CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the...7.8 High
- tuxera ntfs-3g, debian linux +1 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update7.8 High
- telegram web k alphaTelegram Web K Alpha before 0.7.2 mishandles the characters in a document extension.9.8 Critical
- sketchSketch before 75 mishandles external library feeds.9.8 Critical
- fortinet fortimanagerAn improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an...6.3 Medium
- botan project botan, mozilla thunderbird, fedoraproject fedora +2 moreThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...5.9 Medium
- cryptopp crypto\+\+, fedoraproject fedora +1 moreThe ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during...5.9 Medium
- fortinet fortisandboxAn improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3...4.3 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreSupport Bundle includes S/Mime and PGP secret or PIN5.2 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreUser enumeration issue using "lost password" feature5.3 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreXSS attack in appointment edit popup screen5.7 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreDoS attack using PostMaster filters5.3 Medium
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro maximum security 2019 +3 more +5 moreTrend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction...7.8 High
- kubernetesHoles in EndpointSlice Validation Enable Host Network Hijack2.7 Low
- bookstackapp bookstack, bookstackapp/bookstack +1 moreCross-site Scripting (XSS) - Stored in bookstackapp/bookstack5.4 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreCross-site Scripting (XSS) - Stored in bookstackapp/bookstack5.4 Medium
- objection project objection, vincit vincit/objection.js +1 morePrototype Pollution in vincit/objection.js7.5 High
- mrdoc, zmister2016 zmister2016/mrdoc +1 moreDeserialization of Untrusted Data in zmister2016/mrdoc7.5 High
- keyword meta project meta, unknown keyword meta +1 moreKeywords & Meta <= 3.0 - CSRF to Stored Cross-Site Scripting (XSS)5.4 Medium
- geminilabs site reviewsSite Reviews < 5.13.1 - Authenticated Stored XSS5.4 Medium
- syam mohan wpfront notification bar, wpfront notification bar +1 moreWPFront Notification Bar < 2.1.0.08087 - Authenticated Stored XSS5.4 Medium
- unknown email encoder – protect email addresses, wp-webhooks email encoder +1 moreEmail Encoder < 2.1.2 - Reflected Cross Site Scripting6.1 Medium
- dn88 highlightHighlight < 0.9.3 - Authenticated Stored Cross-Site Scripting5.4 Medium
- gdprinfo cookie notice \& consent banner for gdpr \& ccpa compliance, unknown cookie notice & consent banner for gdpr & ccpa compliance +1 moreCookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.2 - Authenticated Stored XSS5.4 Medium
- cozy vision technologies pvt. ltd. sms alert order notifications – woocommerce, cozyvision sms alert order notifications +1 moreSMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting6.1 Medium
- addtoany share buttons, unknown addtoany share buttons +1 moreAddToAny < 1.7.46 - Authenticated Stored XSS5.4 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2021.18 - Authenticated Stored XSS5.4 Medium
- muneeb form builder | create responsive contact forms, web-settler form builder +1 moreForm Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scripting5.4 Medium
- gambit titan frameworkTitan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- geekwebsolution embed youtube videoEmbed Youtube Video <= 1.0 - Authenticated SQL Injection7.2 High
- easy testimonial manager project testimonial manager, unknown easy testimonial manager +1 moreEasy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection7.2 High
- comment highlighter project highlighter, unknown comment highlighter +1 moreComment Highlighter <= 0.13 - Authenticated SQL Injection7.2 High
- unknown wordpress membership swiftcloud.io, swiftcrm club-management-software +1 moreWordPress Membership SwiftCloud.io <= 1.0 - Authenticated SQL Injection7.2 High
- cashtomer project cashtomerCashtomer <= 1.0.0 - Authenticated SQL Injection8.8 High
- alipay project alipay, unknown wordpress支付宝alipay|财付通tenpay|贝宝paypal集成插件 +1 moreAlipay <= 3.7.2 - Authenticated SQL Injection7.2 High
- jiangqie official website mini program, unknown jiangqie official website mini program +1 moreJiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection8.8 High
dav1dOSS-FuzzHeap-buffer-overflow in backup_lpfNo scorewolfmqttOSS-FuzzHeap-buffer-overflow in MqttClient_DecodePacketNo score- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vim8.6 High
- contiki-os contikiIn Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and...7.5 High
- pureftpd pure-ftpdIn Pure-FTPd 1.0.49, an incorrect max_filesize quota mechanism in the server allows attackers to...7.5 High
- Show moreLoading…