CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- jeesnsA reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute...6.1 Medium
- jeesnsA stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of...5.4 Medium
- jeesnsJeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate...8.8 High
- envoyproxy envoy, pomerium +1 moreIncorrect Authorization with specially crafted requests8.6 High
- envoyproxy envoy, pomerium +1 moreExcessive CPU usage in Pomerium7.5 High
- envoyproxy envoy, pomerium +1 moreIncorrect handling of H2 GOAWAY + SETTINGS frames8.6 High
- wordpress, wordpress wordpress-develop +1 morePrivate data disclosure/privilege escalation through the block editor in Wordpress6.8 Medium
- wordpress, wordpress wordpress-develop +1 moreWordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget7.6 High
- wordpress, debian linux, wordpress wordpress-develop +2 moreAuthenticated cross-site scripting (XSS) in WordPress editor7.6 High
- wordpress, debian linux, wordpress wordpress-develop +2 moreInformation Disclosure in wp_die() via JSONP in wordpress5.3 Medium
- check-spellingcheck-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack9.9 Critical
- openbmc-project openbmcIn OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC...7.5 High
- 30lines rentpressRentPress <= 6.6.4 Reflected Cross-Site Scripting6.1 Medium
- user activation email activation email, user-activation-email project user-activation-email +1 moreUser Activation Email <= 1.3.0 Reflected Cross-Site Scripting6.1 Medium
- more from google from google, windyroad more from google +1 moreMore From Google <= 0.0.2 Reflected Cross-Site Scripting6.1 Medium
- kibokolabs konnichiwa, konnichiwa! membership membership +1 moreKonnichiwa! Membership <= 0.8.3 Reflected Cross-Site Scripting6.1 Medium
- custom menu plugin menu plugin, custom-sub-menus project custom-sub-menus +1 moreCustom Menu Plugin <= 1.3.3 Reflected Cross-Site Scripting6.1 Medium
- simplesamlphp authentication authenticationsimpleSAMLphp Authentication <= 0.7.0 Reflected Cross-Site Scripting6.1 Medium
- smartypantsplugins sp rental manager, sp rental manager rental manager +1 moreSP Rental Manager <= 1.5.3 Unauthenticated SQL Injection8.2 High
- wp academic people list academic people listWP Academic People List <= 0.4.1 Reflected Cross-Site Scripting6.1 Medium
- twitter friends widget friends widgetTwitter Friends Widget <= 3.1 Reflected Cross-Site Scripting6.1 Medium
- 3d cover carousel cover carousel3D Cover Carousel <= 1.0 Reflected Cross-Site Scripting6.1 Medium
- samsung internetImproper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows...6.5 Medium
- samsung themes, samsung mobile theme +1 moreAn improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers...3.3 Low
- samsung captureAn improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows...3.3 Low
- samsung penupImproper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary...4.0 Medium
- google android, samsung mobile devices +1 moreNULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreAn improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based...4.0 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep...4.0 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep...4.0 Medium
- google android, samsung mobile devices +1 moreNULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows...5.9 Medium
- google android, samsung mobile devices +1 moreOOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows...5.5 Medium
- google android, samsung mobile devices +1 moreOOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreOOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows...3.1 Low
- google android, samsung mobile devices +1 moreSome improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted...5.1 Medium
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep...5.5 Medium
- google android, samsung mobile devices +1 moreA PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 morePath traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows...4.5 Medium
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021...6.5 Medium
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because...6.5 Medium
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to ...9.8 Critical
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key...7.2 High
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to ...9.8 Critical
- dswjcms project dswjcmsA cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows...5.7 Medium
- dswjcms project dswjcmsAn issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute...9.8 Critical
- dswjcms project dswjcmsA stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList...6.1 Medium
- dswjcms project dswjcmsA stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component...6.1 Medium
- mipcmsA cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users...6.5 Medium
- mipcmsA cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate...8.8 High
- Show moreLoading…