CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- sapphireimsIn SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software...7.5 High
- gpacThe Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service ...5.5 Medium
- gpacBuffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause...7.8 High
- gpacThe gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service ...5.5 Medium
- gpacThe gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL...5.5 Medium
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the...9.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an...9.1 Critical
- newsone cms project cmsAn arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1...8.8 High
- canon pixma tr150 firmwareThe Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue....7.8 High
- merge-change project merge-changePrototype Pollution5.6 Medium
- asyncapi java-spring-cloud-stream-templateCode injection issue for java-spring-cloud-stream-template8.7 High
- palo alto networks pan-osPAN-OS: OS Command Injection Vulnerability in Web Interface8.8 High
- palo alto networks pan-osPAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage5.9 Medium
- palo alto networks pan-osPAN-OS: Weak Cryptography Used in Web Interface Authentication4.2 Medium
- palo alto networks pan-osPAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal6.8 Medium
- palo alto networks pan-osPAN-OS: OS Command Argument Injection in Web Interface4.9 Medium
- ibm security guardiumIBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote...5.3 Medium
- ibm security guardiumIBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted...4.3 Medium
- ibm security guardiumIBM Security Guardium 11.2 does not require that users should have strong passwords by default,...4.7 Medium
- tp-link ue330 firmwareTP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the...5.9 Medium
- sony srs-xb33 firmware, srs-xb43 firmware +1 moreSony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech...5.9 Medium
- raspberrypi raspberry pi 3 model b\+ firmware, raspberry pi 4 model b firmware +1 moreRaspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the...5.9 Medium
- creative pebble firmware, pebble plus firmware, pebble v2 firmware +1 more +3 moreCREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from...5.9 Medium
- logitech s120 firmware, z120 firmware +1 moreLogitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech...5.9 Medium
- jbl go 2 firmwareJBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED...5.9 Medium
- benda miracase hmub500 firmwareMIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the...5.9 Medium
- securimage-wp-fixedSecurimage-WP-Fixed <= 3.5.4 Reflected Cross-Site Scripting6.1 Medium
- trustedfirmware op-teeIn Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call...9.1 Critical
- intel lapqc71a firmware, lapqc71b firmware, lapqc71c firmware +1 more +3 moreImproper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before...7.8 High
- intel avermedia capture cardUncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers...7.8 High
- intel ethernet controller e810 firmwareImproper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before...5.5 Medium
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before...7.1 High
- intel ethernet controller e810 firmware, x722da2 firmware, x722da4fh firmware +1 more +3 moreImproper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA...7.8 High
- intel optane persistent memory firmwareImproper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or...4.4 Medium
- intel graphics driversImproper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may...7.8 High
- intel graphics driver, intel(r) graphics driver, graphics drivers +2 moreUse after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and...5.5 Medium
- intel intel(r) graphics driver, graphics drivers +1 moreImproper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow...7.8 High
- intel ethernet controller e810 firmwareOut-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...6.5 Medium
- intel ethernet controller e810 firmwareUncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series...4.4 Medium
- intel ethernet controller e810 firmwareUncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...4.4 Medium
- intel ethernet controller e810 firmwareImproper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...4.4 Medium
- intel ethernet controller e810 firmwareUncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...4.4 Medium
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers...4.4 Medium
- fatek fvdesignerFATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write...7.8 High
- fatek fvdesignerFATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer...7.8 High
- fatek fvdesignerAn uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be...7.8 High
- tinyobjloader project tinyobjloaderAn improper array index validation vulnerability exists in the LoadObj functionality of...9.6 Critical
- codeceptionDeserialization of Untrusted Data7.7 High
- f-secure safe, mobile security +1 moreF-Secure Safe browser for Android vulnerable to Address Bar Spoofing3.5 Low
- f-secure safe, mobile security +1 moreF-Secure Safe browser for iOS vulnerable to Address Bar Spoofing3.5 Low
- Show moreLoading…