CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- weechat, debian linux +1 moreWeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted...7.5 High
- johndatserakis file-upload-with-previewCross-site Scripting (XSS)4.2 Medium
kamailioOSS-FuzzHeap-buffer-overflow in parse_to_paramNo scorekamailioOSS-FuzzHeap-buffer-overflow in q_memchrNo score- jforumViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.5.4 Medium
phpOSS-FuzzHeap-use-after-free in i_zval_ptr_dtorNo scorekamailioOSS-FuzzHeap-buffer-overflow in parse_param_nameNo scorematioOSS-FuzzHeap-buffer-overflow in H5O__linfo_decodeNo scorekamailioOSS-FuzzHeap-buffer-overflow in parse_content_lengthNo scorekamailioOSS-FuzzHeap-buffer-overflow in trim_leadingNo score- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Bookmarks in Google Chrome prior to 93.0.4577.63 allowed an attacker who...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebApp Installs in Google Chrome prior to 93.0.4577.63 allowed an attacker who...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote...6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInsufficient policy enforcement in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote...6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in DevTools in Google Chrome prior to 93.0.4577.63 allowed a remote...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 morePolicy bypass in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to bypass...6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Media in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Navigation in Google Chrome prior to 93.0.4577.63 allowed a...6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreHeap buffer overflow in TabStrip in Google Chrome prior to 93.0.4577.63 allowed an attacker who...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Base internals in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebRTC in Google Chrome on Linux, ChromeOS prior to 93.0.4577.63 allowed an...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebRTC in Google Chrome on Linux, ChromeOS prior to 93.0.4577.63 allowed an...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Extensions API in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Sign-In in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Web Share in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Permissions in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Blink in Google Chrome prior to 93.0.4577.63 allowed an attacker who convinced...8.8 High
- gibbonedu gibbonA reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application...6.1 Medium
- python pillow, fedoraproject fedora +1 moreRegular Expression Denial of Service (ReDoS)7.5 High
- adaptivescale lxduiAdaptiveScale LXDUI Hardcoded JWT Secret Key9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreA race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4...7.0 High
phpOSS-FuzzHeap-use-after-free in zend_string_releaseNo score- gnu inetutils, debian linux +1 moreThe ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV...6.5 Medium
- debian linux, fedoraproject fedora, openidc mod auth openidc +2 moreURL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc4.7 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge for iOS Spoofing Vulnerability6.1 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge for Android Spoofing Vulnerability6.1 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.3 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge for Android Information Disclosure Vulnerability4.6 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.1 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote...9.8 Critical
- bertanddip craigmsAn issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a...9.8 Critical
- adobe after effectsAdobe After Effects PDF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe after effectsAdobe After Effects Memory Corruption Could Lead To Arbitrary Code Execution7.8 High
- adobe after effectsAdobe After Effects JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe after effectsAdobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe after effectsAdobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- Show moreLoading…