CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- eedee wordpress slider block gutenslider, gutenslider +1 moreGutenslider < 5.2.0 - Contributor+ Stored XSS5.4 Medium
- ffw omgf, unknown omgf | host google fonts locally +1 moreOMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion8.1 High
- ffw omgf, unknown omgf | host google fonts locally +1 moreOMGF < 4.5.4 - Unauthenticated Path Traversal in REST API9.1 Critical
- fontsplugin fonts, unknown fonts plugin | google fonts typography +1 moreFonts Plugin < 3.0.3 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- print my blog project my blog, mnelson4 print my blog – print, pdf, & ebook converter wordpress plugin +1 morePrint My Blog < 3.4.2 - Plugin Deactivation via CSRF8.1 High
- bootstrapped visual link previewVisual Link Preview < 2.2.3 - Unauthorised AJAX Calls5.4 Medium
- unknown donate with qrcodeDonate With QRCode < 1.4.5 - Stored Cross-Site Scripting5.4 Medium
- dfactory post views counterPost Views Counter < 1.3.5 - Authenticated Stored XSS4.8 Medium
- wp mapa politico espana project mapa politico espana, juan carlos wp mapa politico españa +1 moreWP Mapa Politico Espana < 3.7.0- Authenticated Stored XSS4.8 Medium
- offshorewebmaster availability calendarAvailability Calendar < 1.2.1 - Authenticated SQL Injection8.8 High
- offshorewebmaster availability calendarAvailability Calendar < 1.2.2 - Authenticated Stored Cross-Site Scripting4.8 Medium
- unknown wp dialog, wp dialog project dialog +1 moreWP Dialog <= 1.2.5.5 - Authenticated Stored Cross-Site Scripting4.8 Medium
- unknown 有赏 you shang, you-shang project you-shang +1 moreYou Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting5.4 Medium
- itservicejung youforms-free-for-copecart, unknown youforms for wordpress – creating forms for copecart +1 moreyouForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site Scripting4.8 Medium
- unknown splash headerSplash Header < 1.20.8 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 moreTimetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure6.5 Medium
- motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 moreTimetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Update5.4 Medium
- motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 moreTimetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion4.3 Medium
- thinktwit project thinktwitThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- alojapro widget, unknown alojapro widget +1 moreAlojapro Widget <= 1.1.15 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS5.4 Medium
- dpl product feed on woocommerce, unknown product feed on woocommerce for google, awin, shareasale, bing, and more +1 moreCreate WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection7.2 High
- unknown wp-boardWP-Board <= 1.1 (beta) - Unauthenticated SQL Injection8.8 High
- unknown wordpress page contact, wpagecontact project wpagecontact +1 moreWordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection7.2 High
- solvercircle wp icommerce, unknown wp icommerce – the first interactive ecommerce for wordpress +1 moreWP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL Injection7.2 High
- unknown wp domain redirect, wp-domain-redirect project wp-domain-redirect +1 moreWP Domain Redirect <= 1.0 - Authenticated SQL Injection7.2 High
- unknown display users, wp-display-users project wp-display-users +1 moreDisplay users <= 2.0.0 - Authenticated SQL Injection7.2 High
- ombu the sorterThe Sorter <= 1.0 - Authenticated SQL Injection7.2 High
- unknown responsive 3d sliderResponsive 3D Slider <= 1.2 - Authenticated SQL Injection7.2 High
- activemedia microcopyMicroCopy <= 1.1.0 - Authenticated SQL Injection7.2 High
- bestiaweb gseor, unknown gseor – wordpress seo plugin +1 moreGSEOR <= 1.3 - Authenticated SQL Injection7.2 High
- debian linux, linux kernel, netapp cloud backup +8 more +10 morearch/mips/net/bpf_jit.c in the Linux kernel through 5.14.6 can generate undesirable machine code...7.8 High
yaraOSS-FuzzHeap-buffer-overflow in pe_get_section_full_nameNo scoreswift-protobufOSS-FuzzInvalid-free in swift_unexpectedErrorNo score- webkitgtkIn WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a...6.5 Medium
- invisible-island ncurses, apple mac os x, macos +2 moreAn issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based...8.8 High
- xfig project fig2dev, debian linux +1 moreAn issue was discovered in fig2dev through 20200520. A NULL pointer dereference exists in the...5.5 Medium
- apple ipados, itunes, safari +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...7.8 High
- apple ipados, safari, ios and ipados +2 more +4 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple ipados, tvos, watchos +4 more +6 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14...5.5 Medium
- apple ipados, safari, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreloop_rw_iter in fs/io_uring.c in the Linux kernel through 5.14.6 allows local users to gain...7.8 High
kamailioOSS-FuzzHeap-buffer-overflow in parse_content_lengthNo scorefileOSS-FuzzHeap-buffer-overflow in cdf_read_property_infoNo scoregeosOSS-FuzzHeap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegmentNo score- apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 moreBypass of the secureValidation property7.5 High
- goteleport teleportTeleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery...9.8 Critical
- goteleport teleportTeleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection...6.5 Medium
- goteleport teleportTeleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows...5.3 Medium
- tubitak pardus software centerPath Traversal in Pardus Software Center5.3 Medium
- Show moreLoading…