CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- risc-v instruction set manual, riscv.org machine trap base address (mtvec) register +1 moreThe RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector...9.8 Critical
- mitel micollabThe AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the...4.8 Medium
- mitel interaction recordingThe PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could...4.9 Medium
- mitel micontact center businessThe Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and...9.1 Critical
- mitel micollabThe MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to get...6.5 Medium
- mitel micollabThe MiCollab Client service in Mitel MiCollab before 9.3 could allow an unauthenticated user to...9.8 Critical
- mitel micollabThe MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to...5.4 Medium
- mitel micollabThe AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an...3.7 Low
- mitel micollabThe MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to...6.5 Medium
- mitel micollabThe SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to...6.5 Medium
com.epam.reportportal:service-apiMavenXML External Entity Reference7.5 High- mitel micollabThe Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to...6.1 Medium
- discourseInformation exposure in Discourse4.3 Medium
- discourseRe-use of email tokens in Discourse5.3 Medium
- openbaraza human capital managementopenBaraza HCM 3.1.6 does not properly neutralize user-controllable input: an unauthenticated...6.1 Medium
- netless flat serverThe remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts in netless Agora Flat...9.1 Critical
- openbaraza human capital managementopenBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected...6.1 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A...4.4 Medium
- craftcms commerce, hcltechsw hcl commerce +1 more" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE)...9.1 Critical
- 2n access unit 2.0 firmwareOn 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the...4.6 Medium
- nagios xiA path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component...8.8 High
- nagios xi switch wizardNagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through...9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because xi-sys.cfg is...7.8 High
- nagios xi watchguard wizardNagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through...9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh...7.8 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation...7.5 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to local privilege escalation because cleaner.php...7.8 High
- nagios xiNagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications...9.8 Critical
- nagios xiNagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated...5.3 Medium
- nagios xiAn open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to...6.1 Medium
- nagios xi docker wizardNagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in...9.8 Critical
- google tensorflowUse after free and segfault in shape inference functions in TensorFlow6.6 Medium
- ckeditor, ckeditor ckeditor4, debian linux +10 more +12 moreExecution of JavaScript code using malformed HTML in ckeditor7.3 High
- google tensorflowArbitrary code execution due to YAML deserialization9.3 Critical
- google tensorflowSegfault on strings tensors with mistmatched dimensions in TensorFlow5.5 Medium
- google tensorflowCrash in NMS ops caused by integer conversion to unsigned in TensorFlow5.5 Medium
- google tensorflow`CHECK`-fail in `MapStage` in TensorFlow5.5 Medium
- google tensorflowIncomplete validation in `QuantizeV2` in TensorFlow7.8 High
- google tensorflowUse of unitialized value in TensorFlow Lite4.4 Medium
- google tensorflowIncomplete validation in `MaxPoolGrad` in TensorFlow5.5 Medium
- google tensorflowIncomplete validation in MKL requantization in TensorFlow7.8 High
- google tensorflowMissing validation in shape inference for `Dequantize` in TensorFlow5.5 Medium
- google tensorflowDivision by zero in TensorFlow Lite division operations5.5 Medium
- google tensorflowDivision by zero in TensorFlow Lite pooling operations5.5 Medium
- google tensorflowDivision by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex`5.5 Medium
- google tensorflowHeap OOB in `UpperBound` and `LowerBound` in TensorFlow5.5 Medium
- google tensorflowDivision by zero in LSH in TensorFlow Lite5.5 Medium
- google tensorflowHeap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow7.1 High
- google tensorflowHeap OOB in `SdcaOptimizerV2` in TensorFlow5.5 Medium
- polipo project polipo** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1, when NDEBUG is used, allows a heap-based...7.5 High
- Show moreLoading…