CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
spice-usbredirOSS-FuzzHeap-use-after-free in usbredirparser_serializeNo score- openstack keystoneOpenStack Keystone allows information disclosure during account locking7.5 High
- mitsubishielectric r08psfcpu firmware, r08sfcpu firmware, r120psfcpu firmware +5 more +7 moreInsufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU...9.1 Critical
- mitsubishielectric r08psfcpu firmware, r08sfcpu firmware, r120psfcpu firmware +5 more +7 moreExposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric...7.5 High
- intelliants subrion cmsCross Site Scripting in Subrion CMS5.4 Medium
- redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 moreObservable Discrepancy in Wildfly Elytron5.3 Medium
- mitsubishielectric gt softgot2000, got2000 gt23 firmware, got2000 gt25 firmware +1 more +3 moreMissing synchronization vulnerability in GOT2000 series GT27 model communication driver versions...7.5 High
- tianocore edk iiBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...7.8 High
- hewlett packard enterprise data protectorA potential unauthorized privilege escalation vulnerability has been identified in Micro Focus...8.8 High
- hp edgeline infrastructure managementA potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager...7.5 High
- totolink a720r firmwareA stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu...7.5 High
- totolink a720r firmwareA vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start...9.8 Critical
- totolink a720r firmwareA vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows attackers to...7.5 High
- totolink a720r firmwareA vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu...9.8 Critical
- tecnick tcexamA reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in...6.1 Medium
- tecnick tcexamA reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in...6.1 Medium
- redmineRedmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor...7.5 High
- secomea sitemanager, sitemanager firmware +1 moreConfiguration service port remains open 10 minutes after reboot even when already provisioned8.0 High
- secomea sitemanager, sitemanager firmware +1 moreSiteManager troubleshooter allows access without authentication from local network4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 13.11, 13.12...9.6 Critical
- salesforce mule, salesforce, inc. mulesoft +1 moreXML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component...7.5 High
- raonwiz raon k uploadRaonwiz RAON K Upload Arbitrary Command Execution Vulnerability8.8 High
- unidocs ezpdfreaderunidocs ezPDFReader arbitrary command execution vulnerability7.5 High
- ffmpeg, debian linux +1 morePrior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it....5.5 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreWordPress Download Manager <= 3.1.24 Authenticated Directory Traversal6.5 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreWordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload7.5 High
- citrix gateway, application delivery management +1 moreA vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix...6.5 Medium
- citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 moreA vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix...7.5 High
- citrix gateway, application delivery controller firmware, netscaler gateway +2 moreA session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when...8.1 High
- citrix virtual apps and desktops, xenapp, xendesktop +2 moreA vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited,...7.8 High
- config lib project lib, supermartijn642 supermartijn642sconfiglib +1 moreDeserialization of Untrusted Data in com.supermartijn642.configlib.ConfigSyncPacket8.1 High
- youtube feeder feederYoutube Feeder <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- sola-newsletters project sola-newsletters, solaplugins nifty newsletters +1 moreNifty Newsletters <= 4.0.23 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- foxit, foxit pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...8.8 High
- foxit, foxit pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...8.8 High
- foxit, foxit pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...8.8 High
- iobit advanced systemcare ultimateAn information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced...6.5 Medium
- iobit advanced systemcare ultimateAn information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate...6.5 Medium
- iobit advanced systemcare ultimateAn information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate...6.5 Medium
- iobit advanced systemcare ultimateAn information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate...6.5 Medium
- advantech r-seenetAn OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R...9.8 Critical
- 3s-smart software solutions codesys, codesys development system +1 moreA unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile()...8.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14...5.5 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2....8.5 High
- zte zxiptv firmwareZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities....6.1 Medium
- zte zxctn 6120h firmwareA ZTE's product of the transport network access layer has a security vulnerability. Because the...4.6 Medium
- mozilla firefoxIf a user had granted a permission to a webpage and saved that grant, any webpage running on the...9.8 Critical
- mozilla firefoxPassword autofill was enabled without user interaction on insecure websites on Firefox for...8.8 High
- mozilla vpnMultiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x...9.8 Critical
- samsung smart touch callImproper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows...5.3 Medium
- Show moreLoading…