CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- cisco broadworks commpilot application software, broadworks +1 moreCisco BroadWorks CommPilot Application Software Vulnerabilities6.5 Medium
- cisco broadworks commpilot application software, broadworks +1 moreCisco BroadWorks CommPilot Application Software Vulnerabilities6.5 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Unauthorized Information Disclosure Vulnerability5.5 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software DHCP Version 4 Server Denial of Service Vulnerability5.8 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities7.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Command Injection Vulnerabilities6.7 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Command Injection Vulnerabilities6.7 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities7.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Arbitrary File Read and Write Vulnerability8.1 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers Denial of Service Vulnerability7.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities6.0 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities6.0 Medium
- zstackPre-auth unsafe deserialization in ZStack7.5 High
- eclipse ketiGroovy Sandbox escape in Eclipse Keti9.9 Critical
- eclipse ketiArbitrary Groovy script evaluation in Eclipse Keti8.2 High
- emby emby.releasesUnauthenticated file read in Emby Server8.6 High
wolfmqttOSS-FuzzHeap-buffer-overflow in MqttDecode_PublishNo score- postorius project postoriusGNU Mailman Postorius Access Control Issues5.4 Medium
- openbmc-project openbmcIn OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.10.0 Critical
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed...8.8 High
- mozilla firefoxMixed-content checks were unable to analyze opaque origins which led to some mixed content being...6.5 Medium
- debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 moreA flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP...6.5 Medium
- glewlwyd sso server project sso serverscheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2...9.8 Critical
- mypresta customer photo galleryThe Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.9.8 Critical
- google chrome, chrome os readiness tool +1 moreInappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0...7.8 High
- showdocUnrestricted File Upload in ShowDoc v2.9.59.8 Critical
- ppgo jobs project jobsCommand Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the ...9.8 Critical
- dotcmsUnrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote...9.8 Critical
- autumn project autumnIncorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear...7.5 High
- openstack neutronOpenStack Neutron Denial of Service vulnerability6.5 Medium
- line corporation central dogmaCentral Dogma allows privilege escalation with mirroring to the internal dogma repository that...8.8 High
- line corporation for windows, linecorp line +1 moreLINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.7.8 High
- line corporation client for ios, linecorp line +1 moreLINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address...5.3 Medium
- dpgaspar flask-appbuilderURL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder7.2 High
- owncloud user ldapServer Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the...2.7 Low
- librenmsCross-site Scripting in LibreNMS5.4 Medium
- palo alto networks pan-osPAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface6.5 Medium
- palo alto networks pan-osPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability7.2 High
- palo alto networks pan-osPAN-OS: Exceptional Condition Denial-of-Service (DoS)7.5 High
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface8.0 High
- palo alto networks cortex xsoarCortex XSOAR: Authentication Bypass in SAML Authentication8.1 High
- palo alto networks cortex xsoarCortex XSOAR: Improper Authorization of Incident Investigations Vulnerability2.6 Low
- myfwc fish \| hunt flAn insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3...7.5 High
- myfwc fish \| hunt flAn insecure, direct object vulnerability in hunting/fishing license retrieval function of the ...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...8.8 High
- adobe after effectsAdobe After Effects improper neutralization of special elements could lead to remote code execution8.3 High
- adobe media encoderAdobe Media Encoder VOB file parsing out-of-bounds read could lead to information disclosure vulnerability4.3 Medium
- adobe genuine service, gocart +1 moreAdobe Genuine Services insecure file permission could lead to privilege escalation5.8 Medium
- adobe magento commerce, magento +1 moreMagento Commerce improper authorization allows an authenticated user to perform certain functions without permission5.0 Medium
- Show moreLoading…