CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- hashicorp consulHashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic.6.5 Medium
- mastersoft zook agent, zook viewer, zookagentsetup.exe +1 more +3 moreZOOK solution(remote administration tool) buffer overflow vulnerability8.0 High
- hashicorp nomadPrivilege escalation in Hashicorp Nomad8.8 High
- synerion timenet, timenet version +1 moreSynerion TimeNet version 9.21 - Directory Traversal5.4 Medium
- hashicorp consulHashiCorp Consul Privilege Escalation Vulnerability8.8 High
- eigentech natural language processingIn Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition...7.6 High
- eigentech natural language processingIn Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows...8.8 High
- eigentech natural language processingIn Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration...6.3 Medium
- deskproDeskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site...5.4 Medium
- apache dubboUnsafe deserialization in providers using the Hessian protocol9.8 Critical
- apache dubboUnprotected yaml deserialization cause RCE8.8 High
- zh-jieli ac6901 firmware, ac6902 firmware, ac6903 firmware +9 more +11 moreThe Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the...6.5 Medium
- silabs iwrapThe Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly...6.5 Medium
- espressif esp-idfThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly...8.8 High
- cypress wireless internet connectivity for embedded devicesThe Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1...6.5 Medium
- cypress wireless internet connectivity for embedded devicesThe Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1...6.5 Medium
- cypress wireless internet connectivity for embedded devicesThe Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1...5.3 Medium
- zh-jieli fw-ac63 bt sdkThe Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly...6.5 Medium
- cypress cyw20735b1 firmware, cyw920735q60evb-01 firmware +1 moreThe Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the...6.5 Medium
- ti cc256xcqfn-em firmwareThe Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly...6.5 Medium
- bluetrum ab5376t firmware, bt8896a firmware, mi true wireless earbuds basic 2 firmware +2 moreThe Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of...6.5 Medium
- actions-semi ats2815 firmware, ats2819 firmware, ats2819p firmware +2 more +4 moreThe Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly...6.5 Medium
- actions-semi ats2815 firmware, ats2819 firmware, ats2819p firmware +2 more +4 moreThe Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not...6.5 Medium
- zh-jieli ac6901 firmware, ac6921 firmware, ac6925 firmware +2 more +4 moreThe Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly...5.7 Medium
- zh-jieli ac6901 firmware, ac6921 firmware, ac6925 firmware +2 more +4 moreThe Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly...6.5 Medium
- bluetrum ab5301a firmwareThe Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions...6.5 Medium
- jbl tune500bt firmwareThe Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the...6.5 Medium
- espressif esp-idfThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly...6.5 Medium
- zh-jieli fw-ac63 bt sdkThe Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not...6.5 Medium
- espressif esp-idfThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly...6.5 Medium
- moxa oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware, tap-323-eu-ct-t firmware +9 more +11 moreCertain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This...8.8 High
- moxa oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware, tap-323-eu-ct-t firmware +9 more +11 moreCertain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7,...6.1 Medium
- simple water refilling station management system project water refilling station management systemRemote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the...8.8 High
- simple water refilling station management system project water refilling station management systemSQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the...9.8 Critical
- th-wildau covid-19 contact tracingapi/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has...6.5 Medium
- onyaktech comments pro project comments proAn issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can...7.5 High
- onyaktech comments pro project comments proAn issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment...5.4 Medium
- ulfius project ulfiusulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a...9.8 Critical
icuOSS-FuzzStack-use-after-scope in uprv_stricmp_70No score- haproxy, debian linux, fedoraproject fedora +2 moreAn integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to...7.5 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G ...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call...5.5 Medium
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS...7.8 High
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in...7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer...7.8 High
- Show moreLoading…