CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
KernelLinuxACPI: fix NULL pointer dereferenceNo scoreKernelLinuxusb: max-3421: Prevent corruption of freed memoryNo scoreKernelLinuxKVM: PPC: Book3S: Fix H_RTAS rets buffer overflowNo scoreKernelLinuxscsi: target: Fix NULL dereference on XCOPY completionNo scoreKernelLinuxipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptionsNo scoreKernelLinuxio_uring: fix memleak in io_init_wq_offload()No scoreKernelLinuxnet/sched: act_skbmod: Skip non-Ethernet packetsNo scoreKernelLinuxnetrom: Decrease sock refcount when sock timers expireNo scoreKernelLinuxnet: sched: fix memory leak in tcindex_partial_destroy_workNo scoreKernelLinuxKVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leakNo scoreKernelLinuxusb: hso: fix error handling code of hso_create_net_deviceNo scoreKernelLinuxnet: fix uninit-value in caif_seqpkt_sendmsgNo scoreKernelLinuxbpf, sockmap: Fix potential memory leak on unlikely error caseNo scoreKernelLinuxxdp, net: Fix use-after-free in bpf_xdp_link_releaseNo scoreKernelLinuxbpf: Fix tail_call_reachable rejection for interpreter when jit failedNo scoreKernelLinuxbonding: fix null dereference in bond_ipsec_add_sa()No scoreKernelLinuxigb: Fix use-after-free error during resetNo scoreKernelLinuxigc: Fix use-after-free error during resetNo scoreKernelLinuxbpf: Track subprog poke descriptors correctly and fix use-after-freeNo scoreKernelLinuxtcp: fix tcp_init_transfer() to not reset icsk_ca_initializedNo scoreKernelLinuxdma-buf/sync_file: Don't leak fences on merge failureNo scoreKernelLinuxnet: fddi: fix UAF in fza_probeNo scoreKernelLinuxcifs: prevent NULL deref in cifs_compose_mount_options()No scoreKernelLinuxscsi: libfc: Fix array index out of bound exceptionNo scoreKernelLinuxnet: validate lwtstate->data before returning from skb_tunnel_info()No score- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server allow remote attackers to view restricted...5.3 Medium
- dell powerscale onefsDell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability....5.3 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or...6.5 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability...4.4 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability...7.3 High
- joplin project joplinJoplin vulnerable to Cross-site Scripting in notes6.1 Medium
- argoproj argo workflowsWorkflow re-write vulnerability using input parameter6.5 Medium
- tekmonks monkshuImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') and Improper Encoding or Escaping of Output in frontend/server/server.js4.6 Medium
- sourcegraphLow risk information disclosure in Sourcegraph3.1 Low
- zope, zope accesscontrol +1 moreRemote Code Execution via Script (Python) objects under Python 37.5 High
- mozilla hubs cloudHubs Cloud allows users to download shared content, specifically HTML and JS, which could allow...6.1 Medium
- ypsomed mylife, mylife cloud +1 moreYpsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7...4.8 Medium
- ypsomed mylife, mylife cloud +1 moreYpsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7...5.9 Medium
- vizio e50x-e1 firmware, p65-f1 firmware +1 moreThe pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and...7.5 High
- seo backlinks backlinksSEO Backlinks <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- ays pro poll makerPoll Maker <= 3.2.8 - Reflected Cross-Site Scripting6.1 Medium
- weblizar admin custom loginAdmin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- itux post index, post index project index +1 morePost Index <= 0.7.5 Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- openwrtThere is missing input validation of host names displayed in OpenWrt before 19.07.8. The...6.1 Medium
- 3s-smart software solutions codesys, codesys development system +1 moreA unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation...8.8 High
- 3s-smart software solutions codesys, codesys development system +1 moreA unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods...8.8 High
- 3s-smart software solutions codesys, codesys development system +1 moreA unsafe deserialization vulnerability exists in the ComponentModel ComponentManager...7.8 High
- pengutronix bareboxcommon/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because...7.5 High
- pengutronix bareboxcrypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp...7.5 High
- entando admin consoleA Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with...7.2 High
- Show moreLoading…