CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- samsung smartthings firmware, samsung mobile smart things +1 moreImproper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted...5.3 Medium
- samsung smartthings firmware, samsung mobile smart things +1 moreImproper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted...5.3 Medium
- samsung internetUnprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted...5.3 Medium
- google android, samsung mobile devices +1 moreAn IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of...5.5 Medium
- google android, samsung mobile devices +1 moreA use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows...5.3 Medium
- mattermostReflected XSS in OAuth Flow7.1 High
- f-secure business suite, client security, elements endpoint protection +2 more +4 moreDenial-of-Service (DoS) Vulnerability3.5 Low
- ipdgroup newspluginNewsPlugin <= 1.0.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- neo4jDeserialization of Untrusted Data in Neo4j9.8 Critical
- progress moveit transferIn certain Progress MOVEit Transfer versions before 2021.0.3 (aka 13.0.3), SQL injection in the...8.8 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was...8.7 High
- f-secure safe, mobile security +1 moreFake Apple login prompt in F-Secure SAFE browser for iOS3.5 Low
- gitlab, gitlab ee +1 moreImproper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be...4.2 Medium
- bosch aviotec firmware, cpp firmware, cpp13 firmware +5 more +7 moreCross Site Request Forgery (CSRF) vulnerability in web based management interface7.5 High
- acronis true imageAcronis True Image prior to 2021 Update 5 for Windows allowed local privilege escalation due to...7.8 High
- acronis true image, cyber protect cloud, cyber protection agent +2 moreAcronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5...8.1 High
- acronis true imageAcronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to...7.8 High
- gpacAn issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the...6.5 Medium
- acronis true imageAcronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to...7.8 High
- acronis true imageAcronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to...7.8 High
- acronis true imageAcronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update...7.8 High
- skytableIncorrect Check of Function Return Value in Skytable7.5 High
@npmcli/gitnpmArbitrary Command Injection due to Improper Command SanitizationNo score- vyperlang vyperVyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator8.3 High
@liquity/contractsnpmIncorrect TCR calculation in batchLiquidateTroves() during Recovery Mode3.1 Low- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..4.8 Medium
- onenavOneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there...5.4 Medium
- microchip miwiIn the Microchip MiWi v6.5 software stack, there is a possibility of frame counters being being...7.5 High
- microchip miwiIn the Microchip MiWi v6.5 software stack, there is a possibility of frame counters being...7.5 High
docker.ioUbuntudocker.io vulnerabilitiesNo score- planview spigitThe REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive...7.5 High
- fortinet fortimanager, fortianalyzer, fortianalyzer, fortimanager +2 moreA server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser...8.8 High
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...4.3 Medium
openthreadOSS-FuzzStack-buffer-overflow in ot::StringFindNo score- espocrmEspoCRM Avatar Persistent XSS6.3 Medium
- akauntingAkaunting Invoice Footer Persistent XSS5.2 Medium
- akauntingAkaunting Password Reset Relay5.4 Medium
- akauntingAkaunting Avatar Persistent XSS6.3 Medium
- akauntingAkaunting DoS via User-Controlled 'locale' Variable6.5 Medium
- akauntingAkaunting Authentication Bypass in Company Selection8.1 High
- akauntingAkaunting OS Command Injection in 'Money.php'8.7 High
- pimcore, pimcore adminbundle +1 morePimcore AdminBundle 'specificID' SQL Injection6.5 Medium
- pimcore customer data framework, customer management framework +1 morePimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection6.5 Medium
- ffmpeg, debian linux +1 morelibavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a...5.5 Medium
- gpacAn issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based...5.5 Medium
- gpacThe gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of...5.5 Medium
- sonicwall secure remote access (sra), sma 210 firmware, sma 410 firmware +5 more +7 more** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection...9.8 Critical
- openwebif project openwebifIn addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting...5.4 Medium
- Show moreLoading…