CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
simdjsonOSS-FuzzUse-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_chaNo scoreassimpOSS-FuzzStack-buffer-overflow in Assimp::ZipArchiveIOSystem::Implement::MapArchiveNo scoreflatbuffersOSS-FuzzUse-of-uninitialized-value in LoadBinarySchemaNo scoresimdjsonOSS-FuzzUse-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_chaNo scoreassimpOSS-FuzzNull-dereference READ in unzOpenCurrentFile3No scoreharfbuzzOSS-FuzzHeap-use-after-free in hb_resolve_overflowsNo scoresleuthkitOSS-FuzzHeap-buffer-overflow in ext2fs_dinode_copyNo scoreopenssl1.0Debianopenssl1.0 - security updateNo score- boostnotestatic/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote...9.8 Critical
- ericsson enterprise content managementIn Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile...5.4 Medium
- ericsson enterprise content managementIn Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile...8.0 High
- seatd project seatdseatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and...8.8 High
- saitoha libsixelLibsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in...8.8 High
- saitoha libsixelLibsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.8.8 High
- netgear r6020 firmwaresetup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands...7.2 High
- realvnc vnc viewerRealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash...6.5 Medium
- digi international portserver ts 16, digi portserver ts 16 firmware +1 moreDigi PortServer TS 16 Improper Authentication9.6 Critical
- delta electronics dopsoft 2, deltaww dopsoft +1 moreDelta Electronics DOPSoft 2 Heap-based Buffer Overflow7.8 High
- delta electronics dopsoft 2, deltaww dopsoft +1 moreDelta Electronics DOPSoft 2 Stack-Based Buffer Overflow7.8 High
- delta electronics dopsoft 2, deltaww dopsoft +1 moreDelta Electronics DOPSoft 2 Out-of-Bounds Write7.8 High
- flexera flexnet code insightAn elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to...9.9 Critical
- flexera flexnet code insightA stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x...5.4 Medium
- flexera flexnet publisherA Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version...7.5 High
- acuitybrands nlight eclypse system controller firmwarenLight ECLYPSE (nECY) system Controllers running software prior to 1.17.21245.754 contain a...8.6 High
- ni ni-palImproper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior...7.8 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path...7.5 High
- xss hunter express project hunter expressXSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for...9.8 Critical
- device42 remote collectorThe Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP...8.8 High
- device42The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery...8.1 High
- baidu zrenderFix prototype pollution in the zrender merge and clone helper methods6.2 Medium
- linuxfoundation tremor, tremor-rs tremor-runtime +1 moreMemory Safety Issue when using patch or merge on state and assign the result back to state6.5 Medium
- mcafee,llc mcafee data loss prevention (dlp) endpoint for windows, mcafee data loss prevention endpoint +1 moreLocal Privilege Escalation in McAfee DLP Endpoint for Windows8.2 High
- mcafee,llc mcafee data loss prevention (dlp) discover, mcafee data loss prevention discover +1 moreRemote Code Execution in McAfee DLP Discover8.4 High
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for windows +1 moreImproper access control vulnerability in McAfee ENS for Windows7.3 High
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for windows +1 moreXML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior...5.0 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreWrong type for `Linker`-define functions when used across two `Engine`s6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreUse after free passing `externref`s to Wasm in Wasmtime6.3 Medium
- ait-pro bulletproof securityBulletProof Security <= 5.1 Sensitive Information Disclosure5.3 Medium
- cookiex-deep project cookiex-deepPrototype Pollution8.6 High
- apache shiro, oracle financial services crime and compliance management studio +1 moreApache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 morePossible integer and heap overflow due to lack of input command size validation while handling...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 morePossible Integer overflow to buffer overflow issue can occur due to improper validation of input...8.4 High
- pi-hole pi-hole/adminlte, web interface +1 moreCross-site Scripting (XSS) - Reflected in pi-hole/adminlte6.7 Medium
- pi-hole pi-hole/adminlte, web interface +1 moreCross-site Scripting (XSS) - Reflected in pi-hole/adminlte6.7 Medium
- cdr cdr/code-server, coder code-server +1 moreInefficient Regular Expression Complexity in cdr/code-server7.5 High
- nervjs nervjs/taro, taro +1 moreInefficient Regular Expression Complexity in nervjs/taro7.5 High
- activefusions order status batch change, activefusions co., ltd. order status batch change plug-in (for ec-cube 3.0 series) +1 moreCross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series)...6.1 Medium
- shiro8 co., ltd. list (order management) item change plug-in (for ec-cube 3.0 series), shiro8 list \(order management\) item change +1 moreCross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3...6.1 Medium
- jscom revoworks browserImproper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker...9.3 Critical
- Show moreLoading…