CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- ibm powervm, powervm hypervisor +1 moreIBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if...5.9 Medium
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This...5.4 Medium
- codesys gatewayIn CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted...7.5 High
- fortinet fortiportalMultiple improper neutralization of special elements used in an SQL command vulnerabilities in...9.9 Critical
- fortinet fortiportalAn unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4...5.4 Medium
- codesys ethernetipIn CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer...7.5 High
- liferay portalLiferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module6.1 Medium
- fortinet fortisandboxAn instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow...5.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module6.1 Medium
- showdoc, star7th star7th/showdoc +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc7.5 High
- liferay portal, digital experience platform +1 moreLiferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs7.5 High
- liferay portal, digital experience platform +1 moreLiferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)5.4 Medium
- showdoc, star7th star7th/showdoc +1 moreMissing Cryptographic Step in star7th/showdoc5.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting4.8 Medium
- drogonA path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could...7.5 High
- devexpressDevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure...8.8 High
wordpressDebianwordpress - security updateNo score- libgdread_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote...6.5 Medium
- defcon def con 27 firmwareThe DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized...8.8 High
- atomicparsley project atomicparsleyA stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through...9.8 Critical
- atomicparsley project atomicparsleyA stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in...5.5 Medium
- uninett mod auth mellonA flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue...6.1 Medium
- academysoftwarefoundation openexr, debian linux +1 moreA flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able...6.1 Medium
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can...5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw...5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file...7.5 High
- traefikDrop Headers via Malicious Connection Header4.8 Medium
- b2x project b2xA security flaw in the 'owned' function of a smart contract implementation for BTC2X (B2X), a...7.5 High
- robotbtc project robotbtcA security flaw in the 'owned' function of a smart contract implementation for RobotCoin (RBTC),...7.5 High
- doft doftcoinAn integer overflow in the mintToken function of a smart contract implementation for Doftcoin...7.5 High
- blocklancertoken project blocklancertokenAn integer overflow in the transfer function of a smart contract implementation for Lancer Token,...7.5 High
- metinfoAn issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg...9.8 Critical
- metinfoAn issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers...7.5 High
- houdunren hdcmsAn arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to...7.8 High
- vaethinkAn arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows...9.8 Critical
- vaethinkA vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to...9.8 Critical
- courier-mta courier mail serverAn issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the...8.1 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers7.2 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Fails to Properly Check User Permissions4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions6.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs6.1 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107...4.3 Medium
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in dialog box handling in Windows in Google Chrome prior to 92.0.4515.107 allowed...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Downloads in Google Chrome on Android prior to 92.0.4515.107 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to 92.0...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a...6.5 Medium
- Show moreLoading…