CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- atlassian data center, jira, jira server +1 more +3 moreThe AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0...4.8 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to...7.5 High
- atlassian data center, jira, jira server +1 more +3 moreThe Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0...6.1 Medium
- atlassian confluence server, confluence server and data center, confluence data center +2 moreIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists...9.8 Critical
- fetchmail, fedoraproject fedora +1 moreFetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such...5.9 Medium
- bscw classicOrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during...8.8 High
- bscw classicOrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via...8.8 High
- hexagongeospatial geomedia webmapMapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL...9.8 Critical
net-snmpOSS-FuzzUNKNOWN READNo score- eclipse mosquitto, the eclipse foundation eclipse mosquitto, fedoraproject fedora +2 moreIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the...5.3 Medium
- zte zxv10 m910 firmwareA conference management system of ZTE is impacted by a command execution vulnerability. Since the...9.8 Critical
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.8.8 High
- zohocorp manageengine cloud security plusZoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy...8.8 High
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security...8.8 High
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote...9.8 Critical
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5225 allows stored XSS.6.1 Medium
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.9.8 Critical
- zohocorp manageengine log360Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the...6.1 Medium
- canon -Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250...7.5 High
dracoOSS-FuzzStack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVectorNo scoredracoOSS-FuzzIndex-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbolNo scorephpOSS-FuzzHeap-use-after-free in zend_string_releaseNo scoreluaOSS-FuzzUNKNOWN READ in luaG_getfunclineNo score- cachethq cachet, catchethq catchet +1 moreConfiguration leak8.8 High
- cachethq cachet, catchethq catchet +1 moreForced reinstall8.8 High
- cachethq cachet, catchethq catchet +1 moreNew line injection during configuration edition8.8 High
- node-saml passport-samlUnlimited transforms allowed for signed nodes5.3 Medium
- openmage magento, magento-lts +1 moreData Flow Sanitation Issue Fix7.2 High
- youdiancmsA lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to...8.8 High
- dedecmsAn arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows...9.8 Critical
- wms project wmsThe GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform...9.8 Critical
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moregrant table v2 status pages may remain accessible after de-allocation Guest get permitted access...7.8 High
- ok-file-formats project ok-file-formatsHeap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the...8.8 High
- xen, debian linux, fedoraproject fedora +2 morelong running loops in grant table handling In order to properly monitor resource use, Xen...5.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreinadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant...5.5 Medium
- jupo mezzanineMezzanine Cross Site Scripting (XSS) vulnerability6.1 Medium
- simiki project simikiCommand Injection in Simiki9.8 Critical
- simiki project simikiCross Site Scripting (XSS) in Simiki6.1 Medium
- blog mini project miniCross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code...6.1 Medium
- blog mini project miniCross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code...6.1 Medium
- xen, debian linux, fedoraproject fedora +2 morexen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to...4.9 Medium
- cxuu cxuucmsSQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.7.2 High
- openmage, openmage magento-lts +1 moreLayout XML Arbitrary Code Fix7.2 High
- mariocasciaro object-path, debian linux +1 morePrototype Pollution5.6 Medium
- miniupnp project ngiflibngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode,...8.8 High
- miniupnp project ngiflibngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte()...8.8 High
- ibm maximo asset management, maximo application suite +1 moreIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This...5.4 Medium
- Show moreLoading…