| CVE-2021-3156 Known exploited | High 7.8 | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit… Assigned by mitre | Jan 26, 2021 |
| CVE-2020-29557 Known exploited | Critical 9.8 | An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. Assigned by mitre | Jan 29, 2021 |
| CVE-2020-25506 Known exploited | Critical 9.8 | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. Assigned by mitre | Feb 2, 2021 |
| CVE-2020-2506 Known exploited | High 7.3 | improper access control vulnerability in Helpdesk Assigned by qnap | Feb 3, 2021 |
| CVE-2021-20016 Known exploited | Critical 9.8 | A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. Assigned by sonicwall | Feb 3, 2021 |
| CVE-2021-22502 Known exploited | Critical 9.8 | Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. Assigned by microfocus | Feb 8, 2021 |
| CVE-2021-21148 Known exploited | High 8.8 | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Feb 9, 2021 |
| CVE-2021-23874 Known exploited | High 8.2 | McAfee Total Protection (MTP) privilege escalation vulnerability Assigned by trellix | Feb 10, 2021 |
| CVE-2021-21017 Known exploited | High 8.8 | Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution Assigned by adobe | Feb 11, 2021 |
| CVE-2021-21311 Known exploited | High 7.2 | SSRF in adminer Assigned by GitHub_M | Feb 11, 2021 |
| CVE-2021-25298 Known exploited | High 8.8 | Nagios XI version xi-5.7.5 is affected by OS command injection. Assigned by mitre | Feb 15, 2021 |
| CVE-2021-25297 Known exploited | High 8.8 | Nagios XI version xi-5.7.5 is affected by OS command injection. Assigned by mitre | Feb 15, 2021 |
| CVE-2021-25296 Known exploited | High 8.8 | Nagios XI version xi-5.7.5 is affected by OS command injection. Assigned by mitre | Feb 15, 2021 |
| CVE-2021-21315 Known exploited | High 7.1 | Command Injection Vulnerability Assigned by GitHub_M | Feb 16, 2021 |
| CVE-2021-27101 Known exploited | Critical 9.8 | Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. Assigned by mitre | Feb 16, 2021 |
| CVE-2021-27102 Known exploited | High 7.8 | Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. Assigned by mitre | Feb 16, 2021 |
| CVE-2021-27103 Known exploited | Critical 9.8 | Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. Assigned by mitre | Feb 16, 2021 |
| CVE-2021-27104 Known exploited | Critical 9.8 | Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. Assigned by mitre | Feb 16, 2021 |
| CVE-2021-21973 Known exploited | Medium 5.3 | The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. Assigned by vmware | Feb 24, 2021 |
| CVE-2021-21972 Known exploited | Critical 9.8 | The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. Assigned by vmware | Feb 24, 2021 |
| CVE-2021-1732 Known exploited | High 7.8 | Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Feb 25, 2021 |
| CVE-2021-27876 Known exploited | High 8.1 | An issue was discovered in Veritas Backup Exec before 21.2. Assigned by mitre | Mar 1, 2021 |
| CVE-2021-27878 Known exploited | High 8.8 | An issue was discovered in Veritas Backup Exec before 21.2. Assigned by mitre | Mar 1, 2021 |
| CVE-2021-27877 Known exploited | High 8.2 | An issue was discovered in Veritas Backup Exec before 21.2. Assigned by mitre | Mar 1, 2021 |
| CVE-2021-26857 Known exploited | High 7.8 | Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft | Mar 2, 2021 |
| CVE-2021-26855 Known exploited | Critical 9.1 | Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft | Mar 2, 2021 |
| CVE-2021-26858 Known exploited | High 7.8 | Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft | Mar 2, 2021 |
| CVE-2021-27065 Known exploited | High 7.8 | Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft | Mar 2, 2021 |
| CVE-2021-22681 Known exploited | Critical 9.8 | Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactL… Assigned by icscert | Mar 3, 2021 |
| CVE-2021-25337 Known exploited | Medium 4.4 | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. Assigned by Samsung Mobile | Mar 4, 2021 |
| CVE-2021-21166 Known exploited | High 8.8 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Mar 9, 2021 |
| CVE-2021-26411 Known exploited | High 8.8 | Internet Explorer Memory Corruption Vulnerability Assigned by microsoft | Mar 11, 2021 |
| CVE-2021-27085 Known exploited | High 8.8 | Internet Explorer Remote Code Execution Vulnerability Assigned by microsoft | Mar 11, 2021 |
| CVE-2021-27059 Known exploited | High 7.6 | Microsoft Office Remote Code Execution Vulnerability Assigned by microsoft | Mar 11, 2021 |
| CVE-2021-21193 Known exploited | High 8.8 | Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Mar 16, 2021 |
| CVE-2021-22506 Known exploited | High 7.5 | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. Assigned by microfocus | Mar 26, 2021 |
| CVE-2021-25369 Known exploited | Medium 6.2 | An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. Assigned by Samsung Mobile | Mar 26, 2021 |
| CVE-2021-25370 Known exploited | Medium 6.1 | An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic. Assigned by Samsung Mobile | Mar 26, 2021 |
| CVE-2021-25371 Known exploited | Medium 6.1 | A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. Assigned by Samsung Mobile | Mar 26, 2021 |
| CVE-2021-25372 Known exploited | Medium 6.1 | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. Assigned by Samsung Mobile | Mar 26, 2021 |
| CVE-2021-22986 Known exploited | Critical 9.8 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.… Assigned by f5 | Mar 31, 2021 |
| CVE-2021-22991 Known exploited | Critical 9.8 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectl… Assigned by f5 | Mar 31, 2021 |
| CVE-2021-21975 Known exploited | Critical 9.8 | Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Serve… Assigned by vmware | Mar 31, 2021 |
| CVE-2021-1782 Known exploited | High 7.0 | A race condition was addressed with improved locking. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1789 Known exploited | High 8.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1870 Known exploited | Critical 9.8 | A logic issue was addressed with improved restrictions. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1871 Known exploited | Critical 9.8 | A logic issue was addressed with improved restrictions. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1879 Known exploited | Medium 6.1 | This issue was addressed by improved management of object lifetimes. Assigned by apple | Apr 2, 2021 |
| CVE-2021-20021 Known exploited | Critical 9.8 | A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Assigned by sonicwall | Apr 9, 2021 |
| CVE-2021-20022 Known exploited | High 7.2 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. Assigned by sonicwall | Apr 9, 2021 |
