CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- jupyter binderhubRemote code execution in Binderhub9.6 Critical
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpacAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- 3s-smart software solutions codesysAn unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation...8.8 High
- horner automation cscapeCscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when...7.8 High
- horner automation cscapeCscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when...7.8 High
- horner automation cscapeCscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when...7.8 High
- jupyterhub nbgitpullerCode injection in nbgitpuller9.6 Critical
- basercmsCross-site scripting vulnerability in file upload8.7 High
foxtrotgpsMageia,gpsdMageia,marbleMageia +4 more +6 moreUpdated gpsd packages fix security vulnerability and other bugsNo score- cactiCacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter...6.1 Medium
- broadcom tcpreplayBuffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the ...5.5 Medium
- nasm netwide assemblerBuffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of...3.3 Low
- podofo project podofoExposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to...5.5 Medium
- podofo project podofoStack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via...5.5 Medium
drupal/webformPackagistThe Webform module uses the CKEditor, library for WYSIWYG editing. CKEditor has released a security update that impacts Webform. An attacker that can create or edit content (even without access to CKE…No scoredrupal/admin_toolbarPackagistThe Admin Toolbar (admin_toolbar) module extends the default toolbar provided by Drupal Core with various features facilitating day-to-day editorial and administrative work. The Admin Toolbar Search s…No score- axiosys bento4The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause...7.5 High
firefoxUbuntufirefox regressionNo score- vaadin, vaadin vaadin-checkbox-flow +1 moreUnauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-204.3 Medium
cosmos_sdkcrates.ioCrate has been renamed to `cosmrs`No score- bbraun spacecom2An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows...8.1 High
- bbraun spacecom2An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to...10.0 Critical
- bbraun spacecom2An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to...6.5 Medium
- bbraun spacecom2A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to...5.9 Medium
- bbraun spacecom2A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to...6.8 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect...4.8 Medium
- primekey ejbcaAn issue was discovered in PrimeKey EJBCA before 7.6.0. As part of the configuration of the...2.2 Low
- primekey ejbcaAn issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias...2.7 Low
- primekey ejbcaAn issue was discovered in PrimeKey EJBCA before 7.6.0. CMP RA Mode can be configured to use a...5.4 Medium
- primekey ejbcaAn issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher,...2.3 Low
- nic knot resolverKnot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in...7.5 High
- artixlinux opensysusersopensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell...9.8 Critical
libexifOSS-FuzzHeap-buffer-overflow in exif_get_slongNo scorenet-snmpOSS-FuzzHeap-buffer-overflow in snmp_add_varNo scorematioOSS-FuzzUse-of-uninitialized-value in H5F_addr_decode_lenNo score- linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 moreAn out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the...7.1 High
- istioFragments in Path May Lead to Authorization Policy Bypass8.1 High
- istioAuthorization Policy Bypass Due to Case Insensitive Host Comparison8.3 High
- envoyproxy envoyIncorrect handling of H/2 GOAWAY followed by SETTINGS frames8.6 High
- envoyproxy envoyContinued processing of requests after locally generated response8.6 High
- envoyproxy envoyIncorrectly handling of URI '#fragment' element as part of the path element8.6 High
- envoyproxy envoyExcessive CPU utilization when closing HTTP/2 streams5.8 Medium
- envoyproxy envoyIncorrect concatenation of multiple value request headers in ext-authz extension8.6 High
- dedecmsThe plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP...8.8 High
- ecisp espcms-p8EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web...7.5 High
- dlink dir-816 firmwareAn issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router via the HTTP...9.8 Critical
- dlink dir-816 firmwareAn issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 750m11ac wireless...9.8 Critical
- apple ipados, macos, iphone os +2 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may…5.5 Medium
- apple ios, macos, watchos, ipados, macos +3 more +5 moreApple iOS, macOS, watchOS Sandbox Bypass Vulnerability7.5 High
- Show moreLoading…