CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
tidy-html5OSS-FuzzHeap-use-after-free in prvTidyInsertedTokenNo scorelibexifOSS-FuzzHeap-buffer-overflow in exif_mnote_data_apple_loadNo scorelibexifOSS-FuzzHeap-buffer-overflow in exif_mnote_data_apple_identifyNo scoreusermodeDebianusermode - security updateNo score- fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 moreA flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via...8.8 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxy7.5 High
- nodejs node, node.js, debian linux +5 more +7 moreNode.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an...7.5 High
- nodejs node, node.js, debian linux +6 more +8 moreIf the Node.js https API was used incorrectly and "undefined" was in passed for the ...5.3 Medium
- nodejs node, node.js, netapp active iq unified manager +8 more +10 moreNode.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS,...9.8 Critical
- dolibarrStored XSS in “Dolibarr” leads to privilege escalation9.0 Critical
- tastyigniterTastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.5.4 Medium
- netsarang xshellNetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.5.3 Medium
serde_cborcrates.ioserde_cbor is unmaintainedNo scorefrrOSS-FuzzHeap-use-after-free in zebra_nhg_hash_equalNo score- ucweb ucUCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle...3.7 Low
- vec-const project vec-constvec-const attempts to construct a Vec from a pointer to a const slice7.5 High
- linux kernelA vulnerability was found in linux kernel, where an information leak occurs via...7.1 High
unicornOSS-FuzzSegv on unknown address in helper_uc_tracecodeNo score- att xmillA stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg...7.8 High
- att xmillWithin the function HandleFileArg the argument filepattern is under control of the user who...7.8 High
- att xmillWithin the function HandleFileArg the argument filepattern is under control of the user who...7.8 High
- att xmillA stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg...7.8 High
- axiosys bento4An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom:...6.5 Medium
- microsoft onefuzzImproper Authorization and Origin Validation Error in OneFuzz10.0 Critical
- att xmillA heap-based buffer overflow vulnerability exists in the XML Decompression...8.1 High
- att xmillA heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load...8.1 High
- newsletter project newsletterSQL injection in TYPO3 extension9.8 Critical
- on24 screenshareThe ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file...9.1 Critical
- deferred image processing project image processingImproper Resource Shutdown or Release in TYPO3 extension7.5 High
- routes project routesCSRF token exposure in TYPO3 extension7.5 High
- in2code femanagerCross-site Scripting in the femanager TYPO3 extension5.4 Medium
- miniorange samlSensitive Data Exposure in miniorange_saml7.5 High
- miniorange samlCross-site Scripting in TYPO3 extension5.4 Medium
- yoast seoCross-site Scripting in the yoast_seo TYPO3 extension5.4 Medium
- dcce mac1100 plc firmwareAn information disclosure vulnerability exists in the EPA protocol of Dut Computer Control...7.5 High
- dcce mac1100 plc firmwareAn issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute...9.8 Critical
- dcce mac1100 plc firmwareAn issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause...7.5 High
- dcce mac1100 plc firmwareAn arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering...7.5 High
- dcce mac1100 plc firmwareAn information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC...7.5 High
- dcce mac1100 plc firmwareAn issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to...9.8 Critical
- dated news project newsThe dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control...7.2 High
- dated news project newsThe dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure...5.3 Medium
- dated news project newsThe dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.6.1 Medium
- dated news project newsThe dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.9.8 Critical
- sunhillo surelineSunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell...9.8 Critical
- huawei hg8045q firmwareThere is a command injection vulnerability in the HG8045Q product. When the command-line...6.7 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be...5.3 Medium
- hashicorp vaultHashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.04.4 Medium
- hashicorp vaultImproper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault5.3 Medium
- nvidia data center gpu manager, data center gpu manager (dcgm) +1 moreNVIDIA DCGM contains a vulnerability in the DIAG module where any user can inject shared...7.8 High
- Show moreLoading…