CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- microsoft windows 7, windows 7 service pack 1, windows server 2008 r2 service pack 1 +4 more +6 moreWindows DNS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +11 more +13 moreWindows WLAN AutoConfig Service Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows Subsystem for Linux Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows WLAN AutoConfig Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Installer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Installer Denial of Service Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows SMB Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Authenticode Spoofing Vulnerability5.5 Medium
- microsoft azure sphereAzure Sphere Information Disclosure Vulnerability4.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +9 more +11 moreWindows Bind Filter Driver Elevation of Privilege Vulnerability8.8 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.4 (includes 16.0 - 16.3), visual studio 2019 version 16.7 (includes 16.0 – 16.6) +2 more +4 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Spoofing Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Scripting Engine Memory Corruption Vulnerability8.1 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2019 version 16.4 (includes 16.0 - 16.3) +4 more +6 moreVisual Studio Elevation of Privilege Vulnerability7.8 High
- riot-os riotIn RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component...5.5 Medium
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreCross-site Scripting (XSS) - Stored in chocobozzz/peertube7.6 High
- daaku daaku/nodejs-tmpl, tmpl project tmpl +1 moreInefficient Regular Expression Complexity in daaku/nodejs-tmpl7.5 High
- bfabiszewski bfabiszewski/libmobi, libmobi project libmobi +1 moreOut-of-bounds Write in bfabiszewski/libmobi9.6 Critical
- pi-hole pi-hole/adminlte, web interface +1 moreSensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte7.4 High
matioOSS-FuzzHeap-buffer-overflow in H5O__chunk_deserializeNo scorelibuclOSS-FuzzUNKNOWN READ in kh_get_ucl_hash_nodeNo scorepopplerOSS-FuzzBad-cast to SplashPattern from invalid vptrNo score- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vim8.2 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- linux kernelImportant: kernel security, bug fix, and enhancement update5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreImportant: kernel security, bug fix, and enhancement update5.5 Medium
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 Critical
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users...8.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +12 more +14 moreBIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x...8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all...8.8 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x...7.5 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14...7.5 High
ezsystems/ezplatformPackagistAny storage file can be downloaded from p.sh if full server path is knownNo scoreibexa/post-installPackagistAny storage file can be downloaded from p.sh if full server path is knownNo score- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13...9.9 Critical
- f5 big-ip advanced web application firewall, big-ip application security manager, big-ip datasafe +2 moreOn version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross...9.6 Critical
- f5 big-ip dns, big-ip domain name system +1 moreOn version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions...7.5 High
- beegoCross-site Scripting in Beego6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before...9.0 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a...7.5 High
- tibco webfocus client, webfocus installer, webfocus reporting server +2 moreTIBCO WebFOCUS Cross Site Scripting vulnerabilities9.0 Critical
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x...7.5 High
- Show moreLoading…