CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- c-ares, fedoraproject fedora, nodejs node.js +14 more +16 moreA flaw was found in c-ares library, where a missing input validation check of host names returned...5.6 Medium
- fig2dev project fig2dev, debian linux +1 moreA stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b...5.5 Medium
- rconfigrConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers...9.8 Critical
- rconfigA SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access...7.5 High
- rconfigThe dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to...7.5 High
- rconfigThe userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to...7.5 High
- contiki-os contikiIn Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When...7.5 High
- dell alienware command center (awcc), alienware command center application, command \| update +1 more +3 moreDell Command Update, Dell Update, and Alienware Update versions prior to 4.3 contains a Improper...7.8 High
- dell dbutil, dbutildrv2.sys firmware +1 moreDell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control...8.8 High
- dell openmanage enterprise, openmanage enterprise-modular +1 moreDell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular...9.6 Critical
- dell openmanage enterpriseDell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability...9.1 Critical
- dell openmanage enterprise, openmanage enterprise-modular +1 moreDell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain...7.7 High
- dell openmanage enterpriseDell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication...9.8 Critical
- jupyter notebookFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook10.0 Critical
- 23andme yamaleCommand injection in Yamale7.8 High
- jupyter jupyterlabJupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>7.4 High
- vapor leafkit, leaf-kit +1 moreLeafKit allows XSS with untrusted user input7.4 High
- discourseXSS via d-popover and d-html-popover attribute7.4 High
- sap j2ee engine** UNSUPPORTED WHEN ASSIGNED ** A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7...6.1 Medium
- sap j2ee engine** UNSUPPORTED WHEN ASSIGNED ** A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7...6.1 Medium
- sap j2ee engine** UNSUPPORTED WHEN ASSIGNED ** A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7...6.1 Medium
- sap businessobjects edgeSAP BusinessObjects Edge 4.1 allows remote attackers to obtain the...9.8 Critical
- sap mobile platformSAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other...5.5 Medium
- sap businessobjects edgeThe File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote...7.5 High
- sap businessobjects edgeThe File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote...7.5 High
- otrs, otrs itsm +1 moreCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3...5.4 Medium
- qnap viocard-100 firmware, viocard-300 firmware, viocard-30 firmware +2 more +4 more** UNSUPPORTED WHEN ASSIGNED ** QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in...9.8 Critical
- dolibarrImproper Access Control in “Dolibarr”4.3 Medium
- ibm content navigatorIBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to...6.5 Medium
- hcl software workload scheduler, ibm tivoli workload scheduler +1 moreIBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused...5.9 Medium
- zte zxhn h2640 firmwareThere is an information leak vulnerability in the digital media player (DMS) of ZTE's residential...2.4 Low
- zohocorp manageengine adselfservice plusA CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1...8.8 High
- tiny java web server project java web serverA reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and...6.1 Medium
- helpsystems cobalt strikeA Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt...7.5 High
- gurock testrailA vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated,...5.4 Medium
- rocket.chatA sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that...9.8 Critical
- very good plugins wp fusion lite, verygoodplugins wp fusion +1 moreWP Fusion Lite <= 3.37.18 Reflected Cross-Site Scripting6.1 Medium
- very good plugins wp fusion lite, verygoodplugins wp fusion +1 moreWP Fusion Lite <= 3.37.18 Cross-Site Request Forgery to Data Deletion6.1 Medium
- thedaylightstudio fuel cmsA host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config...8.1 High
- properfraction profilepress, unknown user registration, user profile, login & membership – profilepress (formerly wp user avatar) +1 moreProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget6.1 Medium
- unknown side menu lite – add sticky fixed buttons, wow-estore side menu +1 moreSide Menu Lite < 2.2.1 - Authenticated SQL Injection7.2 High
- unknown stock in & out, coderstimes out of stock message for woocommerce +1 moreStock in & out <= 1.0.4 - Authenticated SQL Injection8.8 High
- a3rev page view countPage View Counts < 2.4.9 - Contributor+ Stored XSS5.4 Medium
- brainstormforce astra, unknown astra pro addon +1 moreAstra Pro Addon < 3.5.2 - Unauthenticated SQL Injection9.8 Critical
- made i.t. formsForms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- unknown maps plugin using google maps for wordpress – wp google map, weplugins wp maps +1 moreWP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- amentotech workreapWorkreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions8.1 High
- amentotech workreapWorkreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities8.1 High
- marmoset viewer, revolutionart marmoset viewer +1 moreMarmoset Viewer < 1.9.3 - Reflected Cross Site Scripting6.1 Medium
- bozdoz leaflet map, leaflet map project map +1 moreLeaflet Map < 3.0.0 - Arbitrary Settings Update via CSRF Leading to Stored XSS6.5 Medium
- Show moreLoading…