CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow...7.5 High
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access...9.8 Critical
- debian linux, netapp oncommand insight, netty +9 more +11 moreSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 High
- debian linux, netapp oncommand insight, netty +16 more +18 moreBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 High
- dlink dsl-3782 firmwareD-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of...6.5 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items9.8 Critical
- mediatek modemIn modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead...7.5 High
- mediatek modemIn modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead...7.5 High
- mediatek modemIn modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead...7.5 High
- mediatek modemIn modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead...7.5 High
- apache airflowApache Airflow: Variable Import endpoint missed authentication check9.8 Critical
- gitlabAn unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and...5.0 Medium
- qdpmqdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.6.1 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability6.5 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items8.8 High
- thedaylightstudio fuel cmsFuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php5.3 Medium
- simplesystems libtiff, debian linux, netapp ontap select deploy administration utility +2 moreBuffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in...6.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the libtpms code that may cause access beyond the boundary of internal...6.5 Medium
- huawei ais-bw50-00 firmwareThere is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2...6.8 Medium
- handysoft hshell, hshell.dll +1 morehandysoft groupware arbitrary file download and execution vulnerability8.8 High
- tobesoft nexacro, nexacro14 +1 moreNEXACRO14 Runtime arbitrary file download and execution vulnerability8.8 High
- ksystem k-system wellcommDownload of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd...8.8 High
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...9.6 Critical
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...8.4 High
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...7.2 High
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...4.4 Medium
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...6.3 Medium
- arista metamako operating systemIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line,...8.7 High
- redaxoRemote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows...7.2 High
- redaxoTriggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows...6.5 Medium
- tenable nessus agentNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability...6.7 Medium
- tenable nessus agentNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability...6.7 Medium
- advantech webaccessA stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused...9.8 Critical
- code cabin inc wp google maps pro, codecabin wp go maps +1 moreWordPress WP Google Maps Pro premium plugin <= 8.1.11 - Multiple Authenticated Persistent XSS vulnerabilities5.5 Medium
- code cabin inc wp google maps (wordpress plugin), codecabin wp go maps +1 moreWordPress WP Google Maps plugin <= 8.1.12 - Multiple Authenticated Persistent XSS vulnerabilities5.5 Medium
- bandisoft ark, ark library +1 morebandisoft ARK library heap overflow vulnerability8.6 High
- rittal cmc pu iii 7030.000 firmwareRittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several...5.4 Medium
- rittal cmc pu iii 7030.000 firmwareRittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is...7.2 High
- apache dubboBypass deserialization checks in Apache Dubbo9.8 Critical
- apache dubboUnprotected input value toString cause RCE9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +122 more +124 morePossible heap overflow due to improper validation of local variable while storing current task...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +119 more +121 morePossible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +136 more +138 moreImproper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8035 firmware +40 more +42 moreImproper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +105 more +107 morePossible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +96 more +98 moreNull Pointer Dereference may occur due to improper validation while processing crafted SDP body...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +174 more +176 morePossible null pointer dereference due to lack of validation check for passed pointer during key...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm apq8017 firmware, apq8053 firmware +95 more +97 morePossible memory corruption due to improper check when application loader object is explicitly...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +79 more +81 moreUE assertion is possible due to improper validation of invite message with SDP body in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 moreBuffer overflow occurs in trusted applications due to lack of length check of parameters in...7.3 High
- Show moreLoading…