CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- vizio e50x-e1 firmware, p65-f1 firmware +1 moreVizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute...6.8 Medium
think-confignpmImproperly Controlled Modification of Object Prototype Attributes7.5 High- skytableImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Skytable8.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- jump-technology asset managementAn issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing...9.9 Critical
- codesys runtime toolkitAll versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before...7.5 High
- codesys control, control rte, control runtime system toolkit +4 more +6 moreIn CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.7.5 High
- codesys control, control rte, control runtime system toolkit +4 more +6 moreCODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.9.8 Critical
- centreonA SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21...9.8 Critical
- centreonA SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04...8.8 High
- centreonA SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04...8.8 High
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A...6.5 Medium
- dell emc idrac8 firmware, emc idrac9 firmware, integrated dell remote access controller (idrac) +2 moreDell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00...4.3 Medium
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote...6.1 Medium
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote...6.1 Medium
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting...6.1 Medium
- dell emc idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting...6.1 Medium
- openplcproject openplc v3 firmwareCommand Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via...8.8 High
- ecobee ecobee3 lite firmwareA NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the...7.5 High
- ecobee ecobee3 lite firmwareHardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a...9.8 Critical
- ecobee ecobee3 lite firmwareA heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the...8.2 High
- electronjs poddycastImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in helper_entries8.8 High
- grafana lokiPath traversal in Grafana Loki5.3 Medium
- linuxfoundation cortexPath traversal in Grafana Cortex5.3 Medium
- freebsd libfetchlibfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric...9.1 Critical
- huawei oxfords-an00a firmwareSome Huawei Smartphones has an insufficient input validation vulnerability due to the lack of...5.5 Medium
- digitaldruid hoteldruidA reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of...6.1 Medium
- digitaldruid hoteldruidA SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as...9.8 Critical
- maxsite cmsA reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/...6.1 Medium
KernelLinuxatm: iphase: fix possible use-after-free in ia_module_exit()No scoreKernelLinuxmISDN: fix possible use-after-free in HFC_cleanup()No scoreKernelLinuxatm: nicstar: Fix possible use-after-free in nicstar_cleanup()No scoreKernelLinuxudf: Fix NULL pointer dereference in udf_symlink functionNo scoreKernelLinuxwl1251: Fix possible buffer overflow in wl1251_cmd_scanNo scoreKernelLinuxRDMA/cma: Fix rdma_resolve_route() memory leakNo scoreKernelLinuxseq_buf: Fix overflow in seq_buf_putmem_hex()No scoreKernelLinuxmedia: zr364xx: fix memory leak in zr364xx_start_readpipeNo scoreKernelLinuxdm btree remove: assign new_root only when removal succeedsNo scoreKernelLinuxjfs: fix GPF in diFreeNo scoreKernelLinuxmisc/libmasm/module: Fix two use after free in ibmasm_init_oneNo scoreKernelLinuxtty: serial: 8250: serial_cs: Fix a memory leak in error handling pathNo scoreKernelLinuxwatchdog: Fix possible use-after-free in wdt_startup()No scoreKernelLinuxwatchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()No scoreKernelLinuxwatchdog: Fix possible use-after-free by calling del_timer_sync()No scoreKernelLinuxvirtio-blk: Fix memory leak among suspend/resume procedureNo scoreKernelLinuxvirtio_console: Assure used length from device is limitedNo scoreKernelLinuxnfs: fix acl memory leak of posix_acl_create()No scoreKernelLinuxmemory: fsl_ifc: fix leak of IO mapping on probe failureNo scoreKernelLinuxmemory: fsl_ifc: fix leak of private memory on probe failureNo score- Show moreLoading…