| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-3796 | Hig | 0.48 | 7.3 | 0.02 | Sep 15, 2021 | vim is vulnerable to Use After Free | ||
| CVE-2021-3794 | Hig | 0.42 | 7.5 | 0.01 | Sep 15, 2021 | vuelidate is vulnerable to Inefficient Regular Expression Complexity | ||
| CVE-2021-39307 | Med | 0.40 | 6.1 | 0.01 | Sep 15, 2021 | PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code. | ||
| CVE-2021-30137 | Hig | 0.50 | 7.7 | 0.01 | Sep 15, 2021 | Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points. | ||
| CVE-2021-27662 | Hig | 0.56 | 8.6 | 0.01 | Sep 15, 2021 | The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets. This issue affects Johnson Controls KT-1 all versions up to and including 3.01 | ||
| CVE-2020-3960 | Hig | 0.55 | 8.4 | 0.00 | Sep 15, 2021 | VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a… | ||
| CVE-2021-41061 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2021 | In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots. | ||
| CVE-2021-40448 | Med | 0.41 | 6.3 | 0.03 | Sep 15, 2021 | Microsoft Accessibility Insights for Android Information Disclosure Vulnerability | ||
| CVE-2021-40447 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2021-40444 | Hig | 0.86 | 8.8 | 0.98 | KEV | Sep 15, 2021 | Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft… | |
| CVE-2021-40440 | Med | 0.35 | 5.4 | 0.01 | Sep 15, 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | ||
| CVE-2021-3785 | Med | 0.28 | 5.4 | 0.01 | Sep 15, 2021 | yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||
| CVE-2021-3783 | Med | 0.33 | 6.1 | 0.01 | Sep 15, 2021 | yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||
| CVE-2021-3780 | Med | 0.33 | 6.1 | 0.01 | Sep 15, 2021 | peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||
| CVE-2021-38671 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2021-38669 | Med | 0.42 | 6.4 | 0.03 | Sep 15, 2021 | Microsoft Edge (Chromium-based) Tampering Vulnerability | ||
| CVE-2021-38667 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2021-38661 | Hig | 0.51 | 7.8 | 0.02 | Sep 15, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-38660 | Hig | 0.51 | 7.8 | 0.02 | Sep 15, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-38659 | Hig | 0.51 | 7.8 | 0.06 | Sep 15, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-38658 | Hig | 0.51 | 7.8 | 0.06 | Sep 15, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-38657 | Med | 0.40 | 6.1 | 0.01 | Sep 15, 2021 | Microsoft Office Graphics Component Information Disclosure Vulnerability | ||
| CVE-2021-38656 | Hig | 0.51 | 7.8 | 0.07 | Sep 15, 2021 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2021-38655 | Hig | 0.51 | 7.8 | 0.06 | Sep 15, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-38654 | Hig | 0.51 | 7.8 | 0.06 | Sep 15, 2021 | Microsoft Office Visio Remote Code Execution Vulnerability | ||
| CVE-2021-38653 | Hig | 0.51 | 7.8 | 0.06 | Sep 15, 2021 | Microsoft Office Visio Remote Code Execution Vulnerability | ||
| CVE-2021-38652 | Hig | 0.50 | 7.6 | 0.01 | Sep 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-38651 | Hig | 0.50 | 7.6 | 0.01 | Sep 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-38650 | Hig | 0.50 | 7.6 | 0.02 | Sep 15, 2021 | Microsoft Office Spoofing Vulnerability | ||
| CVE-2021-38649 | Hig | 0.58 | 7.0 | 0.03 | KEV | Sep 15, 2021 | Open Management Infrastructure Elevation of Privilege Vulnerability | |
| CVE-2021-38648 | Hig | 0.67 | 7.8 | 0.11 | KEV | Sep 15, 2021 | Open Management Infrastructure Elevation of Privilege Vulnerability | |
| CVE-2021-38647 | Cri | 0.93 | 9.8 | 1.00 | KEV | Sep 15, 2021 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | |
| CVE-2021-38646 | Hig | 0.69 | 7.8 | 0.08 | KEV | Sep 15, 2021 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | |
| CVE-2021-38645 | Hig | 0.63 | 7.8 | 0.03 | KEV | Sep 15, 2021 | Open Management Infrastructure Elevation of Privilege Vulnerability | |
| CVE-2021-38644 | Hig | 0.51 | 7.8 | 0.02 | Sep 15, 2021 | Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability | ||
| CVE-2021-38639 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2021-38638 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||
| CVE-2021-38637 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Storage Information Disclosure Vulnerability | ||
| CVE-2021-38636 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | ||
| CVE-2021-38635 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | ||
| CVE-2021-38634 | Hig | 0.46 | 7.1 | 0.01 | Sep 15, 2021 | Microsoft Windows Update Client Elevation of Privilege Vulnerability | ||
| CVE-2021-38633 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-38632 | Med | 0.37 | 5.7 | 0.01 | Sep 15, 2021 | Windows BitLocker Security Feature Bypass Vulnerability | ||
| CVE-2021-38630 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2021-38629 | Med | 0.42 | 6.5 | 0.03 | Sep 15, 2021 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | ||
| CVE-2021-38628 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||
| CVE-2021-38626 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2021-38625 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2021-38624 | Med | 0.42 | 6.5 | 0.02 | Sep 15, 2021 | Windows Key Storage Provider Security Feature Bypass Vulnerability | ||
| CVE-2021-36975 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Win32k Elevation of Privilege Vulnerability |
- risk 0.48cvss 7.3epss 0.02
vim is vulnerable to Use After Free
- risk 0.42cvss 7.5epss 0.01
vuelidate is vulnerable to Inefficient Regular Expression Complexity
- risk 0.40cvss 6.1epss 0.01
PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code.
- risk 0.50cvss 7.7epss 0.01
Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points.
- risk 0.56cvss 8.6epss 0.01
The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets. This issue affects Johnson Controls KT-1 all versions up to and including 3.01
- risk 0.55cvss 8.4epss 0.00
VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a…
- risk 0.36cvss 5.5epss 0.00
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots.
- risk 0.41cvss 6.3epss 0.03
Microsoft Accessibility Insights for Android Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.86cvss 8.8epss 0.98
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft…
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- risk 0.28cvss 5.4epss 0.01
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- risk 0.33cvss 6.1epss 0.01
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- risk 0.33cvss 6.1epss 0.01
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.42cvss 6.4epss 0.03
Microsoft Edge (Chromium-based) Tampering Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.06
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.06
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.40cvss 6.1epss 0.01
Microsoft Office Graphics Component Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.07
Microsoft Word Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.06
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.06
Microsoft Office Visio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.06
Microsoft Office Visio Remote Code Execution Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.50cvss 7.6epss 0.02
Microsoft Office Spoofing Vulnerability
- risk 0.58cvss 7.0epss 0.03
Open Management Infrastructure Elevation of Privilege Vulnerability
- risk 0.67cvss 7.8epss 0.11
Open Management Infrastructure Elevation of Privilege Vulnerability
- risk 0.93cvss 9.8epss 1.00
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
- risk 0.69cvss 7.8epss 0.08
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- risk 0.63cvss 7.8epss 0.03
Open Management Infrastructure Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Storage Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Windows Update Client Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.37cvss 5.7epss 0.01
Windows BitLocker Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.03
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Key Storage Provider Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.01
Win32k Elevation of Privilege Vulnerability