CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- eyoucmsEyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in...7.5 High
- nextcloud circles, kiteworks security-advisories +1 moreCross-Site Scripting in Nextcloud Circles5.8 Medium
- nextcloud circles, kiteworks security-advisories +1 moreSecret Circle can be joined without approval in Nextcloud Circles6.5 Medium
- eyoucmsA Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote...6.1 Medium
- eyoucmseyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger...9.8 Critical
- eyoucmsEyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code...5.4 Medium
- phpmywindPHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, ...7.2 High
- nextcloud deck, kiteworks security-advisories +1 moreCircle can be accessed by non-Circle members in Nextcloud Deck6.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap...9.1 Critical
- lcdf gifsicle, fedoraproject fedora +1 moreThe find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.7.5 High
- gpacAn issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based...7.5 High
- sonatype nexus repository managerHTTP header injection in Sonatype Nexus Repository8.2 High
- charleskorn kamlDenial of service while parsing polymorphic input with tagged polymorphism style in kaml4.3 Medium
- cliniccasesClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). A successful attack would...8.8 High
- cliniccasesMultiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow...6.1 Medium
- cliniccasesPersistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged...5.4 Medium
- cliniccasesmessages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which...8.8 High
- owncloudSession fixation on password protected public links in the ownCloud Server before 10.8.0 allows...5.4 Medium
- owncloudA receiver of a federated share with access to the database with ownCloud version before 10.8...9.8 Critical
- misskeyServer-Side Request Forgery vulnerability in misskey7.7 High
- owncloudThe shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the...5.3 Medium
- jdhwpgmbca pcaptureAuthenticated non-privileged user can request unfiltered data without adequate permissions in pcapture7.7 High
- remark remark-htmlCross site scripting via unsafe defaults in remark-html10.0 Critical
- owncloudThe public share controller in the ownCloud server before version 10.8.0 allows a remote attacker...5.3 Medium
- better errors project errors, bettererrors better errors +1 moreCross-Site Request Forgery in better_errors6.3 Medium
- barco mirrorop windows senderBarco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software...8.8 High
- microfocus network automationOpen Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation...6.1 Medium
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API...9.8 Critical
- dext5, raonwiz dext5 upload +1 moreRAONWIZ DEXT5 Upload remote code execution vulnerability8.8 High
- inoguard execm coreb2bInoguard ExECM CoreB2B solution remote code execution vulnerability8.8 High
- ntracker usb enterprise, ntracksystem ntracker usb enterprise +1 morenTracker USB Enterprise SQL-Injection vulnerability9.3 Critical
- simplesystems libtiff, debian linux +1 moreBuffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the ...7.5 High
- perforce puppet enterprise, puppet, puppet enterprise +2 moreA flaw was discovered in bolt-server and ace where running a task with sensitive parameters...4.9 Medium
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba...6.2 Medium
- versa-networks versa directorA XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the...6.1 Medium
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software...8.1 High
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba...4.9 Medium
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba...6.5 Medium
- arubanetworks arubaos, siemens scalance w1750d firmware +1 moreA remote path traversal vulnerability was discovered in Aruba Operating System Software version(s...6.5 Medium
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and...7.2 High
- arubanetworks arubaos, siemens scalance w1750d firmware +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba Operating System...7.2 High
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and...7.2 High
- f-secure atlant, cloud protection for salesforce, elements endpoint protection +2 more +4 moreDenial-of-Service (DoS) Vulnerability4.6 Medium
- arubanetworks arubaos, siemens scalance w1750d firmware +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba Operating System...7.2 High
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and...7.2 High
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and...7.2 High
- arubanetworks arubaos, sd-wan +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and...7.2 High
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and...7.2 High
- arubanetworks arubaos, siemens scalance w1750d firmware +1 moreA remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System...6.5 Medium
- arubanetworks arubaos, sd-wan, siemens scalance w1750d firmware +2 moreA remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways;...9.8 Critical
- Show moreLoading…