CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- os4ed opensisA SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the...9.8 Critical
- open-emr openemrOpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via...6.5 Medium
- kpn experia wifi firmwareWireless devices running certain Arcadyan-derived firmware (such as KPN Experia WiFi 1.00.15) do...8.8 High
- solarwinds orion platformStored XSS through URL POST parameter in CreateExternalWebsite Vulnerability4.8 Medium
- iportalis control portalAn issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by...9.6 Critical
- iportalis control portalAn issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to...7.5 High
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 moreZoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that...9.8 Critical
- atlassian atlasboardPath traversal in atlasboard7.5 High
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated...7.8 High
- os4ed opensisA SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as...9.8 Critical
wolfmqttOSS-FuzzHeap-buffer-overflow in MqttDecode_PublishNo scoreunicornOSS-FuzzSegv on unknown address in helper_uc_tracecodeNo scorelibuclOSS-FuzzUNKNOWN READ in ucl_array_appendNo scoredracoOSS-FuzzUNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodiNo score- cyrus imap, debian linux, fedoraproject fedora +2 moreCyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6574 firmware +39 more +41 morePotential null pointer dereference in KGSL GPU auxiliary command due to improper validation of...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6574 firmware +39 more +41 morePossible null pointer dereference due to race condition between timeline fence signal and time...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +188 more +190 morePossible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +110 more +112 morePossible use-after-free due to lack of validation for the rule count in filter table in IPA...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar9380 firmware +82 more +84 moreBuffer Overflow while processing IOCTL for getting peripheral endpoint information there is no...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +111 more +113 morePossible buffer overflow due to lack of offset length check while updating the buffer value in...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm qca6574a firmware, qca6574au firmware +36 more +38 moreA race condition in fastrpc kernel driver for dynamic process creation can lead to use after free...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, qca6174a firmware +44 more +46 moreImproper Access Control when ACL link encryption is failed and ACL link is not disconnected...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 morePossible out of bound read due to lack of length check of data while parsing the beacon or probe...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au firmware, apq8096au firmware +213 more +215 morePossible buffer over read issue due to improper length check on WPA IE string sent by peer in...7.5 High
- google androidIn GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an...9.8 Critical
- google androidIn get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free....5.5 Medium
- google androidIn openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps...5.5 Medium
- google androidIn sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due...7.8 High
- google androidIn the SELinux policy configured in system_app.te, there is a possible way for system_app to gain...6.7 Medium
- google androidIn ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write...6.5 Medium
- google androidIn RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race...7.0 High
- google androidIn ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could...5.0 Medium
- google androidIn getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information...5.5 Medium
- google androidIn ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization...7.8 High
- google androidIn TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to...7.8 High
- google androidIn runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system...7.8 High
- google androidIn sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of...5.5 Medium
- google androidIn system properties, there is a possible information disclosure due to a missing permission...5.5 Medium
- google androidIn system properties, there is a possible information disclosure due to a missing permission...5.5 Medium
- google androidIn conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to...5.5 Medium
- google androidWhen extracting the incorrectly formatted avi file, the memory is damaged, the playback interface...7.8 High
- google androidWhen extracting the incorrectly formatted flv file, the memory is damaged, the playback interface...7.8 High
- google androidIn onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth...7.3 High
- google androidIn lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work...7.8 High