CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- google chrome, fedoraproject fedora +1 moreUse after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a...7.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an...9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107...8.8 High
- isaacs node-tar, tar project tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite due to insufficient absolute path sanitization8.2 High
- isaacs node-tar, tar project tar, oracle graalvm +1 more +3 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning8.2 High
- liferay portal, digital experience platform +1 moreExposure of Resource to Wrong Sphere in Liferay Portal4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP does not properly check user permission4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page5.4 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Stores User Passwords in Cleartext4.9 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP fails to invalidate password reset tokens after use7.5 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Don't Check Permissions of Pages4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP autosaves form data for other users to see7.5 High
- seeddmsCross-Site Request Forgery (CSRF) vulnerability in the /op/op.UnlockDocument.php in SeedDMS v5.1...4.3 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP insecure default configuration7.5 High
- seeddmsCross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x...4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate4.3 Medium
- seeddmsCross-Site Request Forgery (CSRF) vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x<5.1.23...4.3 Medium
- htmlyThe "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a...6.1 Medium
- htmlyThe "content" field in the "regular post" page of the "add content" menu under "dashboard" in...6.1 Medium
- htmlyIn htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete...9.1 Critical
- jump-technology asset managementAn issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to...8.5 High
- jump-technology asset managementAn issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing...9.9 Critical
- phone shop sales management system project shop sales management systemArbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.9.8 Critical
- cmsuno project cmsunoCMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the...5.4 Medium
- online covid vaccination scheduler system project covid vaccination scheduler systemSourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary...9.8 Critical
- comelitgroup away from homeAn issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege...8.8 High
- huawei harmonyosA component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit...7.8 High
- huawei harmonyosA component of the HarmonyOS has a External Control of System or Configuration Setting...7.8 High
- huawei harmonyosA component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers...7.8 High
- huawei harmonyosA component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability....5.5 Medium
- huawei harmonyosA component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this...7.8 High
- huawei harmonyosA component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may...7.8 High
- huawei harmonyosA component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers...7.8 High
- huawei harmonyosA component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may...5.5 Medium
- huawei harmonyosA component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may...5.5 Medium
- huawei harmonyosA component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers...7.8 High
- Show moreLoading…