Skip to content
OpenAdvisories

Archive

September 2021

Vulnerabilities first published in this month (UTC), newest first.

← August 2021 2021 / September October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-22941 Exploited · Ransomware Public exploit EPSS 54%

    Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attack…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2021-22005 Exploited · Ransomware Public exploit EPSS 100%

    The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with net…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-36260 Exploited Public exploit EPSS 100%

    A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation…

    KEV Jan 10, 2022
  • Critical 9.0
    CVE-2021-40438 Exploited · Ransomware Public exploit EPSS 100%

    mod_proxy SSRF

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
    KEV Dec 1, 2021
  • Critical 9.8
    CVE-2021-33045 Exploited Public exploit EPSS 100%

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can b…

    KEV Aug 21, 2024
  • Critical 9.8
    CVE-2021-33044 Exploited Public exploit EPSS 100%

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can b…

    KEV Aug 21, 2024
  • High 8.8
    CVE-2021-40444 Exploited · Ransomware Public exploit EPSS 98%

    Microsoft MSHTML Remote Code Execution Vulnerability

    Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An a…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-38648 Exploited Public exploit EPSS 11%

    Open Management Infrastructure Elevation of Privilege Vulnerability

    Open Management Infrastructure Elevation of Privilege Vulnerability

    Microsoft Azure Stack Hub Open Management Infrastructure Azure Automation Update Management
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-38647 Exploited · Ransomware Public exploit EPSS 100%

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

    Microsoft Azure Stack Hub Open Management Infrastructure Azure Security Center
    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-36955 Exploited · Ransomware Public exploit

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Nov 3, 2021
  • Critical 9.9
    CVE-2021-38163 Exploited Public exploit EPSS 37%

    SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticate…

    SAP_SE SAP NetWeaver (Visual Composer 7.0 RT)
    KEV Jun 9, 2022
  • Critical 9.8
    CVE-2021-40870 Exploited Public exploit EPSS 93%

    An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous…

    KEV Jan 18, 2022
  • Medium 5.5
    CVE-2021-30657 Exploited Public exploit EPSS 69%

    A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update …

    Apple macOS macOS
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-40539 Exploited · Ransomware Public exploit EPSS 99%

    Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with result…

    KEV Nov 3, 2021