| CVE-2021-30983 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-31010 Known exploited | High 7.5 | A deserialization issue was addressed through improved validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-33882 Healthcare | Medium 6.8 | A Missing Authentication for Critical Function vulnerability in B. Assigned by mitre | Aug 25, 2021 |
| CVE-2021-33883 Healthcare | Medium 5.9 | A Cleartext Transmission of Sensitive Information vulnerability in B. Assigned by mitre | Aug 25, 2021 |
| CVE-2021-33884 Healthcare | Medium 6.5 | An Unrestricted Upload of File with Dangerous Type vulnerability in B. Assigned by mitre | Aug 25, 2021 |
| CVE-2021-33885 Healthcare | Critical 10.0 | An Insufficient Verification of Data Authenticity vulnerability in B. Assigned by mitre | Aug 25, 2021 |
| CVE-2021-33886 Healthcare | High 8.1 | An improper sanitization of input vulnerability in B. Assigned by mitre | Aug 25, 2021 |
| CVE-2021-32648 Known exploited | High 8.2 | Account Takeover in Octobercms Assigned by GitHub_M | Aug 26, 2021 |
| CVE-2021-26084 Known exploited | Critical 9.8 | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data… Assigned by atlassian | Aug 30, 2021 |
| CVE-2021-37415 Known exploited | Critical 9.8 | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication. Assigned by mitre | Sep 1, 2021 |
| CVE-2021-40352 Healthcare | Medium 6.5 | OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users. Assigned by mitre | Sep 1, 2021 |
| CVE-2021-28550 Known exploited | Critical 9.6 | Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution Assigned by adobe | Sep 2, 2021 |
| CVE-2021-40539 Known exploited | Critical 9.8 | Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution. Assigned by mitre | Sep 7, 2021 |
| CVE-2021-30761 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30762 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30665 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30666 Known exploited | High 8.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30713 Known exploited | High 7.8 | A permissions issue was addressed with improved validation. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30661 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30657 Known exploited | Medium 5.5 | A logic issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30663 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Sep 8, 2021 |
| CVE-2021-40870 Known exploited | Critical 9.8 | An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Assigned by mitre | Sep 13, 2021 |
| CVE-2021-38163 Known exploited | Critical 9.9 | SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and tr… Assigned by sap | Sep 14, 2021 |
| CVE-2021-36955 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38645 Known exploited | High 7.8 | Open Management Infrastructure Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38646 Known exploited | High 7.8 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38647 Known exploited | Critical 9.8 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38648 Known exploited | High 7.8 | Open Management Infrastructure Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-38649 Known exploited | High 7.0 | Open Management Infrastructure Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-40444 Known exploited | High 8.8 | Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-33044 Known exploited | Critical 9.8 | The identity authentication bypass vulnerability found in some Dahua products during the login process. Assigned by dahua | Sep 15, 2021 |
| CVE-2021-33045 Known exploited | Critical 9.8 | The identity authentication bypass vulnerability found in some Dahua products during the login process. Assigned by dahua | Sep 15, 2021 |
| CVE-2021-40438 Known exploited | Critical 9.0 | mod_proxy SSRF Assigned by apache | Sep 16, 2021 |
| CVE-2021-41079 | High 7.5 | Apache Tomcat DoS with unexpected TLS packet Assigned by apache | Sep 16, 2021 |
| CVE-2021-3807 | High 7.5 | Inefficient Regular Expression Complexity in chalk/ansi-regex Assigned by @huntrdev | Sep 17, 2021 |
| CVE-2021-38406 Known exploited | High 7.8 | Delta Electronics DOPSoft 2 Out-of-Bounds Write Assigned by icscert | Sep 17, 2021 |
| CVE-2021-40690 | High 7.5 | Bypass of the secureValidation property Assigned by apache | Sep 19, 2021 |
| CVE-2021-39537 | High 8.8 | An issue was discovered in ncurses through v6.2-1. Assigned by mitre | Sep 20, 2021 |
| CVE-2020-21913 | Medium 5.5 | International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. Assigned by mitre | Sep 20, 2021 |
| CVE-2021-36260 Known exploited | Critical 9.8 | A command injection vulnerability in the web server of some Hikvision product. Assigned by hikvision | Sep 22, 2021 |
| CVE-2021-22945 | Critical 9.1 | When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call t… Assigned by hackerone | Sep 23, 2021 |
| CVE-2021-22005 Known exploited | Critical 9.8 | The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. Assigned by vmware | Sep 23, 2021 |
| CVE-2021-22017 Known exploited | Medium 5.3 | Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. Assigned by vmware | Sep 23, 2021 |
| CVE-2021-22941 Known exploited | Critical 9.8 | Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller. Assigned by hackerone | Sep 23, 2021 |
| CVE-2021-40655 Known exploited | High 7.5 | An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. Assigned by mitre | Sep 24, 2021 |
| CVE-2021-41617 | High 7.0 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Assigned by mitre | Sep 26, 2021 |
| CVE-2021-20035 Known exploited | Medium 6.5 | Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS. Assigned by sonicwall | Sep 27, 2021 |
| CVE-2021-22947 | Medium 5.9 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c… Assigned by hackerone | Sep 29, 2021 |
| CVE-2021-22946 | High 7.5 | A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSES… Assigned by hackerone | Sep 29, 2021 |
| CVE-2021-38394 Healthcare | Medium 6.2 | Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude Assigned by icscert | Oct 4, 2021 |
