| CVE-2021-31979 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-33766 Known exploited | High 7.3 | Microsoft Exchange Server Information Disclosure Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-33771 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-34473 Known exploited | Critical 9.1 | Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-34523 Known exploited | Critical 9.0 | Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-35211 Known exploited | Critical 9.0 | Serv-U Remote Memory Escape Vulnerability Assigned by SolarWinds | Jul 14, 2021 |
| CVE-2021-34448 Known exploited | Medium 6.8 | Scripting Engine Memory Corruption Vulnerability Assigned by microsoft | Jul 16, 2021 |
| CVE-2021-36934 Known exploited | High 7.8 | Windows Elevation of Privilege Vulnerability Assigned by microsoft | Jul 22, 2021 |
| CVE-2021-35464 Known exploited | Critical 9.8 | ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. Assigned by mitre | Jul 22, 2021 |
| CVE-2021-36741 Known exploited | High 8.8 | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files… Assigned by trendmicro | Jul 29, 2021 |
| CVE-2021-36742 Known exploited | High 7.8 | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on aff… Assigned by trendmicro | Jul 29, 2021 |
| CVE-2021-26085 Known exploited | Medium 5.3 | Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. Assigned by atlassian | Aug 3, 2021 |
| CVE-2021-30563 Known exploited | High 8.8 | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Aug 3, 2021 |
| CVE-2021-20028 Known exploited | Critical 9.8 | Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and… Assigned by sonicwall | Aug 4, 2021 |
| CVE-2021-34484 Known exploited | High 7.8 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34486 Known exploited | High 7.8 | Windows Event Tracing Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-36942 Known exploited | High 7.5 | Windows LSA Spoofing Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-36948 Known exploited | High 7.8 | Windows Update Medic Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-36380 Known exploited | Critical 9.8 | Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi. Assigned by mitre | Aug 13, 2021 |
| CVE-2021-26086 Known exploited | Medium 5.3 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. Assigned by atlassian | Aug 16, 2021 |
| CVE-2021-35395 Known exploited | Critical 9.8 | Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Assigned by mitre | Aug 16, 2021 |
| CVE-2021-35394 Known exploited | Critical 9.8 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. Assigned by mitre | Aug 16, 2021 |
| CVE-2021-39144 Known exploited | High 8.5 | XStream is vulnerable to a Remote Command Execution attack Assigned by GitHub_M | Aug 23, 2021 |
| CVE-2021-30858 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30860 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30869 Known exploited | High 7.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30883 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30900 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30952 Known exploited | High 8.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30983 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-31010 Known exploited | High 7.5 | A deserialization issue was addressed through improved validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-32648 Known exploited | High 8.2 | Account Takeover in Octobercms Assigned by GitHub_M | Aug 26, 2021 |
| CVE-2021-26084 Known exploited | Critical 9.8 | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data… Assigned by atlassian | Aug 30, 2021 |
| CVE-2021-37415 Known exploited | Critical 9.8 | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. Assigned by mitre | Sep 1, 2021 |
| CVE-2021-28550 Known exploited | Critical 9.6 | Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution Assigned by adobe | Sep 2, 2021 |
| CVE-2021-40539 Known exploited | Critical 9.8 | Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution. Assigned by mitre | Sep 7, 2021 |
| CVE-2021-30761 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30762 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30665 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30666 Known exploited | High 8.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30713 Known exploited | High 7.8 | A permissions issue was addressed with improved validation. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30661 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30657 Known exploited | Medium 5.5 | A logic issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30663 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Sep 8, 2021 |
| CVE-2021-40870 Known exploited | Critical 9.8 | An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Assigned by mitre | Sep 13, 2021 |
| CVE-2021-38163 Known exploited | Critical 9.9 | SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and tr… Assigned by sap | Sep 14, 2021 |
| CVE-2021-36955 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38645 Known exploited | High 7.8 | Open Management Infrastructure Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38646 Known exploited | High 7.8 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38647 Known exploited | Critical 9.8 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
