Catalogue CISA KEV
Ajouts KEV — novembre 2021
258 CVE sont entrées au catalogue KEV en novembre 2021.
Ajoutées le 17 novembre 20214
| CVE | Vulnérabilité | CVSS | EPSS | Échéance |
|---|---|---|---|---|
| CVE-2021-22204 | ExifTool Remote Code Execution Vulnerability | 7.8 | 92.8 % | 1 décembre 2021 |
| CVE-2021-40449rançongiciel | Microsoft Windows Win32k Privilege Escalation Vulnerability | 7.8 | 91.3 % | 1 décembre 2021 |
| CVE-2021-42292 | Microsoft Excel Security Feature Bypass | 7.8 | 19.1 % | 1 décembre 2021 |
| CVE-2021-42321rançongiciel | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 | 93.4 % | 1 décembre 2021 |
Ajoutées le 3 novembre 2021254
| CVE | Vulnérabilité | CVSS | EPSS | Échéance |
|---|---|---|---|---|
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 9.8 | 93.1 % | 3 mai 2022 |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 7.5 | 94.4 % | 3 mai 2022 |
| CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability | 8.1 | 94.4 % | 3 mai 2022 |
| CVE-2018-13379rançongiciel | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 9.8 | 94.5 % | 3 mai 2022 |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 9.8 | 75.6 % | 3 mai 2022 |
| CVE-2018-15811 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 7.5 | 91.1 % | 3 mai 2022 |
| CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2018-18325 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 7.5 | 91.1 % | 3 mai 2022 |
| CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability | 9.8 | 94.3 % | 3 mai 2022 |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 76.8 % | 3 mai 2022 |
| CVE-2018-7600rançongiciel | Drupal Core Remote Code Execution Vulnerability | 9.8 | 94.5 % | 3 mai 2022 |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 23.0 % | 3 mai 2022 |
| CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability | 7.8 | 89.5 % | 3 mai 2022 |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability | 8.8 | 80.9 % | 3 mai 2022 |
| CVE-2019-0604rançongiciel | Microsoft SharePoint Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2019-0708rançongiciel | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 9.8 | 94.5 % | 3 mai 2022 |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 6.1 % | 3 mai 2022 |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 90.3 % | 3 mai 2022 |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 74.2 % | 3 mai 2022 |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 9.9 % | 3 mai 2022 |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 7.8 | 6.5 % | 3 mai 2022 |
| CVE-2019-11510rançongiciel | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 10 | 94.5 % | 3 mai 2022 |
| CVE-2019-11539rançongiciel | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 7.2 | 93.9 % | 3 mai 2022 |
| CVE-2019-11580rançongiciel | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2019-11634rançongiciel | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 9.8 | 31.2 % | 3 mai 2022 |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 7.8 | 3.7 % | 3 mai 2022 |
| CVE-2019-1215rançongiciel | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 7.7 % | 3 mai 2022 |
| CVE-2019-13608rançongiciel | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 7.5 | 74.1 % | 3 mai 2022 |
| CVE-2019-1367rançongiciel | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 89.7 % | 3 mai 2022 |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 83.0 % | 3 mai 2022 |
| CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability | 7.8 | 46.9 % | 3 mai 2022 |
| CVE-2019-15949 | Nagios XI Remote Code Execution Vulnerability | 8.8 | 88.6 % | 3 mai 2022 |
| CVE-2019-16256 | SIMalliance Toolbox Browser Command Injection Vulnerability | 9.8 | 61.2 % | 3 mai 2022 |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 7.5 | 94.4 % | 3 mai 2022 |
| CVE-2019-16759 | vBulletin PHP Module Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 8.8 | 64.8 % | 3 mai 2022 |
| CVE-2019-17558 | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | 7.5 | 94.5 % | 3 mai 2022 |
| CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability | 7.5 | 78.5 % | 3 mai 2022 |
| CVE-2019-18935rançongiciel | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 9.8 | 93.6 % | 3 mai 2022 |
| CVE-2019-18988 | TeamViewer Desktop Bypass Remote Login Vulnerability | 7 | 8.8 % | 3 mai 2022 |
| CVE-2019-19356 | Netis WF2419 Devices Remote Code Execution Vulnerability | 7.5 | 91.1 % | 3 mai 2022 |
| CVE-2019-19781rançongiciel | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2019-20085 | TVT NVMS-1000 Directory Traversal Vulnerability | 7.5 | 94.2 % | 3 mai 2022 |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability | 7.8 | 54.5 % | 3 mai 2022 |
| CVE-2019-3396rançongiciel | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 9.8 | 94.5 % | 3 mai 2022 |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 8.8 | 93.9 % | 3 mai 2022 |
| CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability | 9.8 | 91.5 % | 3 mai 2022 |
| CVE-2019-5544rançongiciel | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 9.8 | 92.7 % | 3 mai 2022 |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability | 6.5 | 51.6 % | 3 mai 2022 |
| CVE-2019-6223 | Apple iOS and macOS Group Facetime Vulnerability | 7.5 | 0.2 % | 3 mai 2022 |
| CVE-2019-7481rançongiciel | SonicWall SMA100 SQL Injection Vulnerability | 7.5 | 94.4 % | 3 mai 2022 |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 6.5 | 87.3 % | 3 mai 2022 |
| CVE-2019-9082 | ThinkPHP Remote Code Execution Vulnerability | 8.8 | 94.3 % | 3 mai 2022 |
| CVE-2019-9978 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 6.1 | 88.1 % | 3 mai 2022 |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability | 7.8 | 23.9 % | 3 mai 2022 |
| CVE-2020-0069 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | 7.8 | 0.7 % | 3 mai 2022 |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability | 8.1 | 94.1 % | 3 mai 2022 |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability | 9.8 | 93.9 % | 3 mai 2022 |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 93.6 % | 3 mai 2022 |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability | 7.8 | 32.7 % | 3 mai 2022 |
| CVE-2020-0688rançongiciel | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | 8.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-0878rançongiciel | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 4.2 | 9.8 % | 3 mai 2022 |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 7.8 | 89.6 % | 3 mai 2022 |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 33.4 % | 3 mai 2022 |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 20.6 % | 3 mai 2022 |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability | 9.8 | 94.3 % | 3 mai 2022 |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 9.8 | 20.6 % | 3 mai 2022 |
| CVE-2020-10189 | Zoho ManageEngine Desktop Central File Upload Vulnerability | 9.8 | 94.2 % | 3 mai 2022 |
| CVE-2020-10199 | Sonatype Nexus Repository Remote Code Execution Vulnerability | 8.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 8.8 | 88.0 % | 3 mai 2022 |
| CVE-2020-10221 | rConfig OS Command Injection Vulnerability | 8.8 | 91.4 % | 3 mai 2022 |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 9 | 0.2 % | 3 mai 2022 |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 80.9 % | 3 mai 2022 |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 9.8 | 93.6 % | 3 mai 2022 |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 7.8 | 93.4 % | 3 mai 2022 |
| CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability | 6.5 | 94.3 % | 3 mai 2022 |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 7.5 | 94.3 % | 3 mai 2022 |
| CVE-2020-12271rançongiciel | Sophos SFOS SQL Injection Vulnerability | 9.8 | 88.9 % | 3 mai 2022 |
| CVE-2020-12812rançongiciel | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 9.8 | 47.0 % | 3 mai 2022 |
| CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | 10 | 93.8 % | 3 mai 2022 |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.8 | 91.7 % | 3 mai 2022 |
| CVE-2020-1464 | Microsoft Windows Spoofing Vulnerability | 7.8 | 12.6 % | 3 mai 2022 |
| CVE-2020-1472rançongiciel | Microsoft Netlogon Privilege Escalation Vulnerability | 5.5 | 94.4 % | 3 mai 2022 |
| CVE-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 10 | 88.9 % | 3 mai 2022 |
| CVE-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability | 9.8 | 94.5 % | 3 mai 2022 |
| CVE-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability | 7.2 | 94.4 % | 3 mai 2022 |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 9.6 | 92.9 % | 17 novembre 2021 |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 84.4 % | 3 mai 2022 |
| CVE-2020-16010 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 9.6 | 24.1 % | 3 mai 2022 |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 8.8 | 26.1 % | 3 mai 2022 |
| CVE-2020-16017 | Google Chrome Use-After-Free Vulnerability | 9.6 | 21.4 % | 3 mai 2022 |
| CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 17.8 % | 3 mai 2022 |
| CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.4 | 92.7 % | 3 mai 2022 |
| CVE-2020-17496 | vBulletin PHP Module Remote Code Execution Vulnerability | 9.8 | 94.2 % | 3 mai 2022 |
| CVE-2020-17530 | Apache Struts Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-24557 | Trend Micro Multiple Products Improper Access Control Vulnerability | 7.8 | 1.9 % | 3 mai 2022 |
| CVE-2020-25213 | WordPress File Manager Plugin Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | 9.8 | 93.9 % | 3 mai 2022 |
| CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability | 9.8 | 93.1 % | 3 mai 2022 |
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 9.8 | 94.2 % | 3 mai 2022 |
| CVE-2020-27930 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 47.2 % | 3 mai 2022 |
| CVE-2020-27932 | Apple Multiple Products Type Confusion Vulnerability | 7.8 | 11.3 % | 3 mai 2022 |
| CVE-2020-27950 | Apple Multiple Products Memory Initialization Vulnerability | 5.5 | 46.2 % | 3 mai 2022 |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 9.8 | 89.8 % | 3 mai 2022 |
| CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 8.8 | 0.3 % | 3 mai 2022 |
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 9.8 | 83.1 % | 3 mai 2022 |
| CVE-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 7.5 | 94.5 % | 3 mai 2022 |
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 8.6 | 5.1 % | 3 mai 2022 |
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 8.6 | 5.6 % | 3 mai 2022 |
| CVE-2020-3580rançongiciel | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 6.1 | 92.6 % | 3 mai 2022 |
| CVE-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability | 7.8 | 19.7 % | 3 mai 2022 |
| CVE-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-3992rançongiciel | VMware ESXi OpenSLP Use-After-Free Vulnerability | 9.8 | 82.7 % | 3 mai 2022 |
| CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability | 9.1 | 11.7 % | 3 mai 2022 |
| CVE-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability | 9.8 | 90.3 % | 3 mai 2022 |
| CVE-2020-4428 | IBM Data Risk Manager Remote Code Execution Vulnerability | 9.1 | 92.3 % | 3 mai 2022 |
| CVE-2020-4430 | IBM Data Risk Manager Directory Traversal Vulnerability | 4.3 | 84.3 % | 3 mai 2022 |
| CVE-2020-5735 | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 8.8 | 61.6 % | 3 mai 2022 |
| CVE-2020-5847 | Unraid Remote Code Execution Vulnerability | 9.8 | 93.5 % | 3 mai 2022 |
| CVE-2020-5849 | Unraid Authentication Bypass Vulnerability | 7.5 | 93.8 % | 3 mai 2022 |
| CVE-2020-5902rançongiciel | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 9.8 | 94.2 % | 3 mai 2022 |
| CVE-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 10 | 94.4 % | 3 mai 2022 |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 85.9 % | 3 mai 2022 |
| CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.1 | 0.3 % | 3 mai 2022 |
| CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.1 | 5.0 % | 3 mai 2022 |
| CVE-2020-7961 | Liferay Portal Deserialization of Untrusted Data Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 6.5 | 94.2 % | 3 mai 2022 |
| CVE-2020-8195 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 6.5 | 73.1 % | 3 mai 2022 |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 4.3 | 66.2 % | 3 mai 2022 |
| CVE-2020-8243 | Ivanti Pulse Connect Secure Code Execution Vulnerability | 7.2 | 20.5 % | 3 mai 2022 |
| CVE-2020-8260 | Ivanti Pulse Connect Secure Code Execution Vulnerability | 7.2 | 75.9 % | 3 mai 2022 |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 8.8 | 30.2 % | 3 mai 2022 |
| CVE-2020-8468 | Trend Micro Multiple Products Content Validation Escape Vulnerability | 8.8 | 18.4 % | 3 mai 2022 |
| CVE-2020-8515 | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 9.8 | 94.4 % | 3 mai 2022 |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 9.8 | 57.9 % | 3 mai 2022 |
| CVE-2020-8644 | PlaySMS Server-Side Template Injection Vulnerability | 9.8 | 94.0 % | 3 mai 2022 |
| CVE-2020-8655 | EyesOfNetwork Improper Privilege Management Vulnerability | 7.8 | 88.1 % | 3 mai 2022 |
| CVE-2020-8657 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 9.8 | 90.3 % | 3 mai 2022 |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 8.8 | 0.3 % | 3 mai 2022 |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 4.3 | 0.2 % | 3 mai 2022 |
| CVE-2020-9859 | Apple Multiple Products Code Execution Vulnerability | 7.8 | 0.2 % | 3 mai 2022 |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 9.8 | 94.2 % | 17 novembre 2021 |
| CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | 77.9 % | 17 novembre 2021 |
| CVE-2021-1675rançongiciel | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 7.8 | 94.3 % | 17 novembre 2021 |
| CVE-2021-1732rançongiciel | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 90.4 % | 17 novembre 2021 |
| CVE-2021-1782 | Apple Multiple Products Race Condition Vulnerability | 7 | 7.9 % | 17 novembre 2021 |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 9.8 | 1.2 % | 17 novembre 2021 |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 9.8 | 0.9 % | 17 novembre 2021 |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 6.1 | 1.5 % | 17 novembre 2021 |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 1.1 % | 3 mai 2022 |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 5.5 | 0.1 % | 17 novembre 2021 |
| CVE-2021-20016rançongiciel | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 9.8 | 78.0 % | 17 novembre 2021 |
| CVE-2021-20021rançongiciel | SonicWall Email Security Improper Privilege Management Vulnerability | 9.8 | 91.7 % | 17 novembre 2021 |
| CVE-2021-20022rançongiciel | SonicWall Email Security Unrestricted Upload of File Vulnerability | 7.2 | 20.0 % | 17 novembre 2021 |
| CVE-2021-20023rançongiciel | SonicWall Email Security Path Traversal Vulnerability | 4.9 | 48.6 % | 17 novembre 2021 |
| CVE-2021-20090 | Arcadyan Buffalo Firmware Path Traversal Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 8.8 | 90.6 % | 17 novembre 2021 |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 8.8 | 24.9 % | 17 novembre 2021 |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | 8.8 | 36.3 % | 17 novembre 2021 |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 14.8 % | 17 novembre 2021 |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 21.9 % | 17 novembre 2021 |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | 8.8 | 92.6 % | 17 novembre 2021 |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 54.3 % | 17 novembre 2021 |
| CVE-2021-21972rançongiciel | VMware vCenter Server Remote Code Execution Vulnerability | 9.8 | 93.8 % | 17 novembre 2021 |
| CVE-2021-21985rançongiciel | VMware vCenter Server Improper Input Validation Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-22005rançongiciel | VMware vCenter Server File Upload Vulnerability | 9.8 | 94.5 % | 17 novembre 2021 |
| CVE-2021-22205rançongiciel | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 10 | 94.5 % | 17 novembre 2021 |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 9.8 | 93.8 % | 17 novembre 2021 |
| CVE-2021-22506 | Micro Focus Access Manager Information Leakage Vulnerability | 7.5 | 10.5 % | 17 novembre 2021 |
| CVE-2021-22893rançongiciel | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 10 | 93.6 % | 3 mai 2022 |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 8.8 | 25.7 % | 3 mai 2022 |
| CVE-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | 8.8 | 16.6 % | 3 mai 2022 |
| CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 7.2 | 0.8 % | 3 mai 2022 |
| CVE-2021-22986rançongiciel | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 9.8 | 94.5 % | 17 novembre 2021 |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 7.8 | 0.9 % | 17 novembre 2021 |
| CVE-2021-26084rançongiciel | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-26411rançongiciel | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 92.5 % | 17 novembre 2021 |
| CVE-2021-26855rançongiciel | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.1 | 94.3 % | 3 mai 2022 |
| CVE-2021-26857rançongiciel | Microsoft Exchange Server Remote Code Execution Vulnerability | 7.8 | 35.6 % | 3 mai 2022 |
| CVE-2021-26858rançongiciel | Microsoft Exchange Server Remote Code Execution Vulnerability | 7.8 | 55.1 % | 3 mai 2022 |
| CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability | 7.6 | 2.0 % | 17 novembre 2021 |
| CVE-2021-27065rançongiciel | Microsoft Exchange Server Remote Code Execution Vulnerability | 7.8 | 94.3 % | 3 mai 2022 |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 | 1.6 % | 17 novembre 2021 |
| CVE-2021-27101rançongiciel | Accellion FTA SQL Injection Vulnerability | 9.8 | 0.8 % | 17 novembre 2021 |
| CVE-2021-27102rançongiciel | Accellion FTA OS Command Injection Vulnerability | 7.8 | 0.3 % | 17 novembre 2021 |
| CVE-2021-27103rançongiciel | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 9.8 | 2.9 % | 17 novembre 2021 |
| CVE-2021-27104rançongiciel | Accellion FTA OS Command Injection Vulnerability | 9.8 | 8.9 % | 17 novembre 2021 |
| CVE-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 9.8 | 94.1 % | 17 novembre 2021 |
| CVE-2021-27562 | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 5.5 | 54.2 % | 17 novembre 2021 |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 27.8 % | 17 novembre 2021 |
| CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 8.8 | 32.1 % | 17 novembre 2021 |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | 8.8 | 2.4 % | 17 novembre 2021 |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 8.8 | 0.1 % | 17 novembre 2021 |
| CVE-2021-30116rançongiciel | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 9.8 | 53.1 % | 17 novembre 2021 |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 78.0 % | 17 novembre 2021 |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | 8.8 | 2.0 % | 17 novembre 2021 |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 3.1 % | 17 novembre 2021 |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 84.9 % | 17 novembre 2021 |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | 9.6 | 38.2 % | 17 novembre 2021 |
| CVE-2021-30657 | Apple macOS Unspecified Vulnerability | 5.5 | 76.3 % | 17 novembre 2021 |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 8.8 | 0.2 % | 17 novembre 2021 |
| CVE-2021-30663 | Apple Multiple Products WebKit Integer Overflow Vulnerability | 8.8 | 1.1 % | 17 novembre 2021 |
| CVE-2021-30665 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 0.7 % | 17 novembre 2021 |
| CVE-2021-30666 | Apple iOS WebKit Buffer Overflow Vulnerability | 8.8 | 1.5 % | 17 novembre 2021 |
| CVE-2021-30713 | Apple macOS Unspecified Vulnerability | 7.8 | 0.1 % | 17 novembre 2021 |
| CVE-2021-30761 | Apple iOS WebKit Memory Corruption Vulnerability | 8.8 | 0.4 % | 17 novembre 2021 |
| CVE-2021-30762 | Apple iOS WebKit Use-After-Free Vulnerability | 8.8 | 0.1 % | 17 novembre 2021 |
| CVE-2021-30807 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 17.4 % | 17 novembre 2021 |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 8.8 | 0.8 % | 17 novembre 2021 |
| CVE-2021-30860 | Apple Multiple Products Integer Overflow Vulnerability | 7.8 | 72.9 % | 17 novembre 2021 |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 7.8 | 2.0 % | 17 novembre 2021 |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 5.2 | 1.0 % | 17 novembre 2021 |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 5.2 | 1.5 % | 17 novembre 2021 |
| CVE-2021-31207rançongiciel | Microsoft Exchange Server Security Feature Bypass Vulnerability | 6.6 | 93.9 % | 17 novembre 2021 |
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | 9.8 | 94.3 % | 17 novembre 2021 |
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability | 5.5 | 4.6 % | 17 novembre 2021 |
| CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation Vulnerability | 7.8 | 88.7 % | 17 novembre 2021 |
| CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 12.5 % | 17 novembre 2021 |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 8.4 | 19.5 % | 17 novembre 2021 |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 7.5 | 71.0 % | 17 novembre 2021 |
| CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 9.2 % | 17 novembre 2021 |
| CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 6.8 | 2.0 % | 17 novembre 2021 |
| CVE-2021-34473rançongiciel | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.1 | 94.3 % | 17 novembre 2021 |
| CVE-2021-34523rançongiciel | Microsoft Exchange Server Privilege Escalation Vulnerability | 9 | 94.0 % | 17 novembre 2021 |
| CVE-2021-34527rançongiciel | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 8.8 | 94.3 % | 3 mai 2022 |
| CVE-2021-35211rançongiciel | SolarWinds Serv-U Remote Code Execution Vulnerability | 10 | 94.3 % | 17 novembre 2021 |
| CVE-2021-35395 | Realtek AP-Router SDK Buffer Overflow Vulnerability | 9.8 | 93.7 % | 17 novembre 2021 |
| CVE-2021-35464rançongiciel | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-36741 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 8.8 | 0.6 % | 17 novembre 2021 |
| CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 7.8 | 1.9 % | 17 novembre 2021 |
| CVE-2021-36942rançongiciel | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 7.5 | 93.6 % | 17 novembre 2021 |
| CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 7.8 | 1.0 % | 17 novembre 2021 |
| CVE-2021-36955rançongiciel | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 20.6 % | 17 novembre 2021 |
| CVE-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | 9.6 | 12.6 % | 17 novembre 2021 |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 55.2 % | 17 novembre 2021 |
| CVE-2021-37976 | Google Chromium Information Disclosure Vulnerability | 6.5 | 14.6 % | 17 novembre 2021 |
| CVE-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | 6.1 | 3.3 % | 17 novembre 2021 |
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | 8.8 | 71.4 % | 17 novembre 2021 |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.8 | 14.6 % | 17 novembre 2021 |
| CVE-2021-38647rançongiciel | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.8 | 31.8 % | 17 novembre 2021 |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7 | 6.5 % | 17 novembre 2021 |
| CVE-2021-40444rançongiciel | Microsoft MSHTML Remote Code Execution Vulnerability | 8.8 | 94.3 % | 17 novembre 2021 |
| CVE-2021-40539rançongiciel | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-41773rançongiciel | Apache HTTP Server Path Traversal Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-42013rançongiciel | Apache HTTP Server Path Traversal Vulnerability | 9.8 | 94.4 % | 17 novembre 2021 |
| CVE-2021-42258rançongiciel | BQE BillQuick Web Suite SQL Injection Vulnerability | 9.8 | 93.8 % | 17 novembre 2021 |