CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
gifsicleopenSUSESecurity update for gifsicleNo score- aviatrix controllerAn issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a...9.8 Critical
- netgear gc108p firmware, gc108pp firmware, gs108t firmware +17 more +19 moreCertain NETGEAR smart switches are affected by an authentication hijacking race-condition...7.8 High
- netgear gc108p firmware, gc108pp firmware, gs108t firmware +17 more +19 moreCertain NETGEAR smart switches are affected by a remote admin password change by an...9.8 Critical
zstdOSS-FuzzHeap-buffer-overflow in FSE_writeNCount_genericNo score- imagemagickIssue when Configuring the ImageMagick Security Policy4.4 Medium
- gpacMemory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to...5.5 Medium
- gpacMemory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read...5.5 Medium
- gpacMemory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read...5.5 Medium
- gpacMemory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory...5.5 Medium
- gpacMemory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory...5.5 Medium
- thoughtbot clearanceOpen Redirect7.6 High
- set-value project set-value, oracle communications cloud native core policy +1 morePrototype Pollution7.3 High
wabtOSS-FuzzHeap-buffer-overflow in wabt::string_view::compareNo scorestbOSS-FuzzHeap-buffer-overflow in stbi__load_and_postprocess_8bitNo scorefileOSS-FuzzUNKNOWN READ in cdf_read_property_infoNo scorelibavcOSS-FuzzHeap-buffer-overflow in ih264d_parse_decode_sliceNo scoreicuOSS-FuzzUNKNOWN READ in icu_70::UCharsTrie::branchNextNo scorelibavcOSS-FuzzHeap-buffer-overflow in ih264d_fill_bs1_16x16mb_psliceNo scoredav1dOSS-FuzzHeap-buffer-overflow in paddingNo scoreunicornOSS-FuzzUNKNOWN READ in helper_ret_stb_mmu_x86_64No scoreflatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffsetNo scoredav1dOSS-FuzzHeap-buffer-overflow in backup_lpfNo score- apache any23A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java9.8 Critical
- apache any23An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java9.1 Critical
c-bloscOSS-FuzzHeap-buffer-overflow in blosclz_compressNo scorelibsrtpOSS-FuzzHeap-buffer-overflow in srtp_stream_init_keysNo scoreswift-protobufOSS-FuzzInvalid-free in swift_unexpectedErrorNo scorekamailioOSS-FuzzHeap-buffer-overflow in parse_via_paramNo scoreqemuDebianqemu - regression updateNo score- facebook parlaiDeserialization of Untrusted Data in parlai8.4 High
- facebook parlaiDeserialization of Untrusted Data in ParlAI9.8 Critical
- ionic identity vaultIn Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric...6.7 Medium
- onlyoffice google translateThe Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks...9.8 Critical
- btcpayserver btcpayserver/btcpayserver, btcpay server +1 moreCross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserver4.9 Medium
- andialbrecht sqlparseRegular Expression Denial of Service in sqlparse7.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking...9.8 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.9.8 Critical
- zohocorp manageengine desktop centralZoho ManageEngine DesktopCentral version 10.1.2119.7 and prior allows anyone to get a valid user...7.5 High
- unknown wp-publicationswp-publications <= 0.0 Local File Include8.3 High
- elyazalee sms-ovh, sms ovh ovh +1 moreSMS OVH <= 0.1 Reflected Cross-Site Scripting6.1 Medium
- kibokolabs moolamojoMoolaMojo <= 0.7.4.1 Reflected Cross-Site Scripting6.1 Medium
- invitebox, wordpress invitebox plugin invitebox plugin +1 moreWordPress InviteBox Plugin <= 1.4.1 Reflected Cross-Site Scripting6.1 Medium
- gnu-mailman integration integrationGNU-Mailman Integration <= 1.0.6 Reflected Cross-Site Scripting6.1 Medium
- ueberhamm-design youtube video inserter, youtube video inserter video inserter +1 moreYouTube Video Inserter <= 1.2.1.0 Reflected Cross-Site Scripting6.1 Medium
- devondev simple matted thumbnails, simple matted thumbnails matted thumbnails +1 moreSimple Matted Thumbnails <= 1.01 Reflected Cross-Site Scripting6.1 Medium
- custom website data website dataCustom Website Data <= 2.2 Reflected Cross-Site Scripting6.1 Medium
- bug library libraryBug Library <= 2.0.3 Reflected Cross-Site Scripting6.1 Medium
- edit comments xt comments xt, sw-guide edit comments xt +1 moreEdit Comments XT <= 1.0 Reflected Cross-Site Scripting6.1 Medium
- playsmsplaySMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs...9.8 Critical
- Show moreLoading…