CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- misskeyXSS vulnerability using dialog8.0 High
- northern.tech useradmThe useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in...7.5 High
- opcfoundation local discover server, siemens simatic net pc, simatic process historian opc ua server firmware +4 more +6 moreIn OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a...7.5 High
net-snmpOSS-FuzzUNKNOWN WRITE in snmp_add_varNo scoreluaOSS-FuzzHeap-buffer-overflow in luaG_runerrorNo score- squashfs-tools project squashfs-tools, debian linux, fedoraproject fedora +1 more +3 moresquashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry...8.1 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreCVE-2021-3739 does not affect BellSoft software7.1 High
- linux kernelA security issue was found in Linux kernel’s OverlayFS subsystem where a local attacker who has...5.5 Medium
- cacti, debian linux +1 moreMultiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin...6.1 Medium
- openzeppelin contracts, openzeppelin-contracts +1 moreTimelockController vulnerability in OpenZeppelin Contracts10.0 Critical
- openzeppelin contracts, openzeppelin-contracts-upgradeable +1 moreTimelockController vulnerability in OpenZeppelin Contracts10.0 Critical
- nuishopNuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.9.8 Critical
- rails https://github.com/rails/rails, rubyonrails rails +1 moreOpen Redirect in ActionPack6.1 Medium
- cachethq cachetUnauthenticated SQL Injection8.1 High
- discourseCross-site scripting via category name in Discourse4.4 Medium
- arubanetworks airwaveA remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management...4.8 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability...6.2 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability...8.4 High
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to...5.6 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX...6.2 Medium
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive...6.5 Medium
- octobercms octoberAuthentication bypass in Octobercms7.4 High
- october cms cms, octobercms october +1 moreAccount Takeover in Octobercms8.2 High
- hucartSQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the...8.8 High
- hucartSQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the...8.8 High
- hucartCross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field....5.4 Medium
- rukovoditelStored cross-site scripting (XSS) vulnerability in the Name of application field found in the...5.4 Medium
- rukovoditelStored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the...5.4 Medium
- qdpmCross Site Scripting (XSS) vulnerability exists in qdPM 9.1 in the Heading field found in the...5.4 Medium
- bigtreecms bigtree cmsCross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found...5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability4.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.0 Medium
- emtec zocEmTec ZOC before 8.02.2 allows \e[201~ pastes, a different vulnerability than CVE-2021-32198.9.8 Critical
- solarwinds web help deskAccess Restriction bypass vulnerability via referrer spoof - Business Logic Bypass5.3 Medium
- care2x hospital information managementStored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7...5.4 Medium
- yourls, yourls yourls/yourls +1 moreImproper Restriction of Rendered UI Layers or Frames in yourls/yourls6.5 Medium
- digitaldruid hoteldruidDigitalDruid HotelDruid 3.0.2 has an XSS vulnerability in prenota.php affecting the fineperiodo1...6.1 Medium
- vizio e50x-e1 firmware, p65-f1 firmware +1 moreSeveral high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do...9.8 Critical
- thecodingmachine gotenbergAn SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion,...7.5 High
- thecodingmachine gotenbergIt is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg...6.1 Medium
- zzcmsA remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows...7.2 High
- wdoyo doyocmsA SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary...8.8 High
- thinkphp-zcms project thinkphp-zcmsthinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.9.8 Critical
- feehi feehicmsCross-site scripting in feehicms6.1 Medium
- spring-boot-admin project spring-boot-adminA stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot...5.4 Medium
- dzzofficeA cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Setting screen of ContentType Information Widget Plugin of...6.1 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7...6.1 Medium
- Show moreLoading…