CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- talelin lin-cms-flaskIncorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive...9.8 Critical
- talelin lin-cms-flaskLin-CMS-Flask Cross Site Scripting (XSS) vulnerability6.1 Medium
- talelin lin-cms-flaskLin-CMS-Flask vulnerable to Improper Authentication9.8 Critical
- online catering reservation system project catering reservation systemDirectory traversal in Online Catering Reservation System due to lack of validation in index.php.7.5 High
- hospital management system project management systemPersistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin...6.1 Medium
- hospital management system project management systemPersistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin...6.1 Medium
- hospital management system project management systemUnauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php.5.3 Medium
- hospital management system project management systemSQL Injection vulnerability in Hospital Management System due to lack of input validation in...9.8 Critical
- simple image gallery web app project image gallery web appAn unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web...9.8 Critical
- online catering reservation system project catering reservation systemA cross-site scripting (XSS) vulnerability in Online Catering Reservation System using PHP on...5.4 Medium
- exponentcmsA HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A...4.3 Medium
- crocoblock jetengineCrocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.5.4 Medium
spirv_headerscrates.iospirv_headers is unmaintained, use spirv insteadNo score- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement update8.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs...8.8 High
- realtek rtl819x jungle software development kitRealtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that...7.5 High
- realtek rtl819x jungle software development kitRealtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that...9.8 Critical
- realtek jungle software development kit (sdk), rtl819x jungle software development kit +1 moreRealtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that...9.8 Critical
- realtek ap-router sdk, rtl819x jungle software development kit +1 moreRealtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management...9.8 Critical
- mimetic books, unknown mimetic books +1 moreMimetic Books <= 0.2.13 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- unknown wonder pdf embedWonder PDF Embed < 1.7 - Contributor+ Stored XSS5.4 Medium
- unknown wonder video embedWonder Video Embed < 1.8 - Contributor+ Stored XSS5.4 Medium
- current book project book, unknown current book +1 moreCurrent Book <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- custom login redirect project login redirect, unknown custom login redirect +1 moreCustom Login Redirect <= 1.0.0 - CSRF to Stored XSS6.1 Medium
- light messages project messages, unknown light messages +1 moreLight Messages <= 1.0 - CSRF to Stored XSS6.1 Medium
- phonetrack meu site manager, unknown phonetrack meu site manager +1 morePhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS5.4 Medium
- cozmoslabs profile builder, unknown user registration & user profile – profile builder +1 moreProfile Builder < 3.4.9 - Admin Access via Password Reset9.8 Critical
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker < 1.13.60 - Authenticated Stored XSS5.4 Medium
- e4jvikwp vikrentcar car rental management system, vikwp car rental management system +1 moreVik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- syam mohan wpfront notification bar, wpfront notification bar +1 moreWPFront Notification Bar < 2.0.0.07176 - Authenticated Stored XSS4.8 Medium
- unknown video posts webcam recorderVideo Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS5.4 Medium
- embeds for youtube plugin support youtube embed, youtube embed project embed +1 moreYouTube Embed < 5.2.2 - Contributor+ Stored XSS5.4 Medium
- unknown verse-o-maticVerse-O-Matic <= 4.1.1 - CSRF to Stored XSS6.1 Medium
- draftpress my site auditMy Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)5.5 Medium
- social tape project tape, unknown social tape +1 moreSocial Tape <= 1.0 - CSRF to Stored XSS6.1 Medium
- telugu bible verse daily project bible verse daily, unknown తెలుగు బైబిల్ వచనములు +1 moreTelugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS6.1 Medium
- shantz wordpress qotd project wordpress qotd, unknown shantz wordpress qotd +1 moreShantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF4.3 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - File Upload Path Traversal4.9 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVG6.1 Medium
- bikeshed project bikeshedArbitrary Code Injection7.8 High
- bikeshed project bikeshedDirectory Traversal5.5 Medium
- apache airflowNo Authentication on Logging Server5.3 Medium
- d-link dsl-2750u, dlink dsl-2750u firmware +1 moreD-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command...7.8 High
- d-link dsl-2750u, dlink dsl-2750u firmware +1 moreD-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized...5.5 Medium
- onenavOneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's...7.5 High
- imgurl project imgurlCross-site scripting in imgURL5.4 Medium
- gitit project gititIn gitit before 0.15.0.0, the Export feature can be exploited to leak information from files.7.5 High
- compo composr cmsIn ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.5.4 Medium
- compo composr cmsIn ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the...6.1 Medium
- atlassian jira server, jira server and data center, jira data center +2 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to read...5.3 Medium
- Show moreLoading…