The OPSWAT Vulnerability Assessment technology supports file based and endpoint application vulnerability assessment. Learn how MetaDefender Kiosk and MetaDefender Access leverages this technology to protect your organization.
We continuously enhance our platform to decrease your organization's security risk and prevent malware attacks. The first table below lists the hashes of vulnerable application installers, IoT software and firmware was added to the OPSWAT database during November 24 - December 1, 2021. The second table lists the new CVEs and application versions for which support was added.
To take advantage of these capabilities, please always update your OPSWAT Vulnerability Engine to the latest version. If you have questions or interest in using the engine to better protect your organization, please contact OPSWAT.
File Based Vulnerabilities
OPSWAT Vulnerability Engine added support to detect the following vulnerable application installers, IoT software and firmware
Endpoint Application Vulnerabilities
OPSWAT Vulnerability Engine added support to detect the following application vulnerabilities
| PRODUCT | VENDOR | VERSION | CVE | CVE DETAILS | CVSS SCORE |
|---|---|---|---|---|---|
| Xen | Linux Foundation | 4.15.1 and prior | CVE-2021-28709 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-28709 | 6.9 |
| Xen | Linux Foundation | 4.15.1 and prior | CVE-2021-28705 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-28705 | 6.9 |
| Xen | Linux Foundation | 4.15.1 and prior | CVE-2021-28702 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-28702 | 4.6 |
| Xen | Citrix Systems, Inc. | 4.15.1 and prior | CVE-2021-28709 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-28709 | 6.9 |
| Xen | Citrix Systems, Inc. | 4.15.1 and prior | CVE-2021-28705 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-28705 | 6.9 |
| Xen | Citrix Systems, Inc. | 4.15.1 and prior | CVE-2021-28702 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-28702 | 4.6 |
| PHP | The PHP Group | 8.0.12.999998 and prior | CVE-2021-21707 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-21707 | 5.0 |
| PHP | The PHP Group | 8.0.11.999998 and prior | CVE-2021-21703 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-21703 | 6.9 |
| PHP | The PHP Group | 8.0.12.999998 and prior | CVE-2021-21707 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-21707 | 5.0 |
| PHP | The PHP Group | 8.0.11.999998 and prior | CVE-2021-21703 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-21703 | 6.9 |
| iOS | Apple Inc. | 15.0.999998 and prior | CVE-2021-30905 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-30905 | 4.3 |
| iOS | Apple Inc. | 15.0.999998 and prior | CVE-2021-30910 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-30910 | 4.3 |
| iOS | Apple Inc. | 15.0 and prior | CVE-2021-30917 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-30917 | 6.8 |
| Apache HTTP Server | Apache Software Foundation | 2.4.50 and prior | CVE-2021-42013 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-42013 | 7.5 |
| Apache HTTP Server | Apache Software Foundation | 2.4.48 and prior | CVE-2021-40438 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-40438 | 6.8 |
| Apache HTTP Server | Apache Software Foundation | 2.4.48 and prior | CVE-2021-39275 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-39275 | 7.5 |
| Apache HTTP Server | Apache Software Foundation | 2.4.48 and prior | CVE-2021-34798 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-34798 | 5.0 |
| Apache HTTP Server | Apache Software Foundation | 2.4.48 and prior | CVE-2021-36160 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-36160 | 5.0 |
| Apache HTTP Server | Apache Software Foundation | 2.4.49 and prior | CVE-2021-41524 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-41524 | 5.0 |
| Apache HTTP Server | Apache Software Foundation | 2.4.48 and prior | CVE-2021-33193 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-33193 | 5.0 |
| Kaspersky Password Manager | Kaspersky Lab | 9.0.2 and prior | CVE-2021-35052 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-35052 | 4.6 |
| Microsoft .NET Core Runtime 3.1 | Microsoft Corporation | 3.1.12.999998 and prior | CVE-2021-26701 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-26701 | 7.5 |
| Microsoft .NET Core Runtime 2.1 | Microsoft Corporation | 2.1.25.999998 and prior | CVE-2021-26701 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-26701 | 7.5 |
| Microsoft Visual Studio | Microsoft Corporation | 16.9 and prior | CVE-2021-26701 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-26701 | 7.5 |
| TightVNC | GlavSoft LLC. | 2.8.59 and prior | CVE-2021-42785 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-42785 | 7.5 |
| Bitdefender Total Security | Bitdefender | 25.0.25.999998 and prior | CVE-2021-3576 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-3576 | 4.6 |
| Bitdefender Total Security | Bitdefender | 7.2.1.64.999998 and prior | CVE-2021-3579 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2021-3579 | 4.6 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4124 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4124 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4125 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4125 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4126 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4126 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3072 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3072 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3071 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3071 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 26.0.0.131 and prior | CVE-2017-3080 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3080 | 5.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3073 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3073 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3074 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3074 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3070 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3070 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4127 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4127 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3069 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3069 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4171 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4171 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4130 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4130 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4124 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4124 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4125 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4125 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4126 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4126 | 9.3 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3072 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3072 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3071 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3071 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 26.0.0.131 and prior | CVE-2017-3080 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3080 | 5.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3073 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3073 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3074 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3074 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 25.0.0.148 and prior | CVE-2017-3070 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3070 | 10.0 |
| Adobe Flash Player | Adobe Systems Inc. | 21.0.0.242 and prior | CVE-2016-4127 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2016-4127 | 9.3 |
Tags:
