CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- axiosys bento4A heap-based buffer overflow exists in the AP4_CttsAtom::AP4_CttsAtom component located in /Core...7.5 High
- axiosys bento4A heap-based buffer overflow exists in the AP4_StdcFileByteStream::ReadPartial component located...7.5 High
- axiosys bento4An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the...7.5 High
- axiosys bento4An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the...7.5 High
- edx edx-platformOpen edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted...6.1 Medium
- zint barcode generatorZint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to...6.5 Medium
- ced project cedImproper Handling of Unexpected Data Type in ced7.5 High
- cyberoamworks netgenie c0101b1-20141120-ng11vo firmwareCyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/ft.php?u=[XSS]...6.1 Medium
- att xmillA memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T...8.1 High
- tp-shopSQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill...9.8 Critical
- prusa3d prusaslicerA use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of...8.8 High
- rukovoditelAn exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the...5.4 Medium
- rukovoditelAn exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the...5.4 Medium
- mozilla firefoxFirefox for Android could get stuck in fullscreen mode and not exit it even after normal...6.5 Medium
- disc-soft daemon toolsA VULNERABILITY_CLASS vulnerability exists in the FEATURE functionality of Disc Soft Ltd Deamon...8.1 High
- phome empirecmsA remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute...9.8 Critical
- blackberry qnx os for medical, qnx os for safety, qnx software development platform +1 more +3 moreAn integer overflow vulnerability in the calloc() function of the C runtime library of affected...9.0 Critical
- yandex browserClickhouse prior to versions v20.8.18.32-lts, v21.1.9.41-stable, v21.2.9.41-stable, v21.3.6.55...7.8 High
- seacmsCross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2)...6.1 Medium
- diezCommand injection in @diez/generation3.9 Low
- pixelimityCross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to...4.8 Medium
- smartertools smartermailAn issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle...8.1 High
- fehcom s\/qmailIn s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS...5.9 Medium
haproxyUbuntuhaproxy vulnerabilitiesNo score- lenovo driver management, drivers management +1 moreA DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719...7.3 High
- lenovo smart camera x3, x5, and c2e firmware, smart camera c2e firmware, smart camera x3 firmware +1 more +3 moreA vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command...7.2 High
- lenovo smart camera x3, x5, and c2e firmware, smart camera c2e firmware, smart camera x3 firmware +1 more +3 moreA vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an...9.4 Critical
- lenovo smart camera x3, x5, and c2e firmware, smart camera c2e firmware, smart camera x3 firmware +1 more +3 moreA vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code...6.6 Medium
- motorola mm1000 moca adapter, mm1000 firmware +1 moreA privilege escalation vulnerability was reported in the MM1000 device configuration web server,...6.8 Medium
- motorola mm1000 moca adapter, mm1000 firmware +1 moreThe Motorola MM1000 device configuration portal can be accessed without authentication, which...6.1 Medium
- zstack rest api, zstackio zstack +1 morePost-authentication Remote Code Execution (RCE) in ZStack REST API9.6 Critical
- seacmsCross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which...6.5 Medium
haproxySUSESecurity update for haproxyNo scorehaproxySUSESecurity update for haproxyNo score- dolibarr, dolibarr erp\/crm +1 moreImproper User Access Control in "Dolibarr" Leads to Account Takeover4.7 Medium
- dolibarrAccount Takeover in "Dolibarr" via Password Reset Functionality8.8 High
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery...4.3 Medium
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by...5.4 Medium
libexifOSS-FuzzHeap-buffer-overflow in exif_get_slongNo scoreespeak-ngOSS-FuzzHeap-use-after-free in TranslateLetterNo scorelibvipsOSS-FuzzUNKNOWN READ in exif_mnote_data_apple_loadNo scorelibexifOSS-FuzzHeap-buffer-overflow in exif_get_sshortNo score- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2...5.3 Medium
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...7.5 High
- runzero platform, shopware +1 moreAuthenticated server-side request forgery in file upload via URL.8.8 High
- runzero platform, shopware +1 moreCross-Site Scripting via SVG media files8.0 High
- runzero platform, shopware +1 moreInsecure direct object reference of log files of the Import/Export feature6.5 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource...2.5 Low
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment...7.5 High
- Show moreLoading…