CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- cisco video surveillance 7000 series ip cameras, video surveillance 7000 ip camera firmware +1 moreCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability6.5 Medium
- cisco application extension platform, small business rv series router firmware, rv110w wireless-n vpn firewall firmware +3 more +5 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability9.8 Critical
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability6.7 Medium
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability4.7 Medium
- cisco secure email and web manager, content security management appliance (sma) +1 moreCisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability5.4 Medium
- ping identity rsa securid integration kitIn Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur.7.5 High
- hcc-embedded nichestack tcp\/ipThe DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact...9.8 Critical
- hcc-embedded nichestack ipv4An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing...7.5 High
- hcc-embedded nichestack tcp\/ipThe DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The...7.5 High
- hcc-embedded nichestack tcp\/ipThe DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the...7.5 High
- eyoucmsCross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin...8.8 High
- isc bind, fedoraproject fedora, isc bind9 +2 moreA too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use7.5 High
- txjia imcatA remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat...8.8 High
- joyplus-cms project joyplus-cmsA vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access...7.5 High
- find a place ljcms project a place ljcmsA SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows...7.5 High
- webrecorder pywbCross-site scripting in pywb6.1 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreUntrusted Search Path in Nextcloud Desktop Client7.3 High
- live555Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.7.5 High
- live555liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application...5.5 Medium
- dotcmsIncorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges...8.8 High
- eyoucmsCross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the...6.1 Medium
- webtareas project webtareasPath Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php...6.5 Medium
- ansi-html project ansi-htmlRegular Expression Denial of Service (ReDoS)7.5 High
- trim-off-newlines project trim-off-newlinesRegular Expression Denial of Service (ReDoS)5.3 Medium
- nextcloud desktop, debian linux, kiteworks security-advisories +2 moreEnd-to-end encryption device setup did not verify public key6.5 Medium
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 High
- pimcoreImproper Neutralization of Formula Elements in a CSV File in pimcore/pimcore8.0 High
- google androidIn OMA DRM, there is a possible memory corruption due to improper input validation. This could...6.7 Medium
- google androidIn OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to...6.7 Medium
- google androidIn ged, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to improper input validation....5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to improper input validation....5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to improper input validation....5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to improper input validation....5.5 Medium
- google androidIn memory management driver, there is a possible information disclosure due to a missing...5.5 Medium
- google androidIn asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This...5.5 Medium
- google androidIn clk driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- yclasStatic (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install...6.1 Medium
- 3s-smart software solutions codesysA unsafe deserialization vulnerability exists in the ObjectManager.plugin Project...8.8 High
- 3s-smart software solutions codesysA unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream...8.8 High
- seacmsSQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code...9.8 Critical
- aitecmsSQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component...7.2 High
- gpacMultiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding...8.8 High
haproxyopenSUSESecurity update for haproxyNo scorehaproxySUSESecurity update for haproxyNo score- att xmillA heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor:...8.1 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpac, debian linux +1 moreMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- gpacMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding...8.8 High
- Show moreLoading…