CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service4.0 Medium
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Use After Free Vulnerability In ReadingXMPNewDOM Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMPToolkit SDK ImportTIFF_CheckStandardMapping Memory Corruption7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Out-of-bounds Read Vulnerability In FindAndReadXMPChunk Could Lead To Information Exposure3.3 Low
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service7.5 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution7.8 High
- adobe bridgeAdobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK Out-of-bounds Read Vulnerability In PostScriptSupport::ConvertToDate Could Lead To Information Exposure3.3 Low
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stored Cross-site Scripting Vulnerability6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution8.0 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP Toolkit SDK TIFF_MemoryReader::SortIFD function Memory Corruption7.8 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation7.5 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution8.2 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Neutralization of Special Elements Used In A Command9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution7.2 High
- elfinder.netcore project elfinder.netcoreArbitrary File Write via Archive Extraction (Zip Slip)8.6 High
- elfinder.netcore project elfinder.netcoreDirectory Traversal8.6 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stored Cross-site Scripting Vulnerability6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation8.3 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure6.5 Medium
- adobe captivateAdobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation5.0 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Gift Card Business Logic Error6.5 Medium
- proto project protoPrototype Pollution5.6 Medium
- solarwinds patch manager, orion platform +1 moreChart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability8.9 High
- solarwinds patch managerDeserialization of Untrusted Data in Resource Controls Remote Code Execution8.9 High
- christiedigital dwu850-gs firmwarewebctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any...9.8 Critical
- solarwinds orion platformActionPluginBaseView Deserialization of Untrusted Data RCE8.9 High
- noah kagan underconstructionunderConstruction <= 1.18 - Reflected Cross-Site Scripting6.1 Medium
- pimcoreImproper Encoding or Escaping of Output in Asset Metadata Component8.0 High
- pimcoreImproper Neutralization of Text-Values in Object Version Preview8.0 High
- terarecon aquariusnetNMSAccess32.exe in TeraRecon AQNetClient 4.4.13 allows attackers to execute a malicious binary...8.8 High
- os4ed opensisA SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the...9.8 Critical
- cyberark identityCyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals...5.3 Medium
- os4ed opensisA SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the...9.8 Critical
- samsung drive managerSamsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideCharStr, and MultiByteStr can contribute to passwor…7.8 High
- Show moreLoading…