CVE-2021 records published after 2021
Page six of seven: records 5,001 to 6,000 of the 6,408 published after 2021, newest first. The first page carries the figures for After 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-45996 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2021-45995 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45994 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45993 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45992 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45991 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45990 | Tendacn G1 command injection | 9.8v3.1 | 1.9% | 2022-02-04 | |
| CVE-2021-45989 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45988 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-45987 | Tendacn G1 OS command injection | 9.8v3.1 | 1.9% | 2022-02-04 | |
| CVE-2021-45986 | Tendacn G1 OS command injection | 9.8v3.1 | 1.9% | 2022-02-04 | |
| CVE-2021-45742 | TOTOLINK A720R command injection | 9.8v3.1 | 3.1% | 2022-02-04 | |
| CVE-2021-45741 | TOTOLINK X5000R stack-based buffer overflow | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2021-45740 | TOTOLINK A720R stack-based buffer overflow | 9.8v3.1 | 1.4% | 2022-02-04 | |
| CVE-2021-45739 | TOTOLINK A720R stack-based buffer overflow | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2021-45738 | TOTOLINK X5000R command injection | 9.8v3.1 | 4.4% | 2022-02-04 | |
| CVE-2021-45737 | TOTOLINK A720R stack-based buffer overflow | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2021-45736 | TOTOLINK X5000R stack-based buffer overflow | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2021-45735 | TOTOLINK X5000R cleartext transmission of sensitive information | 7.5v3.1 | 3.8% | 2022-02-04 | |
| CVE-2021-45734 | TOTOLINK X5000R stack-based buffer overflow | 7.5v3.1 | 1.5% | 2022-02-04 | |
| CVE-2021-45733 | TOTOLINK X5000R command injection | 9.8v3.1 | 4.4% | 2022-02-04 | |
| CVE-2021-45429 | Virustotal YARA buffer overflow | 5.5v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2021-45408 | Seeddms open redirect | 6.1v3.1 | 0.6% | 2022-02-04 | |
| CVE-2021-44983 | Taogogo taoCMS files accessible to external parties | 4.9v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-44978 | Idreamsoft iCMS code injection | 9.8v3.1 | 2.2% | 2022-02-04 | |
| CVE-2021-44977 | Idreamsoft iCMS path traversal | 7.5v3.1 | 1.6% | 2022-02-04 | |
| CVE-2021-44903 | MSI Center Pro privilege escalation | 7.8v3.1 | 0.3% | 2022-02-04 | |
| CVE-2021-44901 | MSI Dragon Center privilege escalation | 7.8v3.1 | 0.5% | 2022-02-04 | |
| CVE-2021-44900 | MSI App Player privilege escalation | 7.8v3.1 | 0.3% | 2022-02-04 | |
| CVE-2021-44899 | MSI Center privilege escalation | 7.8v3.1 | 0.4% | 2022-02-04 | |
| CVE-2021-44886 | Zammad out of office substitute persons vulnerability | 5.3v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2021-44882 | D-Link DIR-878 command injection | 9.8v3.1 | 4.5% | 2022-02-04 | Fix |
| CVE-2021-44881 | D-Link DIR-882 command injection | 9.8v3.1 | 4.6% | 2022-02-04 | Fix |
| CVE-2021-44880 | D-Link DIR-878 command injection | 9.8v3.1 | 4.0% | 2022-02-04 | Fix |
| CVE-2021-44779 | G.J.P [GWA] AutoResponder listid parameter SQL injection | 9.8v3.1 | 1.1% | 2022-02-04 | |
| CVE-2021-44247 | TOTOLINK A3100R command injection | 9.8v3.1 | 2.8% | 2022-02-04 | |
| CVE-2021-44246 | TOTOLINK A3100R stack-based buffer overflow | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2021-44206 | Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service | 7.3v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2021-44205 | Acronis Cyber Protect Home Office local privilege escalation due to DLL hijacking | 7.3v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2021-44204 | Acronis Cyber Protect 15 local privilege escalation | 7.8v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2021-43841 | XSS by SVG upload in xwiki-platform | 5.4CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2021-43635 | Codexnotes codex A cross-site scripting | 6.1v3.1 | 1.8% | 2022-02-04 | Fix |
| CVE-2021-43145 | zammad unauthorized access | 8.1v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2021-40420 | Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free | 8.8v3.1 | 4.7% | 2022-02-04 | Fix |
| CVE-2021-40403 | Gerbv pick-and-place rotation parsing functionality information disclosure | 6.3v3.1 | 1.1% | 2022-02-04 | Fix |
| CVE-2021-40401 | Gerbv use-after-free | 8.6NVD v3.1 | 1.3% | 2022-02-04 | Fix |
| CVE-2021-38960 | IBM OPENBMC information disclosure | 5.3CNA v3.0 | 1.1% | 2022-02-04 | Fix |
| CVE-2021-38130 | Voltage SecureMail Mail Relay information disclosure | 6.5v3.1 | 0.9% | 2022-02-04 | |
| CVE-2021-36152 | Apache Gobblin insecure TrustManager used in LDAP connections | 9.8v3.1 | 1.3% | 2022-02-04 | Fix |
| CVE-2021-36151 | Apache Gobblin local credentials disclosure | 5.5v3.1 | 0.4% | 2022-02-04 | Fix |
| CVE-2021-32732 | Cross-site request forgery in xwiki-platform | 7.5CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2021-32036 | MongoDB Server denial of service and Data Integrity vulnerability in features command | 5.4CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2021-29398 | Globalnorthstar Northstar Club Management path traversal | 5.3v3.1 | 1.8% | 2022-02-04 | |
| CVE-2021-29397 | Globalnorthstar Northstar Club Management cleartext transmission of sensitive information | 7.5v3.1 | 0.8% | 2022-02-04 | |
| CVE-2021-29396 | Globalnorthstar Northstar Club Management Northstar Technologies Inc insecure permissions | 9.8v3.1 | 1.7% | 2022-02-04 | |
| CVE-2021-29395 | Globalnorthstar Northstar Club Management path traversal | 7.5v3.1 | 1.8% | 2022-02-04 | |
| CVE-2021-29394 | Globalnorthstar Northstar Club Management incorrect authorization | 6.5v3.1 | 0.8% | 2022-02-04 | |
| CVE-2021-29393 | Globalnorthstar Northstar Club Management remote code execution | 9.8v3.1 | 3.6% | 2022-02-04 | |
| CVE-2021-29219 | HPE FlexNetwork 5130 EI Switch Series buffer overflow | 7.8v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2021-29218 | HPE Agentless Management unquoted search path | 6.7v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2021-28503 | Arista EOS eAPI certificate authentication authentication bypass | 7.4CNA v3.1 | 0.7% | 2022-02-04 | Fix |
| CVE-2021-23507 | object-path-set prototype pollution | 9.8v3.1 | 2.1% | 2022-02-04 | Fix |
| CVE-2021-23497 | @strikeentco/set prototype pollution | 9.8v3.1 | 3.7% | 2022-02-04 | Fix |
| CVE-2021-23470 | putil-merge prototype pollution | 9.8v3.1 | 1.3% | 2022-02-04 | Fix |
| CVE-2021-22288 | ABB SPIET800 improper input validation | 7.5CNA v3.1 | 1.1% | 2022-02-04 | Fix |
| CVE-2021-22286 | ABB SPIET800 improper input validation | 7.5CNA v3.1 | 1.1% | 2022-02-04 | Fix |
| CVE-2021-22285 | ABB SPIET800 and PNI800 modules denial of service | 7.5CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2021-22284 | Security OPC Server for AC 800M remote code execution | 8.4CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2021-21971 | Sealevel URL_decode functionality out-of-bounds write | 5.9v3.1 | 0.7% | 2022-02-04 | |
| CVE-2021-21970 | Sealevel HandleSeaCloudMessage functionality out-of-bounds write | 8.1v3.1 | 0.9% | 2022-02-04 | |
| CVE-2021-21969 | Sealevel HandleSeaCloudMessage functionality out-of-bounds write | 8.1v3.1 | 0.9% | 2022-02-04 | |
| CVE-2021-21968 | Sealevel arbitrary file write | 8.3v3.1 | 1.0% | 2022-02-04 | |
| CVE-2021-21965 | Sealevel SeaMax remote configuration functionality denial of service | 9.3v3.1 | 1.0% | 2022-02-04 | |
| CVE-2021-21964 | Sealevel Modbus configuration functionality denial of service | 7.4v3.1 | 0.7% | 2022-02-04 | |
| CVE-2021-21963 | Sealevel Web Server functionality information disclosure | 5.9NVD v3.1 | 0.5% | 2022-02-04 | |
| CVE-2021-21962 | Sealevel OTA Update u-download functionality heap-based buffer overflow | 8.1NVD v3.1 | 2.0% | 2022-02-04 | |
| CVE-2021-21961 | Sealevel NBNS functionality stack-based buffer overflow | 10.0v3.1 | 2.6% | 2022-02-04 | |
| CVE-2021-21960 | Sealevel both the LLMNR functionality stack-based buffer overflow | 10.0v3.1 | 2.6% | 2022-02-04 | |
| CVE-2021-21959 | Sealevel improper certificate validation | 8.1v3.1 | 0.8% | 2022-02-04 | |
| CVE-2021-4154 | Linux kernel use-after-free | 8.8NVD v3.1 | 1.2% | 2022-02-04 | Exploit codeFix |
| CVE-2021-4043 | Null pointer dereference in gpac/gpac | 5.5NVD v3.1 | 4.6% | 2022-02-04 | Fix |
| CVE-2021-45268 | backdropcms Backdrop cross-site request forgery | 8.8v3.1 | 1.8% | 2022-02-03 | |
| CVE-2021-44866 | Projectworlds Online Movie Ticket Booking System SQL injection | 7.5v3.1 | 1.0% | 2022-02-03 | |
| CVE-2021-43615 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-43323 | InsydeH2O UsbCoreDxe privilege escalation | 8.2v3.1 | 0.4% | 2022-02-03 | Fix |
| CVE-2021-42554 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-42113 | InsydeH2O StorageSecurityCommandDxe SMM driver privilege escalation | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-42060 | InsydeH2O Int15ServiceSmm SMM driver privilege escalation | 8.2v3.1 | 0.4% | 2022-02-03 | Fix |
| CVE-2021-42059 | InsydeH2O out-of-bounds write | 6.7v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-41841 | InsydeH2O inclusion of untrusted functionality | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-41840 | InsydeH2O resource exhaustion | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-41839 | InsydeH2O untrusted pointer dereference | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-41838 | InsydeH2O arbitrary code execution | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-41837 | InsydeH2O untrusted pointer dereference | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-33627 | InsydeH2O memory corruption | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-33625 | InsydeH2O memory corruption | 7.5v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2021-43522 | InsydeH2O out-of-bounds write | 7.5v3.1 | 0.3% | 2022-02-02 | Fix |
| CVE-2021-43073 | Fortinet FortiWeb OS command injection | 8.8CNA v3.1 | 1.4% | 2022-02-02 | Fix |
| CVE-2021-43062 | Fortinet FortiMail cross-site scripting | 6.1CNA v3.1 | 12.9% | 2022-02-02 | NucleiExploit codeFix |
| CVE-2021-42753 | Fortinet FortiWeb path traversal | 8.1CNA v3.1 | 1.1% | 2022-02-02 | Fix |
| CVE-2021-42642 | PrinterLogic WebStack cleartext storage of sensitive information | 7.5v3.1 | 1.4% | 2022-02-02 | |
| CVE-2021-42641 | PrinterLogic WebStack insecure direct object reference | 7.5v3.1 | 2.0% | 2022-02-02 | |
| CVE-2021-42640 | PrinterLogic WebStack insecure direct object reference | 9.1v3.1 | 2.0% | 2022-02-02 | |
| CVE-2021-42639 | PrinterLogic WebStack cross-site scripting | 6.1v3.1 | 1.2% | 2022-02-02 | |
| CVE-2021-42637 | PrinterLogic WebStack server-side request forgery | 9.8v3.1 | 2.3% | 2022-02-02 | |
| CVE-2021-42633 | PrinterLogic WebStack SQL injection | 5.3v3.1 | 2.0% | 2022-02-02 | |
| CVE-2021-41018 | Fortinet FortiWeb OS command injection | 8.8CNA v3.1 | 3.3% | 2022-02-02 | Fix |
| CVE-2021-41016 | Fortinet FortiExtender OS command injection | 7.8CNA v3.1 | 1.1% | 2022-02-02 | Fix |
| CVE-2021-39070 | IBM Security Verify Access advanced access control authentication service vulnerability | 9.8CNA v3.0 | 1.8% | 2022-02-02 | Fix |
| CVE-2021-39066 | IBM Financial Transaction Manager session fixation | 6.3CNA v3.0 | 0.6% | 2022-02-02 | Fix |
| CVE-2021-39044 | IBM Financial Transaction Manager cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2022-02-02 | Fix |
| CVE-2021-39021 | IBM Security Guardium Data Encryption observable discrepancy | 3.7CNA v3.0 | 0.5% | 2022-02-02 | Fix |
| CVE-2021-36193 | Fortinet FortiWeb stack-based buffer overflow | 6.3CNA v3.1 | 0.8% | 2022-02-02 | Fix |
| CVE-2021-36177 | Fortinet FortiAuthenticator improper access control | 4.2CNA v3.1 | 0.3% | 2022-02-02 | Fix |
| CVE-2021-24043 | Whatsapp Business out-of-bounds read | 9.1NVD v3.1 | 1.1% | 2022-02-02 | Fix |
| CVE-2021-46669 | MariaDB use-after-free | 7.5v3.1 | 2.4% | 2022-02-01 | Fix |
| CVE-2021-46668 | MariaDB crash | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46667 | MariaDB integer overflow | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46666 | MariaDB reachable assertion | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46665 | MariaDB SQL parser denial of service | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46664 | MariaDB null pointer dereference | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46663 | MariaDB crash | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46662 | MariaDB nested subquery handling denial of service | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46661 | MariaDB common table expression handling denial of service | 5.5v3.1 | 0.4% | 2022-02-01 | Fix |
| CVE-2021-46253 | Anchor CMS Create Post function cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-01 | |
| CVE-2021-46093 | Elite Cms incorrect default permissions | 9.8v3.1 | 1.2% | 2022-02-01 | |
| CVE-2021-45416 | RosarioSIS reflected cross-site scripting | 6.1v3.1 | 2.3% | 2022-02-01 | Fix |
| CVE-2021-44746 | UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can access | 5.3v3.1 | 1.1% | 2022-02-01 | Fix |
| CVE-2021-44451 | Apache Superset API sensitive information leak | 6.5v3.1 | 7.9% | 2022-02-01 | NucleiFix |
| CVE-2021-43859 | Denial of service by injecting highly recursive collections or maps in XStream | 7.5CNA v3.1 | 7.9% | 2022-02-01 | Fix |
| CVE-2021-43848 | Unititialized memory access in h2o | 7.4CNA v3.1 | 2.7% | 2022-02-01 | Exploit code |
| CVE-2021-43510 | Simple Client Management System Sourcecodester SQL injection | 9.8v3.1 | 7.5% | 2022-02-01 | Nuclei |
| CVE-2021-43509 | Simple Client Management System Sourcecodester SQL injection | 9.8v3.1 | 1.9% | 2022-02-01 | |
| CVE-2021-42638 | PrinterLogic WebStack command injection | 8.1v3.1 | 5.5% | 2022-02-01 | |
| CVE-2021-41571 | Pulsar Admin API allows access to data from other tenants using getMessageById API | 6.5v3.1 | 1.7% | 2022-02-01 | Fix |
| CVE-2021-41040 | eclipse wakaama out-of-bounds read | 7.5v3.1 | 1.4% | 2022-02-01 | |
| CVE-2021-38560 | Ivanti Service Manager cross-site scripting | 6.1v3.1 | 2.9% | 2022-02-01 | Fix |
| CVE-2021-25097 | LabTools WordPress plugin Subscriber+ arbitrary Publication deletion | 6.5NVD v3.1 | 0.4% | 2022-02-01 | |
| CVE-2021-25093 | Link Library WordPress plugin unauthenticated arbitrary Links deletion | 7.5NVD v3.1 | 1.2% | 2022-02-01 | Fix |
| CVE-2021-25092 | Link Library WordPress plugin Library settings reset via CSRF | 6.5NVD v3.1 | 0.5% | 2022-02-01 | Fix |
| CVE-2021-25091 | Link Library WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-01 | Fix |
| CVE-2021-25089 | UpdraftPlus WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-01 | Fix |
| CVE-2021-25085 | WOOF - Products Filter for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.7% | 2022-02-01 | NucleiFix |
| CVE-2021-25072 | NextScripts: Social Networks Auto-Poster WordPress plugin arbitrary post deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2022-02-01 | Fix |
| CVE-2021-25063 | Contact Form 7 Skins WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.1% | 2022-02-01 | NucleiFix |
| CVE-2021-24983 | Asset CleanUp WordPress plugin reflected cross-site scripting via AJAX action | 6.1NVD v3.1 | 0.8% | 2022-02-01 | Fix |
| CVE-2021-24975 | NextScripts: Social Networks Auto-Poster WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 1.3% | 2022-02-01 | Fix |
| CVE-2021-24944 | Custom Dashboard and Login Page WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-01 | Fix |
| CVE-2021-24937 | Asset CleanUp WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-01 | Fix |
| CVE-2021-24934 | Visual CSS Style Editor WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-02-01 | NucleiFix |
| CVE-2021-24926 | Domain Check WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 12.9% | 2022-02-01 | NucleiExploit codeFix |
| CVE-2021-24919 | Wicked Folders WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.5% | 2022-02-01 | Fix |
| CVE-2021-24900 | Ninja Tables WordPress plugin Admin+ stored cross-site cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-02-01 | Fix |
| CVE-2021-24868 | Document Embedder WordPress plugin Subscriber+ arbitrary Private/Draft post Title disclosure | 4.3NVD v3.1 | 0.9% | 2022-02-01 | Fix |
| CVE-2021-24814 | WordPress GDPR and CCPA plugin authenticated reflected cross-site scripting | 9.6NVD v3.1 | 2.1% | 2022-02-01 | Fix |
| CVE-2021-24775 | Document Embedder WordPress plugin unauthenticated arbitrary Private/Draft post Title disclosure | 5.3NVD v3.1 | 1.3% | 2022-02-01 | Fix |
| CVE-2021-24765 | Perfect Survey WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-02-01 | |
| CVE-2021-24764 | Perfect Survey WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-02-01 | |
| CVE-2021-24763 | Perfect Survey WordPress plugin Unauthorised AJAX Call to stored XSS / Survey settings update | 8.8NVD v3.1 | 0.6% | 2022-02-01 | |
| CVE-2021-24762 | Perfect Survey WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 86.8% | 2022-02-01 | NucleiMetasploitExploit codeFix |
| CVE-2021-24761 | Error Log Viewer WordPress plugin arbitrary Text file deletion via CSRF | 6.5NVD v3.1 | 0.6% | 2022-02-01 | Fix |
| CVE-2021-24707 | Nd-learning WordPress plugin cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-01 | Fix |
| CVE-2021-24686 | SVG Support WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-02-01 | Fix |
| CVE-2021-24648 | metagauss RegistrationMagic search parameter reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-01 | Fix |
| CVE-2021-46459 | Victor Cms SQL injection | 7.5v3.1 | 1.4% | 2022-01-31 | |
| CVE-2021-46458 | Victor Cms SQL injection | 7.5v3.1 | 1.4% | 2022-01-31 | |
| CVE-2021-46101 | Git for Windows git pull vulnerability | 7.5v3.1 | 1.4% | 2022-01-31 | |
| CVE-2021-45079 | strongSwan null pointer dereference | 9.1v3.1 | 2.8% | 2022-01-31 | Fix |
| CVE-2021-44255 | Unrestricted upload of file with dangerous type in motionEye | 7.2v3.1 | 3.1% | 2022-01-31 | Exploit codeFix |
| CVE-2021-44114 | Stock Management System Sourcecodester cross-site scripting | 4.8v3.1 | 1.0% | 2022-01-31 | |
| CVE-2021-42635 | PrinterLogic WebStack hard-coded credentials | 8.1v3.1 | 5.5% | 2022-01-31 | |
| CVE-2021-42631 | PrinterLogic WebStack deserialization of untrusted data | 8.1v3.1 | 6.1% | 2022-01-31 | |
| CVE-2021-40042 | Huawei CloudEngine 12800 release of an invalid pointer | 6.5v3.1 | 0.6% | 2022-01-31 | Fix |
| CVE-2021-40033 | Huawei CloudEngine 12800 information disclosure | 5.5v3.1 | 0.2% | 2022-01-31 | Fix |
| CVE-2021-34805 | Land-software Faust Iserver path traversal | 7.5v3.1 | 26.8% | 2022-01-31 | NucleiFix |
| CVE-2021-31617 | Stormshield Network Security remote code execution | 9.8v3.1 | 2.1% | 2022-01-31 | Fix |
| CVE-2021-28962 | Stormshield Network Security privilege escalation | 7.2v3.1 | 1.2% | 2022-01-31 | Fix |
| CVE-2021-27971 | Alpsalpine Touchpad Driver injection | 7.8v3.1 | 0.4% | 2022-01-31 | |
| CVE-2021-23521 | Juce link following | 7.8v3.1 | 0.5% | 2022-01-31 | Fix |
| CVE-2021-23520 | Juce arbitrary file write via Archive Extraction (Zip Slip) | 9.8v3.1 | 1.1% | 2022-01-31 | Fix |
| CVE-2021-46660 | Signiant Manager+agents XML external entity injection | 9.8v3.1 | 1.2% | 2022-01-30 | Fix |
| CVE-2021-46659 | MariaDB view nesting handling denial of service | 5.5v3.1 | 0.6% | 2022-01-29 | Fix |
| CVE-2021-46658 | MariaDB window function handling denial of service | 5.5v3.1 | 0.4% | 2022-01-29 | Fix |
| CVE-2021-46657 | MariaDB subquery ORDER BY handling denial of service | 5.5v3.1 | 0.4% | 2022-01-29 | Fix |
| CVE-2021-46448 | Hhg-multistore Multistore SQL injection | 9.8v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-46447 | Hhg-multistore Multistore cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-28 | |
| CVE-2021-46446 | Hhg-multistore Multistore SQL injection | 9.8v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-46445 | Hhg-multistore Multistore SQL injection | 9.8v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-46444 | Hhg-multistore Multistore SQL injection | 9.8v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-45899 | salesagility SuiteCRM deserialization of untrusted data | 9.8v3.1 | 2.2% | 2022-01-28 | Fix |
| CVE-2021-45898 | salesagility SuiteCRM local file inclusion | 9.8v3.1 | 1.1% | 2022-01-28 | Fix |
| CVE-2021-45897 | salesagility SuiteCRM remote code execution | 8.8v3.1 | 4.6% | 2022-01-28 | Fix |
| CVE-2021-45435 | oretnom23 Simple Cold Storage Management System Sourcecodester SQL injection | 9.8v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44971 | Tenda AC15 authentication bypass | 9.8v3.1 | 2.1% | 2022-01-28 | |
| CVE-2021-44463 | Emerson DeltaV uncontrolled search path element | 7.3v3.1 | 0.3% | 2022-01-28 | Fix |
| CVE-2021-44419 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44418 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44417 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44416 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44415 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44414 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44413 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44412 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44411 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44410 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44409 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44408 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44407 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44406 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44405 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44404 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44403 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44402 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44401 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44400 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44399 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44398 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44397 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44396 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44395 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44393 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44392 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44391 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44390 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44389 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44388 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44387 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44386 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44385 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-44384 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44383 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44382 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44381 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44380 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44379 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44378 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44377 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44376 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44374 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44373 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44372 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44371 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44370 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44369 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44368 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44367 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44365 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44364 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44363 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44362 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44361 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44360 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44359 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44358 | Reolink RLC-410W denial of service | 7.7v3.1 | 1.1% | 2022-01-28 | |
| CVE-2021-44249 | Online Motorcycle Rental System Project Online Motorcycle (bike) Rental System SQL injection | 9.8v3.1 | 1.8% | 2022-01-28 | |
| CVE-2021-42791 | Veridiumid Veridiumad HTTP request smuggling | 7.3v3.1 | 0.6% | 2022-01-28 | Fix |
| CVE-2021-41609 | Classapps Selectsurvey.net SQL injection | 9.8v3.1 | 2.1% | 2022-01-28 | Fix |
| CVE-2021-41608 | Classapps Selectsurvey.net insecure direct object reference | 7.5v3.1 | 2.0% | 2022-01-28 | Fix |
| CVE-2021-40423 | Reolink RLC-410W denial of service | 7.5v3.1 | 1.3% | 2022-01-28 | |
| CVE-2021-40419 | Reolink RLC-410W active debug code | 7.5NVD v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-40416 | Reolink RLC-410W improper access control | 8.8v3.1 | 0.9% | 2022-01-28 | |
| CVE-2021-40415 | Reolink RLC-410W improper access control | 6.5NVD v3.1 | 0.8% | 2022-01-28 | |
| CVE-2021-40414 | Reolink RLC-410W improper access control | 7.1v3.1 | 0.8% | 2022-01-28 | |
| CVE-2021-40413 | Reolink Rlc-410w Firmware improper access control | 7.1v3.1 | 0.8% | 2022-01-28 | |
| CVE-2021-40412 | Reolink RLC-410W device network settings functionality injection | 7.2NVD v3.1 | 27.5% | 2022-01-28 | Emerging Threats |
| CVE-2021-40411 | Reolink RLC-410W device network settings functionality OS command injection | 7.2NVD v3.1 | 4.7% | 2022-01-28 | Emerging Threats |
| CVE-2021-40410 | Reolink RLC-410W device network settings functionality OS command injection | 7.2NVD v3.1 | 27.9% | 2022-01-28 | Emerging Threats |
| CVE-2021-40409 | Reolink RLC-410W device network settings functionality OS command injection | 9.8v3.1 | 3.7% | 2022-01-28 | Emerging Threats |
| CVE-2021-40408 | Reolink RLC-410W device network settings functionality OS command injection | 9.8v3.1 | 3.7% | 2022-01-28 | Emerging Threats |
| CVE-2021-40407 | Reolink RLC-410W IP Camera OS command injection | 7.2NVD v3.1 | 47.6% | 2022-01-28 | KEVEmerging Threats |
| CVE-2021-40406 | Reolink RLC-410W cgiserver.cgi session creation functionality denial of service | 7.5v3.1 | 1.5% | 2022-01-28 | |
| CVE-2021-40404 | Reolink RLC-410W cgiserver.cgi Login functionality authentication bypass | 6.5v3.1 | 1.2% | 2022-01-28 | |
| CVE-2021-40397 | Advantech Wise-paas/ota installation privilege escalation | 7.8v3.1 | 0.9% | 2022-01-28 | |
| CVE-2021-40396 | Advantech Deviceon/iservice installation privilege escalation | 8.8v3.1 | 0.4% | 2022-01-28 | |
| CVE-2021-40389 | Advantech DeviceOn/iEdge installation privilege escalation | 8.8v3.1 | 0.4% | 2022-01-28 | |
| CVE-2021-40388 | Advantech Sq Manager privilege escalation | 8.8v3.1 | 0.4% | 2022-01-28 | |
| CVE-2021-40340 | OWASP Related vulnerabilities in Hitachi Energy’s LinkOne Product | 3.7CNA v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-40339 | OWASP Related vulnerabilities in Hitachi Energy’s LinkOne Product | 3.7CNA v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-40338 | OWASP Related vulnerabilities in Hitachi Energy’s LinkOne Product | 3.7CNA v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-34073 | Gadget Works Online Ordering System Sourcecodester cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-28 | |
| CVE-2021-31567 | Download Monitor WordPress plugin authenticated arbitrary file download | 6.8v3.1 | 1.4% | 2022-01-28 | Fix |
| CVE-2021-27654 | Pegasystems Pega Infinity weak password recovery | 8.8CNA v3.0 | 0.6% | 2022-01-28 | Fix |
| CVE-2021-26264 | Emerson DeltaV missing authentication for critical function | 5.5v3.1 | 0.2% | 2022-01-28 | Fix |
| CVE-2021-23863 | Bosch Video Security Android application code injection | 6.1CNA v3.1 | 0.6% | 2022-01-28 | Fix |
| CVE-2021-23760 | keyget prototype pollution | 9.8v3.1 | 1.7% | 2022-01-28 | |
| CVE-2021-23558 | bmoor prototype pollution | 9.8v3.1 | 1.6% | 2022-01-28 | Fix |
| CVE-2021-23484 | Zip-local arbitrary file write via Archive Extraction (Zip Slip) | 9.8v3.1 | 2.1% | 2022-01-28 | Fix |
| CVE-2021-23174 | Download Monitor WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 83.9% | 2022-01-28 | Fix |
| CVE-2021-22827 | Schneider Electric EcoStruxure Power Monitoring Expert improper input validation | 8.8v3.1 | 1.2% | 2022-01-28 | Fix |
| CVE-2021-22826 | Schneider Electric EcoStruxure Power Monitoring Expert improper input validation | 8.8v3.1 | 1.2% | 2022-01-28 | Fix |
| CVE-2021-22825 | Schneider Electric Rack Power Distribution Unit Network Management Card information disclosure | 8.0v3.1 | 0.8% | 2022-01-28 | Fix |
| CVE-2021-22822 | Schneider Electric Evlink Smart Wallbox EVB1A cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-28 | Fix |
| CVE-2021-22821 | Schneider Electric Evlink Smart Wallbox EVB1A server-side request forgery | 8.6v3.1 | 0.8% | 2022-01-28 | Fix |
| CVE-2021-22820 | Schneider Electric Evlink Smart Wallbox EVB1A insufficient session expiration | 9.8v3.1 | 1.1% | 2022-01-28 | Fix |
| CVE-2021-22819 | Schneider Electric Evlink Smart Wallbox EVB1A clickjacking | 4.3v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-22818 | Schneider Electric Evlink Smart Wallbox EVB1A missing brute-force protection | 7.5v3.1 | 1.0% | 2022-01-28 | Fix |
| CVE-2021-22816 | Schneider Electric Scadapack 312E improper check for exceptional conditions | 7.5v3.1 | 0.9% | 2022-01-28 | Fix |
| CVE-2021-22815 | Schneider Electric AP9922 Battery Management System information disclosure | 5.3v3.1 | 0.8% | 2022-01-28 | Fix |
| CVE-2021-22814 | Schneider Electric AP9922 Battery Management System cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-22813 | Schneider Electric AP9922 Battery Management System cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-22812 | Schneider Electric AP9922 Battery Management System cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-22811 | Schneider Electric AP9922 Battery Management System cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-22810 | Schneider Electric AP9922 Battery Management System cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2021-22809 | Schneider Electric Guicon out-of-bounds read | 5.5v3.1 | 0.6% | 2022-01-28 | Fix |
| CVE-2021-22808 | Schneider Electric Guicon use-after-free | 7.8v3.1 | 0.9% | 2022-01-28 | Fix |
| CVE-2021-22807 | Schneider Electric Guicon out-of-bounds write | 7.8v3.1 | 0.8% | 2022-01-28 | Fix |
| CVE-2021-22799 | Schneider Electric Software Update insufficient entropy | 3.8v3.1 | 0.2% | 2022-01-28 | Fix |
| CVE-2021-22725 | Schneider Electric EVC1S22P4 cross-site request forgery | 8.8v3.1 | 0.5% | 2022-01-28 | Fix |
| CVE-2021-22724 | Schneider Electric EVC1S22P4 cross-site request forgery | 8.8v3.1 | 0.5% | 2022-01-28 | Fix |
| CVE-2021-4160 | OpenSSL BN_mod_exp may produce incorrect results on MIPS | 5.9v3.1 | 3.8% | 2022-01-28 | Fix |
| CVE-2021-4034 | Red Hat Polkit out-of-bounds read and Write | 7.8NVD v3.1 | 94.9% | 2022-01-28 | KEVExploit codeKCVFix |
| CVE-2021-46556 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46554 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46553 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46550 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46549 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46548 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46547 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46546 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46545 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46544 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46543 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46542 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46541 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46540 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46539 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46538 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46537 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46535 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46534 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46532 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46531 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46530 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46529 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46528 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46527 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46526 | Cesanta mJS buffer overflow | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46525 | Cesanta mJS use-after-free | 7.8v3.1 | 0.8% | 2022-01-27 | |
| CVE-2021-46524 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46523 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46522 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46521 | Cesanta mJS buffer overflow | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46520 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46519 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46518 | Cesanta mJS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46517 | Cesanta mJS reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46516 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46515 | Cesanta mJS reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46514 | Cesanta mJS reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46513 | Cesanta mJS buffer overflow | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46512 | Cesanta mJS denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46511 | Cesanta mJS reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46510 | Cesanta mJS reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46509 | Cesanta mJS uncontrolled recursion | 7.8v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46508 | Cesanta mJS reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46507 | Jsish uncontrolled recursion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46506 | Jsish reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46505 | Jsish uncontrolled recursion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46504 | Jsish reachable assertion | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46503 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46502 | Jsish use-after-free | 5.5v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46501 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46500 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46499 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46498 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46497 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46496 | Jsish use-after-free | 5.5v3.1 | 0.7% | 2022-01-27 | |
| CVE-2021-46495 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46494 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46492 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46491 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46490 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46489 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46488 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46487 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46486 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46485 | Jsish denial of service | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46484 | Jsish use-after-free | 5.5v3.1 | 0.6% | 2022-01-27 | |
| CVE-2021-46428 | Simple Chatbot Application Sourcecodester remote code execution | 9.8v3.1 | 3.2% | 2022-01-27 | |
| CVE-2021-46427 | Simple Chatbot Application Sourcecodester SQL injection | 9.8v3.1 | 2.0% | 2022-01-27 | |
| CVE-2021-46377 | Cskaza CSZ CMS SQL injection | 9.8v3.1 | 1.0% | 2022-01-27 | |
| CVE-2021-46102 | solana-labs rbpf integer overflow in solana_rbpf | 7.5v3.1 | 1.9% | 2022-01-27 | Fix |
| CVE-2021-46097 | DolphinPHP unrestricted file upload | 8.8v3.1 | 2.3% | 2022-01-27 | |
| CVE-2021-46088 | Zabbix remote code execution | 7.2v3.1 | 3.9% | 2022-01-27 | |
| CVE-2021-46065 | Zoho ManageEngine ServiceDesk Plus Secondary Email field cross-site scripting | 4.8v3.1 | 91.7% | 2022-01-27 | Fix |
| CVE-2021-44795 | Modifying User Permissions via unauthorized access in Single Connect | 7.5NVD v3.1 | 0.9% | 2022-01-27 | Fix |
| CVE-2021-44794 | Information Leakege via unauthorized access in Single Connect | 5.3v3.1 | 1.0% | 2022-01-27 | Fix |
| CVE-2021-44793 | Information Leakege via unauthorized access in Single Connect | 7.5NVD v3.1 | 1.2% | 2022-01-27 | Fix |
| CVE-2021-44792 | Information Leakege via unauthorized access in Single Connect | 5.3v3.1 | 1.0% | 2022-01-27 | Fix |
| CVE-2021-28096 | Stormshield Network Security resource exhaustion | 5.3v3.1 | 0.9% | 2022-01-27 | Fix |
| CVE-2021-46561 | cve-services incorrect authorization | 7.2v3.1 | 0.8% | 2022-01-26 | |
| CVE-2021-46560 | Moxa Tn-5900 command injection | 9.8v3.1 | 3.6% | 2022-01-26 | |
| CVE-2021-46559 | Moxa Tn-5900 insufficient verification of data authenticity | 7.5v3.1 | 0.4% | 2022-01-26 | Fix |
| CVE-2021-46386 | Mingsoft MCMS vulnerable to remote code execution via file upload | 9.8v3.1 | 3.1% | 2022-01-26 | |
| CVE-2021-46385 | Mingsoft MCMS SQL injection | 7.5v3.1 | 1.5% | 2022-01-26 | |
| CVE-2021-46383 | Mingsoft MCMS SQL injection | 7.5v3.1 | 1.6% | 2022-01-26 | Fix |
| CVE-2021-46118 | jpress code injection | 7.2v3.1 | 2.3% | 2022-01-26 | |
| CVE-2021-46117 | jpress code injection | 7.2v3.1 | 2.8% | 2022-01-26 | |
| CVE-2021-46116 | jpress unrestricted file upload | 7.2v3.1 | 2.2% | 2022-01-26 | |
| CVE-2021-46115 | jpress unrestricted file upload | 7.2v3.1 | 1.1% | 2022-01-26 | |
| CVE-2021-46114 | jpress code injection | 8.8v3.1 | 1.3% | 2022-01-26 | |
| CVE-2021-45975 | Acer Care Center untrusted search path | 7.8v3.1 | 0.6% | 2022-01-26 | Fix |
| CVE-2021-44692 | BuddyBoss information disclosure | 5.3v3.1 | 1.1% | 2022-01-26 | Fix |
| CVE-2021-44123 | SPIP unrestricted file upload | 8.8v3.1 | 2.4% | 2022-01-26 | Fix |
| CVE-2021-44122 | SPIP cross-site request forgery | 8.8v3.1 | 0.5% | 2022-01-26 | Fix |
| CVE-2021-44120 | SPIP cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-26 | Fix |
| CVE-2021-44118 | SPIP cross-site scripting | 5.4v3.1 | 0.8% | 2022-01-26 | Fix |
| CVE-2021-43334 | BuddyBoss cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-26 | Fix |
| CVE-2021-41766 | Insecure Java deserialization in Apache Karaf | 8.1v3.1 | 2.0% | 2022-01-26 | Fix |
| CVE-2021-41166 | Permission bypass in Nextcloud Android App | 4.3CNA v3.1 | 0.9% | 2022-01-26 | Fix |
| CVE-2021-32849 | Arbitrary command execution in Gerapy | 8.8CNA v3.1 | 7.7% | 2022-01-26 | Exploit codeFix |
| CVE-2021-32842 | Path traversal in SharpZipLib | 5.3NVD v3.1 | 0.9% | 2022-01-26 | Fix |
| CVE-2021-32841 | Path traversal in SharpZipLib | 5.3NVD v3.1 | 1.1% | 2022-01-26 | Fix |
| CVE-2021-32840 | Path traversal in SharpZipLib | 9.8NVD v3.1 | 1.9% | 2022-01-26 | Fix |
| CVE-2021-29846 | IBM Security Guardium Insights insufficient session expiration | 2.2CNA v3.0 | 0.6% | 2022-01-26 | Fix |
| CVE-2021-29845 | IBM Security Guardium Insights improper input validation | 4.3CNA v3.0 | 0.8% | 2022-01-26 | Fix |
| CVE-2021-29838 | IBM Security Guardium Insights man-in-the-middle | 5.9CNA v3.0 | 1.3% | 2022-01-26 | Fix |
| CVE-2021-22600 | Linux Kernel privilege escalation | 7.0NVD v3.1 | 6.6% | 2022-01-26 | KEVExploit codeFix |
| CVE-2021-22570 | Google Protobuf null pointer dereference | 6.5CNA v3.1 | 2.7% | 2022-01-26 | Fix |
| CVE-2021-46483 | Jsish out-of-bounds write | 7.8v3.1 | 0.8% | 2022-01-25 | |
| CVE-2021-46482 | Jsish out-of-bounds write | 7.8v3.1 | 0.8% | 2022-01-25 | |
| CVE-2021-46481 | Jsish linenoise library memory leak | 5.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46480 | Jsish out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46478 | Jsish out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46477 | Jsish out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46475 | Jsish out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46474 | Jsish out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46113 | Kea-hotel-erp unrestricted file upload | 8.8v3.1 | 3.1% | 2022-01-25 | |
| CVE-2021-46089 | SQL injection in JeecgBoot | 9.8v3.1 | 2.0% | 2022-01-25 | |
| CVE-2021-46087 | jflyfox jfinal_cms cross-site scripting | 5.4v3.1 | 0.5% | 2022-01-25 | |
| CVE-2021-46086 | Mindskip xzs-mysql 学之思开源考试系统 incorrect default permissions | 7.5v3.1 | 0.8% | 2022-01-25 | |
| CVE-2021-46085 | OneBlog incorrect default permissions | 6.5v3.1 | 0.7% | 2022-01-25 | |
| CVE-2021-46084 | Uscat cross-site scripting | 5.4v3.1 | 0.4% | 2022-01-25 | |
| CVE-2021-46083 | Uscat cross-site scripting | 5.4v3.1 | 0.4% | 2022-01-25 | |
| CVE-2021-46034 | ForestBlog cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-25 | |
| CVE-2021-46033 | ForestBlog unrestricted file upload | 9.8v3.1 | 1.2% | 2022-01-25 | |
| CVE-2021-45847 | Slic3r null pointer dereference | 5.5v3.1 | 0.8% | 2022-01-25 | |
| CVE-2021-45846 | Slic3r null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-25 | |
| CVE-2021-45845 | Freecadweb FreeCAD OS command injection | 7.8v3.1 | 1.9% | 2022-01-25 | Fix |
| CVE-2021-45844 | Freecadweb FreeCAD invocation of ODA File Converter improper neutralization | 7.8v3.1 | 1.1% | 2022-01-25 | Fix |
| CVE-2021-45803 | Iresturant SQL injection | 8.8v3.1 | 1.2% | 2022-01-25 | |
| CVE-2021-45802 | Iresturant SQL injection | 9.8v3.1 | 1.3% | 2022-01-25 | |
| CVE-2021-45729 | WP Google Map WordPress plugin privilege escalation | 5.4NVD v3.1 | 0.7% | 2022-01-25 | Fix |
| CVE-2021-45343 | LibreCAD null pointer dereference | 5.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2021-45342 | LibreCAD CDataList of the jwwlib component buffer overflow | 7.8v3.1 | 1.9% | 2022-01-25 | Fix |
| CVE-2021-45341 | LibreCAD CDataMoji of the jwwlib component buffer overflow | 8.8v3.1 | 6.6% | 2022-01-25 | Fix |
| CVE-2021-45340 | libsixel null pointer dereference | 6.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2021-45029 | Apache ShenYu Groovy code injection and SpEL injection | 9.8v3.1 | 6.0% | 2022-01-25 | Fix |
| CVE-2021-44994 | JerryScript reachable assertion | 5.5v3.1 | 1.0% | 2022-01-25 | |
| CVE-2021-44993 | JerryScript reachable assertion | 5.5v3.1 | 0.8% | 2022-01-25 | |
| CVE-2021-44992 | JerryScript memory corruption | 5.5v3.1 | 0.8% | 2022-01-25 | |
| CVE-2021-44988 | JerryScript resource exhaustion | 7.8v3.1 | 1.1% | 2022-01-25 | |
| CVE-2021-43863 | Nextcloud android SQL injection in FileContentProvider (GHSL-2021-1007) | 7.5CNA v3.1 | 1.9% | 2022-01-25 | Fix |
| CVE-2021-43799 | RabbitMQ exposes ports with weak default secrets in Zulip Server | 8.6CNA v3.1 | 5.4% | 2022-01-25 | Exploit codeFix |
| CVE-2021-43298 | Embedthis GoAhead timing side channel | 9.8NVD v3.1 | 2.3% | 2022-01-25 | Fix |
| CVE-2021-41598 | GitHub Enterprise Server OAuth app authorization flow UI misrepresentation | 8.8v3.1 | 1.2% | 2022-01-25 | Fix |
| CVE-2021-40337 | OWASP Related vulnerabilities in Hitachi Energy’s LinkOne Product | 4.2CNA v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2021-40167 | Autodesk Design Review out-of-bounds read | 7.8v3.1 | 7.7% | 2022-01-25 | Fix |
| CVE-2021-40159 | Inventor information disclosure | 7.8NVD v3.1 | 2.3% | 2022-01-25 | Fix |
| CVE-2021-40158 | Inventor out-of-bounds read | 7.8NVD v3.1 | 2.9% | 2022-01-25 | Fix |
| CVE-2021-39031 | IBM WebSphere Application Server LDAP injection | 7.5CNA v3.0 | 2.0% | 2022-01-25 | Fix |
| CVE-2021-38129 | Micro Focus Operations Agent privilege escalation | 3.3v3.1 | 0.2% | 2022-01-25 | |
| CVE-2021-36348 | Integrated Dell Remote Access Controller (iDRAC) SQL injection | 5.9CNA v3.0 | 1.1% | 2022-01-25 | Fix |
| CVE-2021-36347 | Integrated Dell Remote Access Controller (iDRAC) stack-based buffer overflow | 6.2CNA v3.0 | 2.2% | 2022-01-25 | Fix |
| CVE-2021-36346 | Integrated Dell Remote Access Controller (iDRAC) improper authentication | 5.3CNA v3.0 | 4.2% | 2022-01-25 | Fix |
| CVE-2021-36296 | Dell VNX Control Station OS command injection | 7.2CNA v3.1 | 2.8% | 2022-01-25 | Fix |
| CVE-2021-36295 | Dell VNX Control Station OS command injection | 7.2CNA v3.1 | 2.8% | 2022-01-25 | Fix |
| CVE-2021-36294 | Dell VNX Control Station insufficient entropy | 9.8CNA v3.1 | 1.6% | 2022-01-25 | Fix |
| CVE-2021-36289 | Dell VNX Control Station sensitive information in log files | 7.8CNA v3.1 | 0.2% | 2022-01-25 | Fix |
| CVE-2021-34870 | NETGEAR XR1000 missing authentication | 6.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2021-34869 | Parallels Desktop excessive memory allocation | 8.8v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2021-34868 | Parallels Desktop excessive memory allocation | 8.8v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2021-34867 | Parallels Desktop excessive memory allocation | 8.2v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2021-34866 | Linux Kernel type confusion | 7.8NVD v3.1 | 1.0% | 2022-01-25 | Fix |
| CVE-2021-34865 | NETGEAR Multiple Routers improper authentication | 8.8v3.1 | 3.1% | 2022-01-25 | Fix |
| CVE-2021-4145 | QEMU block mirror layer null pointer dereference | 6.5NVD v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2021-4133 | Improper authorization in Keycloak | 8.8v3.1 | 1.3% | 2022-01-25 | Fix |
| CVE-2021-3850 | Authentication bypass by primary weakness in ADOdb/ADOdb | 9.1v3.1 | 2.2% | 2022-01-25 | Fix |
| CVE-2021-46451 | Online Project Time Management System Sourcecodester SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-45226 | Coins-global Coins Construction Cloud improper input validation | 6.5v3.1 | 1.4% | 2022-01-24 | Fix |
| CVE-2021-45225 | Coins-global Coins Construction Cloud cross-site scripting | 6.1v3.1 | 1.1% | 2022-01-24 | Fix |
| CVE-2021-45224 | Coins-global Coins Construction Cloud cross-site scripting | 6.1v3.1 | 1.1% | 2022-01-24 | Fix |
| CVE-2021-45223 | Coins-global Coins Construction Cloud denial of service | 6.5v3.1 | 1.6% | 2022-01-24 | Fix |
| CVE-2021-45222 | Coins-global Coins Construction Cloud improper privilege management | 8.8v3.1 | 1.5% | 2022-01-24 | Fix |
| CVE-2021-44981 | Quickbox OS command injection | 8.8v3.1 | 3.7% | 2022-01-24 | |
| CVE-2021-43589 | Dell Unity command injection | 6.0CNA v3.1 | 0.4% | 2022-01-24 | Fix |
| CVE-2021-43588 | Dell Data Protection Central improper input validation | 4.3CNA v3.1 | 1.2% | 2022-01-24 | Fix |
| CVE-2021-43420 | Online Payment Hub Login.php in Sourcecodester SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-43394 | Unisys Messaging Integration Services improper authentication | 9.8v3.1 | 1.2% | 2022-01-24 | Fix |
| CVE-2021-42168 | Try My Recipe Sourcecodester cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-24 | |
| CVE-2021-41930 | Online Covid Vaccination Scheduler System Sourcecodester cross-site scripting | 6.1v3.1 | 1.0% | 2022-01-24 | |
| CVE-2021-41929 | The Electric Billing Management System Sourcecodester cross-site scripting | 6.1v3.1 | 1.0% | 2022-01-24 | |
| CVE-2021-41928 | Try My Recipe Sourcecodester SQL injection | 9.8v3.1 | 1.9% | 2022-01-24 | |
| CVE-2021-41660 | Patient Appointment Scheduler System Sourcecodester SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-41659 | oretnom23 Banking System Sourcecodester SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-41658 | Student Quarterly Grading System Sourcecodester cross-site scripting | 5.4v3.1 | 0.7% | 2022-01-24 | |
| CVE-2021-41472 | Simple Membership System Using PHP And Ajax SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-41471 | South Gate Inn Online Reservation System Sourcecodester SQL injection | 9.8v3.1 | 1.2% | 2022-01-24 | |
| CVE-2021-40909 | PHP Crud Without Refresh/reload Using Ajax And Datatables Tutorial cross-site scripting | 9.6v3.1 | 2.2% | 2022-01-24 | |
| CVE-2021-40908 | Purchase Order Management System Login.php in Sourcecodester SQL injection | 9.8v3.1 | 2.5% | 2022-01-24 | |
| CVE-2021-40907 | Storage Unit Rental Management System Sourcecodester SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-40596 | oretnom23 Online Learning System Login.php in sourcecodester SQL injection | 9.8v3.1 | 1.3% | 2022-01-24 | |
| CVE-2021-39293 | Go resource exhaustion | 7.5v3.1 | 6.9% | 2022-01-24 | Fix |
| CVE-2021-36349 | Dell Data Protection Central server-side request forgery | 4.3CNA v3.1 | 0.6% | 2022-01-24 | Fix |
| CVE-2021-36343 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-01-24 | Fix |
| CVE-2021-36342 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.3% | 2022-01-24 | Fix |
| CVE-2021-35005 | TeamViewer improper array index validation | 3.3v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-30636 | MediaTek Linkit Software Development Kit MediaTek LinkIt SDK before 4.6.1 memory corruption | 9.8v3.1 | 1.5% | 2022-01-24 | Fix |
| CVE-2021-26706 | Micrium Uc/lib integer overflow | 9.8v3.1 | 1.9% | 2022-01-24 | Fix |
| CVE-2021-25083 | Registrations for the Events Calendar WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-25080 | Contact Form Entries WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 84.2% | 2022-01-24 | Fix |
| CVE-2021-25079 | Contact Form Entries WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 6.8% | 2022-01-24 | NucleiFix |
| CVE-2021-25078 | Affiliates Manager WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 2.3% | 2022-01-24 | NucleiFix |
| CVE-2021-25076 | WP User Frontend WordPress plugin SQL injection to reflected cross-site scripting | 8.8NVD v3.1 | 17.1% | 2022-01-24 | Exploit codeFix |
| CVE-2021-25074 | WebP Converter for Media WordPress plugin unauthenticated open redirect | 6.1NVD v3.1 | 2.2% | 2022-01-24 | NucleiFix |
| CVE-2021-25073 | WP125 WordPress plugin arbitrary Ad deletion via CSRF | 8.8NVD v3.1 | 0.7% | 2022-01-24 | Fix |
| CVE-2021-25062 | Orders Tracking for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-25049 | Mobile Events Manager WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-01-24 | Fix |
| CVE-2021-25045 | Asgaros Forum WordPress plugin Admin+ SQL injection via forum_id | 7.2NVD v3.1 | 1.5% | 2022-01-24 | Fix |
| CVE-2021-25035 | Backup and Staging by WP Time Capsule WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-25031 | Image Hover Effects Ultimate WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-25028 | Event Tickets WordPress plugin open redirect | 6.1NVD v3.1 | 1.9% | 2022-01-24 | NucleiFix |
| CVE-2021-25017 | Tutor LMS WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2022-01-24 | Fix |
| CVE-2021-25015 | myCred WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-25013 | Qubely WordPress plugin Subscriber+ arbitrary post deletion | 6.5NVD v3.1 | 0.4% | 2022-01-24 | Fix |
| CVE-2021-25008 | Code Snippets WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.3% | 2022-01-24 | NucleiFix |
| CVE-2021-24989 | Accept Donations with PayPal WordPress plugin arbitrary post deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2022-01-24 | Fix |
| CVE-2021-24985 | Easy Forms for Mailchimp WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.1% | 2022-01-24 | Fix |
| CVE-2021-24976 | Smart SEO Tool WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2021-24974 | Product Feed PRO for WooCommerce WordPress plugin Subscriber+ settings update to stored XSS | 5.4NVD v3.1 | 0.6% | 2022-01-24 | Fix |
| CVE-2021-24968 | Ultimate FAQ WordPress plugin Subscriber+ arbitrary FAQ creation | 5.7NVD v3.1 | 0.4% | 2022-01-24 | Fix |
| CVE-2021-24965 | Five Star Restaurant Reservations WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-01-24 | Fix |
| CVE-2021-24936 | WP Extra File Types WordPress plugin CSRF to stored cross-site scripting | 8.0NVD v3.1 | 0.5% | 2022-01-24 | Fix |
| CVE-2021-24923 | Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.8% | 2022-01-24 | Fix |
| CVE-2021-24906 | WPExperts Protect WP Admin plugin deactivation handler missing authorization | 7.5NVD v3.1 | 1.5% | 2022-01-24 | Fix |
| CVE-2021-24865 | Advanced Custom Fields: Extended WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.5% | 2022-01-24 | Fix |
| CVE-2021-24858 | WP Cookie User Info WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-01-24 | Fix |
| CVE-2021-24733 | WP Post Page Clone WordPress plugin Unauthorised post access | 4.3NVD v3.1 | 0.8% | 2022-01-24 | Fix |
| CVE-2021-24696 | Simple Download Monitor WordPress plugin Multiple CSRF | 8.8NVD v3.1 | 0.6% | 2022-01-24 | Fix |
| CVE-2021-24694 | Simple Download Monitor WordPress plugin Contributor+ stored cross-site scripting via shortcodes | 5.4NVD v3.1 | 0.6% | 2022-01-24 | Fix |
| CVE-2021-24423 | UpdraftPlus WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-01-24 | Fix |
| CVE-2021-4088 | Blind SQL injection in DLP ePO extension | 8.4CNA v3.1 | 2.3% | 2022-01-24 | Fix |
| CVE-2021-46024 | Projectworlds Online-shopping-webvsite-in-php SQL injection | 9.8v3.1 | 1.0% | 2022-01-23 | |
| CVE-2021-45380 | Appcms cross-site scripting | 6.1v3.1 | 2.5% | 2022-01-23 | Nuclei |
| CVE-2021-4103 | Cross-site scripting (XSS) Stored in vanessa219/vditor | 5.4v3.1 | 0.7% | 2022-01-23 | Fix |
| CVE-2021-4172 | Cross-site scripting (XSS) Stored in star7th/ShowDoc | 5.4v3.1 | 0.6% | 2022-01-22 | Fix |
| CVE-2021-46313 | gpac denial of service | 5.5v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-46311 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-46309 | oretnom23 Employee and Visitor Gate Pass Logging System Sourcecodester SQL injection | 9.8v3.1 | 1.6% | 2022-01-21 | |
| CVE-2021-46308 | Online Railway Reservation System SQL injection | 9.8v3.1 | 1.6% | 2022-01-21 | |
| CVE-2021-46307 | Projectworlds Online Examination System SQL injection | 9.8v3.1 | 1.6% | 2022-01-21 | |
| CVE-2021-46244 | HDFGroup hdf5 A divide by zero | 6.5v3.1 | 1.0% | 2022-01-21 | Fix |
| CVE-2021-46243 | HDFGroup hdf5 An untrusted pointer dereference | 6.5v3.1 | 1.0% | 2022-01-21 | |
| CVE-2021-46242 | HDFGroup hdf5 use-after-free | 8.8v3.1 | 1.2% | 2022-01-21 | Fix |
| CVE-2021-46240 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-46239 | GPAC MP4Box use-after-free | 5.5v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-46238 | gpac out-of-bounds write | 5.5v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-46237 | gpac An untrusted pointer dereference | 5.5v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-46236 | gpac null pointer dereference | 5.5v3.1 | 0.7% | 2022-01-21 | Fix |
| CVE-2021-46234 | gpac null pointer dereference | 5.5v3.1 | 0.7% | 2022-01-21 | Fix |
| CVE-2021-46201 | Online Resort Management System Sourcecodester SQL injection | 9.8v3.1 | 1.6% | 2022-01-21 | |
| CVE-2021-46200 | oretnom23 Simple Music Cloud Community System An SQL injection | 9.8v3.1 | 1.6% | 2022-01-21 | |
| CVE-2021-46198 | Courier Management System Sourceodester SQL injection | 9.8v3.1 | 1.8% | 2022-01-21 | |
| CVE-2021-44593 | Simple College Website SQL injection | 8.1NVD v3.1 | 4.2% | 2022-01-21 | |
| CVE-2021-44464 | Fresenius Kabi Agilia Connect Infusion System hard coded credentials | 8.8v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-43355 | Fresenius Kabi Agilia Connect Infusion System use of client side authentication | 9.8v3.1 | 1.0% | 2022-01-21 | Fix |
| CVE-2021-41835 | Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm | 7.5v3.1 | 0.3% | 2022-01-21 | Fix |
| CVE-2021-40855 | Europa Technical Specifications For Digital Covid Certificates improper certificate validation | 9.8v3.1 | 0.7% | 2022-01-21 | Fix |
| CVE-2021-40595 | Online Leave Management System Sourcecodester SQL injection | 9.8v3.1 | 1.4% | 2022-01-21 | Fix |
| CVE-2021-40247 | oretnom23 Budget and Expense Tracker System Sourcecodester SQL injection | 9.8v3.1 | 2.6% | 2022-01-21 | |
| CVE-2021-39480 | Denial of service in Bingrep | 7.5v3.1 | 1.1% | 2022-01-21 | |
| CVE-2021-36339 | Dell Solutions Enabler vApp execution with unnecessary privileges | 7.8CNA v3.1 | 0.2% | 2022-01-21 | Fix |
| CVE-2021-36338 | Dell Unisphere for PowerMax client-side enforcement of server-side security | 6.3CNA v3.1 | 0.4% | 2022-01-21 | Fix |
| CVE-2021-35004 | TP-Link TL-WA1201 stack-based buffer overflow | 9.8v3.1 | 7.7% | 2022-01-21 | |
| CVE-2021-35003 | TP-Link Archer C90 stack-based buffer overflow | 9.8v3.1 | 7.7% | 2022-01-21 | |
| CVE-2021-33966 | spotweb cross-site scripting | 5.4v3.1 | 0.9% | 2022-01-21 | |
| CVE-2021-33848 | Fresenius Kabi Agilia Connect Infusion System cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-21 | Fix |
| CVE-2021-33846 | Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm | 7.2v3.1 | 0.3% | 2022-01-21 | Fix |
| CVE-2021-33843 | Fresenius Kabi Agilia Connect Infusion System files or directories accessible to external parties | 5.3v3.1 | 0.8% | 2022-01-21 | Fix |
| CVE-2021-31562 | Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm | 9.1v3.1 | 0.5% | 2022-01-21 | Fix |
| CVE-2021-23664 | @isomorphic-git/cors-proxy server-side request forgery (SSRF) | 7.5v3.1 | 1.4% | 2022-01-21 | Fix |
| CVE-2021-23631 | This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file. | 7.5v3.1 | 2.0% | 2022-01-21 | |
| CVE-2021-23518 | cached-path-relative prototype pollution | 9.8v3.1 | 1.9% | 2022-01-21 | Fix |
| CVE-2021-23460 | min-dash prototype pollution | 7.5v3.1 | 2.5% | 2022-01-21 | Fix |
| CVE-2021-23236 | Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption | 7.5v3.1 | 1.1% | 2022-01-21 | Fix |
| CVE-2021-23233 | Fresenius Kabi Agilia Link+ sensitive endpoints missing authentication | 9.8v3.1 | 0.9% | 2022-01-21 | Fix |
| CVE-2021-23207 | Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password | 5.5v3.1 | 0.2% | 2022-01-21 | Fix |
| CVE-2021-23196 | Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials | 9.8v3.1 | 0.9% | 2022-01-21 | Fix |
| CVE-2021-23195 | Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing | 5.3v3.1 | 0.8% | 2022-01-21 | Fix |
| CVE-2021-4032 | kernel incomplete cleanup | 4.4NVD v3.1 | 0.4% | 2022-01-21 | |
| CVE-2021-4016 | Rapid7 Insight Agent improper access control | 4.0CNA v3.1 | 0.2% | 2022-01-21 | Fix |
| CVE-2021-4001 | Linux kernel A race condition | 4.1NVD v3.1 | 0.2% | 2022-01-21 | Fix |
| CVE-2021-46351 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46350 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46349 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46348 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46347 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46346 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46345 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46344 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46343 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46342 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46340 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46339 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46338 | JerryScript reachable assertion | 5.5v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46337 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46336 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46335 | Moddable SDK null pointer dereference | 5.5v3.1 | 0.8% | 2022-01-20 | |
| CVE-2021-46334 | Moddable SDK out-of-bounds write | 7.8v3.1 | 0.8% | 2022-01-20 | |
| CVE-2021-46333 | Moddable SDK memory corruption | 5.5v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46332 | Moddable SDK out-of-bounds write | 7.8v3.1 | 1.0% | 2022-01-20 | |
| CVE-2021-46331 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype. | 5.5v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46330 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat. | 5.5v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46329 | Moddable SDK _fini handler vulnerability | 5.5v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46328 | Moddable SDK out-of-bounds write | 7.8v3.1 | 0.8% | 2022-01-20 | |
| CVE-2021-46327 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort. | 5.5v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46326 | Moddable SDK out-of-bounds write | 7.8v3.1 | 0.9% | 2022-01-20 | |
| CVE-2021-46325 | Espruino out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46324 | Espruino out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-20 | |
| CVE-2021-46323 | Espruino device class lookup vulnerability | 5.5v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-46322 | duktape improper resource release | 5.5v3.1 | 0.7% | 2022-01-20 | Fix |
| CVE-2021-46061 | Computer And Mobile Repair Shop Management System Sourcecodester SQL injection | 9.8v3.1 | 1.6% | 2022-01-20 | |
| CVE-2021-46028 | mblog cross-site request forgery | 4.3v3.1 | 0.4% | 2022-01-20 | |
| CVE-2021-46026 | wangl1989 mysiteforme cross-site scripting | 5.4v3.1 | 0.4% | 2022-01-20 | |
| CVE-2021-45417 | Advanced Intrusion Detection Environment out-of-bounds write | 7.8v3.1 | 0.5% | 2022-01-20 | Fix |
| CVE-2021-45230 | Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver | 6.5v3.1 | 1.7% | 2022-01-20 | Fix |
| CVE-2021-44829 | Afi-solutions Webacms index.html in AFI cross-site scripting | 6.1v3.1 | 1.6% | 2022-01-20 | |
| CVE-2021-44738 | Lexmark 6500e buffer overflow | 9.8v3.1 | 3.3% | 2022-01-20 | Fix |
| CVE-2021-44737 | Lexmark 6500e PJL path traversal | 8.8v3.1 | 1.4% | 2022-01-20 | Fix |
| CVE-2021-44736 | Lexmark MC3224I improper authentication | 9.8v3.1 | 2.2% | 2022-01-20 | Fix |
| CVE-2021-44735 | Lexmark B2236 Embedded web server command injection | 9.8v3.1 | 7.7% | 2022-01-20 | Fix |
| CVE-2021-44734 | Lexmark 6500e code injection | 9.8v3.1 | 6.4% | 2022-01-20 | Fix |
| CVE-2021-44245 | COVID19 Testing Management System Courcecodester COVID SQL injection | 9.8v3.1 | 1.4% | 2022-01-20 | |
| CVE-2021-44244 | Sourcecodester Logistic Hub Parcel's Management System SQL injection | 9.8v3.1 | 1.3% | 2022-01-20 | |
| CVE-2021-44092 | code-projects Pharmacy Management SQL injection | 9.8v3.1 | 1.3% | 2022-01-20 | |
| CVE-2021-44091 | Multi Restaurant Table Reservation System Courcecodester cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-20 | |
| CVE-2021-44090 | Sourcecodester Online Reviewer System An SQL injection | 9.8v3.1 | 1.1% | 2022-01-20 | |
| CVE-2021-43269 | CODE42 code injection | 8.8v3.1 | 1.3% | 2022-01-20 | Fix |
| CVE-2021-34600 | Telenot complex: Insecure AES Key Generation | 5.5v3.1 | 0.4% | 2022-01-20 | Fix |
| CVE-2021-32039 | MongoDB extension for VS Code may unexpectedly store credentials locally in clear text | 5.5CNA v3.1 | 0.3% | 2022-01-20 | Fix |
| CVE-2021-29785 | IBM Security SOAR man-in-the-middle | 5.9CNA v3.0 | 1.3% | 2022-01-20 | Fix |
| CVE-2021-3866 | Cross-site scripting (XSS) Stored in zulip/zulip | 5.4v3.1 | 0.9% | 2022-01-20 | Fix |
| CVE-2021-46204 | Taogogo taoCMS SQL injection | 9.8v3.1 | 1.1% | 2022-01-19 | |
| CVE-2021-46203 | Taogogo taoCMS path traversal | 6.5v3.1 | 1.1% | 2022-01-19 | |
| CVE-2021-46104 | webp_server_go path traversal | 7.5v3.1 | 4.2% | 2022-01-19 | Nuclei |
| CVE-2021-46030 | Javaquarkbbs There is a cross-site scripting | 5.4v3.1 | 0.5% | 2022-01-19 | |
| CVE-2021-46027 | wangl1989 mysiteforme cross-site request forgery | 6.5v3.1 | 0.4% | 2022-01-19 | |
| CVE-2021-46025 | OneBlog A cross-site scripting | 5.4v3.1 | 0.5% | 2022-01-19 | |
| CVE-2021-45808 | jpress unrestricted file upload | 8.8v3.1 | 1.3% | 2022-01-19 | |
| CVE-2021-44837 | Delta RM risk creation endpoint vulnerability | 4.3v3.1 | 0.8% | 2022-01-19 | |
| CVE-2021-44777 | Prashant Baldha Email Tracker e-mail entry deletion cross-site request forgery | 4.3v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2021-44299 | Naviwebs Navigate CMS \lib\packages\themes\themes.php reflected cross-site scripting | 5.4v3.1 | 0.4% | 2022-01-19 | |
| CVE-2021-42810 | A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed. | 7.8CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2021-38789 | Allwinnertech Android Q SDK missing authorization | 7.5v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2021-38788 | Allwinnertech Android Q SDK denial of service | 7.5v3.1 | 1.7% | 2022-01-19 | Fix |
| CVE-2021-38787 | Allwinnertech Android Q SDK integer overflow | 7.5v3.1 | 1.9% | 2022-01-19 | Fix |
| CVE-2021-38786 | Allwinnertech Android Q SDK null pointer dereference | 7.5v3.1 | 1.8% | 2022-01-19 | Fix |
| CVE-2021-35687 | Oracle Financial Services Analytical Applications Infrastructure information disclosure | 5.3CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2021-35686 | Oracle Financial Services Analytical Applications Infrastructure information disclosure | 4.3CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2021-35683 | Oracle Essbase Administration Services EAS console component takeover | 9.9CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2021-35587 | Oracle Fusion Middleware deserialization of untrusted data | 9.8CNA v3.1 | 96.3% | 2022-01-19 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2021-33913 | libspf2 out-of-bounds write | 9.8v3.1 | 9.6% | 2022-01-19 | Fix |
| CVE-2021-33912 | libspf2 out-of-bounds write | 9.8v3.1 | 9.6% | 2022-01-19 | Fix |
| CVE-2021-31854 | Code injection vulnerability in McAfee Agent | 7.7CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2021-31821 | Octopus Deploy Octopus Tentacle cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2022-01-19 | Fix |
| CVE-2021-26247 | Cacti cross-site scripting | 6.1NVD v3.1 | 7.1% | 2022-01-19 | NucleiFix |
| CVE-2021-23843 | Bosch AMC2 lack of authentication mechanisms on the device | 8.8CNA v3.1 | 0.2% | 2022-01-19 | Fix |
| CVE-2021-23842 | Bosch AMC2 use of hard-coded cryptographic key | 5.7CNA v3.1 | 0.1% | 2022-01-19 | Fix |
| CVE-2021-23225 | Cacti cross-site scripting | 5.4NVD v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2021-4143 | Cross-site scripting (XSS) Generic in bigbluebutton/bigbluebutton | 6.1NVD v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2021-3816 | Cacti cross-site scripting | 5.4NVD v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2021-46013 | An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "" gets uploaded it is saved into /uploads/exam_question/ dir | 9.8v3.1 | 3.5% | 2022-01-18 | |
| CVE-2021-46005 | Car Rental Management System cross-site scripting | 5.4v3.1 | 2.9% | 2022-01-18 | Nuclei |
| CVE-2021-45394 | Cross-site scripting in HTML2PDF | 8.8v3.1 | 1.6% | 2022-01-18 | Fix |
| CVE-2021-44840 | Delta Rm missing authorization | 2.7v3.1 | 0.6% | 2022-01-18 | |
| CVE-2021-44839 | Delta Rm weak password recovery | 6.5v3.1 | 0.6% | 2022-01-18 | |
| CVE-2021-44838 | Delta RM ajax-details endpoint vulnerability | 4.3v3.1 | 0.9% | 2022-01-18 | |
| CVE-2021-44836 | Delta Rm insecure direct object reference | 4.3v3.1 | 0.6% | 2022-01-18 | |
| CVE-2021-44757 | Zoho Manageengine Desktop Central authentication bypass | 9.1v3.1 | 24.2% | 2022-01-18 | Fix |
| CVE-2021-44217 | Cross-site scripting in Ericsson CodeChecker | 6.1v3.1 | 1.6% | 2022-01-18 | Exploit codeFix |
| CVE-2021-43353 | Crisp Live Chat cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.6% | 2022-01-18 | Fix |
| CVE-2021-41809 | SSRF vulnerability in M-Files Server products with versions, allows requests from server | 3.5CNA v3.1 | 0.6% | 2022-01-18 | Fix |
| CVE-2021-41808 | M-Files Server federated authentication logging information disclosure | 2.0CNA v3.1 | 0.2% | 2022-01-18 | Fix |
| CVE-2021-41807 | M-Files Server and Web login authentication vulnerability | 7.5CNA v3.1 | 1.1% | 2022-01-18 | Fix |
| CVE-2021-41551 | Leostream Connection Broker link following | 4.9v3.1 | 1.3% | 2022-01-18 | Fix |
| CVE-2021-41550 | Leostream Connection Broker unrestricted file upload | 7.2v3.1 | 1.0% | 2022-01-18 | Fix |
| CVE-2021-39946 | GitLab improper neutralization | 8.7CNA v3.1 | 1.0% | 2022-01-18 | Fix |
| CVE-2021-39942 | GitLab denial of service | 4.3CNA v3.1 | 1.4% | 2022-01-18 | Fix |
| CVE-2021-39927 | GitLab server-side request forgery | 3.5CNA v3.1 | 0.6% | 2022-01-18 | Fix |
| CVE-2021-39892 | GitLab user import feature information disclosure | 4.3CNA v3.1 | 1.2% | 2022-01-18 | Fix |
| CVE-2021-38785 | Allwinnertech Android Q SDK Allwinner R818 SoC null pointer dereference | 7.5v3.1 | 1.8% | 2022-01-18 | Fix |
| CVE-2021-38784 | Allwinnertech Android Q SDK null pointer dereference | 7.5v3.1 | 1.8% | 2022-01-18 | |
| CVE-2021-38783 | Allwinnertech Android Q SDK Allwinner R818 SoC out-of-bounds write | 7.5v3.1 | 1.8% | 2022-01-18 | Fix |
| CVE-2021-38697 | Softvibe Saraban unrestricted file upload | 9.8v3.1 | 2.7% | 2022-01-18 | |
| CVE-2021-38696 | Softvibe Saraban improper access control | 7.5v3.1 | 1.7% | 2022-01-18 | |
| CVE-2021-38695 | Softvibe Saraban cross-site scripting | 5.4v3.1 | 0.8% | 2022-01-18 | |
| CVE-2021-38694 | Softvibe Saraban SQL injection | 7.5v3.1 | 1.5% | 2022-01-18 | |
| CVE-2021-37867 | Emails of all users are exposed via one of the Boards APIs | 4.3CNA v3.1 | 0.7% | 2022-01-18 | |
| CVE-2021-37866 | Session is not invalidated on server-side when user logged out of Boards | 4.7CNA v3.1 | 0.7% | 2022-01-18 | |
| CVE-2021-37865 | Mattermost server-side denial of service while processing a specifically crafted GIF file | 4.3CNA v3.1 | 0.9% | 2022-01-18 | |
| CVE-2021-37864 | Mattermost archived channels improper access control | 2.6CNA v3.1 | 0.6% | 2022-01-18 | Fix |
| CVE-2021-34406 | NVIDIA SHIELD TV null pointer dereference | 4.7CNA v3.1 | 0.2% | 2022-01-18 | Fix |
| CVE-2021-34405 | NVIDIA SHIELD TV unchecked return value | 5.5CNA v3.1 | 0.2% | 2022-01-18 | Fix |
| CVE-2021-34404 | NVIDIA SHIELD TV denial of service | 7.1CNA v3.1 | 0.2% | 2022-01-18 | Fix |
| CVE-2021-34403 | NVIDIA SHIELD TV use-after-free | 7.8CNA v3.1 | 0.3% | 2022-01-18 | Fix |
| CVE-2021-34402 | NVIDIA SHIELD TV denial of service | 6.7CNA v3.1 | 0.3% | 2022-01-18 | Fix |
| CVE-2021-34401 | NVIDIA SHIELD TV improper access control | 7.8CNA v3.1 | 0.3% | 2022-01-18 | Fix |
| CVE-2021-33965 | China Mobile An Lianbao Wf-1 command injection | 8.8v3.1 | 2.9% | 2022-01-18 | Fix |
| CVE-2021-33964 | China Mobile An Lianbao Wf-1 command injection | 8.8v3.1 | 2.9% | 2022-01-18 | Fix |
| CVE-2021-29872 | IBM Cloud Pak for Automation HTTP header injection | 5.4CNA v3.0 | 0.8% | 2022-01-18 | Fix |
| CVE-2021-29632 | FreeBSD console highlight buffer vulnerability | 7.5v3.1 | 0.9% | 2022-01-18 | Fix |
| CVE-2021-29215 | HPE Ezmeral Data Fabric access restriction bypass | 9.8v3.1 | 1.2% | 2022-01-18 | Fix |
| CVE-2021-22566 | Google Incorrect mapping of Executable bits in Fuchsia Kernel | 5.1CNA v4.0 | 0.3% | 2022-01-18 | Fix |
| CVE-2021-4146 | Business Logic Errors in pimcore/pimcore | 4.3v3.1 | 0.8% | 2022-01-18 | Fix |
| CVE-2021-4083 | kernel use-after-free | 7.0NVD v3.1 | 0.3% | 2022-01-18 | Fix |
| CVE-2021-4074 | WHMCS Bridge Subscriber+ stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-18 | Fix |
| CVE-2021-42357 | DOM based XSS vulnerability in Apache Knox | 6.1v3.1 | 2.6% | 2022-01-17 | Fix |
| CVE-2021-38965 | IBM FileNet Content Manager OS command injection | 6.3CNA v3.0 | 1.8% | 2022-01-17 | Fix |
| CVE-2021-33040 | Futurepress Epub.js cross-site scripting in epubjs | 6.1v3.1 | 0.9% | 2022-01-17 | Fix |
| CVE-2021-25067 | Landing Page Builder WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 1.1% | 2022-01-17 | NucleiFix |
| CVE-2021-25065 | Smash Balloon Social Post Feed WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 1.0% | 2022-01-17 | NucleiFix |
| CVE-2021-25061 | WP Booking System Booking Calendar WordPress plugin reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.7% | 2022-01-17 | Fix |
| CVE-2021-25046 | Modern Events Calendar Lite WordPress plugin Subscriber+ Category Add Leading to stored XSS | 5.4NVD v3.1 | 0.6% | 2022-01-17 | Fix |
| CVE-2021-25037 | All In One SEO WordPress plugin authenticated SQL injection | 6.5NVD v3.1 | 1.3% | 2022-01-17 | Fix |
| CVE-2021-25036 | All In One SEO WordPress plugin authenticated privilege escalation | 8.8NVD v3.1 | 3.0% | 2022-01-17 | Fix |
| CVE-2021-25025 | Event Calendar WordPress plugin Subscriber+ Event creation | 4.3NVD v3.1 | 0.3% | 2022-01-17 | Fix |
| CVE-2021-25024 | Event Calendar WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-01-17 | Fix |
| CVE-2021-25005 | SEUR Oficial WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-01-17 | Fix |
| CVE-2021-24909 | ACF Photo Gallery Field WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-01-17 | Fix |
| CVE-2021-24838 | AnyComment WordPress plugin open redirect | 6.1NVD v3.1 | 2.2% | 2022-01-17 | NucleiFix |
| CVE-2021-4171 | Business Logic Errors in janeczku/Calibre-Web | 9.8v3.1 | 1.4% | 2022-01-17 | Fix |
| CVE-2021-4164 | Cross-site request forgery (CSRF) in janeczku/Calibre-Web | 8.8v3.1 | 0.5% | 2022-01-17 | Fix |
| CVE-2021-3862 | Cross-site scripting (XSS) Reflected in ICEcoder/ICEcoder | 4.8v3.1 | 0.7% | 2022-01-17 | Fix |
| CVE-2021-3857 | Cross-site scripting (XSS) Stored in Chaskiq/Chaskiq | 5.4NVD v3.1 | 0.6% | 2022-01-17 | |
| CVE-2021-3853 | Cross-site scripting (XSS) Stored in Chaskiq/Chaskiq | 6.1v3.1 | 0.6% | 2022-01-17 | Fix |
| CVE-2021-4170 | Cross-site scripting (XSS) Stored in janeczku/Calibre-Web | 5.4NVD v3.1 | 0.8% | 2022-01-16 | Fix |
| CVE-2021-44537 | Owncloud Desktop Client resource injection | 7.8v3.1 | 2.7% | 2022-01-15 | Fix |
| CVE-2021-44049 | CyberArk Endpoint Privilege Manager privilege escalation | 7.8v3.1 | 0.4% | 2022-01-15 | Fix |
| CVE-2021-42555 | Pexip Infinity denial of service | 7.5v3.1 | 1.2% | 2022-01-15 | |
| CVE-2021-35969 | Pexip Infinity denial of service | 7.5v3.1 | 1.2% | 2022-01-15 | |
| CVE-2021-33963 | China Mobile An Lianbao Wf-1 command injection | 9.8v3.1 | 3.1% | 2022-01-15 | |
| CVE-2021-33828 | ownCloud Files Antivirus unrestricted file upload | 8.8v3.1 | 1.2% | 2022-01-15 | Fix |
| CVE-2021-33827 | ownCloud Files Antivirus OS command injection | 7.2v3.1 | 2.1% | 2022-01-15 | Fix |
| CVE-2021-33499 | Pexip Infinity denial of service | 7.5v3.1 | 1.2% | 2022-01-15 | |
| CVE-2021-33498 | Pexip Infinity denial of service | 7.5v3.1 | 1.2% | 2022-01-15 | |
| CVE-2021-32545 | Pexip Infinity denial of service | 7.5v3.1 | 1.3% | 2022-01-15 | |
| CVE-2021-24044 | Access of resource using incompatible type in Hermes | 9.8v3.1 | 1.3% | 2022-01-15 | Fix |
| CVE-2021-46255 | EyouCMS arbitrary file deletion | 8.1v3.1 | 1.1% | 2022-01-14 | |
| CVE-2021-46195 | GNU GCC uncontrolled recursion | 5.5NVD v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2021-46171 | Modex null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-14 | |
| CVE-2021-46170 | JerryScript use-after-free | 7.5v3.1 | 1.2% | 2022-01-14 | Fix |
| CVE-2021-46169 | Modex use-after-free | 5.5v3.1 | 0.7% | 2022-01-14 | |
| CVE-2021-46168 | Spinroot spin out-of-bounds write | 5.5v3.1 | 0.6% | 2022-01-14 | |
| CVE-2021-46022 | GNU Recutils rec_mset_elem_destroy at rec-mset.c use-after-free | 5.5v3.1 | 1.0% | 2022-01-14 | Fix |
| CVE-2021-46021 | GNU Recutils rec_record_destroy at rec-record.c use-after-free | 5.5v3.1 | 1.0% | 2022-01-14 | Fix |
| CVE-2021-46020 | mruby mrb_vm_exec untrusted pointer dereference | 7.5v3.1 | 1.0% | 2022-01-14 | Fix |
| CVE-2021-46019 | GNU Recutils rec_db_destroy at rec-db.c untrusted pointer dereference | 5.5v3.1 | 1.0% | 2022-01-14 | Fix |
| CVE-2021-45773 | MZ Automation lib60870 null pointer dereference | 7.5v3.1 | 1.1% | 2022-01-14 | |
| CVE-2021-45769 | MZ Automation libiec61850 null pointer dereference | 7.5v3.1 | 1.1% | 2022-01-14 | |
| CVE-2021-45767 | gpac denial of service | 5.5v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-45764 | gpac memory corruption | 5.5v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-45763 | gpac denial of service | 5.5v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-45762 | gpac denial of service | 5.5v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-45761 | Ropium null pointer dereference | 7.5v3.1 | 1.4% | 2022-01-14 | |
| CVE-2021-45760 | gpac denial of service | 5.5v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2021-45468 | Imperva Web Application Firewall HTTP request smuggling | 9.8v3.1 | 4.0% | 2022-01-14 | Exploit code |
| CVE-2021-45406 | SalonERP SQL injection | 8.8v3.1 | 1.8% | 2022-01-14 | |
| CVE-2021-45068 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 12.3% | 2022-01-14 | Fix |
| CVE-2021-45067 | Adobe Acrobat Reader memory corruption could lead to information disclosure | 5.5CNA v3.1 | 3.5% | 2022-01-14 | Exploit codeFix |
| CVE-2021-45064 | Adobe Acrobat Reader DC AcroForm use-after-free remote code execution | 7.8CNA v3.0 | 11.5% | 2022-01-14 | Fix |
| CVE-2021-45063 | Adobe Acrobat Reader DC JP2 File Parsing use-after-free information disclosure | 3.3CNA v3.0 | 6.2% | 2022-01-14 | Fix |
| CVE-2021-45062 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 16.5% | 2022-01-14 | Fix |
| CVE-2021-45061 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 7.9% | 2022-01-14 | Fix |
| CVE-2021-45060 | Adobe Acrobat Reader DC TTF Font Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 8.6% | 2022-01-14 | Fix |
| CVE-2021-45052 | Adobe Bridge TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 2.3% | 2022-01-14 | Fix |
| CVE-2021-45051 | Adobe Bridge JPEG2000 Parsing use-after-free information disclosure | 3.3CNA v3.1 | 2.7% | 2022-01-14 | Fix |
| CVE-2021-44828 | Arm Bifrost GPU Kernel Driver out-of-bounds write | 7.8v3.1 | 0.3% | 2022-01-14 | Fix |
| CVE-2021-44743 | Adobe Bridge JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-01-14 | Fix |
| CVE-2021-44742 | Adobe Reader out-of-bounds read remote code execution | 3.3CNA v3.1 | 5.9% | 2022-01-14 | Fix |
| CVE-2021-44741 | Adobe Acrobat Pro DC null pointer dereference could lead to Application-denial of service | 3.3CNA v3.1 | 3.6% | 2022-01-14 | Fix |
| CVE-2021-44740 | Adobe Acrobat Pro DC null pointer dereference could lead to Application-denial of service | 3.3CNA v3.1 | 3.6% | 2022-01-14 | Fix |
| CVE-2021-44739 | Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Auth leak vulnerability | 3.1CNA v3.0 | 2.1% | 2022-01-14 | Fix |
| CVE-2021-44715 | Adobe Acrobat Reader DC out-of-bounds read information disclosure | 3.3CNA v3.1 | 14.7% | 2022-01-14 | Fix |
| CVE-2021-44714 | Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts | 2.5CNA v3.1 | 2.6% | 2022-01-14 | Fix |
| CVE-2021-44713 | Adobe Acrobat Reader DC use-after-free could lead to application denial of service | 5.5CNA v3.1 | 2.8% | 2022-01-14 | Fix |
| CVE-2021-44712 | Adobe Acrobat Reader memory corruption could lead to application denial of service | 5.5CNA v3.1 | 2.2% | 2022-01-14 | Fix |
| CVE-2021-44711 | Adobe Acrobat Reader DC annotation gestures integer overflow | 7.8CNA v3.1 | 10.0% | 2022-01-14 | Fix |
| CVE-2021-44710 | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 7.8CNA v3.1 | 11.6% | 2022-01-14 | Fix |
| CVE-2021-44709 | Adobe Acrobat Pro DC heap overflow vulnerability could lead to arbitrary code execution | 7.8CNA v3.1 | 29.0% | 2022-01-14 | Fix |
| CVE-2021-44708 | Adobe Acrobat Pro DC heap overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 38.2% | 2022-01-14 | Fix |
| CVE-2021-44707 | Adobe Acrobat Reader DC OTF Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 8.4% | 2022-01-14 | Fix |
| CVE-2021-44706 | Adobe Acrobat Reader Collab.registerReview use-after-free Remote Execution | 7.8CNA v3.1 | 8.7% | 2022-01-14 | Fix |
| CVE-2021-44705 | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 7.8CNA v3.1 | 7.4% | 2022-01-14 | Fix |
| CVE-2021-44704 | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 7.8CNA v3.1 | 10.8% | 2022-01-14 | Fix |
| CVE-2021-44703 | Adobe Acrobat Pro DC stack overflow vulnerability arbitrary code execution | 7.8CNA v3.1 | 57.3% | 2022-01-14 | Fix |
| CVE-2021-44702 | Adobe Acrobat Reader DC add-on for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability | 3.1CNA v3.0 | 2.1% | 2022-01-14 | Fix |
| CVE-2021-44701 | Adobe Acrobat Reader DC AcroForm use-after-free remote code execution | 7.8CNA v3.0 | 20.9% | 2022-01-14 | Fix |
| CVE-2021-44700 | Adobe Illustrator JPEG File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.4% | 2022-01-14 | Fix |
| CVE-2021-44530 | UniFi Network application An injection | 9.8v3.1 | 1.1% | 2022-01-14 | Fix |
| CVE-2021-44234 | SAP Business One sensitive information in log files | 5.5v3.1 | 0.2% | 2022-01-14 | Fix |
| CVE-2021-43752 | Adobe Illustrator TIF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.4% | 2022-01-14 | Fix |
| CVE-2021-42551 | Reflected XSS in NetBiblio WebOPAC search functionality | 6.1v3.1 | 2.7% | 2022-01-14 | NucleiFix |
| CVE-2021-42067 | SAP NetWeaver AS for ABAP and ABAP Platform denial of service | 4.3v3.1 | 0.6% | 2022-01-14 | Fix |
| CVE-2021-39684 | Android target.c privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39683 | Android sss_ice_util.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39682 | Android memory_group_manager.c out-of-bounds write | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39681 | Android main.c arbitrary code execution | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39680 | Android sha256_core.c information disclosure | 4.4v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39679 | Android vendor_graphicbuffer_meta.cpp use-after-free | 7.0v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39678 | Android privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39659 | Android improper exception handling | 5.5v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39634 | Android eventpoll.c use-after-free | 7.8v3.1 | 0.2% | 2022-01-14 | Fix |
| CVE-2021-39633 | Android ip_gre.c information disclosure | 5.5v3.1 | 0.2% | 2022-01-14 | Fix |
| CVE-2021-39632 | Android events.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39630 | Android OverlayManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39629 | Android phTmlNfc.cc use-after-free | 7.0v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39628 | Android StatusBar.java information disclosure | 3.3v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39627 | Android LegacyModeSmsHandler.java insecure permissions | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39626 | Android ConnectedDeviceDashboardFragment.java insecure permissions | 7.8v3.1 | 0.2% | 2022-01-14 | Fix |
| CVE-2021-39625 | Android EuiccNotificationManager.java privilege escalation | 7.3v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39623 | Android SimpleDecodingSource.cpp out-of-bounds write | 9.8v3.1 | 2.0% | 2022-01-14 | Fix |
| CVE-2021-39622 | Android GBoard privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39621 | Android LegacyModeSmsHandler.java insecure permissions | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39620 | Android Parcel.cpp privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39618 | Android EuiccNotificationManager.java privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-39032 | IBM Sterling Gentran:Server for Microsoft Windows sensitive information in log files | 4.0CNA v3.0 | 0.3% | 2022-01-14 | Fix |
| CVE-2021-38692 | Stack overflow vulnerability in QVR Elite, QVR Pro and QVR Guard | 8.1CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2021-38691 | Stack overflow vulnerability in QVR Elite, QVR Pro and QVR Guard | 8.1CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2021-38690 | Stack overflow vulnerability in QVR Elite, QVR Pro and QVR Guard | 8.1CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2021-38689 | Stack overflow vulnerability in QVR Elite, QVR Pro and QVR Guard | 8.1CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2021-38682 | Stack overflow vulnerability in QVR Elite, QVR Pro and QVR Guard | 8.1CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2021-38678 | Open redirect vulnerability in QcalAgent | 6.1CNA v3.1 | 0.6% | 2022-01-14 | Fix |
| CVE-2021-38677 | Reflected XSS vulnerability in QcalAgent | 5.3CNA v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-38127 | ArcSight Enterprise Security Manager (ESM) cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-14 | |
| CVE-2021-38126 | ArcSight Enterprise Security Manager (ESM) cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-14 | |
| CVE-2021-36920 | WordPress plugin Download Monitor authenticated reflected cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-01-14 | Fix |
| CVE-2021-36781 | openSUSE Factory parsec: Dangerous 777 permissions for /run/parsec | 5.9CNA v3.1 | 0.2% | 2022-01-14 | Fix |
| CVE-2021-36199 | Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop. | 5.3CNA v3.1 | 1.0% | 2022-01-14 | Fix |
| CVE-2021-33962 | Chinamobileltd An Lianbao Wf-1 OS command injection | 9.8v3.1 | 3.7% | 2022-01-14 | |
| CVE-2021-32650 | Arbitrary code execution in october/system | 8.8CNA v3.1 | 2.1% | 2022-01-14 | Fix |
| CVE-2021-32649 | Authenticated file write leads to remote code execution in october/system | 8.8CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2021-28507 | Arista EOS OpenConfig gNOI and RESTCONF service ACL improper access control | 5.5CNA v3.1 | 0.7% | 2022-01-14 | |
| CVE-2021-28506 | Arista EOS gNOI API improper authorization | 9.1CNA v3.1 | 1.4% | 2022-01-14 | |
| CVE-2021-28501 | Arista TerminAttr AAA API integration improper authorization | 9.1CNA v3.1 | 0.8% | 2022-01-14 | |
| CVE-2021-28500 | Arista EOS OpenConfig and TerminAttr AAA integration improper authorization | 9.1CNA v3.1 | 0.8% | 2022-01-14 | |
| CVE-2021-24046 | Meta Platforms Ray-Ban® Stories Smart Glasses logic flaw | 5.3v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-23567 | colors denial of service (DoS) | 7.5v3.1 | 1.7% | 2022-01-14 | Fix |
| CVE-2021-23566 | nanoid information exposure | 5.5v3.1 | 0.4% | 2022-01-14 | Fix |
| CVE-2021-23157 | WECON LeviStudioU heap-based buffer overflow | 7.8v3.1 | 8.2% | 2022-01-14 | |
| CVE-2021-23138 | WECON LeviStudioU stack-based buffer overflow | 7.8v3.1 | 9.3% | 2022-01-14 | |
| CVE-2021-20613 | MELSEC-F series FX3U-ENET improper initialization | 7.5v3.1 | 3.6% | 2022-01-14 | Fix |
| CVE-2021-20612 | MELSEC-F series FX3U-ENET denial of service | 7.5v3.1 | 3.6% | 2022-01-14 | |
| CVE-2021-3965 | HP DesignJet Printer insecure direct object reference | 7.5v3.1 | 5.2% | 2022-01-14 | Fix |
| CVE-2021-1049 | Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 | 9.8v3.1 | 0.7% | 2022-01-14 | Fix |
| CVE-2021-1037 | Android missing authorization | 5.3v3.1 | 0.3% | 2022-01-14 | Fix |
| CVE-2021-1036 | Android AndroidManifest.xml elevation of privilege | 7.8v3.1 | 0.3% | 2022-01-14 | Fix |
| CVE-2021-1035 | Android privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-0959 | Android jit_memory_region.cc privilege escalation | 7.8v3.1 | 0.1% | 2022-01-14 | Fix |
| CVE-2021-45807 | jpress command execution | 9.8v3.1 | 2.1% | 2022-01-13 | |
| CVE-2021-45806 | jpress code injection | 8.8v3.1 | 1.4% | 2022-01-13 | |
| CVE-2021-45422 | Reprisesoftware Reprise License Manager cross-site scripting | 6.1v3.1 | 3.2% | 2022-01-13 | Nuclei |
| CVE-2021-45059 | Adobe InDesign JPEG2000 Parsing use-after-free information disclosure | 3.3CNA v3.1 | 1.5% | 2022-01-13 | Fix |
| CVE-2021-45058 | Adobe InDesign JPEG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-01-13 | Fix |
| CVE-2021-45057 | Adobe InDesign JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-01-13 | Fix |
| CVE-2021-45056 | Adobe InCopy JPEG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.3% | 2022-01-13 | Fix |
| CVE-2021-45055 | Adobe InCopy TIF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 2.4% | 2022-01-13 | Fix |
| CVE-2021-45054 | Adobe InCopy JPEG2000 Parsing use-after-free information disclosure | 3.3CNA v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-45053 | Adobe InCopy JPEG2000 Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-01-13 | Fix |
| CVE-2021-44178 | Adobe Experience Manager reflected XSS in /bin/wcm/contentfinder/page/view.html | 5.4CNA v3.1 | 1.4% | 2022-01-13 | Fix |
| CVE-2021-44177 | Adobe Experience Manager stored XSS in user name parameter in the package manager | 8.1CNA v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-44176 | Adobe Experience Manager stored XSS in workflow Stages parameter | 8.1CNA v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-43765 | Adobe Experience Manager stored XSS in the Carousel Set | 8.1CNA v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-43764 | Adobe Experience Manager stored XSS in the Spin Set | 8.0CNA v3.1 | 1.5% | 2022-01-13 | Fix |
| CVE-2021-43762 | Adobe Experience Manager Unicode normalization leads to dispatcher bypass | 6.5CNA v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-43761 | Adobe Experience Manager stored XSS on Edit Tag page via Localization input | 8.0CNA v3.1 | 1.1% | 2022-01-13 | Fix |
| CVE-2021-40813 | Element-it HTTP Commander "Zip content" feature cross-site scripting | 5.4v3.1 | 0.7% | 2022-01-13 | |
| CVE-2021-40722 | Adobe Experience Manager AEM forms improper restriction of XML external entity reference | 9.8CNA v3.1 | 3.3% | 2022-01-13 | Fix |
| CVE-2021-40576 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2022-01-13 | Fix |
| CVE-2021-40575 | gpac null pointer dereference | 5.5v3.1 | 0.9% | 2022-01-13 | Fix |
| CVE-2021-40574 | GPAC MP4Box text track parser double free | 7.8v3.1 | 1.3% | 2022-01-13 | Fix |
| CVE-2021-40573 | GPAC MP4Box list handling double free | 5.5v3.1 | 0.7% | 2022-01-13 | Fix |
| CVE-2021-40572 | GPAC MP4Box AV1 demuxer double free | 5.5v3.1 | 0.9% | 2022-01-13 | Fix |
| CVE-2021-40571 | gpac double free | 7.8v3.1 | 1.2% | 2022-01-13 | Fix |
| CVE-2021-40570 | GPAC MP4Box AVC parser double free | 7.8v3.1 | 1.2% | 2022-01-13 | Fix |
| CVE-2021-40569 | GPAC MP4Box iloc entry parser double free | 5.5v3.1 | 0.9% | 2022-01-13 | Fix |
| CVE-2021-40568 | gpac buffer overflow | 7.8v3.1 | 1.3% | 2022-01-13 | Fix |
| CVE-2021-40567 | gpac denial of service | 5.5v3.1 | 0.9% | 2022-01-13 | Fix |
| CVE-2021-40327 | Trusted Firmware-M missing authorization | 5.9v3.1 | 1.2% | 2022-01-13 | Fix |
| CVE-2021-39056 | IBM i denial of service | 6.5CNA v3.0 | 1.3% | 2022-01-13 | Fix |
| CVE-2021-34998 | Panda Security Free Antivirus execution with unnecessary privileges | 7.8v3.1 | 0.4% | 2022-01-13 | Fix |
| CVE-2021-34997 | Commvault CommCell unrestricted file upload | 8.8v3.1 | 4.2% | 2022-01-13 | |
| CVE-2021-34996 | Commvault CommCell exposed dangerous method | 8.8v3.1 | 82.3% | 2022-01-13 | |
| CVE-2021-34995 | Commvault CommCell unrestricted file upload | 8.8v3.1 | 68.9% | 2022-01-13 | |
| CVE-2021-34994 | Commvault CommCell arbitrary code execution | 8.8v3.1 | 5.8% | 2022-01-13 | |
| CVE-2021-34993 | Commvault CommCell improper authentication | 9.8v3.1 | 5.4% | 2022-01-13 | |
| CVE-2021-34985 | Bentley ContextCapture out-of-bounds read | 5.5v3.1 | 1.7% | 2022-01-13 | Fix |
| CVE-2021-34984 | Bentley ContextCapture out-of-bounds read | 5.5v3.1 | 1.7% | 2022-01-13 | Fix |
| CVE-2021-34980 | NETGEAR R6260 stack-based buffer overflow | 8.8v3.1 | 1.4% | 2022-01-13 | Fix |
| CVE-2021-34979 | NETGEAR R6260 buffer overflow | 8.8v3.1 | 1.4% | 2022-01-13 | Emerging ThreatsFix |
| CVE-2021-34978 | NETGEAR R6260 stack-based buffer overflow | 8.8v3.1 | 1.5% | 2022-01-13 | Fix |
| CVE-2021-34977 | NETGEAR R7000 authentication bypass | 8.8v3.1 | 1.1% | 2022-01-13 | Fix |
| CVE-2021-34946 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34945 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34944 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34943 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34942 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34941 | Bentley View stack-based buffer overflow | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34940 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34939 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34938 | Bentley View heap-based buffer overflow | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34937 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34936 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34935 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34934 | Bentley View memory corruption | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34933 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34932 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34931 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34930 | Bentley View out-of-bounds read | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34929 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34928 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34927 | Bentley View out-of-bounds read | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34926 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34925 | Bentley View stack-based buffer overflow | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34924 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34923 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34922 | Bentley View use-after-free | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34921 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34920 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34919 | Bentley View use-after-free | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34918 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34917 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34916 | Bentley View out-of-bounds read | 3.3v3.1 | 1.5% | 2022-01-13 | Fix |
| CVE-2021-34915 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34914 | Bentley View out-of-bounds write | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34913 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34912 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34911 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34910 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34909 | Bentley View use-after-free | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34908 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34907 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34906 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34905 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34904 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34903 | Bentley View out-of-bounds write | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34902 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34901 | Bentley View out-of-bounds read | 3.3v3.1 | 1.8% | 2022-01-13 | Fix |
| CVE-2021-34900 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34899 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34898 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34897 | Bentley View out-of-bounds write | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34896 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34895 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34894 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34893 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34892 | Bentley View stack-based buffer overflow | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34891 | Bentley View use-after-free | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34890 | Bentley View out-of-bounds read | 3.3v3.1 | 1.7% | 2022-01-13 | Fix |
| CVE-2021-34889 | Bentley View out-of-bounds read | 3.3v3.1 | 1.8% | 2022-01-13 | Fix |
| CVE-2021-34888 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34887 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34886 | Bentley View use-after-free | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34885 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34884 | Bentley View use-after-free | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34883 | Bentley View out-of-bounds read | 3.3v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-34882 | Bentley View out-of-bounds read | 3.3v3.1 | 1.5% | 2022-01-13 | Fix |
| CVE-2021-34881 | Bentley View out-of-bounds read | 3.3v3.1 | 1.5% | 2022-01-13 | Fix |
| CVE-2021-34880 | Bentley View out-of-bounds read | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34879 | Bentley View use-after-free | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34878 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34877 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34876 | Bentley View out-of-bounds write | 7.8v3.1 | 1.9% | 2022-01-13 | Fix |
| CVE-2021-34875 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34874 | Bentley View memory corruption | 7.8v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2021-34873 | Bentley View out-of-bounds write | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34872 | Bentley View use-after-free | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34871 | Bentley View heap-based buffer overflow | 7.8v3.1 | 2.0% | 2022-01-13 | Fix |
| CVE-2021-34858 | TeamViewer out-of-bounds read | 7.8v3.1 | 3.8% | 2022-01-13 | Fix |
| CVE-2021-33046 | Access control vulnerability found in some Dahua products improper authentication | 9.8v3.1 | 1.3% | 2022-01-13 | Fix |
| CVE-2021-30353 | Qualcomm Snapdragon reachable assertion in Audio | 7.5CNA v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2021-30330 | Qualcomm Snapdragon null pointer dereference in Video | 7.5CNA v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2021-30319 | Qualcomm Snapdragon integer overflow or wraparound in WLAN | 7.8CNA v3.1 | 0.2% | 2022-01-13 | Fix |
| CVE-2021-30314 | Qualcomm Snapdragon information exposure in Telephony | 6.2CNA v3.1 | 0.1% | 2022-01-13 | Fix |
| CVE-2021-30313 | Qualcomm Snapdragon use-after-free in Wired Connectivity | 6.7CNA v3.1 | 0.1% | 2022-01-13 | Fix |
| CVE-2021-30311 | Qualcomm Snapdragon improper input validation in Modem | 7.8CNA v3.1 | 0.2% | 2022-01-13 | Fix |
| CVE-2021-30308 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 7.8CNA v3.1 | 0.2% | 2022-01-13 | Fix |
| CVE-2021-30307 | Qualcomm Snapdragon reachable assertion in Data Modem | 7.5CNA v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2021-30301 | Qualcomm Snapdragon uncontrolled resource consumption in Modem | 7.5CNA v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2021-30300 | Qualcomm Snapdragon incorrect type conversion or cast in Modem | 7.5CNA v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2021-30287 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2021-30285 | Qualcomm Snapdragon improper input validation in Kernel | 9.3CNA v3.1 | 0.1% | 2022-01-13 | Fix |
| CVE-2021-23824 | Crow content injection | 6.1v3.1 | 0.9% | 2022-01-13 | Fix |
| CVE-2021-23514 | Crow path traversal | 7.5v3.1 | 1.6% | 2022-01-13 | Fix |
| CVE-2021-23227 | PHP Everywhere WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-01-13 | Fix |
| CVE-2021-46225 | Libmeshb GmfOpenMesh function buffer overflow | 6.5v3.1 | 1.0% | 2022-01-12 | |
| CVE-2021-45449 | Docker Desktop sensitive information in log files | 5.5v3.1 | 0.4% | 2022-01-12 | Fix |
| CVE-2021-45445 | Unisys Clearpath MCP Tcp/ip Networking Services infinite loop | 7.5v3.1 | 1.0% | 2022-01-12 | Fix |
| CVE-2021-45411 | Printable Staff ID Card Creator System unrestricted file upload | 9.8v3.1 | 3.9% | 2022-01-12 | |
| CVE-2021-44652 | Zoho Manageengine O365 Manager Plus remote code execution | 7.8v3.1 | 2.6% | 2022-01-12 | Fix |
| CVE-2021-44651 | Zoho Manageengine Cloud Security Plus unrestricted file upload | 8.8v3.1 | 5.3% | 2022-01-12 | Fix |