The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,284 matching vulnerabilities · Page 697 of 786

Yealink1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2021-27561 · Yealink Device Management

Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

KEV · due 17 Nov EPSS 84%public exploit SSVC act CVSS 9.8

Adobe1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-40720 · Adobe Ops-CLI

Ops CLI Deserialization of Untrusted Data leads to Abritrary Code Execution

EPSS 10%CVSS 9.8

Advantech2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-38389 · Advantech WebAccess

Advantech WebAccess

EPSS 10%CVSS 9.8

CVE-2021-33023 · Advantech WebAccess

Advantech WebAccess

EPSS 2%CVSS 9.8

mitre14 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2021-38297 · mitre

Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOA…

EPSS 11%CVSS 9.8

CVE-2021-40493 · mitre

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module.

EPSS 50%CVSS 9.8

CVE-2021-42325 · mitre

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

EPSS 12%CVSS 9.8

CVE-2021-42342 · mitre

An issue was discovered in GoAhead 4.x and 5.x before 5.1.5.

EPSS 59%CVSS 9.8

CVE-2020-22724 · mitre

A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router…

EPSS 6%CVSS 9.8

CVE-2021-41075 · mitre

The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API.

EPSS 3%CVSS 9.8

CVE-2021-42575 · mitre

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

EPSS 3%CVSS 9.8

CVE-2021-29644 · mitre

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow.

EPSS 3%CVSS 9.8

CVE-2021-42224 · mitre

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php.

EPSS 2%CVSS 9.8

CVE-2021-42576 · mitre

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associat…

EPSS 2%CVSS 9.8

CVE-2021-40618 · mitre

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2) ADDR_CONT_PSWD, 3) SECN_CONT_USRN or 4) SECN_C…

EPSS 1%CVSS 9.8

CVE-2021-42369 · mitre

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection.

EPSS 1%CVSS 9.9

CVE-2020-12141 · mitre

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially dis…

EPSS 2%CVSS 9.1

CVE-2021-40842 · mitre

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console.

EPSS 1.0%CVSS 9.8

snyk1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2021-23449 · snyk

Sandbox Bypass

EPSS 4%CVSS 10.0

tenable1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2021-20125 · tenable

An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek…

EPSS 4%CVSS 9.8

Apple1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2021-30820 · Apple iOS and iPadOS

A logic issue was addressed with improved state management.

EPSS 2%CVSS 9.8

Oracle Corporation2 vulnerabilities on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2021-35617 · Oracle Corporation WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container).

EPSS 2%CVSS 9.8

CVE-2021-35652 · Oracle Corporation Hyperion Essbase Administration Services

Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console).

EPSS 2%CVSS 10.0

FATEK Automation1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2021-38432 · FATEK Automation Communication Server

FATEK Automation Communication Server

EPSS 2%CVSS 9.8

hackerone1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2021-22961 · hackerone

A code injection vulnerability exists within the firewall software of GlassWire v2.1.167 that could lead to arbitrary code execution from…

EPSS 2%CVSS 9.8

hpe3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2021-37736 · hpe

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x…

EPSS 2%CVSS 9.8

CVE-2021-40996 · hpe

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x…

EPSS 2%CVSS 9.8

CVE-2021-40997 · hpe

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x…

EPSS 2%CVSS 9.8

InHand Networks6 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2021-38484 · InHand Networks IR615 Router

InHand Networks IR615 Router

EPSS 3%CVSS 9.1

CVE-2021-38462 · InHand Networks IR615 Router

InHand Networks IR615 Router

EPSS 1%CVSS 9.8

CVE-2021-38470 · InHand Networks IR615 Router

InHand Networks IR615 Router

EPSS 1%CVSS 9.1

CVE-2021-38478 · InHand Networks IR615 Router

InHand Networks IR615 Router

EPSS 1%CVSS 9.1

CVE-2021-38474 · InHand Networks IR615 Router

InHand Networks IR615 Router

EPSS 0.7%CVSS 9.8

CVE-2021-38480 · InHand Networks IR615 Router

InHand Networks IR615 Router

EPSS 0.6%CVSS 9.6

Juniper Networks4 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2021-31349 · Juniper Networks 128 Technology Session Smart Router

Session Smart Router: Authentication Bypass Vulnerability

EPSS 2%CVSS 9.8

CVE-2021-31384 · Juniper Networks Junos OS

Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service

EPSS 1%CVSS 10.0

CVE-2021-31381 · Juniper Networks SRC Series

SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files

EPSS 1%CVSS 9.1

CVE-2021-31382 · Juniper Networks Junos OS

Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces

EPSS 0.6%CVSS 9.0

stanfordnlp1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2021-3878 · stanfordnlp stanfordnlp/corenlp

Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp

EPSS 2%CVSS 9.8

TIBCO Software Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2021-35498 · TIBCO Software Inc. TIBCO EBX

TIBCO EBX Insecure Login Mechanism

EPSS 1%CVSS 9.8

CVE-2021-35495 · TIBCO Software Inc. TIBCO JasperReports Server

TIBCO JasperReports FTP Password exposed

EPSS 0.8%CVSS 9.0

bfabiszewski1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2021-3881 · bfabiszewski bfabiszewski/libmobi

Out-of-bounds Read in bfabiszewski/libmobi

EPSS 1%CVSS 9.8

Mitsubishi Electric Corporation1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2021-20599 · Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08SFCPU

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety…

EPSS 1%CVSS 9.1

ome1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2021-41132 · ome omero-web

Inconsistent input sanitisation leads to XSS vectors

EPSS 1%CVSS 9.8

rust-blockchain1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2021-41153 · rust-blockchain evm

Specification non-compliance in JUMPI

EPSS 1%CVSS 9.8

zephyrproject-rtos1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2021-3323 · zephyrproject-rtos zephyr

Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr

EPSS 0.9%CVSS 9.8

Microsoft1 vulnerability on this pageMax CVSS 9.0Priority 39KEV 0

CVE-2021-26427 · Microsoft Microsoft Exchange Server 2016 Cumulative Update 22

Microsoft Exchange Server Remote Code Execution Vulnerability

EPSS 0.9%CVSS 9.0

Qualcomm, Inc.3 vulnerabilities on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2021-1977 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon…

EPSS 0.6%CVSS 9.1

CVE-2021-1980 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon…

EPSS 0.6%CVSS 9.1

CVE-2021-30304 · Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snap…

EPSS 0.6%CVSS 9.1