| CVE-2021-22555 Known exploited | High 8.3 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Assigned by Google | Jul 7, 2021 |
| CVE-2021-34527 Known exploited | High 8.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jul 2, 2021 |
| CVE-2021-30554 Known exploited | High 8.8 | Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jul 2, 2021 |
| CVE-2021-30551 Known exploited | High 8.8 | Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jun 15, 2021 |
| CVE-2021-22175 Known exploited | Medium 6.8 | When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthen… Assigned by GitLab | Jun 11, 2021 |
| CVE-2021-25395 Known exploited | Medium 6.4 | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. Assigned by Samsung Mobile | Jun 11, 2021 |
| CVE-2021-25394 Known exploited | Medium 6.4 | A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. Assigned by Samsung Mobile | Jun 11, 2021 |
| CVE-2021-26828 Known exploited | High 8.8 | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. Assigned by mitre | Jun 11, 2021 |
| CVE-2021-26829 Known exploited | Medium 5.4 | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm. Assigned by mitre | Jun 11, 2021 |
| CVE-2020-11261 Known exploited | High 7.8 | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… Assigned by qualcomm | Jun 9, 2021 |
| CVE-2021-33742 Known exploited | High 7.5 | Windows MSHTML Platform Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-33739 Known exploited | High 8.4 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31956 Known exploited | High 7.8 | Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31955 Known exploited | Medium 5.5 | Windows Kernel Information Disclosure Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31201 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31199 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-1675 Known exploited | High 7.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-30533 Known exploited | Medium 6.5 | Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe. Assigned by Chrome | Jun 7, 2021 |
| CVE-2021-27852 Known exploited | Critical 9.8 | Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. Assigned by certcc | May 27, 2021 |
| CVE-2021-22900 Known exploited | High 7.2 | A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archi… Assigned by hackerone | May 27, 2021 |
| CVE-2021-22899 Known exploited | High 8.8 | A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature Assigned by hackerone | May 27, 2021 |
| CVE-2021-22894 Known exploited | High 8.8 | A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room. Assigned by hackerone | May 27, 2021 |
| CVE-2021-21985 Known exploited | Critical 9.8 | The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. Assigned by vmware | May 26, 2021 |
| CVE-2021-27562 Known exploited | Medium 5.5 | In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mod… Assigned by mitre | May 25, 2021 |
| CVE-2021-29256 Known exploited | High 8.8 | . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. Assigned by mitre | May 24, 2021 |
| CVE-2021-28799 Known exploited | Critical 10.0 | Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) Assigned by qnap | May 13, 2021 |
| CVE-2021-31207 Known exploited | Medium 6.6 | Microsoft Exchange Server Security Feature Bypass Vulnerability Assigned by microsoft | May 11, 2021 |
| CVE-2021-31166 Known exploited | Critical 9.8 | HTTP Protocol Stack Remote Code Execution Vulnerability Assigned by microsoft | May 11, 2021 |
| CVE-2021-28664 Known exploited | High 8.8 | The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. Assigned by mitre | May 10, 2021 |
| CVE-2021-28663 Known exploited | High 8.8 | The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. Assigned by mitre | May 10, 2021 |
| CVE-2021-31755 Known exploited | Critical 9.8 | An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. Assigned by mitre | May 7, 2021 |
| CVE-2021-1906 Known exploited | Medium 6.2 | Improper handling of address deregistration on failure can lead to new GPU address allocation failure. Assigned by qualcomm | May 7, 2021 |
| CVE-2021-1905 Known exploited | High 8.4 | Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. Assigned by qualcomm | May 7, 2021 |
| CVE-2021-32030 Known exploited | Critical 9.8 | The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticat… Assigned by mitre | May 6, 2021 |
| CVE-2021-1498 Known exploited | Critical 9.8 | Cisco HyperFlex HX Command Injection Vulnerabilities Assigned by cisco | May 6, 2021 |
| CVE-2021-1497 Known exploited | Critical 9.8 | Cisco HyperFlex HX Command Injection Vulnerabilities Assigned by cisco | May 6, 2021 |
| CVE-2021-21551 Known exploited | High 8.8 | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Assigned by dell | May 4, 2021 |
| CVE-2021-20090 Known exploited | Critical 9.8 | A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass… Assigned by tenable | Apr 29, 2021 |
| CVE-2021-21224 Known exploited | High 8.8 | Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome | Apr 26, 2021 |
| CVE-2021-21206 Known exploited | High 8.8 | Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Apr 26, 2021 |
| CVE-2021-21220 Known exploited | High 8.8 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Apr 26, 2021 |
| CVE-2021-22205 Known exploited | Critical 10.0 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. Assigned by GitLab | Apr 23, 2021 |
| CVE-2021-22204 Known exploited | Medium 6.8 | Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Assigned by GitLab | Apr 23, 2021 |
| CVE-2021-22893 Known exploited | Critical 10.0 | Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect… Assigned by hackerone | Apr 23, 2021 |
| CVE-2021-20023 Known exploited | Medium 4.9 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Assigned by sonicwall | Apr 20, 2021 |
| CVE-2021-3493 Known exploited | High 8.8 | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Assigned by canonical | Apr 17, 2021 |
| CVE-2020-2509 Known exploited | Critical 9.8 | Command Injection Vulnerability in QTS and QuTS hero Assigned by qnap | Apr 17, 2021 |
| CVE-2021-28310 Known exploited | High 7.8 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Apr 13, 2021 |
| CVE-2021-20022 Known exploited | High 7.2 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. Assigned by sonicwall | Apr 9, 2021 |
| CVE-2021-20021 Known exploited | Critical 9.8 | A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Assigned by sonicwall | Apr 9, 2021 |
