CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a...7.5 High
dotnet-host-fxr-2.1AlmaLinux,dotnet-runtime-2.1AlmaLinux,dotnet-sdk-2.1AlmaLinux +1 more +3 more.NET Core 2.1 bugfix updateNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsignedNo scorelibexifOSS-FuzzUNKNOWN READ in exif_mnote_data_apple_loadNo score- libexe project libexeA heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal...3.3 Low
- exiv2A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers...6.5 Medium
- libpff project libpffAn use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff...7.8 High
- wpcerber wp cerberWP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.9.8 Critical
- wpcerber wp cerberWP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.5.3 Medium
- owasp csrfguardCross-Site Request Forgery in OWASP CSRFGuard8.8 High
- eyoucmsCross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.5.4 Medium
- eyoucmsCross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page...8.8 High
- misp-project mispMISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php ...9.8 Critical
- typoraCross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via...6.1 Medium
- tp-link tl-wr840n firmwareIn TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow6.4 Medium
- unknown shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- rapid7 nexposeRapid7 Nexpose Security Console Ticket Access Authentication Vulnerability4.3 Medium
- torproject torTor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature...7.5 High
haproxyopenSUSESecurity update for haproxyNo score- phpgurukul vehicle parking management systemA persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle...4.8 Medium
- icinga, debian linux, icinga icinga2 +2 moreMissing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer7.5 High
- textpatternA persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in...5.4 Medium
- textpatternA cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS...5.4 Medium
- local services search engine management system project services search engine management systemA persistent cross-site scripting vulnerability was discovered in Local Services Search Engine...4.8 Medium
- local services search engine management system project services search engine management systemA SQL injection vulnerability was discovered in the editid parameter in Local Services Search...4.9 Medium
- xerosecurity sn1perIn XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application...8.8 High
- xerosecurity sn1perIn XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during...9.8 Critical
- hcc-embedded nichestack, siemens sentron 3wa com190 firmware, sentron 3wl com35 firmware +2 moreAn issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header...7.5 High
- hcc-embedded nichestack, siemens sentron 3wa com190 firmware, sentron 3wl com35 firmware +2 moreAn issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers ...9.1 Critical
- hcc-embedded nichestack, siemens sentron 3wa com190 firmware, sentron 3wl com35 firmware +2 moreAn issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an...7.5 High
- hcc-embedded nichestack, siemens 7km9300-0ae02-0aa0 firmware +1 moreAn issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an...7.5 High
- hcc-embedded nichestackAn issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c...7.5 High
- hcc-embedded nichestackThe web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial...7.5 High
- hcc-embedded nichestackAn issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The...7.5 High
- hcc-embedded nichestackAn issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker...7.5 High
- hcc-embedded nichestackAn issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists...7.5 High
- hcc-embedded internicheAn issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists...9.8 Critical
- siemens sinema remote connect client, sinema remote connect +1 moreA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1)....7.8 High
matioOSS-FuzzHeap-buffer-overflow in H5O__cont_decodeNo scoreserenityOSS-FuzzHeap-buffer-overflow in JS::Lexer::consumeNo scoreserenityOSS-FuzzUse-after-poison in JS::Reference::put_valueNo scoreqtOSS-FuzzUNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppendNo score- exiv2An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0...6.5 Medium
- fortinet fortiportalAn improper neutralization of input during web page generation vulnerability (CWE-79) in...5.8 Medium
- facebook oculus desktop, oculus desktop +1 moreDue to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a...7.8 High
- parse-community parse-serverNew anonymous user session acts as if it's created with password4.8 Medium
- fortinet fortiportalA use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below,...9.8 Critical
- centreonOS Command Injection in Centreon8.8 High
- cisco appdynamics .net agent for windows, appdynamics .net agent +1 moreAppDynamics .NET Agent Privilege Escalation Vulnerability7.8 High
- cisco web security appliance (wsa), firepower management center virtual appliance firmware, ironport web security appliance +1 more +3 moreMultiple Cisco Products Server Name Identification Data Exfiltration Vulnerability5.8 Medium
- Show moreLoading…