728 | Adobe Bridge buffer overflow arbitrary code execution | 7.8CNA v3.1 | 4.0% | 2022-03-16 | Fix |
| CVE-2021-42724 | Adobe Bridge memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-42722 | Adobe Bridge out-of-bounds read could lead to arbitrary code execution | 7.8CNA v3.1 | 0.6% | 2022-03-16 | Fix |
| CVE-2021-42720 | Adobe Bridge out-of-bounds read could lead to arbitrary code execution | 7.8CNA v3.1 | 2.1% | 2022-03-16 | Fix |
| CVE-2021-42719 | Adobe Bridge out-of-bounds read could lead to arbitrary code execution | 7.1CNA v3.0 | 2.2% | 2022-03-16 | Fix |
| CVE-2021-42552 | Reflected XSS in Archivista | 6.1v3.1 | 0.7% | 2022-03-16 | Fix |
| CVE-2021-42533 | Adobe Bridge DCM File Parsing double free remote code execution | 7.8CNA v3.0 | 2.1% | 2022-03-16 | Fix |
| CVE-2021-42527 | Adobe Premiere Elements PSD file handling vulnerability | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-42526 | Adobe Premiere Elements WAV file handling vulnerability | 7.8CNA v3.1 | 1.6% | 2022-03-16 | Fix |
| CVE-2021-42264 | Adobe Premiere Pro null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-42263 | Adobe Premiere Pro null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-41987 | MikroTik RouterOS out-of-bounds write | 8.1v3.1 | 16.2% | 2022-03-16 | Fix |
| CVE-2021-40796 | Adobe Premiere Pro null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40794 | Adobe Premiere Pro MOV file memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40793 | Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40792 | Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40789 | Adobe Premiere Elements null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40788 | Adobe Premiere Elements null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40787 | Adobe Premiere Elements M4A file memory corruption | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40786 | Adobe Premiere Elements M4A file memory corruption | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40785 | Adobe Premiere Elements null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40782 | Adobe Media Encoder null pointer dereference application denial of service | 5.5CNA v3.1 | 1.2% | 2022-03-16 | Fix |
| CVE-2021-40781 | Adobe Media Encoder null pointer dereference application denial of service | 5.5CNA v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-40780 | Adobe Media Encoder MXF file memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2022-03-16 | Fix |
| CVE-2021-40779 | Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 2.0% | 2022-03-16 | Fix |
| CVE-2021-40778 | Adobe Media Encoder null pointer dereference application denial of service | 5.5CNA v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-40777 | Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40769 | Adobe Character Animator SVG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.2% | 2022-03-16 | Fix |