CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
wolfmqttOSS-FuzzUNKNOWN READ in MqttProps_FreeNo scorewolfmqttOSS-FuzzHeap-buffer-overflow in MqttClient_DecodePacketNo scorewolfmqttOSS-FuzzHeap-buffer-overflow in MqttDecode_DisconnectNo scoreswift-protobufOSS-FuzzInvalid-free in generic specialization <Swift.Int> of Swift.Array.subscript.getter :No scoregrokOSS-FuzzUNKNOWN READ in state_VLC_dec::load_bytesNo score- red hat ansible, redhat ansible automation platform, ansible engine +1 more +3 moreImproper Input Validation and Command Injection in Ansible7.1 High
- plasticscm plastic scmPlastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.7.5 High
- broadcom tcpreplayHeap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows...5.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c...5.5 Medium
- gpacAn issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in...7.1 High
- gpacAn issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap...5.5 Medium
glibcTuxCare,glibc-commonTuxCare,glibc-develTuxCare +4 more +6 moreUpdate of nscd, glibc-headers, glibc, glibc-utils, glibc-static, glibc-static, glibc-devel, glibc-devel, glibc, glibc-commonNo score- in-toto in-toto-golangImproperly Implemented path matching for in-toto-golang5.6 Medium
- jsuitesClipboard-based XSS in jsuites8.7 High
- google chrome, fedoraproject fedora, google chromium indexed db api +2 moreUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...9.6 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 moreOut of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...8.8 High
- manageengine opmanagerCross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API...6.1 Medium
- wuzhicmsCross Site Scripting (XSS) vlnerability exists in WUZHI CMS up to and including 4.1.0 in the...5.4 Medium
- asyncapi modelinaImproper Control of Generation of Code ('Code Injection') in @asyncapi/modelina10.0 Critical
- wuzhicmsBlacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which...8.8 High
- http4sResponse Splitting from unsanitized headers in http4s8.7 High
- netgear r6400v2 firmware, r6700 firmware, r6700v3 firmware +8 more +10 moreThe update process of the Circle Parental Control Service on various NETGEAR routers allows...8.1 High
- client jointjsPrototype Pollution5.6 Medium
- butter project butterError in JPNS kernel of Butter8.8 High
- adonisjs edgeCross-site Scripting (XSS)5.4 Medium
- cloudronIn Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.6.1 Medium
- ibm jazz for service management, tivoli netcool\/omnibus gui +1 moreIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an...7.1 High
- ibm powervm hypervisorIBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a...6.0 Medium
- flexera flexnet inventory agent and beaconAn issue related to modification of otherwise restricted files through a locally authenticated...5.5 Medium
- nlnet labs routinatorInvalid RPKI data could disable Route Origin Validation on RTR clients.7.5 High
curlUbuntucurl regressionNo score- zohocorp manageengine admanager plusManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities.8.8 High
- zohocorp manageengine admanager plusManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.7.5 High
- zohocorp manageengine admanager plusManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.6.5 Medium
- zohocorp manageengine admanager plusManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.9.8 Critical
- manageengine desktop centralManageEngine Desktop Central before build 10.0.683 allows Unauthenticated Remote Code Execution...9.8 Critical
curlUbuntucurl vulnerabilitiesNo score- amd chipset driver, psp driver +1 moreAMD Chipset Driver Information Disclosure Vulnerability5.5 Medium
- infinispan infinispan-server-rest, redhat data grid +1 moreA flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0...9.8 Critical
- growi, inc. growiCross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2...6.1 Medium
- sonicwall global vpn clientSonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file...7.8 High
poppler-cppAlmaLinux,poppler-cpp-develAlmaLinux,poppler-develAlmaLinux +3 more +5 morepoppler bug fix and enhancement updateNo scorelibdbAlmaLinux,libdb-cxxAlmaLinux,libdb-cxx-develAlmaLinux +5 more +7 morelibdb bug fix and enhancement updateNo scoregcc-toolset-10-elfutilsAlmaLinux,gcc-toolset-10-elfutils-develAlmaLinux,gcc-toolset-10-elfutils-debuginfod-clientAlmaLinux +4 more +6 moregcc-toolset-10-elfutils bug fix updateNo score- Show moreLoading…