CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- fig2dev project fig2devA global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers...5.5 Medium
- fig2dev project fig2devA stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b...5.5 Medium
- fig2dev project fig2devA global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers...5.5 Medium
- fig2dev project fig2devA global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to...5.5 Medium
- fig2dev project fig2devA global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of...5.5 Medium
- ffmpeg, debian linux +1 moreA heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers...8.8 High
- ffmpeg, debian linux +1 moreA heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4...6.5 Medium
- d-link dir-825, dlink dir-825 firmware +1 more** UNSUPPORTED WHEN ASSIGNED **Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02,...7.5 High
- dlink dsp-w215 firmware** UNSUPPORTED WHEN ASSIGNED **Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1...7.5 High
- dlink dsl-2740r firmware** UNSUPPORTED WHEN ASSIGNED ** Null Pointer Dereference vulnerability exists in D-Link DSL-2740R...7.5 High
- kyma-project kymaDue to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.7.6 High
- trendnet tew-755ap2kac firmware, tew-755ap firmware, tew-821dap2kac firmware +1 more +3 moreA Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW...6.5 Medium
- trendnet tew-755ap2kac firmware, tew-755ap firmware, tew-821dap2kac firmware +1 more +3 moreNull Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1...7.5 High
- dell data protection search, emc data protection search, emc integrated data protection appliance +2 moreDell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an...8.8 High
- dell emc networker, networker +1 moreDell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API...6.5 Medium
- dell wyse thinosDell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure...3.9 Low
- dell wyse thinosDell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An...7.2 High
- dell powerscale onefsDell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may...7.8 High
- chamiloChamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through...6.1 Medium
- chamilo lmsA Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social...6.1 Medium
- chamilo lmsA user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user,...5.4 Medium
- contiki-os contikiIn Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial...7.5 High
- contiki-os contikiIn Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to...7.5 High
- trendnet tew-755ap2kac firmware, tew-755ap firmware, tew-821dap2kac firmware +1 more +3 moreNull Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1...7.5 High
- trendnet tew-755ap2kac firmware, tew-755ap firmware, tew-821dap2kac firmware +1 more +3 moreNull Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1...7.5 High
- trendnet tew-755ap2kac firmware, tew-755ap firmware, tew-821dap2kac firmware +1 more +3 moreNull Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03,...7.5 High
- trendnet tew-755ap2kac firmware, tew-755ap firmware, tew-821dap2kac firmware +1 more +3 moreNull Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW...7.5 High
- set user project userThe set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation...9.8 Critical
- serverless offline project offlineIncorrect Authorization in serverless-offline9.8 Critical
- dlink dap-2310 firmware, dap-2330 firmware, dap-2360 firmware +6 more +8 moreNull Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028,...7.5 High
- dlink dap-2310 firmware, dap-2330 firmware, dap-2360 firmware +6 more +8 moreNull Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028,...7.5 High
- dlink dap-2310 firmware, dap-2330 firmware, dap-2360 firmware +6 more +8 moreNull pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP...7.5 High
- live555Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s...7.5 High
- live555Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP...6.5 Medium
- live555Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP...6.5 Medium
- owntone serverOwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.9.8 Critical
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting via Rich-Text Content6.1 Medium
- yiiframework yii, yiisoft yiisoft/yii2 +1 moreUse of Predictable Algorithm in Random Number Generator in yiisoft/yii28.1 High
- nuvoton npct75x firmwareAn attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0...3.8 Low
- ctparental project ctparentalCTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin...6.1 Medium
- ctparental project ctparentalCTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental...8.8 High
- ctparental project ctparentalCTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin...7.8 High
- kuba project kubaA vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in...5.5 Medium
- nim-langA vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to...5.5 Medium
- kde kmailIn KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext...5.3 Medium
- kde trojitaIn KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses...3.7 Low
- sap infraboxDue to improper input validation in InfraBox, logs can be modified by an authenticated user.4.3 Medium
- sap netweaver enterprise portalUnder certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7...8.3 High
- sap netweaver enterprise portal, sap se netweaver enterprise portal (application extensions) +1 moreUnder certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does...8.3 High
- sap netweaver knowledge management, sap se netweaver (knowledge management) +1 moreSAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary...6.1 Medium
- Show moreLoading…