CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- macho themes newsmagNewsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)6.1 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-44.3 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-38.8 High
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-24.3 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-15.4 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Stored XSS5.4 Medium
net-snmpOSS-FuzzStack-buffer-overflow in getoidNo score- exiv2, fedoraproject fedora +1 moreDenial of service due to infinite loop in JpegBase::printStructure (#2)5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to infinite loop in JpegBase::printStructure (#1)5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to infinite loop in Image::printIFDStructure5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreOut-of-bounds read in XmpTextValue::read()4.7 Medium
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::Jp2Image::encodeJp2Header4.7 Medium
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::Jp2Image::printStructure4.7 Medium
- exiv2, fedoraproject fedora +1 moreNull pointer dereference in Exiv2::Internal::resolveLens0x8ff5.5 Medium
- exiv2, fedoraproject fedora +1 moreNull pointer dereference in Exiv2::Internal::resolveLens0x3194.7 Medium
- fedoraproject fedora, p5-encode project p5-encode +1 moreEncode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a...7.8 High
- exiv2, fedoraproject fedora +1 moreDenial of service due to FPE in Exiv2::Internal::resolveLens0xffff4.7 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to integer overflow in loop counter5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to assertion failure in crwimage_int.cpp5.5 Medium
- amentotech workreapWorkreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution9.8 Critical
- debian linux, linux kernel +1 morearch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access...5.5 Medium
- debian linux, linux kernel, netapp element software +3 more +5 morefs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering,...6.5 Medium
- linux kernelarch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with...5.5 Medium
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morenet/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of...7.5 High
- linux kernel, netapp element software, hci bootstrap os +3 more +5 morefs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial...7.5 High
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morebtrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)...5.5 Medium
- debian linux, linux kernel +1 moredrivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate...6.8 Medium
- debian linux, linux kernel +1 moredrivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier...3.3 Low
- linux kernelThe mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is...5.5 Medium
- linux kerneldrivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote...7.5 High
- linux kernelnet/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of...3.3 Low
- go-unarr project go-unarrTarslip in go-unarr9.8 Critical
- open-graph project open-graphPrototype Pollution7.3 High
espeak-ngOSS-FuzzStack-buffer-overflow in TranslateWord2No scoremrubyOSS-FuzzUNKNOWN READ in mrb_check_frozenNo scorelibrawOSS-FuzzUse-of-uninitialized-value in init_main_qtableNo score- golang go, debian linux, fedoraproject fedora +2 more +4 moreGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Medium
- digint btrbk, debian linux, fedoraproject fedora +2 moreBtrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering...9.8 Critical
- roxy-wiRoxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.8.8 High
- roxy-wiRoxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.8.8 High
- roxy-wiRoxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can...9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +2 moreIn kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out...7.8 High
- golang go, fedoraproject fedora, oracle timesten in-memory database +2 moreGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 High
- progress moveit transferIn certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the...9.8 Critical
- debian linux, linux kernel, netapp element software +4 more +6 moreIn drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can...7.8 High
- obsidianObsidian does not require user confirmation for non-http/https URLs.9.8 Critical
net-snmpOSS-FuzzHeap-buffer-overflow in read_configNo scoreapache-httpdOSS-FuzzHeap-buffer-overflow in ap_escape_path_segment_bufferNo score- gnu cpioGNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file,...7.8 High
- rust-lang rustlibrary/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero...9.1 Critical
- Show moreLoading…