CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- embysupport security, ibm resilient security orchestration automation and response +1 moreIBM Security SOAR performs an operation at a privilege level that is higher than the minimum...5.6 Medium
- embysupport security, ibm resilient security orchestration automation and response +1 moreIBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker...5.9 Medium
- arm china star-mc1 firmware, cortex-m33 firmware, cortex-m35p firmware +1 more +3 moreCertain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a...3.4 Low
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii6.5 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii6.5 Medium
- erident custom login and dashboard project custom login and dashboard, libin v babu erident custom login and dashboard +1 moreErident Custom Login and Dashboard < 3.5.9 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- hmplugin hm multiple rolesHM Multiple Roles < 1.3 - Arbitrary Role Change8.8 High
- simple banner project banner, unknown simple banner +1 moreSimple Banner < 2.10.4 - Authenticated Stored XSS4.8 Medium
- harmonic design hd quizHD Quiz < 1.8.4 - Authenticated Stored XSS5.4 Medium
- contact form 7 captcha project form 7 captcha, unknown contact form 7 captcha +1 moreContact Form 7 Captcha < 0.0.9 - CSRF to Stored XSS8.8 High
- unknown wpfront scroll top, wpfront scroll top +1 moreWPFront Scroll Top < 2.0.6.07225 - Authenticated Stored XSS5.4 Medium
- lifterlms, unknown lms by lifterlms – online course, membership & learning management system plugin for wordpress +1 moreLifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR7.5 High
- unknown wp smsWP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting5.4 Medium
- 3.7designs project statusProject Status <= 1.6 - Reflected Cross-Site Scripting (XSS)5.4 Medium
- nimble3 m-vsliderM-vSlider <= 2.1.3 - Authenticated (admin+) SQL Injection7.2 High
- unknown email subscriber, email-subscriber project email-subscriber +1 moreEmail Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)6.1 Medium
- unknown diary & availability calendar, roosty diary-availability-calendar +1 moreDiary & Availability Calendar <= 1.0.3 - Authenticated (subscriber+) SQL Injection8.8 High
- unknown paytm – donation plugin, freelancetoindia paytm-pay +1 morePaytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection7.2 High
- timeline calendar project calendar, unknown timeline calendar +1 moreTimeline Calendar <= 1.2 - Authenticated (admin+) SQL Injection7.2 High
- simple events calendar project events calendar, unknown simple events calendar +1 moreSimple Events Calendar <= 1.4.0 - Authenticated (admin+) SQL Injection7.2 High
- edit comments project comments, unknown edit comments +1 moreEdit Comments <= 0.3 - Unauthenticated SQL Injection9.8 Critical
- broken link manager project link manager, unknown broken link manager +1 moreBroken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection7.2 High
- aceide project aceideAceIDE <= 2.6.2 - Authenticated (admin+) Arbitrary File Access4.9 Medium
- kn fix your title project fix your title, unknown kn fix your title +1 moreKN Fix Your Title <= 1.0.1 - Authenticated Stored XSS5.4 Medium
- unknown maintenanceMaintenance < 4.03 - Authenticated Stored XSS4.8 Medium
- unknown charitable – donation plugin, wpcharitable charitable +1 moreCharitable – Donation Plugin < 1.6.51 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- awordpresslife grid gallery – photo image grid gallery, awplife grid gallery +1 moreGrid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)5.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.12.0 - Authenticated Stored XSS4.8 Medium
- quantumcloud slider hero, unknown slider hero with animation, video background & intro maker +1 moreSlider Hero < 8.2.7 - Contributor+ SQL Injection8.8 High
- satollo giveawayGiveaway <= 1.2.2 - Authenticated SQL Injection7.2 High
- unknown simple social media share buttons – social sharing for everyone, wpbrigade simple social media share buttons +1 moreSimple Social Media Share Buttons < 3.2.3 - Contributor+ Stored XSS5.4 Medium
- f-secure atlant, elements endpoint protection, endpoint protection products on windows, mac and linux security +1 more +3 moreDenial-of-Service (DoS) Vulnerability4.6 Medium
- redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...6.5 Medium
- apache portable runtime, portable runtime (apr), oracle http server +2 moreRegression of CVE-2017-126137.1 High
- netmodule router softwareCertain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with...8.8 High
- netmodule router softwareCertain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with...9.8 Critical
- netmodule router softwareCertain NetModule devices have Insecure Password Handling (cleartext or reversible encryption),...7.5 High
- altus hadron xtorm hx3040 firmware, nexto nx3003 firmware, nexto nx3004 firmware +12 more +14 moreHardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron...7.5 High
- altus hadron xtorm hx3040 firmware, nexto nx3003 firmware, nexto nx3004 firmware +12 more +14 moreAuthenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto...8.8 High
- altus hadron xtorm hx3040 firmware, nexto nx3003 firmware, nexto nx3004 firmware +12 more +14 moreCross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices...6.5 Medium
- openstack neutronOpenStack Neutron vulnerable to hardware address impersonation9.1 Critical
- osgeo owslib, pywps, debian linux +2 moreXML External Entity Injection in PyWPS7.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to a Remote Command Execution attack8.5 High
- mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1...6.5 Medium
- ledgersmb, ledgersmb ledgersmb/ledgersmb, debian linux +2 moreImproper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb5.9 Medium
- ledgersmb, ledgersmb ledgersmb/ledgersmb, debian linux +2 moreCross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb8.2 High
- ledgersmb, ledgersmb ledgersmb/ledgersmb, debian linux +2 moreCross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb8.8 High
- arm mbed tls, debian linux, siemens logo\! cmr2020 firmware +5 more +7 moreAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)....7.5 High
- arm mbed tlsAn issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when...5.9 Medium
- Show moreLoading…