CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- gpacStack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows...7.8 High
- matrix javascript sdkmatrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver5.9 Medium
- fiznool fiznool/body-parser-xml, xml body parser project body parser +1 morePrototype Pollution in fiznool/body-parser-xml7.6 High
- unknown membership & content restriction – paid member subscriptions, cozmoslabs membership \& content restriction - paid member subscriptions +1 morePaid Member Subscriptions < 2.4.2 - Authenticated SQL Injection8.8 High
- billminozzi stop bad bots, unknown wp block and stop bad bots crawlers and spiders and anti spam protection plugin stopbadbots +1 moreBlock and Stop Bad Bots < 6.60 - Authenticated SQL Injections8.8 High
- roland murg wp simple booking calendarWP Simple Booking Calendar <= 2.0.6 (before 07/12/2021) - Authenticated SQL Injection8.8 High
- quantumcloud comment link remove and other comment toolsComment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF4.3 Medium
- motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 moreTimetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting5.4 Medium
- ticket-system wordpress advanced ticket system, unknown wordpress advanced ticket system, elite support helpdesk +1 moreWordPress Advanced Ticket System < 1.0.64 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- hookandhook wp courses lmsWP Courses LMS < 2.0.44 - Authenticated Stored XSS via Video Embed Code4.8 Medium
- unknown wordpress simple ecommerce shopping cart plugin- sell products through paypal, simple-e-commerce-shopping-cart project simple-e-commerce-shopping-cart +1 moreSimple eCommerce <= 2.2.5 - Arbitrary File Upload8.8 High
- evona per page add to headPer Page Add to Head <= 1.4.4 - Authenticated Stored XSS4.8 Medium
- oz-plugin book appointment onlineBook appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- custom post view generator project post view generator, unknown custom post view generator +1 moreCustom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting5.4 Medium
- evona per page add to headPer Page Add to Head < 1.4.4 - CSRF to Stored XSS4.3 Medium
- tipsandtricks-hq software license managerSoftware License Manager < 4.4.8 - Reflected Cross-Site Scripting6.1 Medium
- mmrs151 daily prayer timeDaily Prayer Time < 2021.08.10 - Authenticated Stored XSS5.4 Medium
- mf gig calendar project gig calendar, unknown mf gig calendar +1 moreMF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- smashballoon smash balloon social post feedSmash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS6.1 Medium
- ingenesis shoppShopp eCommerce <= 1.4 - Unauthenticated Arbitrary File Upload9.8 Critical
- fileviewer project fileviewerFileviewer <= 2.2 - Arbitrary File Upload/Deletion via CSRF8.8 High
- email artillery project artillery, unknown email artillery (mass email) +1 moreEmail Artillery <= 4.1 - Arbitrary File Upload6.8 Medium
- language bar flags project bar flags, unknown language bar flags +1 moreLanguage Bar Flags <= 1.0.8 - CSRF to Stored XSS4.3 Medium
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: command injection leading to RCE7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam ebc-2112 firmware +15 more +17 moreUDP Technology/Geutebrück camera devices: Authentication Bypass9.8 Critical
- apartment visitors management system project visitors management systemSQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0...9.8 Critical
- paessler prtg network monitorPRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported...5.4 Medium
- gpacThe abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL...5.5 Medium
- gpacThe trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL...5.5 Medium
- gpacHeap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers...5.5 Medium
- gpacThe gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL...5.5 Medium
- gpacHeap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause...7.8 High
- micro focus netiq access manager, microfocus access manager +1 moreOpen Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.14.9 Medium
- micro focus netiq access manager, microfocus access manager +1 moreDenial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.15.4 Medium
- micro focus netiq access manager, microfocus access manager +1 moreInformation leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.16.0 Medium
- yandex browserYandex Browser before 20.10.0 allows remote attackers to spoof the address bar5.3 Medium
- yandex browser, yandex n.v. browser for android +1 moreYandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar...7.3 High
- micro focus netiq access manager, microfocus access manager +1 moreInformation leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.18.0 High
- gibbonedu gibbonGibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.5.4 Medium
- linux kernelA flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control...7.8 High
- Show moreLoading…