CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found9.8 Critical
- pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie5.5 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it3.3 Low
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response5.4 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding7.5 High
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information5.5 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings5.4 Medium
- pepperl-fuchs wha-gw-f2d2-0-as- z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway7.5 High
- formtools coreAn issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected...5.4 Medium
- formtools coreAn issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer...6.1 Medium
- formtools coreAn issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the...9.8 Critical
- outsystems lifetime management console, outsystems, outsystems platform server +2 moreA stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04,...6.1 Medium
- kramerav viawareKRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because...9.8 Critical
- easycorp zentaoA cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute...6.1 Medium
- easycorp zentaoA cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3...4.3 Medium
- easycorp zentaoThe Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to...7.2 High
dracoOSS-FuzzHeap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDecoNo scoreledgersmbDebianledgersmb - regression updateNo scorepostgresql-9.6Debianpostgresql-9.6 - security updateNo score- git-scm git, debian linux +1 moregit_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline...7.5 High
- isaacs node-tar, npmjs tar, debian linux +2 more +4 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links8.2 High
- isaacs node-tar, npmjs tar, debian linux +2 more +4 moreArbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links8.2 High
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 High
- sernet veriniceIn the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.8.8 High
- vercel next.jsXSS in Image Optimization API for Next.js versions between 10.0.0 and 11.1.07.5 High
- geysermc geyserUser impersonation due to incorrect handling of the login JWT7.4 High
- chshcms cscmsA remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows...9.8 Critical
- rocket.chatReDOS in Rocket.Chat4.3 Medium
- flarum framework, totaljs total.js +1 moreCode injection in total.js7.5 High
- hedgedocXSS vector in slide mode speaker-view8.1 High
- libjxl project libjxllibjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codec_apng.cc jxl:...6.5 Medium
- libjxl project libjxllibjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase:...7.5 High
- pagerduty rundeckCross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server7.2 High
- pagerduty rundeckYAML deserialization can run untrusted code8.8 High
- testzentrum-odw testerfassungA Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung...8.1 High
- drk-odenwaldkreis testerfassungMultiple cross-site scripting (XSS) vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021...6.1 Medium
- midnight-commander midnight commanderAn issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP...7.5 High
- edgegallery developer-beAn issue was discovered in EdgeGallery/developer before v1.0. There is a "Deserialization of yaml...9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access...9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper...9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the...6.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in...9.8 Critical
- vmware vrealize log insight, cloud foundation +1 moreVMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS)...5.4 Medium
- kyle phillips nested pagesNested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification8.1 High
- kyle phillips nested pagesNested Pages <= 3.1.15 Open Redirect4.7 Medium
- booster for woocommerce, pluggabl llc booster for woocommcerce +1 moreBooster for WooCommerce <= 5.4.3 Authentication Bypass9.8 Critical
- devowl real media library, devowl.io wordpress real media library +1 moreWordPress Real Media Library <= 4.14.1 Author-only Stored Cross-Site Scripting6.4 Medium
- freebsdIn FreeBSD 13.0-STABLE before n246938-0729ba2f49c9, 12.2-STABLE before r370383, 11.4-STABLE...8.1 High
- freebsdIn FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE...7.8 High
- Show moreLoading…