CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- struktur libde265libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function,...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function...6.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function,...6.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function...8.8 High
- struktur libde265, debian linux +1 morelibde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited...6.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can...6.5 Medium
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.5.5 Medium
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.5.5 Medium
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.5.5 Medium
- dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +16 more +18 moreThe identity authentication bypass vulnerability found in some Dahua products during the login...9.8 Critical
- jizhicmsAn arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary...7.2 High
- rgcms project rgcmsA cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the...5.4 Medium
- rgcms project rgcmsAn arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code...7.2 High
- rgcms project rgcmsAn arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code...7.2 High
- dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +17 more +19 moreThe identity authentication bypass vulnerability found in some Dahua products during the login...9.8 Critical
- publiccmsAn issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code.9.8 Critical
- jflyfox jfinal cmsImproper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via ...7.5 High
- feehi feehicmsArbitrary Code Execution in feehi/cms9.8 Critical
- emlogemlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which...4.3 Medium
- openzeppelin contracts, openzeppelin-contracts +1 moreUUPSUpgradeable vulnerability in OpenZeppelin Contracts9.8 Critical
@openzeppelin/contracts-upgradeablenpmUUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeableNo score- openbsd openssh, netapp clustered data ontap, hci management node +2 more +4 moreOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of...5.3 Medium
- hgiga oaklouds oaksv2, oaklouds oaksv3, oaklouds portal +2 moreHGiga OAKlouds - Command Injection-29.8 Critical
- hgiga oaklouds oaksv2, oaklouds oaksv3, oaklouds portal +2 moreHGiga OAKlouds - Command Injection-19.8 Critical
- changing inc. tssservisignadapterCHANGING Inc. TSSServiSignAdapter Windows Versions - Improper Input Validation9.8 Critical
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously...8.8 High
- sap business oneThe Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke...6.3 Medium
- sap dmis, s4core, sapscore +2 more +4 moreDMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700,...9.1 Critical
- sap business oneSAP Business One, version - 10.0, allows an attacker with business authorization to upload any...9.9 Critical
- sap netweaver portal, sap se netweaver enterprise portal +1 moreThe SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews...8.1 High
- sap business oneSAP Business One, version - 10.0, allows a local attacker with access to the victim's browser...7.0 High
- sap cloud connectorSAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing...5.9 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (notification service) +1 moreNWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user...6.9 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a...5.7 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (sapui5) +1 moreUnder certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions -...4.7 Medium
- sap cloud connectorPotentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted...6.8 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file...5.2 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (crystal report) +1 moreSAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does...5.4 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (component build service) +1 moreServer-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver...9.9 Critical
- ibm security guardiumIBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- ibm security guardiumIBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information...6.5 Medium
- sitasoftware azurcmsMultiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and...5.4 Medium
- 8x8 jitsi meet, jitsi jitsi-meet +1 moreAuthentication Bypass: Forged Tokens Allow Access to Arbitrary Rooms7.5 High
- 8x8 jitsi meet, jitsi jitsi-meet +1 moreDOM-based XSS/Content Spoofing via Prototype Pollution6.8 Medium
- Show moreLoading…