CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- bludit bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the ... 9.1 Critical
- libiec iccp mod project iccp mod A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a... 7.5 High
- iec104 project iec104 IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr. 7.5 High
- vmware identity manager, workspace one access, cloud foundation +1 more +3 more VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on... 7.5 High
- vmware identity manager, workspace one access, cloud foundation +1 more +3 more VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints... 9.8 Critical
- vmware workspace one uem console VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor... 7.5 High
- detect-character-encoding project detect-character-encoding Missing Release of Memory after Effective Lifetime in detect-character-encoding 7.5 High
- frentix openolat Path Traversal in Archive Handling Leading to Code Execution 8.1 High
- unit4 mik.starlight The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design)... 6.5 Medium
- unit4 mik.starlight Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt... 5.5 Medium
- unit4 mik.starlight Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows... 8.8 High
-
ntfs-3gUbuntu ntfs-3g vulnerabilities No score - unit4 mik.starlight Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated... 8.8 High
- filebrowser project filebrowser A stored cross-site scripting (XSS) vulnerability exists in FileBrowser < v2.16.0 that allows an... 5.4 Medium
- hashicorp vault HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR... 5.3 Medium
- solarwinds orion platform Blind SQL injection Vulnerability 8.9 High
- att xmill A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of... 8.1 High
- brave An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged... 6.1 Medium
- ubiquiti inc unifi protect application, ui unifi protect +1 more A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor... 9.6 Critical
- ubiquiti inc unifi protect application, ui unifi protect +1 more A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor... 8.0 High
- samsung tizenrt Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and... 7.5 High
-
ntfs-3gUbuntu ntfs-3g vulnerabilities No score - element-hq synapse, fedoraproject fedora +1 more Improper authorisation of /members discloses room membership to non-members 3.1 Low
- ibm openpages with watson IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that... 8.8 High
- isaacs node-tar, npmjs tar, oracle graalvm +1 more +3 more Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization 8.2 High
- npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 more UNIX Symbolic Link (Symlink) Following in @npmcli/arborist 8.2 High
- npm arborist, oracle graalvm, siemens sinec infrastructure network services +2 more UNIX Symbolic Link (Symlink) Following in @npmcli/arborist 8.2 High
- solarwinds serv-u Execute Command Function Allows Remote Code Execution (RCE)Vulnerability 8.5 High
- element-hq synapse, fedoraproject fedora +1 more Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. 3.1 Low
- solarwinds orion platform Orion User setting Improper Access Control Privilege Escalation Vulnerability 8.9 High
- solarwinds orion platform Stored XSS via Help Server settings 6.5 Medium
- solarwinds orion platform Stored XSS in Maps text box hyperlink Vulnerability 7.5 High
- openstack neutron, debian linux +1 more OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value 6.5 Medium
- jenkins nomad, jenkins project nomad plugin +1 more Password stored in plain text by Jenkins Nomad Plugin 5.5 Medium
- jenkins nested view, jenkins project nested view plugin +1 more XXE vulnerability in Jenkins Nested View Plugin 7.1 High
- jenkins azure ad, jenkins project azure ad plugin +1 more Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL 8.8 High
- jenkins saml, jenkins project saml plugin +1 more Jenkins SAML Plugin allows bypassing CSRF protection for any URL 8.8 High
- jenkins code coverage api, jenkins project code coverage api plugin +1 more RCE vulnerability in Jenkins Code Coverage API Plugin 8.8 High
- mybb Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script... 5.4 Medium
- mybb Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script... 5.4 Medium
- iwebshop Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary... 8.8 High
- s-cms Cross Site Scripting (XSS) in S-CMS v1.0 allows remote attackers to execute arbitrary code via... 5.4 Medium
- solarwinds orion platform Resource.aspx Reflected Cross-Site Scripting Vulnerability 8.0 High
- solarwinds orion platform ImportAlert Improper Access Control Tampering Vulnerability 6.3 Medium
- digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 more ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure 7.5 High
- solarwinds orion platform EmailWebPage Command Injection RCE 8.1 High
- solarwinds orion platform ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability 6.0 Medium
- axios, axios axios/axios, oracle goldengate +1 more +3 more Inefficient Regular Expression Complexity in axios/axios 7.5 High
- wago 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889, 750-831\/000-002 firmware, 750-831 firmware +7 more +9 more WAGO: Denial of Service vulnerability inside the OpenSSL implementation 7.5 High
- wago plc, 750-362 firmware, 750-363 firmware +10 more +12 more WAGO: Authentication Vulnerability in Web-Based Management 9.8 Critical
- Show olderLoading…