CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- nascent remkon device managerA command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device...9.8 Critical
- mootools project mootoolsPrototype Pollution5.4 Medium
- transpile project transpileDenial of Service (DoS)6.5 Medium
- startserver project startserverDirectory Traversal7.5 High
- joplinapp joplinCross-site Request Forgery (CSRF)5.4 Medium
- pac-resolver project pac-resolverRemote Code Execution (RCE)8.1 High
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 strings7.4 High
- openssl, debian linux, netapp active iq unified manager +28 more +30 moreSM2 Decryption Buffer Overflow9.8 Critical
- sqlite, apple iphone os, macos +6 more +8 moreSegmentation fault vulnerability in SQLite sqlite3 3.36.0 via the idxGetTableInfo function, in...7.5 High
- adobe framemakerAdobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe media encoderAdobe Media Encoder VOB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- miniftpd project miniftpdA Buffer Overflow vulnerabilty exists in Miniftpd 1.0 in the do_mkd function in the ftpproto.c...6.5 Medium
- cxuu cxuucmsMultiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c...6.1 Medium
- libavIn Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c...6.5 Medium
- libavIn Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows...6.5 Medium
- libavIn Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c...6.5 Medium
- dlink dsr-500n firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DSR-500N version 1.02 contains hard-coded credentials for...9.8 Critical
- dlink dvx-2000ms firmwareD-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc...9.8 Critical
- dlink dvg-3104ms firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E...9.8 Critical
- flatcore flatcore-cmsCross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.5.4 Medium
- flatcore flatcore-cmsRemote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin...7.2 High
- nvidia caffe, nvcaffe +1 moreDependency injection in NVCaffe8.8 High
- eclipse cyclone data distribution serviceA heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the...7.5 High
- eclipse cyclone data distribution serviceA stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the...7.5 High
- iec104 project iec104A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers...7.5 High
- iec104 project iec104A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a...7.5 High
- gitlabA verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private...4.3 Medium
- gitlabImproper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12...5.3 Medium
pimcore/pimcorePackagistCKEditor 4 vulnerabilities in versions <4.16.1No scoregithub.com/argoproj/argo-workflowsGo,github.com/argoproj/argo-workflows/v2Go,github.com/argoproj/argo-workflows/v3Go +2 morePotential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client`No scoregithub.com/argoproj/argo-workflowsGo,github.com/argoproj/argo-workflows/v2Go,github.com/argoproj/argo-workflows/v3Go +2 moreArgo Server TLS requests could be forged by attacker with network accessNo score- gitlabImproper validation of invited users' email address in GitLab EE affecting all versions since 12...4.3 Medium
- gitlabA confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7...6.5 Medium
- gitlabImproper authorization in GitLab EE affecting all versions since 13.4 allowed a user who...4.9 Medium
- huawei elf-g10hnThere is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform...7.5 High
- huawei s12700 firmware, s5700 firmware, s6700 firmware +1 more +3 moreThere is a denial of service vulnerability in Huawei products. A module cannot deal with specific...7.5 High
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +1 more +3 moreThere is a denial of service vulnerability in some huawei products. In specific scenarios, due to...7.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream can cause a Denial of Service6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +10 more +12 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attack8.5 High
- Show moreLoading…