CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- jeecms JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to... 5.4 Medium
- flamecms project flamecms FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. 9.8 Critical
- flamecms project flamecms FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. 9.8 Critical
- tendacn ac9 firmware A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote... 7.2 High
- pydio cells Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote... 6.5 Medium
- wire server, wireapp wire-server +1 more CORS `Access-Control-Allow-Origin` settings are too lenient 5.7 Medium
- reiner-sct timecard REINER timeCard 6.05.07 installs a Microsoft SQL Server with an sa password that is hardcoded in... 9.8 Critical
- pydio cells Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to... 6.5 Medium
- pydio cells Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated... 6.5 Medium
- zohocorp manageengine opmanager Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the... 9.8 Critical
- netscout ngeniusone NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in... 5.4 Medium
- netscout ngeniusone NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting (XSS) in the... 5.4 Medium
- netscout ngeniusone NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector. 5.4 Medium
- netscout ngeniusone NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site... 4.8 Medium
- netscout ngeniusone NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks. 6.5 Medium
- netscout ngeniusone NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass (to access an endpoint)... 4.3 Medium
- netscout ngeniusone NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the... 5.7 Medium
- netscout ngeniusone NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting (XSS) in the... 5.4 Medium
- rudp project rudp rudp v0.6 was discovered to contain a memory leak in the component main.c. 7.5 High
- libiec iccp mod project iccp mod libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c. 6.5 Medium
- libiec iccp mod project iccp mod libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c. 6.5 Medium
- libiec iccp mod project iccp mod libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c. 6.5 Medium
- ibm cloud pak for security IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than... 5.9 Medium
- ibm cloud pak for security IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker... 5.4 Medium
- ibm sterling order management IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This... 6.1 Medium
- fortinet fortimanager An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below... 5.4 Medium
- fortinet fortimanager An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4... 3.7 Low
- parse-community parse-server LiveQuery publishes user session tokens 7.5 High
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 more Adobe Acrobat Reader DC URI Parsing Out-Of-Bounds Read 3.3 Low
- microsoft usbredir, debian linux, fedoraproject fedora +1 more +3 more A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the... 6.4 Medium
- cockpit-hq cockpit, redhat enterprise linux +1 more Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to... 4.3 Medium
- baicloud-cms project baicloud-cms BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an... 9.1 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Missing Encryption of Sensitive Data 7.3 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor 9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Insufficiently Protected Credentials-2 9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Use of Hard-coded Credentials 9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Improper Access Control 8.8 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Insufficiently Protected Credentials-1 8.8 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Weak Password Requirements 9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Cross-Site Request Forgery (CSRF) 8.8 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Path Traversal-4 9.1 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Path Traversal-3 7.5 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Broken Authentication 9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Path Traversal-1 7.5 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 more ECOA BAS controller - Path Traversal-1 9.8 Critical
- apache ddlutils, apache software foundation db ddlutils +1 more Apache ddlutils 1.0 readobject vulnerability 9.8 Critical
- shuup Shuup - Reflected XSS in Error Page 6.1 Medium
- zohocorp manageengine remote access plus Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only... 7.5 High
- zohocorp manageengine remote access plus Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with... 7.5 High
- zohocorp manageengine remote access plus Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number... 7.5 High
- Show olderLoading…