CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...5.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user...6.2 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...4.3 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to...6.4 Medium
- discourseServer Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email...5.3 Medium
- ibm aspera, aspera on cloud +1 moreIBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to...6.4 Medium
- ibm security verify bridgeIBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to...6.1 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm security verify bridgeIBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a...2.5 Low
- ibm security verify bridgeIBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read...4.1 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 could reveal sensitive version information about the server from error pages that...4.3 Medium
containernetworking-pluginsAlmaLinux,critAlmaLinux,criuAlmaLinux +4 more +6 morecontainer-tools:rhel8 bug fix updateNo score- ibm security verify bridgeIBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read...6.5 Medium
- ibm jazz for service management, tivoli netcool\/omnibus webgui +1 moreIBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to...6.4 Medium
- ibm security guardiumIBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a...2.7 Low
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...4.0 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...4.0 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...4.0 Medium
- ibm security guardiumIBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic...7.5 High
- abb system access point, system access point 127v firmware, system access point 2.0 firmware +3 more +5 morefree@home System Access Point FW integrity check can be bypassed.6.1 Medium
- frogcms project frogcmsPrivilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute...9.8 Critical
- cusmin absolutely glamorous custom admin, agca - absolutely glamorous custom admin (wordpress plugin) +1 moreWordPress Absolutely Glamorous Custom Admin plugin <= 6.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability6.6 Medium
- unknown iq block countryWordPress iQ Block Country plugin <= 1.2.11 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability5.5 Medium
- hector cabrera wordpress popular posts, wordpress popular posts project popular posts +1 moreWordPress Popular Posts plugin <= 5.3.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability5.5 Medium
- openvpn access serverOpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script...6.1 Medium
- dlink dir-3040 firmwareAn information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR...10.0 Critical
- pandasecurity panda adaptive defense 360, panda devices agent +1 moreDLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8...7.8 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer Dereference7.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Improper Handling of Exceptional Conditions7.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer Dereference7.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer Dereference7.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Buffer Overflow8.1 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer Dereference7.5 High
ca-certificatesUbuntuca-certificates updateNo score- citrix sharefile storage zones controller, sharefile, sharefile storagezones controller +2 moreImproper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an...9.8 Critical
- revive-adserver revive adserverVulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the...7.1 High
- concretecms concrete cmsA CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead...5.4 Medium
- ui unifi talkA vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who...8.8 High
- concretecms concrete cmsConcrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the...6.5 Medium
- concretecms concrete cmsA CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can...5.4 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in the Analytics service....5.5 Medium
- Show moreLoading…