| 2021-09-17 | Ulfius Web Framework Remote Memory Corruption | Published |
| 2021-09-17 | Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload | Published |
| 2021-09-15 | Seowon 130-SLC router - 'queriesCnt' Remote Code Execution Unauthenticated | Published |
| 2021-09-15 | AlphaWeb XE File Upload Remote Code Execution Authenticated | Published |
| 2021-09-15 | Evolution CMS 3.1.6 Remote Code Execution | Published |
| 2021-09-15 | AHSS-PHP 1.0 Cross Site Scripting / SQL Injection | Published |
| 2021-09-13 | ECOA Building Automation System Configuration Download Information Disclosure | Published |
| 2021-09-13 | ECOA Building Automation System Directory Traversal | Published |
| 2021-09-13 | ECOA Building Automation System Cross Site Request Forgery | Published |
| 2021-09-13 | ECOA Building Automation System Missing Encryption | Published |
| 2021-09-13 | WordPress Themes Haberadam IDOR and Full Path Disclosure via JSON API Unathenticated | Published |
| 2021-09-13 | Facebook ParlAI 1.0.0 Deserialization of Untrusted Data in parlai | Published |
| 2021-09-13 | Umbraco CMS 8.9.1 Path traversal and Arbitrary File Write Authenticated | Published |
| 2021-09-11 | Atlassian Confluence WebWork OGNL Injection | Published |
| 2021-09-11 | Compro Technology IP Camera Credential Disclosure | Published |
| 2021-09-11 | Ficus Global - Sql Injection Vulnerability | Published |
| 2021-09-11 | Web Smile India - Sql Injection Vulnerability | Published |
| 2021-09-10 | Craftbox Technology - Sql Injection Vulnerability | Published |
| 2021-09-10 | Five design - Sql Injection Vulnerability | Published |
| 2021-09-10 | Powered by Ciws - Sql Injection Vulnerability | Published |
| 2021-09-10 | Backdoor.Win32.Wollf.h / Unauthenticated Remote Command Execution | Published |
| 2021-09-10 | Backdoor.Win32.VB.awm / Authentication Bypass - Information Leakage | Published |
| 2021-09-10 | Backdoor.Win32.WinterLove.i / Hardcoded Weak Password | Published |
| 2021-09-10 | ECOA Building Automation System Hidden Backdoor Accounts | Published |
| 2021-09-09 | Karaca Home SQL Injection Vulnerable | Published |
| 2021-09-09 | Backdoor.Win32.Small.vjt / Unauthenticated Remote Command Execution | Published |
| 2021-09-09 | Wordpress Plugin WP Super Edit 2.5.4 - Remote File Upload | Published |
| 2021-09-08 | Patient Appointment Scheduler System 1.0 Shell Upload | Published |
| 2021-09-08 | Argus Surveillance DVR 4.0 Unquoted Service Path | Published |
| 2021-09-08 | Ionic Identity Vault 4.7 Android Biometric Authentication Bypass | Published |
| 2021-09-06 | Kurdistan Region Statistics Office RCE Vulnerable Telerik | Published |
| 2021-09-06 | Artica Proxy VMWare Appliance 4.30.000000 SP273 Path Traversal | Published |
| 2021-09-06 | BSCW Server Remote Code Execution | Published |
| 2021-09-06 | U.S. Energy Information Administration EIA SQL Injection | Published |
| 2021-09-06 | SmartFTP Client 10.0.2909.0 Multiple Denial of Service | Published |