CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- sap fiori client, sap se fiori client native mobile for android +1 moreTask Hijacking is a vulnerability that affects the applications running on Android devices due to...7.6 High
- eximThe STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP...7.5 High
- get-simple getsimplecmsGetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does...6.1 Medium
- advantech webaccess/scada, webaccess\/scada +1 moreThe affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker...9.8 Critical
- advantech webaccess/scada, webaccess\/scada +1 moreUserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could...6.1 Medium
- advantech webaccess/scada, webaccess\/scada +1 moreThe affected product is vulnerable to a relative path traversal condition, which may allow an...6.5 Medium
- sonatype nexus repository managerMultiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated...5.4 Medium
- tonewinner winner desktop speakers firmwareWinner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover...3.7 Low
- ibm planning analytics localIBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information...2.7 Low
- huawei emui, magic ui +1 moreA component of the Huawei smartphone has a External Control of System or Configuration Setting...7.8 High
- huawei emui, magic ui +1 moreA component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit...7.0 High
- trendnet tv-ip110wn firmwareCross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via...6.1 Medium
resource-agentsAlmaLinux,resource-agents-aliyunAlmaLinux,resource-agents-gcpAlmaLinux +2 moreresource-agents bug fix and enhancement updateNo scoregpsdUbuntugpsd vulnerabilityNo scoregcc-toolset-10-valgrindAlmaLinux,gcc-toolset-10-valgrind-develAlmaLinux +1 moregcc-toolset-10-valgrind bug fix and enhancement updateNo score- port389 389-ds-baseA flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either...6.5 Medium
spirv-tools-develAlmaLinux,spirv-tools-libsAlmaLinux +1 morevulkan bug fix and enhancement updateNo scorecontainernetworking-pluginsAlmaLinux,critAlmaLinux,criuAlmaLinux +4 more +6 morecontainer-tools:rhel8 security, bug fix, and enhancement updateNo scoreescAlmaLinuxesc bug fix and enhancement updateNo scorefence-agents-aliyunAlmaLinux,fence-agents-awsAlmaLinux,fence-agents-azure-armAlmaLinux +1 more +3 morefence-agents bug fix and enhancement updateNo score- insyde kernel, tianocore edk ii, edk2 +2 moreNetworkPkg/IScsiDxe has remotely exploitable buffer overflows.8.1 High
libwacom-develAlmaLinuxlibwacom bug fix and enhancement updateNo scorelibnfsidmap-develAlmaLinuxnfs-utils bug fix and enhancement updateNo scoreNetworkManager-libnm-develAlmaLinuxNetworkManager bug fix and enhancement updateNo scoreopencryptoki-develAlmaLinuxopencryptoki bug fix and enhancement updateNo scorelibsmbclient-develAlmaLinux,libwbclient-develAlmaLinux,samba-develAlmaLinux +2 moresamba bug fix and enhancement updateNo scorepcsc-lite-ccidAlmaLinux,pcsc-lite-develAlmaLinux +1 morepcsc-lite bug fix and enhancement updateNo score- siemens solid edge se2021, solid edge se2021 firmware +1 moreA vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL...7.8 High
- siemens solid edge se2021, solid edge se2021 firmware +1 moreA vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL...7.8 High
- siemens solid edge se2021, solid edge se2021 firmware +1 moreA vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML...5.5 Medium
- siemens simatic s7-1200 cpu family (incl. siplus variants), simatic s7-1200 cpu firmware, simatic step 7 \(tia portal\) +2 moreA vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0...7.5 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization...3.3 Low
- siemens sinec nms, sinec network management system +1 moreA vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected...7.2 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization...5.5 Medium
- siemens automation license manager 5, automation license manager 6, automation license manager +2 moreA vulnerability has been identified in Automation License Manager 5 (All versions), Automation...7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7 plcsim advanced +59 more +61 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...5.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote...6.8 Medium
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker...6.8 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who...8.1 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote...8.8 High
- yiiframework yii, yiisoft yiisoft/yii2 +1 moreUse of Predictable Algorithm in Random Number Generator in yiisoft/yii28.1 High
seamonkeyopenSUSERecommended update for seamonkeyNo score- apache servicecombServiceComb ServiceCenter Directory Traversal7.5 High
- linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 moreA NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking...5.5 Medium
wiresharkopenSUSESecurity update for wiresharkNo scoreserenityOSS-FuzzUse-after-poison in JS::PrimitiveString::stringNo score- alpine project alpineIn Alpine through 2.24, untagged responses from an IMAP server are accepted before STARTTLS.5.9 Medium
- Show moreLoading…