CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- jscom revoworks browserImproper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier...9.6 Critical
s2geometryOSS-FuzzUse-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_chaNo scoreopencensus-cppOSS-FuzzUse-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:No scorekamailioOSS-FuzzUNKNOWN READ in get_bodyNo scorepiexOSS-FuzzUse-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignaturesNo scores2geometryOSS-FuzzUse-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_chaNo scores2geometryOSS-FuzzUse-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_chaNo scoregnutls28Debiangnutls28 - security updateNo score- misp-project mispIn MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used...9.8 Critical
- ansi-regex project ansi-regex, chalk chalk/ansi-regex, oracle communications cloud native core policy +2 moreInefficient Regular Expression Complexity in chalk/ansi-regex7.5 High
- mariocasciaro mariocasciaro/object-path, object-path project object-path, debian linux +2 morePrototype Pollution in mariocasciaro/object-path7.5 High
- fb55 fb55/nth-check, nth-check project nth-check, debian linux +2 moreInefficient Regular Expression Complexity in fb55/nth-check7.5 High
- debian linux, linux kernel, fedoraproject fedora +16 more +18 moreA use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls...7.1 High
- netgear gc108p firmware, gc108pp firmware, gs108t firmware +17 more +19 moreCertain NETGEAR smart switches are affected by a \n injection in the web UI's password field,...8.8 High
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.5.5 Medium
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.5.5 Medium
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.5.5 Medium
- xfig project fig2dev, debian linux +1 morefig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.5.5 Medium
- wuzhicmsSQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the ...9.8 Critical
- wuzhicmsSQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the...9.8 Critical
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could...3.7 Low
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive...5.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very...5.1 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage...4.4 Medium
- mitmproxyLacking Protection against HTTP Request Smuggling in mitmproxy8.1 High
- apache tomcat, debian linux, netapp management services for element software and netapp hci +2 moreApache Tomcat DoS with unexpected TLS packet7.5 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRF9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflow9.8 Critical
- apache jenaXML External Entity (XXE) vulnerability7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound read7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd core7.5 High
- adamhathcock sharpcompressWriteEntryToDirectory used for an archive extraction is vulnerable to partial path traversal.4.3 Medium
- os4ed opensisOpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in...6.1 Medium
- os4ed opensisOpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in...9.8 Critical
- kaden picoflux air, kadenvodomery picoflux air firmware +1 moreObservable discrepancy in Kaden PICOFLUX AiR leaks water consumption4.3 Medium
- enbra ewm, at-wmbus-16-2, er-am dn 15 +1 more +3 moreIncorrect calculation in Enbra EWM does not report backflows or no flow events6.2 Medium
- enbra ewm, ewm 1.7.29 +1 moreInsufficient Verification of Data Authenticity in Enbra EWM (replay attack)6.5 Medium
- enbra ewm, at-wmbus-16-2, er-am dn 15 +1 more +3 moreHard-coded Credentials in Enbra Wireless M-Bus devices6.5 Medium
- mi ax3600 firmwareThere is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code...9.8 Critical
- mi ax3600There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command...9.8 Critical
- linuxfoundation tremor-scriptMemory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`7.5 High
- linuxfoundation tremor-scriptMemory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`9.8 Critical
- mi ax3600 firmwareThere is command injection in the meshd program in the routing system, resulting in command...7.2 High
- mi xiaomiSome js interfaces in the Xiaomi community were exposed, causing sensitive functions to be...5.3 Medium
- netmotionsoftware mobilityThe access controls on the Mobility read-write API improperly validate user access permissions;...6.8 Medium
- netmotionsoftware mobilityThe access controls on the Mobility read-only API improperly validate user access permissions....5.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon...7.2 High
serenityOSS-FuzzUNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocatorNo score- struktur libde265libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which...6.5 Medium
- struktur libde265libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be...6.5 Medium
- Show moreLoading…