CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- six apart ltd. movable typeCross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and...6.1 Medium
- sony audio usb driver, hap music transfer, sony corporation the installers of multiple sony products +2 moreUntrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and...7.8 High
- libgd** DISPUTED ** gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has...7.5 High
libexifOSS-FuzzHeap-buffer-overflow in exif_get_slongNo scorelibexifOSS-FuzzUNKNOWN READ in exif_mnote_data_apple_loadNo score- libssh, debian linux, fedoraproject fedora +4 more +6 moreA flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two...6.5 Medium
- umbraco formsA security issue in Umbraco Forms 4.0.0 to and including 8.7.5 could lead to a remote code...9.8 Critical
- forgerock access managementForgeRock Access Management (AM) before 7.0.2, when configured with Active Directory as the...9.8 Critical
- forgerock access managementIn ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection,...9.8 Critical
- popojicmsCross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php...4.3 Medium
- popojicmsDirectory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.6.5 Medium
- popojicmsCross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--...5.4 Medium
- cisco unified computing system (managed), unified computing system +1 moreCisco UCS Manager Software SSH Sessions Denial of Service Vulnerability4.3 Medium
- cisco nx-os software, nx-os +1 moreCisco Nexus 9500 Series Switches Access Control List Bypass Vulnerability5.8 Medium
- cisco nx-os software, nx-os, unified computing system +2 moreCisco NX-OS Software system login block-for Denial of Service Vulnerability5.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software MPLS OAM Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability8.6 High
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability8.6 High
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability6.0 Medium
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability4.4 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities6.5 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities6.5 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability8.1 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability8.8 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud application policy infrastructure controller +2 moreCisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability9.1 Critical
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability8.6 High
- qemu, debian linux +1 moreAn out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in...7.4 High
- gitlabDue to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an...5.5 Medium
- gitlabInsufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an...8.7 High
- gitlabUnder specialized conditions, GitLab may allow a user with an impersonation token to perform Git...6.6 Medium
- gitlabUnder specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users...5.0 Medium
- gitlabImproper authorization in the vulnerability report feature in GitLab EE affecting all versions...3.1 Low
- gitlabImproper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private...4.3 Medium
- gitlabImproper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker...2.7 Low
- gitlabImproper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to...5.4 Medium
- axis device managerA user with permission to log on to the machine hosting the AXIS Device Manager client could...5.3 Medium
- gitlabImproper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view...5.4 Medium
- mz-automation lib60870A denial of service vulnerability exists in the ASDU message processing functionality of MZ...7.5 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- gpac, debian linux +1 moreAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of...8.8 High
- Show moreLoading…