CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x...7.5 High
- maccmsA cross-site scripting (XSS) vulnerability in the background administrator article management...6.1 Medium
- maccmsA cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify...6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x...7.5 High
- saitoha libsixelLibsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at...6.5 Medium
- saitoha libsixelAn invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to...6.5 Medium
- saitoha libsixelAn issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial...6.5 Medium
- travis-ci travis ciThe activation process in Travis CI, for certain 2021-09-03 through 2021-09-10 builds, causes...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x...7.5 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn BIG-IP AFM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1...8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a...6.5 Medium
- f5 big-ip access policy manager, big-ip guided configuration +1 moreOn all versions of Guided Configuration before 8.0.0, when a configuration that contains secure...4.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x...6.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions...5.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm security secret serverIBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may...3.7 Low
- ibm security secret serverIBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to...5.3 Medium
- ibm security secret serverIBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive...2.7 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER:...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x...7.5 High
- f5 nginx app protect, big-ip advanced web application firewall, big-ip application security manager +2 moreOn BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and...7.5 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the...5.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic...7.5 High
arrowcrates.io`BinaryArray` does not perform bound checks on reading values and offsetsNo scorearrowcrates.io`FixedSizeBinaryArray` does not perform bound checks on accessing values and offsetsNo scorearrowcrates.io`DecimalArray` does not perform bound checks on accessing values and offsetsNo score- kooboo cmsKooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file...9.8 Critical
- kooboo cmsIn Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and...9.8 Critical
- cs-cartIn CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post...6.1 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise...4.3 Medium
- sap business oneSAP Business One allows an attacker with business privileges to execute crafted database queries,...4.3 Medium
- sap business oneUnder certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get...5.3 Medium
- sap contact centerUnder certain conditions, SAP Contact Center - version 700, does not sufficiently encode user...6.5 Medium
- sap commoncryptolibSAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference...7.5 High
- sap business oneSAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system...6.5 Medium
- sap contact centerDue to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an...9.6 Critical
- sap analysis for microsoft officeSAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read...6.5 Medium
- sap netweaver, sap se netweaver (visual composer 7.0 rt) +1 moreSAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an...9.9 Critical
- sap netweaver application server java, sap se netweaver application server java (jms connector service) +1 moreSAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31,...10.0 Critical
- sap contact centerUnder certain conditions, SAP Contact Center - version 700, does not sufficiently encode user...6.1 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (bi workspace) +1 moreThe SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the...5.4 Medium
- sap landscape transformation, landscape transformation replication server, s\/4hana +4 more +6 moreDue to improper input sanitization, an authenticated user with certain specific privileges can...9.9 Critical
- sap erp financial accounting, sap se erp financial accounting (rfopenposting fr) +1 moreSAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605,...5.4 Medium
- sap contact centerUnder certain conditions, SAP Contact Center - version 700,does not sufficiently encode user...8.3 High
- sap web dispatcherSAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC ...8.9 High
- sap business oneSAP Business One version - 10, due to improper input validation, allows an authenticated User to...4.3 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...4.8 Medium
- sap netweaver knowledge management xml formsSAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50,...9.9 Critical
- Show moreLoading…