CVE-2021 records published after 2021
Page seven of seven: records 6,001 to 6,408 of the 6,408 published after 2021, newest first. The first page carries the figures for After 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-44650 | Zoho ManageEngine M365 Manager Plus remote command execution | 7.2v3.1 | 4.8% | 2022-01-12 | Fix |
| CVE-2021-44649 | Cross-site scripting in django-cms | 5.4v3.1 | 0.6% | 2022-01-12 | Fix |
| CVE-2021-44648 | GNOME Gdk-Pixbuf out-of-bounds write | 8.8v3.1 | 1.9% | 2022-01-12 | Fix |
| CVE-2021-43960 | Lorensbergs Connect2 cross-site scripting | 4.8v3.1 | 0.6% | 2022-01-12 | Fix |
| CVE-2021-43860 | flatpak permissions granted to applications can be hidden from the user at install time | 8.2CNA v3.1 | 1.3% | 2022-01-12 | Fix |
| CVE-2021-43436 | Iresturant cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-12 | |
| CVE-2021-42562 | Caldera improper privilege management | 8.1v3.1 | 1.2% | 2022-01-12 | Exploit codeFix |
| CVE-2021-42561 | Caldera arbitrary command execution | 8.8v3.1 | 19.6% | 2022-01-12 | Exploit codeFix |
| CVE-2021-42560 | Caldera XML external entity injection | 8.8v3.1 | 2.1% | 2022-01-12 | Exploit codeFix |
| CVE-2021-42559 | Caldera command injection | 8.8v3.1 | 2.0% | 2022-01-12 | Exploit codeFix |
| CVE-2021-42558 | Caldera cross-site scripting | 6.1v3.1 | 1.1% | 2022-01-12 | Exploit codeFix |
| CVE-2021-41597 | salesagility SuiteCRM cross-site request forgery | 8.8v3.1 | 1.0% | 2022-01-12 | Fix |
| CVE-2021-40566 | gpac use-after-free | 5.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2021-40565 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2021-40564 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2021-40563 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2021-40562 | gpac denial of service | 5.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2021-40559 | gpac null pointer dereference | 5.5v3.1 | 0.7% | 2022-01-12 | Fix |
| CVE-2021-37530 | fig2dev A denial of service | 5.5v3.1 | 0.7% | 2022-01-12 | Fix |
| CVE-2021-37529 | fig2dev A double free | 5.5v3.1 | 0.7% | 2022-01-12 | Fix |
| CVE-2021-36417 | gpac heap-based buffer overflow | 7.8v3.1 | 1.1% | 2022-01-12 | Fix |
| CVE-2021-35500 | TIBCO Data Virtualization arbitrary file download | 6.3CNA v3.1 | 0.6% | 2022-01-12 | Fix |
| CVE-2021-28377 | Chronoengine Chronoforums path traversal | 5.3v3.1 | 8.2% | 2022-01-12 | Nuclei |
| CVE-2021-28376 | Chronoengine Chronoforums path traversal | 2.7v3.1 | 1.1% | 2022-01-12 | |
| CVE-2021-4080 | Unrestricted upload of file with dangerous type in crater-invoice/crater | 8.8v3.1 | 1.5% | 2022-01-12 | Fix |
| CVE-2021-3852 | Authorization bypass through user-controlled key in weseek/growi | 7.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2021-46283 | Linux kernel improper initialization | 5.5v3.1 | 0.3% | 2022-01-11 | Fix |
| CVE-2021-45460 | Siemens SICAM PQ Analyzer unquoted search path | 8.1v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2021-45034 | Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C improper access control | 7.5v3.1 | 2.3% | 2022-01-11 | Fix |
| CVE-2021-45033 | Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C hard-coded credentials | 8.8v3.1 | 0.9% | 2022-01-11 | Fix |
| CVE-2021-44647 | Lua funcnamefromcode function type confusion | 5.5v3.1 | 0.4% | 2022-01-11 | Fix |
| CVE-2021-43999 | Apache Guacamole improper validation of SAML responses | 8.8v3.1 | 1.8% | 2022-01-11 | Fix |
| CVE-2021-43974 | SysAid Itil missing authentication | 5.3v3.1 | 1.4% | 2022-01-11 | Fix |
| CVE-2021-43973 | Sysaid /UploadPsIcon.jsp arbitrary file upload | 8.8v3.1 | 1.7% | 2022-01-11 | |
| CVE-2021-43972 | SysAid ITIL user self-service settings page vulnerability | 6.5v3.1 | 1.5% | 2022-01-11 | |
| CVE-2021-43971 | Sysaid /mobile/SelectUsers.jsp SQL injection | 8.8v3.1 | 1.7% | 2022-01-11 | |
| CVE-2021-43566 | Samba race condition | 2.5v3.1 | 0.4% | 2022-01-11 | Fix |
| CVE-2021-43055 | TIBCO eFTL API token caching vulnerability | 5.9CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2021-43054 | TIBCO eFTL API token generation vulnerability | 7.1CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2021-43053 | TIBCO FTL secret exposure | 8.5CNA v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2021-43052 | TIBCO FTL Realm Server hard-coded credentials | 9.3CNA v3.1 | 0.9% | 2022-01-11 | Fix |
| CVE-2021-41769 | Siemens SIPROTEC 5 6MD85 devices (CPU variant CP300) improper input validation | 7.5v3.1 | 1.0% | 2022-01-11 | Fix |
| CVE-2021-41767 | Apache Guacamole REST API information disclosure | 6.5v3.1 | 1.9% | 2022-01-11 | Fix |
| CVE-2021-38991 | IBM AIX code execution | 8.4CNA v3.0 | 0.3% | 2022-01-11 | Fix |
| CVE-2021-37198 | Siemens COMOS cross-site request forgery | 8.8v3.1 | 0.4% | 2022-01-11 | Fix |
| CVE-2021-37197 | Siemens COMOS SQL injection | 8.8v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2021-37196 | Siemens COMOS relative path traversal | 6.5v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2021-37195 | Siemens COMOS cross-site scripting | 6.1v3.1 | 0.5% | 2022-01-11 | Fix |
| CVE-2021-34704 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software out-of-bounds write | 8.6CNA v3.1 | 1.3% | 2022-01-11 | Fix |
| CVE-2021-29701 | IBM Engineering Workflow Management information disclosure | 4.3CNA v3.0 | 0.7% | 2022-01-11 | Fix |
| CVE-2021-1573 | Cisco Adaptive Security Appliance and Firepower Threat Defense denial of service | 8.6CNA v3.1 | 1.3% | 2022-01-11 | Fix |
| CVE-2021-46166 | Zoho Manageengine Desktop Central information disclosure | 6.5v3.1 | 2.8% | 2022-01-10 | Fix |
| CVE-2021-46165 | Zoho ManageEngine Desktop Central startup batch files vulnerability | 7.8v3.1 | 0.5% | 2022-01-10 | Fix |
| CVE-2021-46164 | Zoho Manageengine Desktop Central remote code execution | 8.8v3.1 | 7.1% | 2022-01-10 | Fix |
| CVE-2021-46163 | Kentico Xperience cross-site scripting | 6.1v3.1 | 0.8% | 2022-01-10 | |
| CVE-2021-46150 | mediawiki cross-site scripting | 4.8v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-46149 | mediawiki denial of service | 7.5v3.1 | 1.2% | 2022-01-10 | Fix |
| CVE-2021-46148 | mediawiki information disclosure | 6.5v3.1 | 1.2% | 2022-01-10 | Fix |
| CVE-2021-46147 | mediawiki cross-site request forgery | 8.8v3.1 | 0.5% | 2022-01-10 | Fix |
| CVE-2021-46146 | mediawiki cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-46055 | WebAssembly Binaryen denial of service | 5.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-46054 | WebAssembly Binaryen denial of service | 5.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-46053 | WebAssembly Binaryen denial of service | 5.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-46052 | WebAssembly Binaryen denial of service | 5.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-46051 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-46050 | WebAssembly Binaryen stack-based buffer overflow | 5.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-46049 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-46048 | WebAssembly Binaryen denial of service | 5.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-46047 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-46046 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-46045 | gpac denial of service | 5.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-45856 | Accu-time Maximus buffer overflow | 7.5v3.1 | 1.9% | 2022-01-10 | |
| CVE-2021-45442 | Trend Micro Worry-Free Business Security A link following | 7.1v3.1 | 0.4% | 2022-01-10 | Fix |
| CVE-2021-45441 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.3% | 2022-01-10 | Fix |
| CVE-2021-45440 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.5% | 2022-01-10 | Fix |
| CVE-2021-45334 | Online Thesis Archiving System SQL injection | 9.8v3.1 | 2.8% | 2022-01-10 | |
| CVE-2021-45231 | Trend Micro Apex One link following | 7.8v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-45003 | Nikhil-bhalerao Laundry Booking Management System incorrect default permissions | 9.8v3.1 | 3.0% | 2022-01-10 | |
| CVE-2021-44586 | dst-admin path traversal | 7.5v3.1 | 1.3% | 2022-01-10 | |
| CVE-2021-44528 | https://github.com/rails/rails actionpack open redirect in Host Authorization Middleware | 6.1v3.1 | 4.2% | 2022-01-10 | NucleiFix |
| CVE-2021-44458 | Mirantis Lens websocket terminal feature improper authentication | 8.3CNA v3.1 | 0.4% | 2022-01-10 | |
| CVE-2021-44024 | Trend Micro Apex One link following | 7.1v3.1 | 0.4% | 2022-01-10 | Fix |
| CVE-2021-43951 | Atlassian Jira Service Management Server information disclosure | 4.3v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-43949 | Atlassian Jira Service Management Server missing authorization | 4.3v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-43579 | htmldoc image_load_bmp stack-based buffer overflow | 7.8v3.1 | 7.3% | 2022-01-10 | Exploit codeFix |
| CVE-2021-43297 | Dubbo Hessian cause RCE when parse error | 9.8v3.1 | 17.0% | 2022-01-10 | Fix |
| CVE-2021-42749 | Fastline Media Beaver Themer resource exposure | 5.3v3.1 | 1.1% | 2022-01-10 | Fix |
| CVE-2021-42748 | Fastline Media Beaver Builder forced browsing | 5.3v3.1 | 1.0% | 2022-01-10 | Fix |
| CVE-2021-42392 | h2database h2 deserialization of untrusted data | 9.8NVD v3.1 | 83.2% | 2022-01-10 | NucleiFix |
| CVE-2021-40041 | Huawei WS318n-21 There is a cross-site scripting | 4.2v3.1 | 0.2% | 2022-01-10 | Fix |
| CVE-2021-40039 | Huawei EMUI null pointer dereference vulnerability in the camera module | 7.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40038 | Huawei EMUI double free vulnerability in the AOD module | 7.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40037 | Huawei EMUI type confusion | 5.5v3.1 | 0.2% | 2022-01-10 | Fix |
| CVE-2021-40035 | Huawei EMUI buffer overflow | 7.5v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-40032 | Huawei HarmonyOS information management error vulnerability in the bone voice ID TA | 7.5v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-40031 | Huawei EMUI null pointer dereference vulnerability in the camera module | 7.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40029 | Huawei EMUI buffer overflow | 7.5v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-40028 | Huawei HarmonyOS out-of-bounds write | 7.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40027 | Huawei HarmonyOS vulnerability of buffer length calculation error in the bone voice ID TA | 7.5v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-40026 | Huawei EMUI heap-based buffer overflow vulnerability in the AOD module | 7.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40025 | Huawei HarmonyOS improper initialization | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40022 | Huawei HarmonyOS missing parameter type validation in the weaver module | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40021 | Huawei HarmonyOS out-of-bounds memory write in the eID module | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40020 | Huawei EMUI out-of-bounds array read vulnerability in the security storage module | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40018 | Huawei HarmonyOS null pointer dereference | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40014 | Huawei HarmonyOS information management error vulnerability in the bone voice ID TA | 7.5v3.1 | 1.0% | 2022-01-10 | Fix |
| CVE-2021-40011 | EMUI uncontrolled resource consumption vulnerability in the display module | 7.5v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-40010 | HarmonyOS heap overflow vulnerability in the bone voice ID trusted application (TA) | 9.8v3.1 | 1.2% | 2022-01-10 | Fix |
| CVE-2021-40009 | Huawei EMUI out-of-bounds write vulnerability in the AOD module | 5.3v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40006 | Huawei HarmonyOS security risk of brute force cracking in the fingerprint sensor module | 4.6v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2021-40005 | Huawei HarmonyOS distributed data service vulnerability | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-40004 | Huawei HarmonyOS improper permission management vulnerability in the cellular module | 7.5v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40003 | Huawei HarmonyOS path traversal | 5.3v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-40002 | Huawei HarmonyOS out-of-bounds write | 8.8v3.1 | 0.4% | 2022-01-10 | Fix |
| CVE-2021-40001 | Huawei HarmonyOS path traversal | 5.3v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-40000 | Huawei HarmonyOS out-of-bounds write | 8.8v3.1 | 0.4% | 2022-01-10 | Fix |
| CVE-2021-39998 | EMUI vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService | 7.5v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-39996 | EMUI heap-based buffer overflow vulnerability with the NFC module | 9.8v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-39993 | EMUI integer overflow vulnerability with ACPU | 9.8v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-38990 | IBM AIX code execution | 8.4CNA v3.0 | 0.3% | 2022-01-10 | Fix |
| CVE-2021-38957 | IBM Security Verify Access information disclosure | 3.1CNA v3.0 | 1.0% | 2022-01-10 | Fix |
| CVE-2021-38956 | IBM Security Verify Access information disclosure | 5.3CNA v3.0 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-38921 | IBM Security Verify Access weak cryptographic algorithm | 5.9CNA v3.0 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-38895 | IBM Security Verify Access cross-site scripting | 3.0CNA v3.0 | 0.4% | 2022-01-10 | Fix |
| CVE-2021-38894 | IBM Security Verify Access information disclosure through error messages | 2.7CNA v3.0 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-36414 | gpac MP4Box buffer overflow | 7.8v3.1 | 1.1% | 2022-01-10 | Fix |
| CVE-2021-36412 | gpac MP4Box heap-based buffer overflow | 7.8v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-36411 | struktur libde265 out-of-bounds read | 5.5v3.1 | 1.2% | 2022-01-10 | Fix |
| CVE-2021-36410 | struktur libde265 out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-36409 | struktur libde265 reachable assertion | 7.8v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-36408 | struktur libde265 use-after-free | 5.5v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-35452 | struktur libde265 out-of-bounds read | 6.5v3.1 | 1.3% | 2022-01-10 | Fix |
| CVE-2021-35247 | SolarWinds Serv-U improper input validation | 4.3CNA v3.1 | 3.5% | 2022-01-10 | KEVFix |
| CVE-2021-34087 | Ultimaker S3 clickjacking | 7.1v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-34086 | Ultimaker S3 cross-site request forgery | 8.8v3.1 | 0.5% | 2022-01-10 | Fix |
| CVE-2021-32998 | FANUC R-30iA, R-30iA Mate out-of-bounds write | 7.4v3.1 | 1.2% | 2022-01-10 | |
| CVE-2021-32996 | FANUC R-30iA, R-30iA Mate crash | 7.5v3.1 | 1.1% | 2022-01-10 | |
| CVE-2021-30360 | Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privile | 7.8NVD v3.1 | 0.6% | 2022-01-10 | Fix |
| CVE-2021-29454 | Sandbox escape by math function in Smarty | 8.1CNA v3.1 | 1.9% | 2022-01-10 | Fix |
| CVE-2021-25054 | WPcalc WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.3% | 2022-01-10 | |
| CVE-2021-25053 | WP Coder WordPress plugin RFI leading to RCE via CSRF | 8.8NVD v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2021-25052 | Button Generator WordPress plugin RFI leading to RCE via CSRF | 8.8NVD v3.1 | 3.0% | 2022-01-10 | NucleiFix |
| CVE-2021-25051 | Modal Window WordPress plugin RFI leading to RCE via CSRF | 8.8NVD v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-25047 | 10Web Social Photo Feed WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2021-25043 | WOOCS WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-25032 | PublishPress Capabilities settings update handler missing authorization | 9.8NVD v3.1 | 6.7% | 2022-01-10 | NucleiExploit codeFix |
| CVE-2021-24949 | The Plus Addons for Elementor Pro WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.7% | 2022-01-10 | Fix |
| CVE-2021-24948 | The Plus Addons for Elementor Pro WordPress plugin sensitive data disclosure | 7.5NVD v3.1 | 1.8% | 2022-01-10 | Fix |
| CVE-2021-24862 | RegistrationMagic WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 73.3% | 2022-01-10 | NucleiMetasploitExploit codeFix |
| CVE-2021-23594 | realms-shim sandbox bypass | 10.0v3.1 | 1.8% | 2022-01-10 | |
| CVE-2021-23568 | extend2 prototype pollution | 9.8v3.1 | 1.5% | 2022-01-10 | Fix |
| CVE-2021-23543 | realms-shim sandbox bypass | 9.8v3.1 | 1.8% | 2022-01-10 | |
| CVE-2021-23218 | Memory leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a denial of service | 5.3CNA v3.1 | 0.9% | 2022-01-10 | |
| CVE-2021-23173 | Philips Engage Software improper access control | 4.3v3.1 | 0.5% | 2022-01-10 | Fix |
| CVE-2021-23154 | Mirantis Lens custom helm chart configuration command injection | 6.3CNA v3.1 | 0.6% | 2022-01-10 | |
| CVE-2021-22569 | Google denial of service of protobuf-java parsing procedure | 7.5CNA v3.1 | 1.7% | 2022-01-10 | Exploit codeFix |
| CVE-2021-22060 | Log entry injection in Spring Framework | 4.3v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2021-21408 | Access to restricted PHP code by dynamic static class access in Smarty | 8.8CNA v3.1 | 2.2% | 2022-01-10 | Fix |
| CVE-2021-20048 | SonicWall SonicOS stack-based buffer overflow | 8.8v3.1 | 1.9% | 2022-01-10 | Fix |
| CVE-2021-20046 | SonicWall SonicOS stack-based buffer overflow | 8.8v3.1 | 1.9% | 2022-01-10 | Fix |
| CVE-2021-38674 | QNAP Systems QuTS hero reflected XSS vulnerability in TFTP | 4.2CNA v3.1 | 0.6% | 2022-01-07 | Fix |
| CVE-2021-25743 | Kubernetes ANSI escape characters in kubectl output are not being filtered | 3.0CNA v3.1 | 0.8% | 2022-01-07 | Fix |
| CVE-2021-46145 | Honda Civic 2012 authentication bypass by replay | 5.3v3.1 | 3.4% | 2022-01-06 | |
| CVE-2021-46144 | Roundcube cross-site scripting | 6.1v3.1 | 1.0% | 2022-01-06 | Fix |
| CVE-2021-46143 | libexpat integer overflow | 7.8NVD v3.1 | 4.2% | 2022-01-06 | Fix |
| CVE-2021-46142 | uriparser use-after-free | 5.5v3.1 | 1.1% | 2022-01-06 | Fix |
| CVE-2021-46141 | uriparser use-after-free | 5.5v3.1 | 1.1% | 2022-01-06 | Fix |
| CVE-2021-46080 | Vehicle Service Management System cross-site request forgery | 4.8v3.1 | 0.6% | 2022-01-06 | Exploit code |
| CVE-2021-46079 | Vehicle Service Management System Sourcecodester arbitrary file upload | 7.2v3.1 | 3.3% | 2022-01-06 | Exploit code |
| CVE-2021-46078 | Vehicle Service Management System Sourcecodester arbitrary file upload | 4.8v3.1 | 1.3% | 2022-01-06 | Exploit code |
| CVE-2021-46076 | Vehicle Service Management System unrestricted file upload | 8.8v3.1 | 3.3% | 2022-01-06 | Exploit code |
| CVE-2021-46075 | Vehicle Service Management System Sourcecodester privilege escalation | 7.2v3.1 | 2.6% | 2022-01-06 | Exploit code |
| CVE-2021-46074 | Vehicle Service Management System Sourcecodester stored cross-site scripting | 4.8NVD v3.1 | 1.1% | 2022-01-06 | Exploit code |
| CVE-2021-46073 | Vehicle Service Management System Sourcecodester stored cross-site scripting | 4.8v3.1 | 2.8% | 2022-01-06 | NucleiExploit code |
| CVE-2021-46072 | Vehicle Service Management System stored cross-site scripting | 4.8v3.1 | 2.7% | 2022-01-06 | NucleiExploit code |
| CVE-2021-46071 | Vehicle Service Management System stored cross-site scripting | 4.8v3.1 | 2.7% | 2022-01-06 | NucleiExploit code |
| CVE-2021-46070 | Vehicle Service Management System stored cross-site scripting | 4.8NVD v3.1 | 0.9% | 2022-01-06 | Exploit code |
| CVE-2021-46069 | Vehicle Service Management System stored cross-site scripting | 4.8NVD v3.1 | 2.7% | 2022-01-06 | NucleiExploit code |
| CVE-2021-46068 | Vehicle Service Management System stored cross-site scripting | 4.8v3.1 | 2.7% | 2022-01-06 | NucleiExploit code |
| CVE-2021-46067 | Vehicle Service Management System account takeover | 9.8v3.1 | 5.1% | 2022-01-06 | Exploit code |
| CVE-2021-46044 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-06 | Fix |
| CVE-2021-46043 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-06 | Fix |
| CVE-2021-46042 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-06 | Fix |
| CVE-2021-46041 | gpac denial of service | 5.5v3.1 | 0.6% | 2022-01-06 | Fix |
| CVE-2021-46040 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-06 | Fix |
| CVE-2021-46039 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-06 | Fix |
| CVE-2021-45745 | Bludit A stored cross-site scripting | 5.4v3.1 | 1.4% | 2022-01-06 | Exploit code |
| CVE-2021-45744 | Bludit A stored cross-site scripting | 5.4v3.1 | 1.4% | 2022-01-06 | Exploit code |
| CVE-2021-45458 | Apache Kylin hard-coded credentials | 7.5v3.1 | 2.1% | 2022-01-06 | Fix |
| CVE-2021-45457 | Apache Kylin overly broad CORS configuration | 7.5v3.1 | 2.4% | 2022-01-06 | Fix |
| CVE-2021-45456 | Apache Kylin command injection | 9.8v3.1 | 88.6% | 2022-01-06 | Fix |
| CVE-2021-44878 | Pac4j token validation bypass if OpenID Connect provider supports none algorithm | 7.5v3.1 | 0.9% | 2022-01-06 | Fix |
| CVE-2021-44591 | Libming resource exhaustion | 6.5v3.1 | 1.0% | 2022-01-06 | |
| CVE-2021-44590 | Libming resource exhaustion | 6.5v3.1 | 1.2% | 2022-01-06 | |
| CVE-2021-44584 | emlog index.php cross-site scripting | 6.1v3.1 | 0.9% | 2022-01-06 | |
| CVE-2021-44564 | A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to th | 8.1v3.1 | 0.9% | 2022-01-06 | Fix |
| CVE-2021-44351 | Naviwebs Navigate CMS arbitrary file read | 7.5v3.1 | 1.8% | 2022-01-06 | |
| CVE-2021-43947 | Atlassian Jira Server remote code execution | 7.2v3.1 | 4.1% | 2022-01-06 | Fix |
| CVE-2021-43045 | Possible DOS vulnerabilities in C# Avro SDK | 7.5v3.1 | 3.0% | 2022-01-06 | Fix |
| CVE-2021-42841 | Practo Insta Hms cross-site scripting | 6.1v3.1 | 0.9% | 2022-01-06 | |
| CVE-2021-41842 | InsydeH2O code execution | 9.8v3.1 | 1.5% | 2022-01-06 | Fix |
| CVE-2021-36774 | Apache Kylin Mysql JDBC Connector Deserialize RCE | 6.5v3.1 | 1.9% | 2022-01-06 | Fix |
| CVE-2021-36739 | Apache Portals XSS vulnerability in the MVCBean JSP portlet maven archetype | 6.1v3.1 | 2.3% | 2022-01-06 | Fix |
| CVE-2021-36738 | XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet | 6.1v3.1 | 2.3% | 2022-01-06 | Fix |
| CVE-2021-36737 | Apache Portals XSS in V3 Demo Portlet | 6.1v3.1 | 2.3% | 2022-01-06 | Fix |
| CVE-2021-31522 | Apache Kylin unsafe class loading | 9.8v3.1 | 2.9% | 2022-01-06 | Fix |
| CVE-2021-28715 | Linux kernel resource exhaustion | 6.5v3.1 | 0.3% | 2022-01-06 | Fix |
| CVE-2021-28714 | Linux kernel resource exhaustion | 6.5v3.1 | 0.3% | 2022-01-06 | Fix |
| CVE-2021-27738 | Apache Kylin improper access control to Streaming Coordinator and SSRF | 7.5v3.1 | 2.6% | 2022-01-06 | Fix |
| CVE-2021-4194 | Improper access control in bookstackapp/BookStack | 6.5v3.1 | 0.7% | 2022-01-06 | Fix |
| CVE-2021-46038 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-05 | Fix |
| CVE-2021-45971 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.3% | 2022-01-05 | Fix |
| CVE-2021-45970 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.3% | 2022-01-05 | Fix |
| CVE-2021-45969 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.3% | 2022-01-05 | Fix |
| CVE-2021-45833 | HDFGroup hdf5 A stack-based buffer overflow | 5.5v3.1 | 0.7% | 2022-01-05 | Fix |
| CVE-2021-45832 | HDFGroup hdf5 A stack-based buffer overflow | 5.5v3.1 | 0.7% | 2022-01-05 | Fix |
| CVE-2021-45831 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-01-05 | Fix |
| CVE-2021-45830 | HDFGroup hdf5 A heap-based buffer overflow | 5.5v3.1 | 0.7% | 2022-01-05 | Fix |
| CVE-2021-45452 | Django path traversal | 5.3v3.1 | 2.4% | 2022-01-05 | Fix |
| CVE-2021-45116 | Information disclosure in Django | 7.5v3.1 | 1.9% | 2022-01-05 | Fix |
| CVE-2021-45115 | Denial of service in Django | 7.5v3.1 | 2.4% | 2022-01-05 | Fix |
| CVE-2021-43946 | Atlassian Jira Server missing authorization | 6.5v3.1 | 1.1% | 2022-01-05 | Fix |
| CVE-2021-43816 | Improper preservation of permissions in containerd | 8.0CNA v3.1 | 1.7% | 2022-01-05 | Fix |
| CVE-2021-43779 | pluginsGLPI addressing remote command execution | 9.9CNA v3.1 | 9.1% | 2022-01-05 | Fix |
| CVE-2021-41043 | The Tcpdump Group tcpslice use-after-free | 5.5v3.1 | 0.9% | 2022-01-05 | Fix |
| CVE-2021-38918 | IBM PowerVM Hypervisor VM management operations improper isolation | 8.6CNA v3.0 | 1.2% | 2022-01-05 | Fix |
| CVE-2021-31589 | BeyondTrust Appliance Base Software cross-site scripting | 6.1NVD v3.1 | 26.0% | 2022-01-05 | NucleiFix |
| CVE-2021-28713 | Linux kernel denial of service | 6.5v3.1 | 0.3% | 2022-01-05 | Fix |
| CVE-2021-28712 | Linux kernel denial of service | 6.5v3.1 | 0.3% | 2022-01-05 | Fix |
| CVE-2021-28711 | Linux kernel denial of service | 6.5v3.1 | 0.3% | 2022-01-05 | Fix |
| CVE-2021-22567 | Google Dart SDK improper access control | 4.6CNA v3.1 | 0.6% | 2022-01-05 | Fix |
| CVE-2021-45980 | Foxit PDF Editor arbitrary code execution | 7.8v3.1 | 1.5% | 2022-01-04 | Fix |
| CVE-2021-45979 | Foxit PDF Editor OS command injection | 7.8v3.1 | 1.5% | 2022-01-04 | Fix |
| CVE-2021-45978 | Foxit PDF Editor OS command injection | 7.8v3.1 | 1.5% | 2022-01-04 | Fix |
| CVE-2021-45913 | Controlup Agent hard-coded cryptographic key | 7.2v3.1 | 1.0% | 2022-01-04 | Fix |
| CVE-2021-45912 | Controlup Real-time Agent OS command injection | 7.8v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2021-45389 | Starwind Command Center improper authentication | 9.8v3.1 | 1.2% | 2022-01-04 | Fix |
| CVE-2021-44168 | Fortinet FortiOS arbitrary file download | 3.3CNA v3.1 | 0.9% | 2022-01-04 | KEVExploit codeFix |
| CVE-2021-43942 | Atlassian Jira Server cross-site scripting | 6.1v3.1 | 55.4% | 2022-01-04 | Fix |
| CVE-2021-43852 | oroinc platform JavaScript prototype pollution in oro/platform | 8.8CNA v3.1 | 1.1% | 2022-01-04 | Fix |
| CVE-2021-43850 | Denial of service in discourse | 6.8CNA v3.1 | 0.8% | 2022-01-04 | Fix |
| CVE-2021-43832 | Improper access control in spinnaker | 10.0CNA v3.1 | 2.6% | 2022-01-04 | Fix |
| CVE-2021-43711 | TOTOLINK EX200 command injection | 9.8v3.1 | 37.8% | 2022-01-04 | |
| CVE-2021-43677 | FluxBB cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-04 | |
| CVE-2021-41789 | MediaTek MT7615 improper input validation in wifi driver | 6.5v3.1 | 0.6% | 2022-01-04 | Fix |
| CVE-2021-41388 | Netskope improper privilege management | 7.8v3.1 | 0.2% | 2022-01-04 | Fix |
| CVE-2021-41236 | oroinc platform XSS vulnerability in oro/platform | 6.9CNA v3.1 | 0.7% | 2022-01-04 | Fix |
| CVE-2021-41141 | Missing release of locks in PJSIP | 5.9CNA v3.1 | 1.4% | 2022-01-04 | Fix |
| CVE-2021-40525 | Apache James sieve file storage vulnerable to path traversal attacks | 9.1v3.1 | 3.7% | 2022-01-04 | Fix |
| CVE-2021-40148 | MediaTek MT2731 information disclosure in Modem EMM | 7.5v3.1 | 0.7% | 2022-01-04 | Fix |
| CVE-2021-40111 | Apache James IMAP parsing denial of service | 6.5v3.1 | 2.1% | 2022-01-04 | Fix |
| CVE-2021-40110 | Apache James IMAP vulnerable to a ReDoS | 7.5v3.1 | 2.9% | 2022-01-04 | Fix |
| CVE-2021-39143 | Path traversal in spinnaker | 6.6CNA v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2021-38542 | Apache James vulnerable to STARTTLS command injection (IMAP and POP3) | 5.9v3.1 | 2.3% | 2022-01-04 | Fix |
| CVE-2021-34797 | Apache Geode project log file redaction of sensitive information vulnerability | 7.5v3.1 | 2.9% | 2022-01-04 | Fix |
| CVE-2021-31833 | McAfee Application and Change Control (MACC) improper privilege management | 7.1CNA v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2021-24042 | Facebook WhatsApp Desktop heap-based buffer overflow | 9.8v3.1 | 1.2% | 2022-01-04 | Fix |
| CVE-2021-22045 | VMware ESXi, VMware Workstation and VMware Fusion out-of-bounds write | 7.8v3.1 | 4.7% | 2022-01-04 | Fix |
| CVE-2021-20872 | Konica Minolta bizhub series protection mechanism failure | 6.8v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2021-20871 | Konica Minolta bizhub series information disclosure | 6.5v3.1 | 0.5% | 2022-01-04 | Fix |
| CVE-2021-20870 | Konica Minolta bizhub series improper exception handling | 4.6v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2021-20869 | Konica Minolta bizhub series information disclosure | 6.5v3.1 | 0.5% | 2022-01-04 | Fix |
| CVE-2021-20868 | Konica Minolta bizhub series incorrect authorization | 4.5v3.1 | 0.4% | 2022-01-04 | Fix |
| CVE-2021-3845 | External control of file name or path in netristv/ws-scrcpy | 7.5v3.1 | 1.2% | 2022-01-04 | Fix |
| CVE-2021-3842 | Inefficient regular expression complexity in nltk/nltk | 7.5v3.1 | 1.5% | 2022-01-04 | Fix |
| CVE-2021-46109 | ASUS Rt-ac52u B1 Firmware cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-03 | |
| CVE-2021-45917 | SUN and MOON RISE CO., LTD. Shockwall improper authentication | 9.0v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-45916 | SUN and MOON RISE CO., LTD. Shockwall improper input validation | 3.5v3.1 | 0.3% | 2022-01-03 | Fix |
| CVE-2021-45829 | HDFGroup hdf5 improper resource release | 5.5v3.1 | 0.7% | 2022-01-03 | |
| CVE-2021-45428 | Telesquare TLR-2005KSH insecure direct object reference | 9.8v3.1 | 56.9% | 2022-01-03 | NucleiExploit code |
| CVE-2021-44674 | Opmantek Open-audit path traversal | 6.5v3.1 | 1.0% | 2022-01-03 | Fix |
| CVE-2021-44158 | ASUS RT-AX56U Router stack-based buffer overflow | 8.0v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39990 | Huawei HarmonyOS out-of-bounds write | 9.8v3.1 | 0.8% | 2022-01-03 | Fix |
| CVE-2021-39989 | Huawei HarmonyOS incorrect type conversion | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39988 | Huawei HarmonyOS null pointer dereference | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39987 | Huawei HarmonyOS type confusion | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39985 | Huawei HarmonyOS improper array index validation | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39984 | Huawei HarmonyOS out-of-bounds read | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39983 | Huawei HarmonyOS HwNearbyMain module vulnerability | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39982 | Huawei HarmonyOS improper privilege management | 9.1v3.1 | 0.6% | 2022-01-03 | Fix |
| CVE-2021-39981 | Huawei HarmonyOS Chang Lian application vulnerability | 5.3v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-39980 | Huawei HarmonyOS information disclosure | 5.3v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-39979 | Huawei HarmonyOS code injection | 9.8v3.1 | 1.1% | 2022-01-03 | Fix |
| CVE-2021-39978 | Security verification absence in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39977 | Huawei HarmonyOS null pointer dereference | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39975 | Huawei HarmonyOS denial of service | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39974 | Out-of-bounds read in some Huawei phones | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39973 | Null pointer dereference in some Huawei phones | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39972 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39971 | Huawei HarmonyOS external control of a configuration setting | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39970 | Huawei HarmonyOS path traversal | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39969 | Unauthorized file access vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39968 | Huawei HarmonyOS Changlian Blocklist module business logic error | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-39967 | Huawei EMUI incorrect default permissions | 7.5v3.1 | 0.6% | 2022-01-03 | Fix |
| CVE-2021-39966 | Uninitialized AOD driver structure in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-38576 | EDK II denial of service | 7.5v3.1 | 1.2% | 2022-01-03 | Fix |
| CVE-2021-37134 | Huawei HarmonyOS race condition | 8.1v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-37133 | Unauthorized file access vulnerability in some Huawei phones | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37132 | Huawei HarmonyOS incorrect default permissions | 5.3v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-37128 | Huawei HarmonyOS path traversal | 9.8v3.1 | 0.9% | 2022-01-03 | Fix |
| CVE-2021-37126 | Unstrict URI verification vulnerability in some Huawei devices | 7.5v3.1 | 0.8% | 2022-01-03 | Fix |
| CVE-2021-37125 | Input verification absence in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37121 | Configuration defects in some Huawei devices | 9.8v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37120 | Double free vulnerability in some Huawei devices | 9.8v3.1 | 0.9% | 2022-01-03 | Fix |
| CVE-2021-37119 | Service logic vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37118 | Man-in-the-middle (MITM) attack vulnerability when using Huawei Share in some Huawei devices | 5.3v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-37117 | Service logic vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37116 | Huawei HarmonyOS improper input validation | 9.1v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37114 | Out-of-bounds read vulnerability in some Huawei devices | 5.3v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-37113 | Privilege escalation vulnerability with the file system component in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37112 | Huawei HarmonyOS external control of a configuration setting | 5.3v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-37111 | Memory leakage vulnerability in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37110 | Timing design defects in some Huawei devices | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-37098 | Huawei HarmonyOS crash | 7.5v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-35093 | Memory corruption in Bluetooth controller Firmware | 6.5CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30351 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 9.8CNA v3.1 | 4.0% | 2022-01-03 | Fix |
| CVE-2021-30348 | Qualcomm Snapdragon uncontrolled resource consumption in Bluetooth | 6.5CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30337 | Qualcomm Snapdragon use-after-free in DSP services | 8.4CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30336 | Qualcomm Snapdragon buffer over-read in DSP services | 8.4CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30335 | Qualcomm Snapdragon reachable assertion in DSP services | 8.4CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30303 | Qualcomm Snapdragon stack-based buffer overflow in WLAN | 7.8CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30298 | Qualcomm Snapdragon buffer copy without checking size of input in DIAG services | 6.7CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-30293 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.6% | 2022-01-03 | Fix |
| CVE-2021-30289 | Qualcomm Snapdragon Detection of Error Condition without action in Modem | 7.8CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30283 | Qualcomm Snapdragon Detection of Error Condition without action in Kernel | 7.1CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-30282 | Qualcomm Snapdragon improper validation of array index in Core | 8.4CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30279 | Qualcomm Snapdragon improper access control in Core | 7.8CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-30278 | Qualcomm Snapdragon improper input validation in Core | 7.1CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-30276 | Qualcomm Snapdragon improper access control in Core | 9.3CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30275 | Qualcomm Snapdragon integer overflow or wraparound in Core | 9.3CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30274 | Qualcomm Snapdragon integer overflow or wraparound in Core | 8.4CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30273 | Qualcomm Snapdragon reachable assertion in Data Modem | 7.5CNA v3.1 | 0.6% | 2022-01-03 | Fix |
| CVE-2021-30272 | Qualcomm Snapdragon null pointer dereference in Kernel | 7.3CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30271 | Qualcomm Snapdragon null pointer dereference in Kernel | 7.3CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30270 | Qualcomm Snapdragon null pointer dereference in Kernel | 7.3CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30269 | Qualcomm Snapdragon null pointer dereference in Kernel | 7.3CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30268 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 7.8CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-30267 | Qualcomm Snapdragon integer overflow to buffer overflow in Modem | 7.8CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-30262 | Qualcomm Snapdragon use-after-free in Modem | 8.4CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-25994 | Userfrosting Host-header injection leads to account takeover | 8.8v3.1 | 1.5% | 2022-01-03 | Fix |
| CVE-2021-25981 | Talkyard insufficient session expiration | 9.8v3.1 | 2.5% | 2022-01-03 | |
| CVE-2021-25040 | Booking Calendar WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-01-03 | Fix |
| CVE-2021-25030 | Events Made Easy WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.4% | 2022-01-03 | Fix |
| CVE-2021-25027 | PowerPack Addons for Elementor WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-01-03 | Fix |
| CVE-2021-25023 | Speed Booster Pack WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.1% | 2022-01-03 | Fix |
| CVE-2021-25022 | UpdraftPlus WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.1% | 2022-01-03 | Fix |
| CVE-2021-25021 | OMGF WordPress plugin Admin+ arbitrary Folder deletion via path traversal | 4.9NVD v3.1 | 1.0% | 2022-01-03 | Fix |
| CVE-2021-25020 | CAOS WordPress plugin Admin+ arbitrary Folder deletion via path traversal | 4.9NVD v3.1 | 1.0% | 2022-01-03 | Fix |
| CVE-2021-25016 | Chaty WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.8% | 2022-01-03 | NucleiFix |
| CVE-2021-25001 | Booster for WooCommerce WordPress plugin reflected cross-site scripting in Product XML Feeds Module | 6.1NVD v3.1 | 0.8% | 2022-01-03 | Fix |
| CVE-2021-25000 | Booster for WooCommerce WordPress plugin reflected cross-site scripting in General Module | 6.1NVD v3.1 | 0.8% | 2022-01-03 | Fix |
| CVE-2021-24999 | Booster for Woocommerce WordPress plugin reflected cross-site scripting in PDF Invoicing Module | 6.1NVD v3.1 | 0.8% | 2022-01-03 | Fix |
| CVE-2021-24991 | WooCommerce PDF Invoices and Packing Slips WordPress plugin reflected cross-site scripting | 4.8NVD v3.1 | 1.2% | 2022-01-03 | NucleiFix |
| CVE-2021-24973 | Site Reviews WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.3% | 2022-01-03 | Fix |
| CVE-2021-24964 | LiteSpeed Cache WordPress plugin IP check bypass to unauthenticated stored XSS | 6.1NVD v3.1 | 1.2% | 2022-01-03 | Fix |
| CVE-2021-24963 | LiteSpeed Cache WordPress plugin Admin+ reflected cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-01-03 | Fix |
| CVE-2021-24893 | Stars Rating WordPress plugin comments denial of service | 7.5NVD v3.1 | 1.6% | 2022-01-03 | Fix |
| CVE-2021-24831 | Tab - Accordion, FAQ WordPress plugin unauthenticated AJAX Calls | 7.5NVD v3.1 | 1.2% | 2022-01-03 | Fix |
| CVE-2021-24828 | Mortgage Calculator / Loan Calculator WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-01-03 | Fix |
| CVE-2021-24786 | Download Monitor WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 17.3% | 2022-01-03 | NucleiExploit codeFix |
| CVE-2021-24680 | WP Travel Engine WordPress plugin Editor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-01-03 | Fix |
| CVE-2021-20148 | ManageEngine ADSelfService Plus files accessible to external parties | 4.3NVD v3.1 | 1.1% | 2022-01-03 | Fix |
| CVE-2021-20147 | ManageEngine ADSelfService Plus observable discrepancy | 5.3NVD v3.1 | 6.9% | 2022-01-03 | Fix |
| CVE-2021-3837 | Improper authorization in Openwhyd/Openwhyd | 6.1NVD v3.1 | 0.5% | 2022-01-03 | Fix |
| CVE-2021-1918 | Qualcomm Snapdragon information exposure in Kernel | 6.5CNA v3.1 | 0.1% | 2022-01-03 | Fix |
| CVE-2021-1894 | Qualcomm Snapdragon Permissions, Privileges and Access Controls in TrustZone | 7.1CNA v3.1 | 0.2% | 2022-01-03 | Fix |
| CVE-2021-36751 | Encsecurity Datavault insufficient verification of data authenticity | 4.2v3.1 | 0.5% | 2022-01-02 | Fix |
| CVE-2021-45972 | Giftrans improper quantity validation | 7.1v3.1 | 1.0% | 2022-01-01 | |
| CVE-2021-45960 | libexpat incorrect calculation | 8.8NVD v3.1 | 4.3% | 2022-01-01 | Fix |
| CVE-2021-45958 | UltraJSON vulnerable to out-of-bounds write | 5.5v3.1 | 1.6% | 2022-01-01 | Fix |
| CVE-2021-45957 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.4% | 2022-01-01 | Fix |
| CVE-2021-45956 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.6% | 2022-01-01 | Fix |
| CVE-2021-45955 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.5% | 2022-01-01 | Fix |
| CVE-2021-45954 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.6% | 2022-01-01 | Fix |
| CVE-2021-45953 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.6% | 2022-01-01 | Fix |
| CVE-2021-45952 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.6% | 2022-01-01 | Fix |
| CVE-2021-45951 | Thekelleys dnsmasq out-of-bounds write | 9.8v3.1 | 2.6% | 2022-01-01 | |
| CVE-2021-45950 | GNU LibreDWG out-of-bounds write | 6.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45949 | Artifex Ghostscript heap-based buffer overflow | 5.5NVD v3.1 | 1.6% | 2022-01-01 | Fix |
| CVE-2021-45948 | assimp out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | Fix |
| CVE-2021-45947 | wasm3 out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-01 | |
| CVE-2021-45946 | wasm3 out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-01 | |
| CVE-2021-45944 | Artifex Ghostscript use-after-free | 5.5v3.1 | 1.4% | 2022-01-01 | Fix |
| CVE-2021-45943 | OSGeo gdal out-of-bounds write | 5.5v3.1 | 1.5% | 2022-01-01 | Fix |
| CVE-2021-45942 | openexr out-of-bounds write | 5.5v3.1 | 1.8% | 2022-01-01 | Fix |
| CVE-2021-45941 | Libbpf out-of-bounds write | 6.5v3.1 | 1.1% | 2022-01-01 | Fix |
| CVE-2021-45940 | Libbpf out-of-bounds write | 6.5v3.1 | 1.1% | 2022-01-01 | Fix |
| CVE-2021-45939 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45938 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45937 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45936 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45935 | Grok out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | Fix |
| CVE-2021-45934 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45933 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45932 | wolfSSL Wolfmqtt out-of-bounds write | 5.5v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-45931 | harfbuzz out-of-bounds write | 6.5v3.1 | 1.8% | 2022-01-01 | Fix |
| CVE-2021-45930 | Qtsvg out-of-bounds write | 5.5v3.1 | 1.4% | 2022-01-01 | Fix |
| CVE-2021-45929 | wasm3 out-of-bounds write | 5.5v3.1 | 0.7% | 2022-01-01 | |
| CVE-2021-45928 | libjxl out-of-bounds write | 5.5v3.1 | 0.4% | 2022-01-01 | |
| CVE-2021-45927 | Mdbtools out-of-bounds write | 7.8v3.1 | 0.4% | 2022-01-01 | Fix |
| CVE-2021-45926 | Mdbtools out-of-bounds write | 7.8v3.1 | 0.4% | 2022-01-01 | Fix |
| CVE-2021-44896 | Dmproadmap cross-site scripting | 6.1v3.1 | 0.9% | 2022-01-01 | |
| CVE-2021-44852 | BioStar Racing Gt Evo arbitrary code execution | 7.8NVD v3.1 | 0.8% | 2022-01-01 | |
| CVE-2021-44717 | Opengroup UNIX improper resource release | 4.8v3.1 | 1.9% | 2022-01-01 | Fix |
| CVE-2021-44716 | Go golang.org/x/net/http2 allows uncontrolled memory consumption | 7.5v3.1 | 4.0% | 2022-01-01 | Fix |
| CVE-2021-43333 | Datalogic Dxu missing authentication | 6.5v3.1 | 0.7% | 2022-01-01 | |
| CVE-2021-41819 | Cookie Prefix spoofing in CGI::Cookie.parse | 7.5v3.1 | 2.9% | 2022-01-01 | Fix |
| CVE-2021-41817 | Regular expression denial of service vulnerability (ReDoS) in Date | 7.5v3.1 | 3.2% | 2022-01-01 | Fix |