CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- cisco ios xe software, ios xe +1 moreCisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability5.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability5.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability7.7 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability8.6 High
wolfmqttOSS-FuzzHeap-buffer-overflow in MqttClient_DecodePacketNo scorewolfmqttOSS-FuzzHeap-buffer-overflow in MqttClient_DecodePacketNo score- payara micro communityPayara Micro Community 5.2021.6 and below allows Directory Traversal.7.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple local privilege escalation vulnerabilities due to improper...7.8 High
millisecondnpmRegular Expression Denial of Service in millisecondNo score- cmsmadesimple cms made simpleCMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which...5.4 Medium
- leoeditor leoRegular Expression Denial of Service in Leo Editor7.5 High
- gmate project gmategmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the...7.5 High
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing....6.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a local privilege escalation vulnerability due to the way it handles...7.8 High
node-staticnpmDenial of Service in node-staticNo score- ninjaforms ninja formsNinja Forms <= 3.5.7 Sensitive Information Disclosure6.5 Medium
- ninjaforms ninja formsNinja Forms <= 3.5.7 Unprotected REST-API to Email Injection6.4 Medium
drupal/tb_megamenuPackagistThis module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. This module has a vulnerability whereby users can select blocks as a menu i…No scoredrupal/tb_megamenuPackagistThis module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. The module does not use CSRF tokens to protect routes for saving menu confi…No scoredrupal/tb_megamenuPackagistThis module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. It does not sufficiently sanitize user input such that an admin with permis…No scoredrupal/tb_megamenuPackagistThis module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. The module does not sanitize values for CSS properties that are added by ad…No scoredrupal/domain_groupPackagistThis module enables sites to define a domain from Domain Access that points directly to a group page. The module doesn't sufficiently manage the access to content administrative paths allowing an atta…No scoredrupal/miniorange_samlPackagistThis module provides a solution to authenticate visitors using existing SAML providers. Certain non-default configurations allow a malicious user to login as any chosen user. The vulnerability is miti…No scoredrupal/taxonomy_managerPackagistThis module provides a powerful interface for managing a taxonomy vocabulary. A vocabulary gets displayed in a dynamic tree view, where parent terms can be expanded to list their nested child terms or…No scoredrupal/file_extractorPackagistThis module enables you to extract the textual content of files for use on a website, e.g. to display it or use it in search indexes. The module doesn't sufficiently protect the administrator-defined…No scoredrupal/commercePackagistThis module provides a system for building an ecommerce solution in their Drupal site. The module doesn't sufficiently verify access to profile data in certain circumstances. This vulnerability is mit…No scoredrupal/cshsPackagistThe module provides a field widget for selecting taxonomy terms in a hierarchical fashion. The module doesn't sanitize user input in certain cases, leading to a possible Cross-Site-Scripting (XSS) vul…No scoredrupal/user_hashPackagistThis module enables you to create an individual hash for each user. These hashes can be used for authentication instead of the user's password, e.g. for views exporters. The module doesn't sufficientl…No score- mattermostCross-site Scripting in Mattermost3.7 Low
- edge-core ecs2020 firmwareEdgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the...9.8 Critical
- talend esb runtimeTalend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09,...9.1 Critical
- line corporation client for ios, linecorp line +1 moreLINE client for iOS before 11.15.0 might expose authentication information for a certain service...7.5 High
- mozilla firefox esr, thunderbird +1 moreMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...6.5 Medium
- gurock testrailImproper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive...7.5 High
linuxUbuntu,linux-hweUbuntu,linux-hwe-5.11Ubuntu +1 more +3 morelinux, linux-hwe, linux-hwe-5.11, linux-hwe-5.4 vulnerabilityNo score- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.9.8 Critical
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreImproper Privilege Management in MA for Windows5.6 Medium
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreImproper privilege management in repair process of MA for Windows8.2 High
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreDLL side loading vulnerability in MA for Windows8.2 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection...9.8 Critical
- maianaffiliateMaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.4.8 Medium
- hikvision ds-2cd2021g1-i\(w\) firmware, ds-2cd2023g2-i\(u\) firmware, ds-2cd2026g2-iu\/sl firmware +254 more +256 moreA command injection vulnerability in the web server of some Hikvision product. Due to the...9.8 Critical
- teleficationTelefication <= 1.8.0 Open Proxy and Server-Side Request Forgery5.8 Medium
- apache kafka, oracle communications brm - elastic charging engine, communications cloud native core policy +5 more +7 moreTiming Attack Vulnerability for Apache Kafka Connect and Clients5.9 Medium
- amazon aws workspacesIn the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces...8.8 High
- octopus halibutRemote Code Execution in Halibut9.8 Critical
espeak-ngOSS-FuzzStack-buffer-underflow in InterpretPhonemeNo scorewolfmqttOSS-FuzzHeap-buffer-overflow in MqttClient_DecodePacketNo score- Show moreLoading…