CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- microfocus access managerThis release addresses a potential information leakage vulnerability in NetIQ Access Manager...5.5 Medium
- redux.io gutenberg template library & redux framework, redux gutenberg template library \& redux framework +1 moreGutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure5.3 Medium
- redux.io gutenberg template library & redux framework, redux gutenberg template library \& redux framework +1 moreGutenberg Template Library & Redux Framework <= 4.2.11 Incorrect Authorization check to Arbitrary plugin installation and post deletion7.1 High
- schneider-electric ecostruxure machine expert, vijeo designer +1 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in...9.1 Critical
- schneider-electric accusine pcsn active harmonic filter firmware, accusine pcsp pfvp firmware +1 moreA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in...7.2 High
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the...7.5 High
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon...6.5 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon...6.5 Medium
- schneider-electric modicon m340 bmxp341000, modicon m340 bmxp342010, modicon m340 bmxp342020 +46 more +48 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...6.5 Medium
- schneider-electric gp-pro exA CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior...7.8 High
- cybernetikz easy social iconsEasy Social Icons <= 3.0.8 - Reflected Cross-Site Scripting6.1 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution8.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader memory corruption vulnerability could lead to remote code execution8.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation5.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader out-of-bounds read could lead to information exposure4.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution8.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure4.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution8.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 moreAdobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution9.6 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader out-of-bounds Read could lead to information disclosure6.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution8.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Reader CoolType Arbitrary Stack Manipulation7.8 High
- parse-community parse-serverCrash server with query parameter7.5 High
- opensuse libsolvBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 High
- opensuse libsolvBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 High
- opensuse libsolvBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 High
- opensuse libsolvBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...7.5 High
- bookstackapp bookstack, bookstackapp/bookstack +1 moreServer-Side Request Forgery (SSRF) in bookstackapp/bookstack6.3 Medium
- immer project immer, immerjs immerjs/immer +1 morePrototype Pollution in immerjs/immer7.5 High
- cisco nexus insightsCisco Nexus Insights Authenticated Information Disclosure Vulnerability4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability4.8 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability9.8 Critical
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability5.5 Medium
- cisco prime collaboration provisioningCisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability6.1 Medium
- cyberark credential providerAn inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may...7.5 High
- cyberark credential providerThe effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1...4.4 Medium
arrowOSS-FuzzSegv on unknown address in arrow::DefaultBackendNo scorearrowOSS-FuzzSegv on unknown address in arrow::DefaultBackendNo score- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg...5.5 Medium
- linux kernel, netapp active iq unified manager, bootstrap os +9 more +11 moreModerate: kernel-rt security and bug fix update4.7 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Medium
- apache zeppelinCross Site Scripting in markdown interpreter6.1 Medium
- apache zeppelinNotebook permissions bypass7.5 High
- apache zeppelinbash command injection in spark interpreter9.8 Critical
- cyberark credential providerThe user identification mechanism used by CyberArk Credential Provider prior to 12.1 is...5.1 Medium
- atlassian jira service management, jira service desk data center, jira service desk server +1 more +3 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow remote...7.2 High
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow users who have watched an issue...5.3 Medium
- wtcms project wtcmsWTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field...5.4 Medium
- wtcms project wtcmsWTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the...5.4 Medium
- wtcms project wtcmsWTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under...5.4 Medium
- Show moreLoading…