CVE-2021 records published after 2021
Page five of seven: records 4,001 to 5,000 of the 6,408 published after 2021, newest first. The first page carries the figures for After 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-40768 | Adobe Character Animator null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40767 | Adobe Character Animator memory corruption could lead to application denial of service | 5.5CNA v3.0 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40766 | Adobe Character Animator SVG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.2% | 2022-03-16 | Fix |
| CVE-2021-40765 | Adobe Character Animator memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40764 | Adobe Character Animator memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40763 | Adobe Character Animator memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-40762 | Adobe Character Animator null pointer dereference application denial of service | 5.5CNA v3.1 | 1.1% | 2022-03-16 | Fix |
| CVE-2021-40750 | Adobe Bridge null pointer dereference could lead to application denial of service | 5.5CNA v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-40742 | Adobe Audition null pointer dereference application denial of service | 5.5CNA v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-40741 | Adobe Audition memory corruption could lead to application denial of service | 5.5CNA v3.0 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-40740 | Adobe Audition memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-40739 | Adobe Audition memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-40738 | Adobe Audition WAV file memory corruption could lead to arbitrary code execution | 7.8CNA v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-40737 | Adobe Audition null pointer dereference application denial of service | 5.5CNA v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2021-40736 | Adobe Audition memory corruption could lead to arbitrary code execution | 7.8CNA v3.0 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-40735 | Adobe Audition memory corruption could lead to arbitrary code execution | 7.8CNA v3.0 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-40734 | Adobe Audition memory corruption could lead to arbitrary code execution | 7.8CNA v3.0 | 1.7% | 2022-03-16 | Fix |
| CVE-2021-39793 | Google Pixel out-of-bounds write | 7.8v3.1 | 0.7% | 2022-03-16 | KEVFix |
| CVE-2021-39792 | Android core.c use-after-free | 4.1v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39737 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-03-16 | Fix |
| CVE-2021-39736 | Android lwis_periodic_io.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39735 | Android gasket_page_table.c memory corruption | 6.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39734 | Android OneToOneChatImpl.java privilege escalation | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39733 | Android audiometrics.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39732 | Android lwis_ioctl.c out-of-bounds write | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39731 | Android protocolstkadapter.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39730 | Android TBD out-of-bounds read | 4.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39729 | Android the TitanM chip out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39727 | Android EicPresentation.c information disclosure | 4.1v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39726 | Android cd_codec.c out-of-bounds read | 7.5v3.1 | 0.8% | 2022-03-16 | Fix |
| CVE-2021-39725 | Android gasket_page_table.c memory corruption | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39724 | Android tuning_provider_base.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39723 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-03-16 | Fix |
| CVE-2021-39722 | Android protocolstkadapter.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39721 | Android TBD out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39720 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-03-16 | Fix |
| CVE-2021-39719 | Android lwis_device_top.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39718 | Android protocolstkadapter.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39717 | Android iaxxx-btp.c out-of-bounds read | 4.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39716 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2022-03-16 | Fix |
| CVE-2021-39715 | Android process.c information disclosure | 4.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39714 | Android ion.c use-after-free | 7.8v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-39713 | Android race condition | 7.0v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-39712 | Android TBD privilege escalation | 6.4v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39711 | Android test_run.c out-of-bounds read | 4.4v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-39710 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-03-16 | Fix |
| CVE-2021-39709 | Android SipAccountRegistry.java insecure permissions | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39708 | Android gatt_cl.cc out-of-bounds write | 9.8v3.1 | 1.2% | 2022-03-16 | Fix |
| CVE-2021-39707 | Android AppRestrictionsFragment.java privilege escalation | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39706 | Android CredentialStorage.java privilege escalation | 7.8v3.1 | 0.7% | 2022-03-16 | Exploit codeFix |
| CVE-2021-39704 | Android NotificationManagerService.java privilege escalation | 7.8v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-39703 | Android UsbDeviceManager.java unauthorized access | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39702 | Android RequestManageCredentials.java privilege escalation | 7.8v3.1 | 0.3% | 2022-03-16 | Fix |
| CVE-2021-39701 | Android ControlsProviderLifecycleManager.kt privilege escalation | 7.8v3.1 | 0.4% | 2022-03-16 | Fix |
| CVE-2021-39698 | Android aio.c memory corruption | 7.8v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-39697 | Android DownloadProvider.java privilege escalation | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39695 | Android BasePermission.java insecure permissions | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39694 | Android RoleParser.java privilege escalation | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39693 | Android AppOpsService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39692 | Android SetupLayoutActivity.java privilege escalation | 7.8v3.1 | 0.7% | 2022-03-16 | Exploit codeFix |
| CVE-2021-39690 | Android WallpaperManagerService.java denial of service | 5.5v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39689 | Android odsign_main.cpp privilege escalation | 6.7v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-39686 | Android binder.c privilege escalation | 7.0v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2021-39685 | Android the USB gadget subsystem out-of-bounds write | 7.8v3.1 | 0.5% | 2022-03-16 | Exploit codeFix |
| CVE-2021-39667 | Android ih264d_parse_slice.c out-of-bounds write | 6.5v3.1 | 0.7% | 2022-03-16 | Fix |
| CVE-2021-39624 | Android PackageManager denial of service | 5.5v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-33853 | X2CRM cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-16 | |
| CVE-2021-23648 | @braintree/sanitize-url cross-site scripting (XSS) | 6.1v3.1 | 1.4% | 2022-03-16 | Fix |
| CVE-2021-23165 | htmldoc heap-based buffer overflow | 9.8NVD v3.1 | 3.5% | 2022-03-16 | Fix |
| CVE-2021-23158 | htmldoc double free | 9.8NVD v3.1 | 2.4% | 2022-03-16 | Fix |
| CVE-2021-20299 | OpenEXR null pointer dereference | 7.5NVD v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2021-20257 | QEMU e1000 NIC emulator of the infinite loop | 6.5NVD v3.1 | 0.4% | 2022-03-16 | Fix |
| CVE-2021-20180 | Insertion of sensitive information into log file in Ansible | 5.5v3.1 | 0.3% | 2022-03-16 | Fix |
| CVE-2021-0957 | Android NotificationStackScrollLayout.java privilege escalation | 7.8v3.1 | 0.1% | 2022-03-16 | Fix |
| CVE-2021-45848 | Nicotine+ DoS on Null Character in Download request | 7.5v3.1 | 1.6% | 2022-03-15 | Fix |
| CVE-2021-45010 | prasathmani TinyFileManager file upload functionality path traversal | 8.8v3.1 | 70.1% | 2022-03-15 | Exploit code |
| CVE-2021-29134 | Path traversal in Gitea | 5.3v3.1 | 1.4% | 2022-03-15 | Fix |
| CVE-2021-44964 | Lua garbage collector and finalizer of lgc.c use-after-free | 6.3v3.1 | 1.0% | 2022-03-14 | Fix |
| CVE-2021-43954 | Atlassian Fisheye server-side request forgery | 4.3v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2021-43305 | Yandex clickhouse heap-based buffer overflow | 8.8NVD v3.1 | 1.7% | 2022-03-14 | Fix |
| CVE-2021-43304 | Yandex clickhouse heap-based buffer overflow | 8.8NVD v3.1 | 1.7% | 2022-03-14 | Fix |
| CVE-2021-42391 | Yandex clickhouse divide by zero | 6.5NVD v3.1 | 1.4% | 2022-03-14 | Fix |
| CVE-2021-42390 | Yandex clickhouse divide by zero | 6.5NVD v3.1 | 1.3% | 2022-03-14 | Fix |
| CVE-2021-42389 | Yandex clickhouse divide by zero | 6.5NVD v3.1 | 1.3% | 2022-03-14 | Fix |
| CVE-2021-42388 | Yandex clickhouse Heap out-of-bounds read | 8.1NVD v3.1 | 1.6% | 2022-03-14 | Fix |
| CVE-2021-42387 | Yandex clickhouse Heap out-of-bounds read | 8.1NVD v3.1 | 1.6% | 2022-03-14 | Fix |
| CVE-2021-42171 | Unrestricted upload of file with dangerous type in Zenario CMS | 7.2v3.1 | 2.5% | 2022-03-14 | Exploit codeFix |
| CVE-2021-41952 | Cross-site scripting in Zenario CMS | 4.8v3.1 | 0.5% | 2022-03-14 | Fix |
| CVE-2021-39055 | IBM Spectrum Copy Data Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-03-14 | Fix |
| CVE-2021-39051 | IBM Spectrum Copy Data Management server-side request forgery | 4.8CNA v3.0 | 0.9% | 2022-03-14 | Fix |
| CVE-2021-38971 | IBM Data Virtualization data masking information disclosure | 4.9CNA v3.0 | 0.9% | 2022-03-14 | Fix |
| CVE-2021-25026 | Patreon WordPress plugin Admin+ stored cross-site scripting | 5.5NVD v3.1 | 0.7% | 2022-03-14 | Fix |
| CVE-2021-25007 | MOLIE WordPress plugin authenticated SQL injection | 9.8NVD v3.1 | 1.6% | 2022-03-14 | |
| CVE-2021-25006 | MOLIE WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | |
| CVE-2021-25003 | WPCargo WordPress plugin unauthenticated RCE | 9.8NVD v3.1 | 56.1% | 2022-03-14 | NucleiExploit codeFix |
| CVE-2021-24996 | IDPay for Contact Form 7 WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2021-24995 | HTML5 Responsive FAQ WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | |
| CVE-2021-24982 | Child Theme Generator WordPress plugin reflected cross-site scripting | 6.4NVD v3.1 | 0.6% | 2022-03-14 | |
| CVE-2021-24966 | Error Log Viewer WordPress plugin Admin+ arbitrary file Clearing | 4.9NVD v3.1 | 5.2% | 2022-03-14 | Exploit codeFix |
| CVE-2021-24959 | WP Email Users WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 2.2% | 2022-03-14 | Exploit code |
| CVE-2021-24958 | Meks Easy Photo Feed Widget WordPress plugin Subscriber+ settings update to stored XSS | 5.4NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2021-24950 | Insight Core WordPress plugin Subscriber+ PHP object injection and stored XSS | 5.4NVD v3.1 | 0.5% | 2022-03-14 | |
| CVE-2021-24940 | Persian Woocommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-03-14 | NucleiFix |
| CVE-2021-24897 | ViitorCloud Technologies Add Subtitle subtitle field stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-14 | |
| CVE-2021-24895 | Cybersoldier WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2021-24692 | Simple Download Monitor WordPress plugin Contributor+ arbitrary file download via path traversal | 6.5NVD v3.1 | 1.4% | 2022-03-14 | Fix |
| CVE-2021-46709 | Phpliteadmin cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-13 | Fix |
| CVE-2021-45889 | Ponton X/p Messenger cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-13 | Fix |
| CVE-2021-45888 | Ponton X/p Messenger cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-13 | Fix |
| CVE-2021-45887 | Ponton X/p Messenger path traversal | 9.8v3.1 | 3.5% | 2022-03-13 | Fix |
| CVE-2021-45886 | Ponton X/p Messenger cross-site request forgery | 8.8v3.1 | 0.6% | 2022-03-13 | Fix |
| CVE-2021-36368 | OpenBSD OpenSSH improper authentication | 3.7v3.1 | 1.7% | 2022-03-13 | Fix |
| CVE-2021-46708 | Spoofing attack in Swagger-ui-dist | 6.1v3.1 | 1.5% | 2022-03-11 | Fix |
| CVE-2021-44667 | Cross-site scripting in Nacos | 6.1v3.1 | 0.8% | 2022-03-11 | Exploit codeFix |
| CVE-2021-44620 | TOTOLINK A3100R command injection | 9.8v3.1 | 1.4% | 2022-03-11 | Fix |
| CVE-2021-44618 | Server-side template injection in Nystudio107/craft-seomatic | 9.8v3.1 | 1.4% | 2022-03-11 | Fix |
| CVE-2021-42577 | Softing Datafeed OPC Suite null pointer dereference | 7.5v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2021-42262 | Softing Datafeed OPC Suite crash | 6.5v3.1 | 0.8% | 2022-03-11 | Fix |
| CVE-2021-41850 | Luna Simo information disclosure | 7.8v3.1 | 0.4% | 2022-03-11 | |
| CVE-2021-41849 | Luna Simo cleartext transmission of sensitive information | 5.5v3.1 | 0.3% | 2022-03-11 | |
| CVE-2021-41848 | Luna Simo hard-coded credentials | 7.8v3.1 | 0.4% | 2022-03-11 | |
| CVE-2021-33658 | openEuler atune missing authentication | 7.8v3.1 | 0.2% | 2022-03-11 | Fix |
| CVE-2021-33150 | Intel(R) Trace Hub instances which privilege escalation | 6.8v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2021-32478 | Moodle reflected XSS | 6.1NVD v3.1 | 1.1% | 2022-03-11 | NucleiFix |
| CVE-2021-32477 | Moodle exposure of sensitive information to an unauthorized actor | 4.3NVD v3.1 | 0.7% | 2022-03-11 | Fix |
| CVE-2021-32476 | Moodle denial of service risk in the draft files area | 7.5NVD v3.1 | 1.1% | 2022-03-11 | Fix |
| CVE-2021-32475 | Moodle stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-11 | Fix |
| CVE-2021-32474 | Moodle blind SQL injection possible via MNet authentication | 7.2NVD v3.1 | 0.9% | 2022-03-11 | Fix |
| CVE-2021-32473 | Moodle information disclosure | 5.3NVD v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2021-32472 | Moodle exposure of sensitive information to an unauthorized actor | 4.3NVD v3.1 | 0.8% | 2022-03-11 | Fix |
| CVE-2021-32009 | Secomea GateManager missing XSS guards on firmware page | 5.0CNA v3.1 | 0.5% | 2022-03-11 | |
| CVE-2021-27416 | Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM | 5.4v3.1 | 0.6% | 2022-03-11 | Fix |
| CVE-2021-27414 | User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM | 6.1v3.1 | 0.6% | 2022-03-11 | Fix |
| CVE-2021-26401 | LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. | 5.6v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2021-26341 | AMD Processors improper removal of sensitive information | 6.5v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2021-23246 | ACE2 information disclosure | 7.5v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2021-46408 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2021-44750 | F-Secure Elements Agent arbitrary code execution | 7.3v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-44673 | Unrestricted upload of file with dangerous type in Croogo | 8.8v3.1 | 9.0% | 2022-03-10 | Exploit codeFix |
| CVE-2021-44632 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44631 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44630 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44629 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44628 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44627 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44626 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44625 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 1.8% | 2022-03-10 | |
| CVE-2021-44623 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 1.8% | 2022-03-10 | |
| CVE-2021-44622 | TP-Link Tl-wr886n A buffer overflow | 9.8v3.1 | 2.6% | 2022-03-10 | |
| CVE-2021-44585 | JeecgBoot cross-site scripting in jeecg-boot | 6.1v3.1 | 0.9% | 2022-03-10 | Fix |
| CVE-2021-44421 | Occlum observable discrepancy | 5.5v3.1 | 0.4% | 2022-03-10 | |
| CVE-2021-44269 | WavPack An out-of-bounds read | 5.5v3.1 | 1.2% | 2022-03-10 | Fix |
| CVE-2021-44216 | Northern.tech Cfengine incorrect default permissions | 5.5v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2021-44215 | Northern.tech Cfengine incorrect default permissions | 5.5v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2021-44032 | TP-Link Omada Software Controller missing authentication | 7.5v3.1 | 1.8% | 2022-03-10 | Fix |
| CVE-2021-43970 | Quicklert albumimages.jsp arbitrary file upload | 8.8v3.1 | 1.8% | 2022-03-10 | |
| CVE-2021-43969 | Quicklert SQL injection | 6.5v3.1 | 1.5% | 2022-03-10 | |
| CVE-2021-42857 | Aternity SteelCentral AppInternals Dynamic Sampling Agent path traversal | 5.3v3.1 | 1.2% | 2022-03-10 | Fix |
| CVE-2021-42856 | Aternity SteelCentral AppInternals Dynamic Sampling Agent cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-42855 | Aternity SteelCentral AppInternals Dynamic Sampling Agent improper access control | 7.8v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2021-42854 | Aternity SteelCentral AppInternals Dynamic Sampling Agent path traversal | 9.8v3.1 | 1.6% | 2022-03-10 | Fix |
| CVE-2021-42853 | Aternity SteelCentral AppInternals Dynamic Sampling Agent path traversal | 9.8v3.1 | 1.6% | 2022-03-10 | Fix |
| CVE-2021-42787 | Aternity SteelCentral AppInternals Dynamic Sampling Agent path traversal | 9.8v3.1 | 1.3% | 2022-03-10 | Fix |
| CVE-2021-42786 | Aternity SteelCentral AppInternals Dynamic Sampling Agent remote code execution | 9.8v3.1 | 2.1% | 2022-03-10 | Fix |
| CVE-2021-41657 | SMARTBEAR Collaborator clickjacking | 6.1v3.1 | 0.8% | 2022-03-10 | |
| CVE-2021-41233 | Missing authorization in Nextcloud text | 6.5CNA v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2021-40376 | Otris Update Manager improper authentication | 7.8v3.1 | 0.4% | 2022-03-10 | |
| CVE-2021-40064 | Huawei EMUI heap-based buffer overflow vulnerability in system components | 7.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2021-40063 | Huawei EMUI improper access control vulnerability in the video module | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40062 | Huawei EMUI vulnerability of copying input buffer without checking its size in the video framework | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40061 | Huawei EMUI type confusion | 7.5v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-40060 | Huawei EMUI heap-based buffer overflow vulnerability in the video framework | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40059 | Huawei EMUI permission control vulnerability in the Wi-Fi module | 6.5v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2021-40058 | Huawei EMUI heap-based buffer overflow vulnerability in the video framework | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40057 | Huawei EMUI heap-based and stack-based buffer overflow vulnerabilities in the video framework | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40056 | Huawei EMUI vulnerability of copying input buffer without checking its size in the video framework | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40055 | Huawei EMUI man-in-the-middle attack vulnerability during system update download in recovery mode | 5.9v3.1 | 0.5% | 2022-03-10 | Fix |
| CVE-2021-40054 | Huawei EMUI integer underflow vulnerability in the atcmdserver module | 7.5v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-40053 | HarmonyOS permission control vulnerability in the Nearby module | 9.1v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-40052 | Huawei HarmonyOS incorrect buffer size calculation vulnerability in the video framework | 7.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2021-40051 | Huawei EMUI unauthorized access vulnerability in system components | 7.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2021-40050 | Huawei EMUI out-of-bounds read vulnerability in the IFAA module | 9.8v3.1 | 1.1% | 2022-03-10 | Fix |
| CVE-2021-40049 | Huawei EMUI permission control vulnerability in the PMS module | 7.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2021-40048 | Huawei EMUI incorrect buffer size calculation vulnerability in the video framework | 7.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2021-40047 | Huawei EMUI vulnerability of memory not being released after effective lifetime in the Bastet module | 7.5v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-39025 | IBM Guardium Data Encryption web backend information disclosure | 5.3CNA v3.0 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-39022 | IBM Security Guardium Data Encryption CSV injection | 6.2CNA v3.0 | 0.5% | 2022-03-10 | Fix |
| CVE-2021-38910 | IBM DataPower Gateway improper input validation | 3.7CNA v3.0 | 1.1% | 2022-03-10 | Fix |
| CVE-2021-38296 | Authentication bypass by capture-replay in Apache Spark | 7.5v3.1 | 1.8% | 2022-03-10 | Fix |
| CVE-2021-35251 | SolarWinds Web Help Desk sensitive data disclosure | 5.3CNA v3.1 | 0.9% | 2022-03-10 | Fix |
| CVE-2021-34342 | ming out-of-bounds read | 6.5NVD v3.1 | 1.1% | 2022-03-10 | |
| CVE-2021-34341 | ming out-of-bounds read | 6.5NVD v3.1 | 0.9% | 2022-03-10 | |
| CVE-2021-34340 | ming out-of-bounds read | 6.5NVD v3.1 | 0.9% | 2022-03-10 | |
| CVE-2021-34339 | ming out-of-bounds read | 6.5NVD v3.1 | 1.0% | 2022-03-10 | |
| CVE-2021-34338 | ming out-of-bounds read | 6.5NVD v3.1 | 1.0% | 2022-03-10 | |
| CVE-2021-34122 | Rockcarry Ffjpeg null pointer dereference | 5.5v3.1 | 0.8% | 2022-03-10 | |
| CVE-2021-33852 | WordPress Post Duplicator Plugin cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-33851 | WordPress Customize Login Image Plugin cross-site scripting | 5.4v3.1 | 1.3% | 2022-03-10 | NucleiFix |
| CVE-2021-33293 | libpano13 out-of-bounds read | 9.1v3.1 | 2.1% | 2022-03-10 | Fix |
| CVE-2021-32436 | abcm2ps function write_title in subs.c out-of-bounds read | 6.5v3.1 | 1.7% | 2022-03-10 | Fix |
| CVE-2021-32435 | abcm2ps function get_key in parse.c stack-based buffer overflow | 5.5v3.1 | 1.3% | 2022-03-10 | Fix |
| CVE-2021-32434 | abcm2ps out-of-bounds read | 5.5v3.1 | 1.0% | 2022-03-10 | Fix |
| CVE-2021-32025 | BlackBerry QNX Software Development Platform (SDP) elevation of privilege | 8.1CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2021-32006 | GateManager information leak for LinkManager Users | 5.0CNA v3.1 | 0.6% | 2022-03-10 | |
| CVE-2021-32005 | SiteManager Log View XSS issue | 6.5CNA v3.1 | 0.6% | 2022-03-10 | |
| CVE-2021-28488 | Ericsson NetworkManager resource exposure | 6.5v3.1 | 1.1% | 2022-03-10 | |
| CVE-2021-20269 | kexec-tools incorrect default permissions | 5.5NVD v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2021-4095 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2021-4045 | TP-Link Tapo C200 remote code execution | 9.8v3.1 | 72.2% | 2022-03-10 | Exploit codeFix |
| CVE-2021-4023 | Linux kernel io_uring workqueue denial of service | 5.5NVD v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2021-3981 | grub2 incorrect default permissions | 3.3NVD v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2021-3739 | Linux kernel null pointer dereference | 7.1NVD v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2021-3732 | kernel information disclosure | 5.5NVD v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2021-3698 | cockpit improper certificate validation | 7.5v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2021-3660 | cockpit clickjacking | 4.3v3.1 | 1.3% | 2022-03-10 | Fix |
| CVE-2021-36777 | openSUSE Build service login-proxy sends password to attacker-provided domain | 8.1CNA v3.1 | 0.9% | 2022-03-09 | |
| CVE-2021-22783 | Schneider Electric Ritto Wiser Door information disclosure | 8.8CNA v3.1 | 0.4% | 2022-03-09 | Fix |
| CVE-2021-44478 | Siemens Polarion ALM cross-site scripting | 6.1v3.1 | 0.8% | 2022-03-08 | Fix |
| CVE-2021-43944 | Atlassian Jira Server code injection | 7.2v3.1 | 2.3% | 2022-03-08 | Fix |
| CVE-2021-42020 | Siemens RUGGEDCOM i800 improper check for exceptional conditions | 7.5CNA v3.1 | 1.0% | 2022-03-08 | Fix |
| CVE-2021-42019 | Siemens RUGGEDCOM i800 integer overflow | 5.9CNA v3.1 | 0.9% | 2022-03-08 | Fix |
| CVE-2021-42018 | Siemens RUGGEDCOM i800 heap-based buffer overflow | 5.9CNA v3.1 | 1.0% | 2022-03-08 | Fix |
| CVE-2021-42017 | Siemens RUGGEDCOM i800 improperly implemented security check | 5.9CNA v3.1 | 0.5% | 2022-03-08 | Fix |
| CVE-2021-42016 | Siemens RUGGEDCOM i800 timing side channel | 7.5CNA v3.1 | 0.6% | 2022-03-08 | Fix |
| CVE-2021-41543 | Siemens Climatix POL909 (AWB module) information disclosure | 6.5v3.1 | 0.7% | 2022-03-08 | Fix |
| CVE-2021-41542 | Siemens Climatix POL909 (AWB module) cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-08 | Fix |
| CVE-2021-41541 | Siemens Climatix POL909 (AWB module) cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-08 | Fix |
| CVE-2021-41241 | Advanced permissions is not respected for subfolders in Nextcloud Server | 4.3CNA v3.1 | 0.9% | 2022-03-08 | Fix |
| CVE-2021-41239 | User enumeration setting not respected in Nextcloud Server | 5.3CNA v3.1 | 1.1% | 2022-03-08 | Fix |
| CVE-2021-41181 | Nextcloud Talk app exposes chat messages on lockscreen | 2.4CNA v3.1 | 0.3% | 2022-03-08 | Fix |
| CVE-2021-41180 | Geolocation preview links can be set to arbitrary links in Nextcloud Talk | 4.7CNA v3.1 | 1.0% | 2022-03-08 | Fix |
| CVE-2021-37209 | Siemens RUGGEDCOM i800 inadequate encryption strength | 6.7CNA v3.1 | 0.4% | 2022-03-08 | Fix |
| CVE-2021-37208 | Siemens RUGGEDCOM i800 cross-site scripting | 9.6CNA v3.1 | 0.5% | 2022-03-08 | Fix |
| CVE-2021-36809 | Sophos SSL VPN client arbitrary file write | 6.1CNA v3.1 | 0.2% | 2022-03-08 | Fix |
| CVE-2021-38989 | IBM VIOS denial of service | 6.2CNA v3.0 | 0.2% | 2022-03-07 | Fix |
| CVE-2021-38988 | IBM VIOS denial of service | 6.2CNA v3.0 | 0.2% | 2022-03-07 | Fix |
| CVE-2021-25098 | Easy Pricing Tables WordPress plugin arbitrary post Removal via CSRF | 6.5NVD v3.1 | 0.5% | 2022-03-07 | Fix |
| CVE-2021-25087 | Wordpress Download Manager plugin sensitive information disclosure | 7.5NVD v3.1 | 1.5% | 2022-03-07 | Fix |
| CVE-2021-25039 | Multisite Content Copier/Updater WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2021-25038 | Multisite User Sync/Unsync WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2021-25009 | CorreosExpress WordPress plugin sensitive information disclosure | 5.3NVD v3.1 | 1.2% | 2022-03-07 | |
| CVE-2021-24961 | WordPress File Upload plugin Contributor+ stored cross-site scripting via shortcode | 5.4NVD v3.1 | 0.7% | 2022-03-07 | Fix |
| CVE-2021-24960 | WordPress File Upload plugin Contributor+ stored cross-site scripting via Malicious SVG | 5.4NVD v3.1 | 0.7% | 2022-03-07 | Fix |
| CVE-2021-24953 | Advanced iFrame WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2021-24952 | Conversios.io WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.3% | 2022-03-07 | Fix |
| CVE-2021-24826 | Custom Content Shortcode WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2021-24825 | Custom Content Shortcode WordPress plugin authenticated arbitrary file access / LFI | 4.3NVD v3.1 | 0.4% | 2022-03-07 | Fix |
| CVE-2021-24824 | Custom Content Shortcode WordPress plugin Unauthorised arbitrary post Metadata access | 4.3NVD v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2021-24821 | Cost Calculator WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2021-24810 | WP Event Manager WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2021-24778 | Tradetracker-Store WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-03-07 | Fix |
| CVE-2021-24777 | Hotscot Contact Form WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-03-07 | Fix |
| CVE-2021-24216 | All-in-One WP Migration WordPress plugin Admin+ arbitrary file upload to RCE | 7.2NVD v3.1 | 1.7% | 2022-03-07 | Fix |
| CVE-2021-4199 | Bitdefender Total Security crash handling component BDReinit.exe incorrect permission assignment | 7.8CNA v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2021-4198 | Messaging_ipc.dll null pointer dereference in multiple Bitdefender products (VA-10016) | 6.1CNA v3.1 | 0.5% | 2022-03-07 | Fix |
| CVE-2021-3733 | python regular expression denial of service | 6.5NVD v3.1 | 4.8% | 2022-03-07 | Fix |
| CVE-2021-46704 | OS command injection in GenieACS | 9.8NVD v3.1 | 21.9% | 2022-03-06 | NucleiExploit codeFix |
| CVE-2021-46703 | Code injection in RazorEngine | 9.8v3.1 | 1.9% | 2022-03-06 | Exploit code |
| CVE-2021-44749 | Universal cross-site scripting vulnerability in F-Secure SAFE Browser Protection for Android | 9.6v3.1 | 0.8% | 2022-03-06 | Fix |
| CVE-2021-44748 | Universal cross-site scripting vulnerability in F-Secure SAFE Browser for Android | 6.1v3.1 | 0.5% | 2022-03-06 | Fix |
| CVE-2021-46394 | Tenda AX3 formSetPPTPServer function stack-based buffer overflow | 9.8v3.1 | 2.7% | 2022-03-04 | |
| CVE-2021-46393 | Tenda AX3 formSetPPTPServer function stack-based buffer overflow | 9.8v3.1 | 15.9% | 2022-03-04 | |
| CVE-2021-46384 | Mingsoft MCMS remote code execution in net.Mingsoft:ms-mcms | 9.8v3.1 | 2.2% | 2022-03-04 | Fix |
| CVE-2021-46382 | NETGEAR WAC120 Ac cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-04 | Fix |
| CVE-2021-46381 | D-Link DAP-1620 local file inclusion | 7.5v3.1 | 58.0% | 2022-03-04 | NucleiExploit code |
| CVE-2021-46379 | D-Link Dir-850l open redirect | 6.1v3.1 | 15.7% | 2022-03-04 | NucleiExploit code |
| CVE-2021-46378 | D-Link Dir-850l forced browsing | 7.5v3.1 | 31.9% | 2022-03-04 | Exploit code |
| CVE-2021-46353 | D-Link DIR-X1860 web interface information disclosure | 5.3v3.1 | 2.2% | 2022-03-04 | Fix |
| CVE-2021-44827 | TP-Link Archer C20I OS command injection | 8.8v3.1 | 54.0% | 2022-03-04 | Exploit codeFix |
| CVE-2021-44321 | Mini-Inventory-and-Sales-Management-System cross-site request forgery | 5.0v3.1 | 0.3% | 2022-03-04 | Fix |
| CVE-2021-43590 | Dell EMC Enterprise Storage Analytics for vRealize Operations plaintext password storage | 6.0CNA v3.1 | 0.2% | 2022-03-04 | Fix |
| CVE-2021-43393 | Stsafe-j improper signature verification | 6.2v3.1 | 0.2% | 2022-03-04 | Fix |
| CVE-2021-43392 | Stsafe-j improper signature verification | 6.2v3.1 | 0.2% | 2022-03-04 | Fix |
| CVE-2021-40846 | Trading Paints cleartext transmission of sensitive information | 7.5v3.1 | 0.7% | 2022-03-04 | Fix |
| CVE-2021-32008 | Secomea GateManager logged-in Administrator may get unrestricted file system access | 9.9CNA v3.1 | 1.0% | 2022-03-04 | Fix |
| CVE-2021-27757 | "BigFix Insights" cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2022-03-04 | Fix |
| CVE-2021-27756 | "BigFix Compliance Server" weak cryptographic algorithm | 7.5v3.1 | 0.6% | 2022-03-04 | Fix |
| CVE-2021-23214 | PostgreSQL SQL injection | 8.1NVD v3.1 | 1.9% | 2022-03-04 | Fix |
| CVE-2021-20319 | coreos-installer improperly verifies GPG signature when decompressing gzipped artifact | 7.8NVD v3.1 | 0.5% | 2022-03-04 | Fix |
| CVE-2021-20303 | OpenEXR integer overflow | 6.1NVD v3.1 | 0.8% | 2022-03-04 | Fix |
| CVE-2021-20302 | OpenEXR improper input validation | 5.5NVD v3.1 | 0.9% | 2022-03-04 | Fix |
| CVE-2021-20300 | OpenEXR integer overflow | 5.5NVD v3.1 | 0.9% | 2022-03-04 | Fix |
| CVE-2021-3744 | Linux kernel A memory leak | 5.5NVD v3.1 | 0.5% | 2022-03-04 | Fix |
| CVE-2021-3743 | kernel out-of-bounds read | 7.1NVD v3.1 | 0.7% | 2022-03-04 | Fix |
| CVE-2021-3737 | python infinite loop | 7.5NVD v3.1 | 13.2% | 2022-03-04 | Fix |
| CVE-2021-3656 | KVM missing authorization | 8.8NVD v3.1 | 0.7% | 2022-03-04 | Exploit codeFix |
| CVE-2021-3575 | openjpeg A heap-based buffer overflow | 7.8NVD v3.1 | 1.5% | 2022-03-04 | Fix |
| CVE-2021-3428 | kernel integer overflow | 5.5NVD v3.1 | 0.3% | 2022-03-04 | Fix |
| CVE-2021-45819 | Wordline Hidccemonitorsvc unquoted search path | 7.8v3.1 | 0.2% | 2022-03-03 | |
| CVE-2021-44343 | Ok-file-formats buffer overflow | 7.8v3.1 | 0.7% | 2022-03-03 | |
| CVE-2021-44335 | Ok-file-formats out-of-bounds write | 7.8v3.1 | 0.7% | 2022-03-03 | |
| CVE-2021-43774 | Fujifilm Apeosport-iv 2060 weak cryptographic algorithm | 4.9v3.1 | 0.7% | 2022-03-03 | Fix |
| CVE-2021-42950 | Zepl remote code execution | 8.8v3.1 | 1.6% | 2022-03-03 | |
| CVE-2021-40637 | OS4ED Opensis cross-site scripting | 6.1v3.1 | 0.8% | 2022-03-03 | |
| CVE-2021-40636 | OS4ED Opensis SQL injection | 7.5v3.1 | 1.3% | 2022-03-03 | |
| CVE-2021-40635 | OS4ED Opensis SQL injection | 7.5v3.1 | 1.3% | 2022-03-03 | |
| CVE-2021-38578 | TianoCore EDK II buffer underflow | 7.4CNA v3.1 | 1.0% | 2022-03-03 | Fix |
| CVE-2021-38269 | Liferay portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module | 5.4v3.1 | 0.6% | 2022-03-03 | Fix |
| CVE-2021-38267 | Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page | 5.4v3.1 | 0.6% | 2022-03-03 | Fix |
| CVE-2021-38265 | Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-03-03 | Fix |
| CVE-2021-38264 | Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter | 6.1v3.1 | 0.7% | 2022-03-03 | Fix |
| CVE-2021-38263 | Liferay portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console | 6.1v3.1 | 0.9% | 2022-03-03 | Fix |
| CVE-2021-26948 | htmldoc null pointer dereference | 7.8NVD v3.1 | 0.8% | 2022-03-03 | Fix |
| CVE-2021-26259 | htmldoc out-of-bounds write | 7.8NVD v3.1 | 1.2% | 2022-03-03 | Fix |
| CVE-2021-4002 | Linux kernel A memory leak | 4.4NVD v3.1 | 0.5% | 2022-03-03 | Fix |
| CVE-2021-3762 | Path traversal in claircore | 9.8v3.1 | 4.8% | 2022-03-03 | Fix |
| CVE-2021-3640 | Linux kernel function sco_sock_sendmsg of the use-after-free | 7.0NVD v3.1 | 0.4% | 2022-03-03 | Fix |
| CVE-2021-3638 | QEMU ATI VGA device emulation out-of-bounds access | 6.5NVD v3.1 | 0.4% | 2022-03-03 | Fix |
| CVE-2021-3620 | Ansible discloses sensitive information in traceback error message | 5.5v3.1 | 0.4% | 2022-03-03 | Fix |
| CVE-2021-3609 | kernel race condition | 7.0NVD v3.1 | 0.4% | 2022-03-03 | Fix |
| CVE-2021-3602 | Buildah processes using chroot isolation may leak environment values to intermediate processes | 5.5v3.1 | 0.3% | 2022-03-03 | Fix |
| CVE-2021-46270 | JFrog Artifactory missing authorization | 2.7CNA v3.1 | 0.7% | 2022-03-02 | Fix |
| CVE-2021-45864 | tsMuxer out-of-bounds read | 5.5v3.1 | 0.7% | 2022-03-02 | |
| CVE-2021-45863 | tsMuxer out-of-bounds write | 5.5v3.1 | 0.7% | 2022-03-02 | |
| CVE-2021-45861 | tsMuxer reachable assertion | 5.5v3.1 | 0.7% | 2022-03-02 | |
| CVE-2021-45860 | tsMuxer DTSStreamReader::findFrame integer overflow | 5.5v3.1 | 0.7% | 2022-03-02 | |
| CVE-2021-45074 | JFrog Artifactory missing authorization | 4.3CNA v3.1 | 0.6% | 2022-03-02 | Fix |
| CVE-2021-44166 | Fortinet FortiTokenAndroid improper access control | 4.1CNA v3.1 | 0.7% | 2022-03-02 | Fix |
| CVE-2021-43070 | Fortinet FortiWLM path traversal | 5.4CNA v3.1 | 0.6% | 2022-03-02 | Fix |
| CVE-2021-41003 | Aruba CX 6200F Switch Series command injection | 6.1v3.1 | 0.8% | 2022-03-02 | Fix |
| CVE-2021-41002 | Aruba CX 6200F Switch Series path traversal | 8.1v3.1 | 1.0% | 2022-03-02 | Fix |
| CVE-2021-41001 | Aruba CX 6200F Switch Series command injection | 8.8v3.1 | 2.7% | 2022-03-02 | Fix |
| CVE-2021-41000 | Aruba CX 6200F Switch Series command injection | 8.8v3.1 | 2.6% | 2022-03-02 | Fix |
| CVE-2021-38996 | IBM VIOS denial of service | 6.2CNA v3.0 | 0.2% | 2022-03-02 | Fix |
| CVE-2021-38268 | Liferay Portal and Liferay DXP has incorrect default permissions for site members | 6.5v3.1 | 0.8% | 2022-03-02 | Fix |
| CVE-2021-38266 | Liferay portal and Liferay DXP fails to properly import users from LDAP | 7.5v3.1 | 1.7% | 2022-03-02 | Fix |
| CVE-2021-23222 | PostgreSQL insufficiently protected credentials | 5.9NVD v3.1 | 1.5% | 2022-03-02 | Fix |
| CVE-2021-23206 | htmldoc stack-based buffer overflow | 7.8NVD v3.1 | 1.5% | 2022-03-02 | Fix |
| CVE-2021-23192 | samba improper input validation | 7.5NVD v3.1 | 2.0% | 2022-03-02 | Fix |
| CVE-2021-23191 | htmldoc null pointer dereference | 7.8NVD v3.1 | 1.1% | 2022-03-02 | Fix |
| CVE-2021-23180 | htmldoc null pointer dereference | 7.8NVD v3.1 | 1.4% | 2022-03-02 | Fix |
| CVE-2021-4076 | tang information disclosure | 7.5v3.1 | 1.6% | 2022-03-02 | Fix |
| CVE-2021-3772 | kernel improper integrity check validation | 6.5NVD v3.1 | 1.2% | 2022-03-02 | Fix |
| CVE-2021-3738 | samba use-after-free | 8.8NVD v3.1 | 2.0% | 2022-03-02 | Fix |
| CVE-2021-3716 | nbdkit improper message integrity enforcement | 3.1v3.1 | 0.6% | 2022-03-02 | Fix |
| CVE-2021-3715 | kernel use-after-free | 7.8NVD v3.1 | 0.4% | 2022-03-02 | Fix |
| CVE-2021-3677 | PostgreSQL information disclosure | 6.5NVD v3.1 | 1.4% | 2022-03-02 | Fix |
| CVE-2021-3667 | libvirt virStoragePoolLookupByTargetPath API improper locking | 6.5v3.1 | 1.4% | 2022-03-02 | Fix |
| CVE-2021-3658 | BlueZ incorrect authorization | 6.5NVD v3.1 | 0.8% | 2022-03-02 | Fix |
| CVE-2021-3654 | open redirect in CPython that affects users of OpenStack Nova | 6.1NVD v3.1 | 26.8% | 2022-03-02 | NucleiFix |
| CVE-2021-3631 | libvirt incorrect permission assignment | 6.3v3.1 | 0.5% | 2022-03-02 | Fix |
| CVE-2021-3623 | libtpms out-of-bounds write | 6.1NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2021-46387 | Zyxel Zywall 2 Plus Internet Security Appliance cross-site scripting | 6.1v3.1 | 21.0% | 2022-03-01 | NucleiExploit codeFix |
| CVE-2021-44962 | Slic3r libslic3r GCode::extrude functionality out-of-bounds read | 5.5v3.1 | 0.9% | 2022-03-01 | |
| CVE-2021-44961 | Slic3r libslic3r memory leak | 5.5v3.1 | 0.7% | 2022-03-01 | |
| CVE-2021-44747 | F-Secure endpoint protection products on Mac denial of service (DoS) | 6.5v3.1 | 0.6% | 2022-03-01 | |
| CVE-2021-44238 | Ayacms code injection | 7.2v3.1 | 1.9% | 2022-03-01 | |
| CVE-2021-43619 | Trusted Firmware-M buffer overflow | 7.8v3.1 | 0.4% | 2022-03-01 | Fix |
| CVE-2021-43077 | Fortinet FortiWLM SQL injection | 8.8CNA v3.1 | 0.8% | 2022-03-01 | Fix |
| CVE-2021-43075 | Fortinet FortiWLM OS command injection | 8.8CNA v3.1 | 1.6% | 2022-03-01 | Fix |
| CVE-2021-42951 | Algorithmia Msol remote code execution | 8.8v3.1 | 1.6% | 2022-03-01 | |
| CVE-2021-42767 | Neo4j Graph Database vulnerable to path traversal | 9.1v3.1 | 1.5% | 2022-03-01 | Fix |
| CVE-2021-41652 | Batflat file database.sdb insecure permissions | 7.5v3.1 | 1.1% | 2022-03-01 | |
| CVE-2021-41282 | pfSense diag_routes.php command injection | 8.8v3.1 | 87.1% | 2022-03-01 | NucleiMetasploitExploit codeFix |
| CVE-2021-41193 | wire-avs format string | 9.8CNA v3.1 | 2.5% | 2022-03-01 | Fix |
| CVE-2021-38986 | IBM MQ Appliance insufficient session expiration | 5.6CNA v3.0 | 0.5% | 2022-03-01 | Fix |
| CVE-2021-38955 | IBM VIOS denial of service | 4.4CNA v3.0 | 0.2% | 2022-03-01 | Fix |
| CVE-2021-36171 | Fortinet FortiPortal weak random number generator | 8.1CNA v3.1 | 1.2% | 2022-03-01 | Fix |
| CVE-2021-36166 | Fortinet FortiMail An improper authentication | 9.8CNA v3.1 | 1.5% | 2022-03-01 | Fix |
| CVE-2021-35036 | Zyxel VMG3625-T50B firmware cleartext storage of sensitive information | 6.5CNA v3.1 | 0.5% | 2022-03-01 | Fix |
| CVE-2021-32586 | Fortinet FortiMail web server CGI facilities improper input validation | 7.7CNA v3.1 | 1.1% | 2022-03-01 | Fix |
| CVE-2021-4039 | Zyxel NWA1100-NH firmware web interface of the command injection | 9.8CNA v3.1 | 71.0% | 2022-03-01 | Emerging ThreatsExploit codeFix |
| CVE-2021-45414 | Datarobot remote code execution | 9.8v3.1 | 3.5% | 2022-02-28 | |
| CVE-2021-44342 | Ok-file-formats out-of-bounds write | 7.8v3.1 | 0.7% | 2022-02-28 | |
| CVE-2021-44340 | Ok-file-formats out-of-bounds write | 7.8v3.1 | 0.7% | 2022-02-28 | |
| CVE-2021-44339 | Ok-file-formats out-of-bounds write | 7.8v3.1 | 0.7% | 2022-02-28 | |
| CVE-2021-44334 | Ok-file-formats out-of-bounds write | 7.8v3.1 | 0.7% | 2022-02-28 | |
| CVE-2021-44331 | Arm Adaptive Scalable Texture Compression Encoder out-of-bounds write | 7.8v3.1 | 0.9% | 2022-02-28 | |
| CVE-2021-43945 | Atlassian Jira Server cross-site scripting | 4.8v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-43086 | Arm Adaptive Scalable Texture Compression Encoder out-of-bounds write | 9.8v3.1 | 1.2% | 2022-02-28 | |
| CVE-2021-41112 | Missing authorization in Rundeck | 8.1CNA v3.1 | 0.7% | 2022-02-28 | Fix |
| CVE-2021-41111 | Authorization bypass through user-controlled key in Rundeck | 6.4CNA v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-25118 | Yoast SEO unauthenticated full path disclosure | 5.3NVD v3.1 | 5.6% | 2022-02-28 | NucleiFix |
| CVE-2021-25112 | WHMCS Bridge WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.2% | 2022-02-28 | NucleiFix |
| CVE-2021-25081 | WP Google Map WordPress plugin arbitrary post deletion and Plugin's settings update via CSRF | 6.5NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-25042 | WP Visitor Statistics WordPress plugin arbitrary IP Address Exclusion to stored XSS | 5.4NVD v3.1 | 0.5% | 2022-02-28 | Fix |
| CVE-2021-25034 | WP User WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-28 | Fix |
| CVE-2021-25011 | WP Google Map WordPress plugin Subscriber+ arbitrary post deletion and Plugin's settings update | 5.7NVD v3.1 | 0.4% | 2022-02-28 | Fix |
| CVE-2021-25010 | Post Snippets WordPress plugin CSRF to stored cross-site scripting | 9.6NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-24994 | WPvivid Backup and Migration WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.2% | 2022-02-28 | Fix |
| CVE-2021-24977 | Dinesh Karki Use Any Font font assignment missing authorization | 6.1NVD v3.1 | 1.5% | 2022-02-28 | Fix |
| CVE-2021-24971 | WP Responsive Menu WordPress plugin Subscriber+ settings update to stored XSS | 5.4NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-24933 | Dynamic Widgets WordPress plugin reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-24920 | StatCounter WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-24913 | InfornWeb Logo Showcase with Slick Slider media attachment update cross-site request forgery | 4.3NVD v3.1 | 0.5% | 2022-02-28 | Fix |
| CVE-2021-24903 | GRAND FlaGallery WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-28 | |
| CVE-2021-24901 | Security Audit WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 5.1% | 2022-02-28 | Exploit code |
| CVE-2021-24898 | Editable Table table and column fields stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-28 | |
| CVE-2021-24864 | WP Cloudy WordPress plugin Admin+ SQL injection | 8.8NVD v3.1 | 1.2% | 2022-02-28 | Fix |
| CVE-2021-24823 | Support Board WordPress plugin arbitrary file deletion via CSRF | 8.1NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2021-24820 | Cost Calculator WordPress plugin authenticated local file inclusion | 6.5NVD v3.1 | 3.0% | 2022-02-28 | |
| CVE-2021-24803 | Core Tweaks WP Setup WordPress plugin arbitrary admin account creation / admin email update via CSRF | 8.8NVD v3.1 | 0.6% | 2022-02-28 | |
| CVE-2021-24730 | InfornWeb Logo Showcase with Slick Slider media attachment update missing authorization | 4.3NVD v3.1 | 0.3% | 2022-02-28 | Fix |
| CVE-2021-24704 | Orange Form WordPress plugin SQL injection via CSRF | 8.8NVD v3.1 | 0.6% | 2022-02-28 | |
| CVE-2021-24689 | Contact Forms - Drag and Drop Contact Form Builder WordPress plugin arbitrary System file read | 4.9NVD v3.1 | 1.3% | 2022-02-28 | |
| CVE-2021-24688 | Orange Form WordPress plugin unauthenticated arbitrary post deletion | 4.3NVD v3.1 | 0.4% | 2022-02-28 | |
| CVE-2021-4222 | maxfoundry WP-Paginate plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-02-28 | Fix |
| CVE-2021-21708 | PHP UAF due to php_filter_float failing | 8.2CNA v3.1 | 3.0% | 2022-02-27 | Fix |
| CVE-2021-46702 | torproject Tor improper resource release | 5.5v3.1 | 0.4% | 2022-02-26 | |
| CVE-2021-3967 | Improper access control in zulip/zulip | 8.8v3.1 | 0.8% | 2022-02-26 | Fix |
| CVE-2021-45977 | JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remot | 9.8v3.1 | 1.1% | 2022-02-25 | Fix |
| CVE-2021-45229 | Apache Airflow: Reflected XSS via Origin Query argument in URL | 6.1v3.1 | 2.6% | 2022-02-25 | Fix |
| CVE-2021-44132 | C-data ONU4FERW function formImportOMCIShell command injection | 7.8v3.1 | 3.1% | 2022-02-25 | |
| CVE-2021-42952 | Zepl Notebooks sandbox escape | 9.9v3.1 | 1.6% | 2022-02-25 | |
| CVE-2021-42244 | Notimoo PaquitoSoftware cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-25 | |
| CVE-2021-40046 | PCManager privilege escalation | 9.8v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-40043 | AIS-BW80H-00 command injection | 7.8v3.1 | 0.4% | 2022-02-25 | Fix |
| CVE-2021-38993 | IBM VIOS denial of service | 6.2CNA v3.0 | 0.2% | 2022-02-25 | Fix |
| CVE-2021-37504 | hayageek jQuery Upload File jQuery-Upload-file XSS in fileNameStr | 6.1v3.1 | 0.9% | 2022-02-25 | |
| CVE-2021-37103 | Improper permission management vulnerability in the Huawei Wallet app | 5.5v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2021-37027 | DoS vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-34361 | Reflected XSS vulnerability in Proxy Server | 5.3CNA v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-34359 | Stored XSS vulnerability in Proxy Server | 6.9CNA v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2021-26617 | Gabia Firstmall remote code execution | 9.8v3.1 | 1.3% | 2022-02-25 | |
| CVE-2021-23495 | Open redirect in karma | 6.1v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22489 | DoS vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-22480 | Huawei HarmonyOS integer overflow | 9.8v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-22479 | Huawei HarmonyOS crash | 5.5v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2021-22478 | Huawei HarmonyOS use-after-free | 5.5v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2021-22448 | Improper verification vulnerability in some Huawei devices | 9.1v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-22441 | Huawei HarmonyOS integer overflow | 5.5v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2021-22437 | Software integer overflow leading to a TOCTOU condition in some Huawei phones | 7.0v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2021-22434 | Memory address out-of-bounds vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22433 | Memory address out-of-bounds vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22432 | Vulnerability when configuring permission isolation in some Huawei phones | 9.8v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22431 | Vulnerability when configuring permission isolation in some Huawei phones | 9.8v3.1 | 0.8% | 2022-02-25 | Fix |
| CVE-2021-22430 | Logic bypass vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22429 | Memory address out-of-bounds vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22426 | Memory address out-of-bounds vulnerability in some Huawei phones | 9.8v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2021-22395 | Code injection vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-22394 | Buffer overflow vulnerability in some Huawei devices | 9.1v3.1 | 0.8% | 2022-02-25 | Fix |
| CVE-2021-22319 | Improper verification vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2021-45746 | Webank Wecube WeBankPartners path traversal | 7.5v3.1 | 1.5% | 2022-02-24 | |
| CVE-2021-44967 | LimeSurvey A remote code execution | 8.8v3.1 | 13.4% | 2022-02-24 | Exploit codeFix |
| CVE-2021-44665 | Xerte A path traversal | 6.5v3.1 | 7.7% | 2022-02-24 | Exploit code |
| CVE-2021-44664 | Xerte path traversal | 8.8v3.1 | 12.8% | 2022-02-24 | Exploit code |
| CVE-2021-44663 | Nottingham.ac xerteonlinetoolkits Xerte Project Xerte remote code execution | 9.8v3.1 | 4.0% | 2022-02-24 | Fix |
| CVE-2021-44662 | Nottingham.ac xerteonlinetoolkits Xerte Project Xerte cross-site scripting | 6.1v3.1 | 1.1% | 2022-02-24 | Fix |
| CVE-2021-44610 | bloofoxCMS Multiple SQL injection | 9.8v3.1 | 1.4% | 2022-02-24 | |
| CVE-2021-44608 | bloofoxCMS Multiple cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-24 | |
| CVE-2021-44607 | Thedaylightstudio Fuel CMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-24 | |
| CVE-2021-44567 | SQL injection in francoisjacquet/RosarioSIS | 9.8v3.1 | 23.7% | 2022-02-24 | Exploit codeFix |
| CVE-2021-44566 | Cross-site scripting in francoisjacquet/RosarioSIS | 5.4v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2021-44565 | Cross-site scripting in francoisjacquet/RosarioSIS | 5.4v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2021-44550 | Access control vulnerability within CoreNLP | 9.8v3.1 | 1.3% | 2022-02-24 | Fix |
| CVE-2021-44533 | Node.js Node improper certificate validation | 5.3NVD v3.1 | 9.4% | 2022-02-24 | Fix |
| CVE-2021-44532 | Node.js Node injection | 5.3v3.1 | 10.4% | 2022-02-24 | Fix |
| CVE-2021-44531 | Node.js Node improper certificate validation | 7.4v3.1 | 8.4% | 2022-02-24 | Fix |
| CVE-2021-43943 | Atlassian Jira Service Management Server cross-site scripting | 4.8v3.1 | 0.4% | 2022-02-24 | Fix |
| CVE-2021-43745 | Trillium Notes Project Trillum Notes Trilium Notes denial of service | 5.5v3.1 | 0.3% | 2022-02-24 | |
| CVE-2021-43724 | Intelliants Subrion CMS cross-site scripting | 4.8v3.1 | 0.5% | 2022-02-24 | |
| CVE-2021-39364 | Honeywell HDZP252DI authentication bypass by replay | 7.5v3.1 | 1.0% | 2022-02-24 | Fix |
| CVE-2021-39363 | Honeywell HDZP252DI command injection | 9.8v3.1 | 1.4% | 2022-02-24 | Fix |
| CVE-2021-39038 | IBM WebSphere Application Server clickjacking | 4.4CNA v3.0 | 0.6% | 2022-02-24 | Fix |
| CVE-2021-38995 | IBM AIX denial of service | 6.2CNA v3.0 | 0.2% | 2022-02-24 | Fix |
| CVE-2021-38994 | IBM AIX denial of service | 6.2CNA v3.0 | 0.2% | 2022-02-24 | Fix |
| CVE-2021-35689 | Oracle Talent Acquisition Cloud remote code execution | 9.8CNA v3.1 | 2.1% | 2022-02-24 | Fix |
| CVE-2021-29220 | iLO Amplifier Pack buffer overflow | 7.2v3.1 | 2.1% | 2022-02-24 | Fix |
| CVE-2021-29217 | HPE OneView Global Dashboard open redirect | 6.1v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2021-29216 | HPE OneView Global Dashboard cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-24 | Fix |
| CVE-2021-26252 | htmldoc out-of-bounds write | 7.8NVD v3.1 | 1.0% | 2022-02-24 | Fix |
| CVE-2021-26092 | Fortinet FortiOS, FortiProxy cross-site scripting | 4.7CNA v3.1 | 1.1% | 2022-02-24 | Fix |
| CVE-2021-25636 | The Document Foundation LibreOffice digital improper signature verification | 7.5v3.1 | 1.0% | 2022-02-24 | Fix |
| CVE-2021-4030 | Zyxel ARMOR Z2 (NBG6817) firmware HTTP daemon of the cross-site request forgery | 8.0CNA v3.1 | 0.4% | 2022-02-24 | Fix |
| CVE-2021-4029 | Zyxel ARMOR Z2 (NBG6817) firmware CGI program of the command injection | 8.8CNA v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2021-4021 | Radare2 resource exhaustion | 7.5NVD v3.1 | 1.1% | 2022-02-24 | Fix |
| CVE-2021-3700 | usbredir use-after-free | 6.4NVD v3.1 | 0.3% | 2022-02-24 | Fix |
| CVE-2021-3610 | ImageMagick out-of-bounds read | 7.5NVD v3.1 | 2.8% | 2022-02-24 | Fix |
| CVE-2021-3608 | QEMU uninitialized pointer access | 6.0NVD v3.1 | 0.4% | 2022-02-24 | Fix |
| CVE-2021-3607 | QEMU An integer overflow | 6.0NVD v3.1 | 0.3% | 2022-02-24 | Fix |
| CVE-2021-3596 | ImageMagick null pointer dereference | 6.5NVD v3.1 | 1.9% | 2022-02-24 | Fix |
| CVE-2021-4070 | Off-by-one error in v2fly/V2ray-core | 9.1v3.1 | 0.9% | 2022-02-23 | Fix |
| CVE-2021-46699 | Siemens Simcenter Femap stack-based buffer overflow | 7.8v3.1 | 1.5% | 2022-02-22 | Fix |
| CVE-2021-46162 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2022-02-22 | Fix |
| CVE-2021-43826 | Crash when tunneling TCP over HTTP in Envoy | 7.5CNA v3.1 | 1.1% | 2022-02-22 | Fix |
| CVE-2021-43825 | Envoy filter chain response buffering use-after-free | 6.1CNA v3.1 | 0.9% | 2022-02-22 | Fix |
| CVE-2021-43824 | Null pointer dereference in envoy | 7.5CNA v3.1 | 1.1% | 2022-02-22 | Fix |
| CVE-2021-45008 | Plesk improper preservation of permissions | 8.8v3.1 | 2.0% | 2022-02-21 | |
| CVE-2021-44568 | openSUSE libsolv out-of-bounds write | 6.5v3.1 | 1.8% | 2022-02-21 | Fix |
| CVE-2021-44142 | Samba out-of-bounds read | 8.8NVD v3.1 | 73.6% | 2022-02-21 | Exploit codeFix |
| CVE-2021-44141 | samba information disclosure | 4.3NVD v3.1 | 1.1% | 2022-02-21 | Fix |
| CVE-2021-27797 | Brocade Fabric OS hard-coded credentials | 9.8v3.1 | 1.3% | 2022-02-21 | Fix |
| CVE-2021-27796 | Brocade Fabric OS restricted shell vulnerability | 6.5v3.1 | 0.9% | 2022-02-21 | Fix |
| CVE-2021-27755 | "HCL Sametime" path traversal | 5.5v3.1 | 0.3% | 2022-02-21 | Fix |
| CVE-2021-27753 | "HCL Sametime" path traversal | 5.5v3.1 | 0.3% | 2022-02-21 | Fix |
| CVE-2021-26256 | Survey Maker WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2022-02-21 | Fix |
| CVE-2021-25101 | Anti-Malware Security and Brute-Force Firewall WordPress plugin reflected cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-21 | Fix |
| CVE-2021-25100 | GiveWP Donation Forms dashboard reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-21 | Fix |
| CVE-2021-25099 | GiveWP checkout login handler reflected cross-site scripting | 6.1NVD v3.1 | 2.1% | 2022-02-21 | NucleiFix |
| CVE-2021-25082 | Popup Builder WordPress plugin LFI to RCE | 8.8NVD v3.1 | 5.2% | 2022-02-21 | NucleiFix |
| CVE-2021-25075 | Duplicate Page or Post WordPress plugin arbitrary settings update to stored XSS | 3.5NVD v3.1 | 1.4% | 2022-02-21 | NucleiFix |
| CVE-2021-25069 | WordPress Download Manager plugin authenticated SQL injection to reflected XSS | 8.8NVD v3.1 | 1.5% | 2022-02-21 | Fix |
| CVE-2021-25060 | Five Star Plugins Five Star Business Profile and Schema stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-02-21 | Fix |
| CVE-2021-25058 | The Buffer Button WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2022-02-21 | |
| CVE-2021-25057 | Translation Exchange WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2022-02-21 | |
| CVE-2021-25055 | FeedWordPress WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.0% | 2022-02-21 | NucleiFix |
| CVE-2021-24921 | Advanced Database Cleaner WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-21 | Fix |
| CVE-2021-24867 | AccessPress Themes Frontend Post WordPress Plugin hidden functionality | 9.8NVD v3.1 | 18.0% | 2022-02-21 | Fix |
| CVE-2021-4208 | ExportFeed WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-02-21 | |
| CVE-2021-4115 | polkit polkitd denial of service | 5.5NVD v3.1 | 0.5% | 2022-02-21 | Fix |
| CVE-2021-46701 | Premid origin validation error | 6.5NVD v3.1 | 0.4% | 2022-02-20 | |
| CVE-2021-45083 | Incorrect default permissions in Cobbler | 7.1v3.1 | 0.3% | 2022-02-20 | Fix |
| CVE-2021-45081 | cobbler cleartext transmission of sensitive information | 5.9v3.1 | 0.9% | 2022-02-20 | Fix |
| CVE-2021-45007 | Plesk cross-site request forgery | 6.5v3.1 | 0.7% | 2022-02-20 | |
| CVE-2021-46700 | saitoha libsixel double free | 6.5v3.1 | 0.8% | 2022-02-19 | |
| CVE-2021-45082 | Command injection in Cobbler | 7.8v3.1 | 0.5% | 2022-02-19 | Fix |
| CVE-2021-44302 | Baicloud-cms SQL injection | 8.8v3.1 | 1.1% | 2022-02-19 | |
| CVE-2021-46656 | Bentley View out-of-bounds write | 7.8v3.1 | 2.3% | 2022-02-18 | Fix |
| CVE-2021-46655 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2021-46654 | Bentley View out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46653 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46652 | Bentley View out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46651 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46650 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46649 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46648 | Bentley MicroStation CONNECT heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46647 | Bentley MicroStation CONNECT heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46646 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46645 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46644 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46643 | Bentley View stack-based buffer overflow | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46642 | Bentley View out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46641 | Bentley View out-of-bounds read | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46640 | Bentley View out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46639 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46638 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46637 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46636 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46635 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46634 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2021-46633 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46632 | Bentley View out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46631 | Bentley View uninitialized variable use | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46630 | Bentley View out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46629 | Bentley View out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46628 | Bentley View out-of-bounds read | 5.5v3.1 | 1.8% | 2022-02-18 | Fix |
| CVE-2021-46627 | Bentley View use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46626 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46625 | Bentley View double free | 7.8v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2021-46624 | Bentley View out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46623 | Bentley View out-of-bounds read | 5.5v3.1 | 1.8% | 2022-02-18 | Fix |
| CVE-2021-46622 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46621 | Bentley MicroStation CONNECT double free | 7.8v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2021-46620 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46619 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46618 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46617 | Bentley MicroStation CONNECT uninitialized variable use | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46616 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46615 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46614 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46613 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46612 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46611 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46610 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46609 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46608 | Bentley MicroStation CONNECT out-of-bounds read | 3.3v3.1 | 1.5% | 2022-02-18 | Fix |
| CVE-2021-46607 | Bentley MicroStation CONNECT out-of-bounds read | 3.3v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46606 | Bentley MicroStation CONNECT heap-based buffer overflow | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46605 | Bentley MicroStation CONNECT heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46604 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46603 | Bentley MicroStation CONNECT heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46602 | Bentley MicroStation CONNECT out-of-bounds read | 3.3v3.1 | 1.8% | 2022-02-18 | Fix |
| CVE-2021-46601 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46600 | Bentley MicroStation CONNECT out-of-bounds read | 3.3v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46599 | Bentley MicroStation CONNECT out-of-bounds read | 3.3v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-46598 | Bentley MicroStation CONNECT memory corruption | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46597 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46596 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46595 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2021-46594 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46593 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46592 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46591 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46590 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46589 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2021-46588 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46587 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46586 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46585 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46584 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46583 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46582 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46581 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46580 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46579 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46578 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46577 | Bentley MicroStation CONNECT heap-based buffer overflow | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46576 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46575 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.4% | 2022-02-18 | Fix |
| CVE-2021-46574 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46573 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46572 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46571 | Bentley View use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46570 | Bentley View uninitialized variable use | 7.8v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2021-46569 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46568 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46567 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46566 | Bentley MicroStation CONNECT uninitialized variable use | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46565 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46564 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46563 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46562 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-46372 | Erudika scoold cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-18 | |
| CVE-2021-46110 | PHPGurukul Online Shopping Portal SQL injection | 9.8v3.1 | 1.1% | 2022-02-18 | |
| CVE-2021-46108 | D-Link Dsl-2730e cross-site scripting | 5.4v3.1 | 0.8% | 2022-02-18 | Exploit code |
| CVE-2021-46082 | Moxa Mgate 5101-pbm-mn memory leak | 7.5v3.1 | 1.2% | 2022-02-18 | Fix |
| CVE-2021-46063 | Server side template injection in MCMS | 9.1v3.1 | 2.7% | 2022-02-18 | |
| CVE-2021-46062 | MCMS arbitrary file deletion | 7.1v3.1 | 0.8% | 2022-02-18 | Fix |
| CVE-2021-46037 | Path traversal in MCMS | 8.1v3.1 | 1.0% | 2022-02-18 | |
| CVE-2021-46036 | File upload leading to RCE in MCMS | 9.8v3.1 | 3.7% | 2022-02-18 | |
| CVE-2021-45401 | Tendacn AC10U command injection | 9.8v3.1 | 2.5% | 2022-02-18 | |
| CVE-2021-44968 | IObit Advanced SystemCare use-after-free | 7.8v3.1 | 0.4% | 2022-02-18 | |
| CVE-2021-41599 | Improper control flow in GitHub Enterprise Server hosted pages leads to remote code execution | 8.8v3.1 | 2.2% | 2022-02-18 | Fix |
| CVE-2021-40841 | Liveconfig path traversal | 6.5v3.1 | 1.1% | 2022-02-18 | Fix |
| CVE-2021-40840 | Liveconfig admin/users user administration form stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-18 | Fix |
| CVE-2021-39026 | IBM Security Guardium Data Encryption cleartext transmission of sensitive information | 5.9CNA v3.0 | 0.5% | 2022-02-18 | Fix |
| CVE-2021-38935 | IBM Maximo Asset Management weak password requirements | 5.9CNA v3.0 | 1.0% | 2022-02-18 | Fix |
| CVE-2021-30650 | Layer7 API Management OAuth Toolkit (OTK) Symantec reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-02-18 | Fix |
| CVE-2021-29656 | Pexip Infinity Connect improper certificate validation | 9.8v3.1 | 0.7% | 2022-02-18 | |
| CVE-2021-29655 | Pexip Infinity Connect insufficient verification of data authenticity | 9.8v3.1 | 0.5% | 2022-02-18 | |
| CVE-2021-26619 | Bluetree BigFileAgent path traversal | 9.1v3.1 | 0.9% | 2022-02-18 | |
| CVE-2021-26618 | Tmax ToOffice arbitrary file creation | 9.8v3.1 | 1.0% | 2022-02-18 | |
| CVE-2021-23702 | object-extend prototype pollution | 9.8v3.1 | 1.4% | 2022-02-18 | |
| CVE-2021-20325 | httpd memory corruption | 9.8NVD v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2021-20322 | kernel insufficient randomness | 7.4NVD v3.1 | 6.9% | 2022-02-18 | Fix |
| CVE-2021-20321 | Linux kernel A race condition | 4.7NVD v3.1 | 0.2% | 2022-02-18 | Fix |
| CVE-2021-20320 | kernel information disclosure | 5.5NVD v3.1 | 0.3% | 2022-02-18 | Fix |
| CVE-2021-20315 | gnome-shell improper locking | 6.1NVD v3.1 | 0.2% | 2022-02-18 | |
| CVE-2021-4093 | kernel out-of-bounds read | 8.8NVD v3.1 | 0.4% | 2022-02-18 | Fix |
| CVE-2021-4091 | 389-ds-base way double free | 7.5v3.1 | 2.0% | 2022-02-18 | Fix |
| CVE-2021-4090 | Linux Kernel out-of-bounds write | 7.1NVD v3.1 | 0.3% | 2022-02-18 | Fix |
| CVE-2021-3948 | mig-controller incorrect default permissions | 6.3NVD v3.1 | 0.6% | 2022-02-18 | Fix |
| CVE-2021-3947 | QEMU out-of-bounds read | 5.5NVD v3.1 | 0.3% | 2022-02-18 | Fix |
| CVE-2021-3930 | QEMU SCSI device emulation off-by-one error | 6.5NVD v3.1 | 0.3% | 2022-02-18 | Fix |
| CVE-2021-3657 | isync remote code execution | 9.8NVD v3.1 | 3.5% | 2022-02-18 | Fix |
| CVE-2021-46368 | Trigonesoft Remote System Monitor unquoted search path | 7.8v3.1 | 0.4% | 2022-02-17 | |
| CVE-2021-46319 | D-Link DIR-846 D-Link Router remote code execution | 9.8v3.1 | 6.6% | 2022-02-17 | |
| CVE-2021-46315 | D-Link DIR-846 remote command execution | 9.8v3.1 | 6.6% | 2022-02-17 | |
| CVE-2021-46314 | D-Link DIR-846 remote command execution | 9.8v3.1 | 33.3% | 2022-02-17 | |
| CVE-2021-46247 | ASUS CMAX6000 hard-coded credentials | 7.5v3.1 | 1.2% | 2022-02-17 | |
| CVE-2021-45382 | D-Link Multiple Routers remote code execution | 9.8v3.1 | 97.8% | 2022-02-17 | KEVNucleiEmerging Threats |
| CVE-2021-44868 | SQL injection in MCMS | 9.8v3.1 | 1.4% | 2022-02-17 | |
| CVE-2021-44731 | snapd could be made to escalate privileges and run programs as administrator | 7.8CNA v3.1 | 1.0% | 2022-02-17 | Exploit codeFix |
| CVE-2021-44730 | snapd could be made to escalate privileges and run programs as administrator | 7.8CNA v3.1 | 0.4% | 2022-02-17 | Fix |
| CVE-2021-39034 | IBM MQ denial of service | 5.3CNA v3.0 | 1.2% | 2022-02-17 | Fix |
| CVE-2021-4120 | snapd could be made to bypass intended access restrictions | 8.2CNA v3.1 | 0.4% | 2022-02-17 | Fix |
| CVE-2021-3155 | snapd created ~/snap with too-wide permissions | 3.8CNA v3.1 | 0.3% | 2022-02-17 | Fix |
| CVE-2021-45391 | Tenda AX12 buffer overflow | 7.5v3.1 | 1.8% | 2022-02-16 | Fix |
| CVE-2021-43303 | teluu pjsip PJSUA API buffer overflow | 9.8NVD v3.1 | 2.4% | 2022-02-16 | Fix |
| CVE-2021-43302 | teluu pjsip out-of-bounds read | 9.1NVD v3.1 | 2.2% | 2022-02-16 | Fix |
| CVE-2021-43301 | teluu pjsip PJSUA API stack-based buffer overflow | 9.8NVD v3.1 | 2.4% | 2022-02-16 | Fix |
| CVE-2021-43300 | teluu pjsip PJSUA API stack-based buffer overflow | 9.8NVD v3.1 | 2.4% | 2022-02-16 | Fix |
| CVE-2021-43299 | teluu pjsip PJSUA API stack-based buffer overflow | 9.8NVD v3.1 | 2.5% | 2022-02-16 | Fix |
| CVE-2021-39301 | BUSINESS NOTEBOOK PCS BIOS improper privilege management | 8.8NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-39300 | BUSINESS NOTEBOOK PCS BIOS improper privilege management | 8.8NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-39299 | BUSINESS NOTEBOOK PCS BIOS improper privilege management | 8.8NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-39298 | AMD 2nd Gen EPYC improper privilege management | 8.8NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-39297 | BUSINESS NOTEBOOK PCS BIOS improper privilege management | 8.8NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-26726 | Remote code execution in Valmet Dna before Collection 2021 | 8.8NVD v3.1 | 1.1% | 2022-02-16 | Fix |
| CVE-2021-23682 | litespeed.js prototype pollution | 9.8v3.1 | 2.1% | 2022-02-16 | Fix |
| CVE-2021-22050 | VMware ESXi and VMware Cloud Foundation resource exhaustion | 7.5v3.1 | 2.3% | 2022-02-16 | Fix |
| CVE-2021-22043 | VMware ESXi and VMware Cloud Foundation time-of-check time-of-use race condition | 7.5v3.1 | 1.1% | 2022-02-16 | Fix |
| CVE-2021-22042 | VMware ESXi and VMware Cloud Foundation incorrect authorization | 7.8v3.1 | 0.3% | 2022-02-16 | Fix |
| CVE-2021-22041 | VMware ESXi, Workstation and Fusion UHCI USB controller vulnerability | 6.7v3.1 | 0.6% | 2022-02-16 | Fix |
| CVE-2021-22040 | VMware ESXi use-after-free | 6.7v3.1 | 0.7% | 2022-02-16 | Fix |
| CVE-2021-21966 | Texas Instruments HTTP Server /ping.html functionality information disclosure | 5.3v3.1 | 1.4% | 2022-02-16 | Fix |
| CVE-2021-21958 | Hancom Hword HwordApp.dll functionality heap-based buffer overflow | 7.8v3.1 | 1.1% | 2022-02-16 | |
| CVE-2021-4134 | Fancy Product Designer Admin+ SQL injection | 4.9NVD v3.1 | 1.4% | 2022-02-16 | Fix |
| CVE-2021-4106 | Snow Inventory Java Scanner insufficient control flow management | 7.8CNA v3.1 | 0.3% | 2022-02-16 | Fix |
| CVE-2021-3781 | ghostscript arbitrary command execution | 9.9NVD v3.1 | 83.9% | 2022-02-16 | Fix |
| CVE-2021-3773 | kernel information disclosure | 9.8NVD v3.1 | 5.3% | 2022-02-16 | Exploit codeFix |
| CVE-2021-3760 | kernel use-after-free | 7.8NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-3753 | kernel out-of-bounds read | 4.7NVD v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2021-3752 | Linux kernel A use-after-free | 7.1NVD v3.1 | 1.7% | 2022-02-16 | Fix |
| CVE-2021-3578 | isync incorrect type conversion | 7.8NVD v3.1 | 1.0% | 2022-02-16 | Fix |
| CVE-2021-3560 | Red Hat Polkit incorrect authorization | 7.8NVD v3.1 | 23.7% | 2022-02-16 | KEVExploit codeFix |
| CVE-2021-3557 | ArgoCD incorrect permission assignment | 6.5NVD v3.1 | 0.8% | 2022-02-16 | Fix |
| CVE-2021-3551 | pki-server cleartext storage of sensitive information | 7.8NVD v3.1 | 0.2% | 2022-02-16 | Fix |
| CVE-2021-3242 | DuxCMS SQL injection | 9.8v3.1 | 1.2% | 2022-02-16 | |
| CVE-2021-46558 | Issabel PBX Add User module cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-15 | |
| CVE-2021-46557 | VICIdial cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-15 | |
| CVE-2021-46321 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-02-15 | |
| CVE-2021-46265 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-02-15 | |
| CVE-2021-46264 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-02-15 | |
| CVE-2021-46263 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-02-15 | |
| CVE-2021-46262 | Tenda AC11 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-02-15 | |
| CVE-2021-46252 | Scratch-wiki Scratch Confirmaccount V3 cross-site request forgery | 6.5v3.1 | 0.5% | 2022-02-15 | |
| CVE-2021-46251 | ScratchOAuth2 reflected cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-15 | |
| CVE-2021-46250 | An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2. | 10.0v3.1 | 1.1% | 2022-02-15 | |
| CVE-2021-46249 | ScratchOAuth2 insecure direct object reference | 6.5v3.1 | 0.6% | 2022-02-15 | |
| CVE-2021-44960 | Svgpp null pointer dereference | 6.5v3.1 | 1.2% | 2022-02-15 | Fix |
| CVE-2021-43953 | Atlassian Jira Server cross-site request forgery | 4.3v3.1 | 0.5% | 2022-02-15 | Fix |
| CVE-2021-43952 | Atlassian Jira Server cross-site request forgery | 4.3v3.1 | 0.4% | 2022-02-15 | Fix |
| CVE-2021-43950 | Atlassian Jira Service Management Server missing authorization | 4.3v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2021-43948 | Atlassian Jira Service Management Server improper authorization | 4.3v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2021-43941 | Atlassian Jira Server cross-site request forgery | 6.5v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2021-43940 | Atlassian Confluence Server uncontrolled search path | 7.8v3.1 | 0.3% | 2022-02-15 | Fix |
| CVE-2021-43734 | Keking kkFileView path traversal | 7.5v3.1 | 10.7% | 2022-02-15 | Nuclei |
| CVE-2021-43050 | TIBCO BusinessConnect Container Edition administrative username and passwords leakage | 8.4CNA v3.1 | 0.2% | 2022-02-15 | Fix |
| CVE-2021-43049 | TIBCO BusinessConnect Container Edition username and password leakage | 9.8CNA v3.1 | 1.3% | 2022-02-15 | Fix |
| CVE-2021-42714 | Splashtop insecure permissions | 7.8v3.1 | 0.4% | 2022-02-15 | Fix |
| CVE-2021-42713 | Splashtop insecure permissions | 7.8v3.1 | 0.3% | 2022-02-15 | Fix |
| CVE-2021-42712 | Splashtop Streamer insecure permissions | 7.8v3.1 | 0.3% | 2022-02-15 | Fix |
| CVE-2021-41552 | CommScope Arris Surfboard SBG10 command injection | 8.8v3.1 | 0.7% | 2022-02-15 | |
| CVE-2021-37354 | Xerox Phaser 4622 out-of-bounds write | 9.8v3.1 | 1.4% | 2022-02-15 | |
| CVE-2021-35380 | Solari Termtalk Server Solari di Udine path traversal | 7.5v3.1 | 36.7% | 2022-02-15 | NucleiExploit code |
| CVE-2021-33945 | Ricoh Aficio SP 3500SF out-of-bounds write | 9.8v3.1 | 1.8% | 2022-02-15 | Fix |
| CVE-2021-46463 | F5 Njs type confusion | 9.8v3.1 | 1.7% | 2022-02-14 | Fix |
| CVE-2021-46462 | F5 NJS object prototype handling vulnerability | 7.5v3.1 | 1.7% | 2022-02-14 | Fix |
| CVE-2021-46461 | nginx Njs memory corruption | 9.8v3.1 | 3.1% | 2022-02-14 | Fix |
| CVE-2021-46371 | Antd-admin missing authentication | 7.5v3.1 | 4.3% | 2022-02-14 | Nuclei |
| CVE-2021-45444 | zsh prompt substitution vulnerability | 7.8v3.1 | 2.0% | 2022-02-14 | Fix |
| CVE-2021-45421 | Emerson Dixell Xweb-500 directory listing | 7.5v3.1 | 1.3% | 2022-02-14 | |
| CVE-2021-45420 | Emerson Dixell Xweb-500 missing authentication | 9.8v3.1 | 17.6% | 2022-02-14 | Nuclei |
| CVE-2021-45392 | Tenda AX12 buffer overflow | 7.5v3.1 | 12.3% | 2022-02-14 | Fix |
| CVE-2021-45348 | Attendance-Management-System arbitrary file deletion | 7.5v3.1 | 0.9% | 2022-02-14 | |
| CVE-2021-45347 | zzcms improper authentication | 7.5v3.1 | 1.2% | 2022-02-14 | |
| CVE-2021-45346 | SQLite A memory leak | 4.3v3.1 | 1.6% | 2022-02-14 | Fix |
| CVE-2021-45310 | Sangoma Switchvox information disclosure | 5.3v3.1 | 0.9% | 2022-02-14 | |
| CVE-2021-45005 | Artifex MuJS out-of-bounds write | 9.8v3.1 | 1.5% | 2022-02-14 | Fix |
| CVE-2021-43106 | Compassplus Tranzware Online HTTP header injection | 6.1v3.1 | 0.7% | 2022-02-14 | |
| CVE-2021-39080 | IBM Cognos Analytics Mobile Android app vulnerability | 4.8CNA v3.0 | 0.7% | 2022-02-14 | Fix |
| CVE-2021-39079 | IBM Cognos Analytics Mobile cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-02-14 | Fix |
| CVE-2021-25115 | WP Photo Album Plus WordPress plugin stored cross-site scripting (XSS) | 6.4NVD v3.1 | 0.7% | 2022-02-14 | Fix |
| CVE-2021-25110 | Futurio Extra WordPress plugin Subscriber+ user email Address disclosure | 4.3NVD v3.1 | 0.9% | 2022-02-14 | Fix |
| CVE-2021-25109 | Futurio Extra WordPress plugin authenticated SQL injection | 2.7NVD v3.1 | 0.8% | 2022-02-14 | Fix |
| CVE-2021-25107 | Form Store to DB WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.5% | 2022-02-14 | Fix |
| CVE-2021-25050 | wpchill Remove Footer Credit plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-02-14 | Fix |
| CVE-2021-25033 | Noptin WordPress plugin open redirect | 6.1NVD v3.1 | 2.3% | 2022-02-14 | NucleiFix |
| CVE-2021-25018 | PPOM for WooCommerce WordPress plugin Subscriber+ settings update to stored XSS | 5.4NVD v3.1 | 0.5% | 2022-02-14 | Fix |
| CVE-2021-25014 | Ibtana WordPress plugin Subscriber+ settings update to stored XSS | 3.5NVD v3.1 | 0.6% | 2022-02-14 | Fix |
| CVE-2021-24904 | Mortgage Calculators WP WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 5.1% | 2022-02-14 | Exploit codeFix |
| CVE-2021-24874 | Newsletter WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-14 | Fix |
| CVE-2021-24446 | wpchill Remove Footer Credit settings form cross-site request forgery | 5.4NVD v3.1 | 0.3% | 2022-02-14 | Fix |
| CVE-2021-4201 | ForgeRock Access Management pre-authentication session hijacking | 9.8v3.1 | 2.0% | 2022-02-14 | Fix |
| CVE-2021-44879 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 1.5% | 2022-02-13 | Fix |
| CVE-2021-46366 | Cross-site request forgery in Magnolia CMS | 8.8v3.1 | 0.8% | 2022-02-11 | Exploit codeFix |
| CVE-2021-46365 | Improper restriction of XML external entity reference in Magnolia CMS | 7.8NVD v3.1 | 1.7% | 2022-02-11 | Fix |
| CVE-2021-46364 | Deserialization of untrusted data in Magnolia CMS | 7.8NVD v3.1 | 1.6% | 2022-02-11 | Fix |
| CVE-2021-46363 | Arbitrary code execution in Magnolia CMS | 7.8v3.1 | 1.9% | 2022-02-11 | Exploit codeFix |
| CVE-2021-46362 | Magnolia CMS server-side template injection | 9.8NVD v3.1 | 4.7% | 2022-02-11 | Fix |
| CVE-2021-46361 | Arbitrary code execution in Magnolia CMS | 9.8v3.1 | 2.8% | 2022-02-11 | Exploit codeFix |
| CVE-2021-46355 | Factorfx OCSInventory cross-site scripting | 5.4v3.1 | 0.8% | 2022-02-11 | |
| CVE-2021-45402 | Linux kernel resource exposure | 5.5NVD v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2021-45387 | Broadcom tcpreplay reachable assertion | 5.5v3.1 | 0.7% | 2022-02-11 | Fix |
| CVE-2021-45386 | Broadcom tcpreplay reachable assertion | 5.5v3.1 | 0.7% | 2022-02-11 | Fix |
| CVE-2021-45385 | Rockcarry Ffjpeg null pointer dereference | 6.5v3.1 | 0.9% | 2022-02-11 | |
| CVE-2021-44521 | Apache Cassandra remote code execution for scripted UDFs | 9.1v3.1 | 57.5% | 2022-02-11 | NucleiExploit codeFix |
| CVE-2021-44111 | Path traversal in S-cart | 4.4v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2021-42940 | ProjeQtor A cross-site scripting | 9.9v3.1 | 1.1% | 2022-02-11 | Fix |
| CVE-2021-39688 | Android TBD out-of-bounds read | 5.5v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39687 | Android actuator_driver.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39677 | Android out-of-bounds read | 7.5v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2021-39676 | Android AndroidFuture.java deserialization of untrusted data | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39675 | Android gki_buffer.cc out-of-bounds write | 9.8v3.1 | 5.9% | 2022-02-11 | Fix |
| CVE-2021-39674 | Android btm_sec.cc use-after-free | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39672 | Android fastboot privilege escalation | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39671 | Android aidl_const_expressions.cpp out-of-bounds read | 6.5v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2021-39669 | Android InstallCaCertificateWarning.java privilege escalation | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39668 | Android DetailDialog.kt privilege escalation | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39666 | Android MediaMetricsItem.h out-of-bounds read | 5.5v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39665 | Android AAVCAssembler.cpp out-of-bounds read | 6.5v3.1 | 0.7% | 2022-02-11 | Fix |
| CVE-2021-39664 | Android LoadedArsc.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39663 | Android MediaProvider.java privilege escalation | 7.8v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-39662 | Android MediaProvider.java privilege escalation | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39658 | Android incorrect default permissions | 9.8v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2021-39635 | Android incorrect default permissions | 9.1v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2021-39631 | Android strings.xml information disclosure | 5.5v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39619 | Android UsageStatsService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-39616 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 | 9.8v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2021-38679 | Improper authentication in Kazoo Server | 6.5CNA v3.1 | 0.7% | 2022-02-11 | Fix |
| CVE-2021-35077 | Qualcomm Snapdragon use-after-free in DSP services | 8.4CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-35075 | Qualcomm Snapdragon null pointer dereference in Kernel | 8.4CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-35074 | Qualcomm Snapdragon integer overflow or wraparound in Kernel | 8.4CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-35069 | Qualcomm Snapdragon integer overflow or wraparound in WLAN | 7.8CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-35068 | Qualcomm Snapdragon null pointer dereference in Bluetooth host | 8.4CNA v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2021-34235 | Tsg-solutions Tokheim Profleet Dialog SQL injection | 9.8v3.1 | 1.9% | 2022-02-11 | |
| CVE-2021-31932 | Nokia Bts Trs Web Console authentication bypass | 9.8v3.1 | 21.6% | 2022-02-11 | |
| CVE-2021-30326 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2021-30325 | Qualcomm Snapdragon improper validation of array index in Core services | 6.7CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-30324 | Qualcomm Snapdragon buffer copy without checking size of input in Core services | 6.7CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-30323 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 7.8CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-30322 | Qualcomm Snapdragon stack-based buffer overflow in Modem | 7.8CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2021-30318 | Qualcomm Snapdragon buffer copy without checking size of input in Automotive Linux Platform | 8.4CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-30317 | Qualcomm Snapdragon improper authentication in Kernel | 9.3CNA v3.1 | 1.4% | 2022-02-11 | Fix |
| CVE-2021-30309 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 7.8CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-23597 | fastify-multipart denial of service (DoS) | 7.5v3.1 | 2.0% | 2022-02-11 | Fix |
| CVE-2021-23555 | Sandbox bypass in vm2 | 9.8v3.1 | 2.9% | 2022-02-11 | Fix |
| CVE-2021-22824 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior) buffer overflow | 7.5v3.1 | 14.2% | 2022-02-11 | Fix |
| CVE-2021-22823 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 | 9.1v3.1 | 21.4% | 2022-02-11 | Fix |
| CVE-2021-22806 | spaceLYnk (V2.6.1 and prior) incorrect resource transfer | 7.5v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2021-22805 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 | 9.1v3.1 | 0.9% | 2022-02-11 | Fix |
| CVE-2021-22804 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) path traversal | 7.5v3.1 | 1.3% | 2022-02-11 | Fix |
| CVE-2021-22803 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product: Inter | 9.8v3.1 | 1.9% | 2022-02-11 | Fix |
| CVE-2021-22802 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) buffer overflow | 9.8v3.1 | 20.2% | 2022-02-11 | Fix |
| CVE-2021-22801 | ConneXium Network Manager Software improper privilege management | 9.8v3.1 | 1.6% | 2022-02-11 | Fix |
| CVE-2021-22800 | Modicon M218 Logic Controller (V5.1.0.6 and prior) improper input validation | 7.5v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2021-22798 | Conext� ComBox insufficiently protected credentials | 7.5v3.1 | 0.9% | 2022-02-11 | Fix |
| CVE-2021-22796 | C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) improper authentication | 7.8v3.1 | 1.2% | 2022-02-11 | Fix |
| CVE-2021-22788 | Modicon M340 CPUs: BMXP34 out-of-bounds write | 7.5v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2021-22787 | Modicon M340 CPUs: BMXP34 improper input validation | 7.5v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2021-22785 | Modicon M340 CPUs: BMXP34 information disclosure | 7.5v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2021-22748 | C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) path traversal | 8.8v3.1 | 1.9% | 2022-02-11 | Fix |
| CVE-2021-20001 | Skolelinux debian-edu-config incorrect default permissions | 9.8v3.1 | 1.6% | 2022-02-11 | Fix |
| CVE-2021-4102 | Google Chromium V8 use-after-free | 8.8v3.1 | 7.8% | 2022-02-11 | KEVFix |
| CVE-2021-4101 | Google Chrome Swiftshader heap-based buffer overflow | 8.8v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2021-4100 | Google Chrome ANGLE object lifecycle issue | 8.8v3.1 | 0.8% | 2022-02-11 | Fix |
| CVE-2021-4099 | Google Chrome Swiftshader use-after-free | 8.8v3.1 | 0.8% | 2022-02-11 | Fix |
| CVE-2021-4098 | Google Chrome Mojo improper input validation | 7.4v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2021-4046 | TCMAN GIM cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-02-11 | |
| CVE-2021-4035 | Wocu Monitoring stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2021-0524 | Android CarPackageManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2021-45901 | ServiceNow observable discrepancy | 5.3v3.1 | 14.3% | 2022-02-10 | Exploit code |
| CVE-2021-45364 | Statamic code execution | 9.8v3.1 | 1.7% | 2022-02-10 | |
| CVE-2021-45357 | Piwigo cross-site scripting | 6.1v3.1 | 0.8% | 2022-02-10 | |
| CVE-2021-44970 | 1234n MiniCMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-10 | |
| CVE-2021-44969 | Taogogo taoCMS cross-site scripting | 4.8v3.1 | 0.5% | 2022-02-10 | |
| CVE-2021-44892 | ThinkPHP remote code execution (RCE) | 8.8v3.1 | 2.0% | 2022-02-10 | Fix |
| CVE-2021-44850 | AMD Xilinx Z-7007s insufficient verification of data authenticity | 6.8v3.1 | 0.2% | 2022-02-10 | Fix |
| CVE-2021-42000 | Ping Identity PingFederate password reset flow improper authorization | 5.3CNA v3.1 | 0.5% | 2022-02-10 | Fix |
| CVE-2021-41445 | D-Link DIR-X1860 web application reflected cross-site scripting | 6.1v3.1 | 1.8% | 2022-02-10 | Fix |
| CVE-2021-37613 | Stormshield Network Security denial of service | 6.5v3.1 | 0.4% | 2022-02-10 | Fix |
| CVE-2021-31814 | Stormshield Network Security missing authentication | 6.1v3.1 | 0.2% | 2022-02-10 | Fix |
| CVE-2021-25992 | ifme insufficient session expiration | 9.8CNA v3.1 | 1.6% | 2022-02-10 | |
| CVE-2021-3398 | Stormshield Network Security integer overflow | 5.8v3.1 | 0.9% | 2022-02-10 | Fix |
| CVE-2021-46360 | Ocproducts Composr Authenticated remote code execution | 8.8v3.1 | 9.2% | 2022-02-09 | Exploit code |
| CVE-2021-46354 | Cybelesoft Thinfinity Virtualui information disclosure | 7.5v3.1 | 12.8% | 2022-02-09 | Exploit code |
| CVE-2021-46161 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2021-46160 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2021-46159 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2021-46158 | Siemens Simcenter Femap stack-based buffer overflow | 7.8v3.1 | 1.8% | 2022-02-09 | Fix |
| CVE-2021-46157 | Siemens Simcenter Femap memory corruption | 7.8v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2021-46156 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2021-46155 | Siemens Simcenter Femap stack-based buffer overflow | 7.8v3.1 | 1.8% | 2022-02-09 | Fix |
| CVE-2021-46154 | Siemens Simcenter Femap stack-based buffer overflow | 7.8v3.1 | 1.8% | 2022-02-09 | Fix |
| CVE-2021-46153 | Siemens Simcenter Femap memory corruption | 7.8v3.1 | 1.6% | 2022-02-09 | Fix |
| CVE-2021-46152 | Siemens Simcenter Femap type confusion | 7.8v3.1 | 1.6% | 2022-02-09 | Fix |
| CVE-2021-46151 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.6% | 2022-02-09 | Fix |
| CVE-2021-45331 | Reuse of one time passwords allowed in Gitea | 9.8v3.1 | 1.4% | 2022-02-09 | Fix |
| CVE-2021-45330 | Improper privilege management in Gitea | 9.8v3.1 | 1.4% | 2022-02-09 | Fix |
| CVE-2021-45286 | zzcms path traversal | 5.3v3.1 | 1.7% | 2022-02-09 | |
| CVE-2021-45106 | Siemens SICAM TOOLBOX II hard-coded credentials | 6.5v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2021-44912 | XpressEngine cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-09 | |
| CVE-2021-44911 | XpressEngine cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-09 | |
| CVE-2021-44454 | Intel(R) Quartus(R) Prime Pro Edition third-party component improper input validation | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-44018 | Siemens JT2Go out-of-bounds read | 7.8v3.1 | 1.7% | 2022-02-09 | Fix |
| CVE-2021-44016 | Siemens JT2Go memory corruption | 7.8v3.1 | 1.7% | 2022-02-09 | Fix |
| CVE-2021-44000 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 1.8% | 2022-02-09 | Fix |
| CVE-2021-41442 | D-Link DIR-X1860 HTTP request smuggling | 7.5v3.1 | 3.6% | 2022-02-09 | Fix |
| CVE-2021-41441 | D-Link DIR-X1860 web application denial of service | 7.4v3.1 | 1.6% | 2022-02-09 | Fix |
| CVE-2021-40837 | F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security denial of service | 5.3v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2021-40363 | Siemens SIMATIC PCS 7 sensitive information in an accessible file | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-40360 | Siemens SIMATIC PCS 7 information disclosure | 8.8v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2021-40045 | Huawei EMUI vulnerability of signature verification mechanism failure in system upgrade | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-40044 | Huawei EMUI permission verification vulnerability in the Bluetooth module | 8.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-40015 | Huawei EMUI race condition vulnerability in the binder driver subsystem in the kernel | 4.7v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2021-39997 | Huawei EMUI vulnerability of unstrict input parameter verification in the audio assembly | 9.8v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2021-39994 | Huawei EMUI arbitrary address access vulnerability with the product line test code | 9.8v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2021-39992 | Huawei EMUI improper security permission configuration vulnerability on ACPU | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-39991 | Huawei EMUI unauthorized rewriting vulnerability with the memory access management module on ACPU | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-39986 | Huawei EMUI unauthorized rewriting vulnerability with the memory access management module on ACPU | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-39943 | GitLab External Status Check API logic flaw | 4.3CNA v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2021-37852 | LPE in ESET products for Windows | 7.8CNA v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2021-37205 | Siemens SIMATIC Drive Controller family memory leak | 7.5CNA v3.1 | 1.6% | 2022-02-09 | Fix |
| CVE-2021-37204 | Siemens SIMATIC Drive Controller family operation on a released resource | 7.5CNA v3.1 | 2.2% | 2022-02-09 | Fix |
| CVE-2021-37194 | Siemens COMOS unrestricted file upload | 7.5v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2021-37185 | Siemens SIMATIC Drive Controller family operation on a released resource | 7.5CNA v3.1 | 2.1% | 2022-02-09 | Fix |
| CVE-2021-37115 | Huawei EMUI unauthorized rewriting vulnerability with the memory access management module on ACPU | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-37109 | Huawei EMUI security protection bypass vulnerability with the modem | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-37107 | Huawei EMUI improper memory access permission configuration on ACPU | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-36302 | Dell EMC Integrated System for Microsoft Azure Stack Hub improper privilege management | 9.9CNA v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2021-33166 | version incorrect default permissions | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33155 | Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products improper input validation | 5.7v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-33147 | Intel(R) IPP Crypto library improper check for exceptional conditions | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33139 | Intel Wireless Bluetooth and Killer Bluetooth products improper check for exceptional conditions | 5.7v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-33137 | Intel(R) Kernelflinger project out-of-bounds write | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33129 | Intel(R) Advisor software installer for the incorrect default permissions | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33120 | Intel Atom(R) Processors out-of-bounds read | 5.4v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2021-33119 | Intel(R) RealSense(TM) DCM improper access control | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33115 | Intel(R) PROSet/Wireless WiFi in UEFI improper input validation | 8.8v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2021-33114 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent access. | 5.7v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-33113 | Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access. | 8.1v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2021-33110 | Intel Wireless Bluetooth and Killer Bluetooth products improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-33107 | Intel(R) AMT SDK USB provisioning insufficiently protected credentials | 4.6v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-33105 | Intel® Core™ Processors with Radeon™ RX Vega M GL Graphics Advisory some out-of-bounds read | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33101 | Intel(R) GPA software uncontrolled search path | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-33096 | Intel(R) 82599 Ethernet Controllers and Adapters network on chip for the improper isolation | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-33068 | Intel(R) AMT subsystem null pointer dereference | 6.5v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2021-33061 | Intel(R) 82599 Ethernet Controllers and Adapters insufficient control flow management | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-26616 | SecuwaySSL OS command injection | 9.8v3.1 | 0.9% | 2022-02-09 | |
| CVE-2021-26613 | Tobesoft Nexacro arbitrary file creation | 7.5v3.1 | 0.8% | 2022-02-09 | |
| CVE-2021-25939 | ArangoDB blind SSRF when Downloading Foxx service from URL | 2.7v3.1 | 1.1% | 2022-02-09 | |
| CVE-2021-23152 | Intel(R) Advisor software improper access control | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-22954 | Cross-site request forgery in concrete5/concrete5 | 8.8v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-22817 | Harmony/Magelis iPC Series incorrect default permissions | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-3813 | Improper privilege management in chatwoot/chatwoot | 6.5v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2021-0183 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi software improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-0179 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 denial of service | 6.5v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2021-0178 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 improper input validation | 6.5v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2021-0177 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 improper input validation | 6.5v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2021-0176 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 4.4v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0175 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-0174 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-0173 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-0172 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-0171 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 improper access control | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-0170 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware information disclosure | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0169 | Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 software uncontrolled search path | 6.7v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-0168 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0167 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 improper access control | 6.7v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-0166 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware information disclosure | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0165 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.5v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2021-0164 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper access control | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0163 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 improper input validation | 8.8v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2021-0162 | Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 improper input validation | 8.8v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2021-0161 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0156 | Intel(R) Processors firmware for some improper input validation | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0147 | Intel Power Management Controller improper locking | 4.4v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-0145 | Intel(R) Processors some improper initialization | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0127 | Intel(R) Processors some insufficient control flow management | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0125 | Intel(R) Processors firmware for some improper initialization | 6.6v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0124 | Intel(R) Processors firmware for some improper access control | 6.6v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0119 | Intel(R) Processors firmware for some improper initialization | 6.2v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0118 | Intel(R) Processors firmware for some out-of-bounds read | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0117 | Intel(R) Processors privilege escalation | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0116 | Intel(R) Processors firmware for some out-of-bounds write | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0115 | Intel(R) Processors firmware for some buffer overflow | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0111 | Intel(R) Processors firmware for some null pointer dereference | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0107 | Intel(R) Processors firmware for some unchecked return value | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0103 | Intel(R) Processors firmware for some insufficient control flow management | 6.7v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0099 | Intel(R) Processors firmware for some insufficient control flow management | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0093 | Intel(R) Processors firmware for some incorrect default permissions | 4.4v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-0092 | Intel(R) Processors firmware for some improper access control | 4.4v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2021-0091 | Intel(R) Processors firmware for some improper access control | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0076 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0072 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0066 | Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi firmware improper input validation | 8.4v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-0060 | Intel(R) SPS privilege escalation | 6.6v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2021-45919 | Studio 42 elFinder allows stored XSS | 5.4v3.1 | 0.6% | 2022-02-08 | Fix |
| CVE-2021-45329 | Cross-site scripting in Gitea | 6.1v3.1 | 0.8% | 2022-02-08 | Fix |
| CVE-2021-45328 | Open redirect in Gitea | 6.1v3.1 | 0.9% | 2022-02-08 | NucleiFix |
| CVE-2021-45327 | Gitea interpretation conflict | 9.8v3.1 | 2.1% | 2022-02-08 | Fix |
| CVE-2021-45326 | Cross-site request forgery in Gitea | 8.8v3.1 | 0.6% | 2022-02-08 | Fix |
| CVE-2021-45325 | Gitea displaying raw OpenID error in UI | 7.5v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2021-44957 | Rockcarry Ffjpeg global buffer overflow | 6.5v3.1 | 0.8% | 2022-02-08 | |
| CVE-2021-44956 | Rockcarry Ffjpeg Two heap-based buffer overflow | 6.5v3.1 | 0.8% | 2022-02-08 | |
| CVE-2021-44864 | TP-Link WN886N buffer overflow | 6.5v3.1 | 10.2% | 2022-02-08 | |
| CVE-2021-20877 | Canon laser printers and small office multifunctional printers cross-site scripting | 4.8v3.1 | 0.8% | 2022-02-08 | Fix |
| CVE-2021-46389 | High Resolution Streaming Image Server integer overflow | 7.5v3.1 | 1.2% | 2022-02-07 | |
| CVE-2021-46359 | FISCO-BCOS denial of service | 7.5v3.1 | 1.2% | 2022-02-07 | |
| CVE-2021-45281 | Quickbox cross-site scripting | 6.1v3.1 | 0.7% | 2022-02-07 | |
| CVE-2021-43929 | Synology DiskStation Manager (DSM) improper neutralization | 6.5CNA v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2021-43928 | Synology Mail Station OS command improper neutralization | 9.9CNA v3.1 | 1.9% | 2022-02-07 | Fix |
| CVE-2021-43927 | Synology DiskStation Manager (DSM) SQL command improper neutralization | 4.7CNA v3.1 | 0.9% | 2022-02-07 | Fix |
| CVE-2021-43926 | Synology DiskStation Manager (DSM) SQL command improper neutralization | 4.7CNA v3.1 | 0.9% | 2022-02-07 | Fix |
| CVE-2021-43925 | Synology DiskStation Manager (DSM) SQL command improper neutralization | 4.7CNA v3.1 | 0.9% | 2022-02-07 | Fix |
| CVE-2021-42833 | Xylem Aquaview Use of hard-coded credentials | 8.8NVD v3.1 | 0.2% | 2022-02-07 | Fix |
| CVE-2021-25114 | Paid Memberships Pro WordPress plugin unauthenticated blind SQL injection | 9.8NVD v3.1 | 81.8% | 2022-02-07 | NucleiFix |
| CVE-2021-25108 | IP2Location Country Blocker WordPress plugin arbitrary Country Ban via CSRF | 7.1NVD v3.1 | 0.5% | 2022-02-07 | Fix |
| CVE-2021-25106 | WPLegalPages WordPress plugin Subscriber+ arbitrary settings update to stored XSS | 5.4NVD v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2021-25105 | Ivory Search WordPress plugin Multiple Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2021-25103 | GTranslate WordPress plugin reflected cross-site scripting | 4.7NVD v3.1 | 0.8% | 2022-02-07 | Fix |
| CVE-2021-25096 | IP2Location Country Blocker WordPress plugin Ban bypass | 6.5NVD v3.1 | 1.0% | 2022-02-07 | Fix |
| CVE-2021-25095 | IP2Location Country Blocker WordPress plugin Subscriber+ arbitrary Country Ban | 7.1NVD v3.1 | 0.5% | 2022-02-07 | Fix |
| CVE-2021-25084 | Advanced Cron Manager Subscriber+ arbitrary Events/Schedules Creation/Deletion | 4.3NVD v3.1 | 0.7% | 2022-02-07 | Fix |
| CVE-2021-25077 | Store Toolkit for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-07 | Fix |
| CVE-2021-25029 | Cluevo WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2021-25004 | SEUR Oficial WordPress plugin Admin+ arbitrary file download | 4.9NVD v3.1 | 1.2% | 2022-02-07 | Fix |
| CVE-2021-24993 | Ultimate Product Catalog WordPress plugin Subscriber+ arbitrary Product creation and settings update | 6.5NVD v3.1 | 0.5% | 2022-02-07 | Fix |
| CVE-2021-24947 | RVM - Responsive Vector Maps WordPress plugin Subscriber+ arbitrary file read | 6.5NVD v3.1 | 3.1% | 2022-02-07 | NucleiFix |
| CVE-2021-24928 | Rearrange Woocommerce Products WordPress plugin Subscriber+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-02-07 | Fix |
| CVE-2021-24880 | SupportCandy WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2021-24879 | SupportCandy WordPress plugin CSRF to cross-site scripting | 8.8NVD v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2021-24878 | SupportCandy WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.2% | 2022-02-07 | NucleiFix |
| CVE-2021-24843 | SupportCandy ticket deletion action cross-site request forgery | 6.5NVD v3.1 | 0.5% | 2022-02-07 | Fix |
| CVE-2021-24839 | SupportCandy ticket deletion action missing authorization | 7.5NVD v3.1 | 1.2% | 2022-02-07 | Fix |
| CVE-2021-3861 | zephyrproject-rtos Zephyr the RNDIS USB device class includes a buffer overflow | 8.2CNA v3.1 | 0.5% | 2022-02-07 | |
| CVE-2021-3835 | zephyrproject-rtos Zephyr buffer overflow in usb device class | 8.2CNA v3.1 | 0.7% | 2022-02-07 | |
| CVE-2021-41816 | ruby-lang Ruby buffer overrun in CGI.escape_html | 9.8v3.1 | 4.8% | 2022-02-06 | Fix |
| CVE-2021-39280 | Korenix Jetwave 2212g arbitrary code execution | 8.8v3.1 | 2.3% | 2022-02-06 | Fix |
| CVE-2021-38172 | Debian Perm buffer overflow | 9.8v3.1 | 1.8% | 2022-02-05 | Fix |
| CVE-2021-46671 | Atftp out-of-bounds read | 5.3v3.1 | 1.4% | 2022-02-04 | Fix |
| CVE-2021-46457 | D-Link Dir-823 Pro command injection | 9.8NVD v3.1 | 3.7% | 2022-02-04 | |
| CVE-2021-46456 | D-Link Dir-823 Pro command injection | 9.8NVD v3.1 | 3.7% | 2022-02-04 | |
| CVE-2021-46455 | D-Link Dir-823 Pro command injection | 9.8NVD v3.1 | 3.7% | 2022-02-04 | |
| CVE-2021-46454 | D-Link Dir-823 Pro command injection | 9.8NVD v3.1 | 4.4% | 2022-02-04 | |
| CVE-2021-46453 | D-Link Dir-823 Pro command injection | 9.8NVD v3.1 | 3.7% | 2022-02-04 | |
| CVE-2021-46452 | D-Link Dir-823 Pro command injection | 9.8NVD v3.1 | 3.7% | 2022-02-04 | |
| CVE-2021-46398 | Cross-site request forgery in Filebrowser | 8.8v3.1 | 6.7% | 2022-02-04 | Exploit codeFix |
| CVE-2021-46320 | Improper initialization in OpenZeppelin | 7.5v3.1 | 1.2% | 2022-02-04 | Fix |
| CVE-2021-46233 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-46232 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-46231 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-46230 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-46229 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 4.4% | 2022-02-04 | Fix |
| CVE-2021-46228 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-46227 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 4.7% | 2022-02-04 | Fix |
| CVE-2021-46226 | D-Link Di-7200gv2 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-45998 | D-Link DIR-882 command injection | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-45997 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 |