CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- jeecg bootJeecg-Boot CMS arbitrary file upload vulnerability9.8 Critical
- jeecg bootA SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows...7.5 High
- wagecms project wage-cmsA cross site request forgery (CSRF) in Wage-CMS 1.5.x-dev allows attackers to arbitrarily add users.6.5 Medium
- popojicmsA stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS...6.1 Medium
- popojicmsAn information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path...5.3 Medium
- get-simple getsimplecmsA stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a...5.4 Medium
- leostream connection broker** UNSUPPORTED WHEN ASSIGNED ** LeoStream Connection Broker 9.x before 9.0.34.3 allows...6.1 Medium
- gestionaleamica amica prodigyA vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's...7.8 High
- ignitedcmsCross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive...8.8 High
- mineweb minewebcmsCross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code...5.4 Medium
- cohesity linux agentA permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b...7.8 High
- mitsubishielectric r08psfcpu firmware, r08sfcpu firmware, r120psfcpu firmware +5 more +7 moreOverly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R...5.3 Medium
- naviwebs navigate cmsSQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib...8.8 High
- naviwebs navigate cmsCross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse...5.4 Medium
- netapp cloud managerNetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory...4.3 Medium
- netapp cloud managerNetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to...4.3 Medium
- dream security co.,ltd magicline4nx.exeDreamSecurity MagicLine Buffer Overflow Vulnerability9.8 Critical
- corero securewatch managed servicesCorero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via...6.5 Medium
- corero securewatch managed servicesCorero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns...8.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding...4.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.17925, stored XSS was possible.5.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.7.5 High
- intelliants subrionSubrion Cross-Site Scripting (XSS) vulnerability6.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.9.1 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, XSS was possible.6.1 Medium
- jetbrains rubymineIn JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for...8.8 High
- jetbrains hubIn JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.6.1 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment...6.5 Medium
- prolink prc2402m firmwareIn ProLink PRC2402M V1.0.18 and older, the set_sys_init function in the login.cgi binary allows...7.5 High
- prolink prc2402m firmwareIn ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary,...9.8 Critical
- jetbrains hubIn JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.9.8 Critical
- prolink prc2402m firmwareIn ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the adm.cgi binary, accessible...9.8 Critical
- prolink prc2402m firmwareIn ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the adm.cgi binary, accessible...9.8 Critical
- care2x hospital information management systemSQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via...9.8 Critical
- huawei harmonyosA component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit...5.5 Medium
- southsoft graduate management information systemSouthsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private...8.8 High
- chikitsa patient management systemindex.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0...5.4 Medium
- chikitsa patient management systemindex.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.5.4 Medium
- chikitsa patient management systemindex.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.5.4 Medium
- dlink dir-615 firmwareA buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi...9.8 Critical
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6...4.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreMultiple improper neutralization of input during web page generation (CWE-79) in FortiManager and...4.6 Medium
- nodejs node, node.js, debian linux +2 more +4 moreUse After Free in node.js9.8 Critical
- Show moreLoading…