CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to...9.8 Critical
- hpe storeonce 3620 firmware, storeonce 3640 firmware, storeonce 5200 firmware +3 more +5 moreA potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE...6.5 Medium
- zoom plugin for microsoft outlookAll versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a...7.5 High
- zoom meeting connector, recording connector, virtual room connector +1 more +3 moreThe network address administrative settings web portal for the Zoom on-premise Meeting Connector...9.8 Critical
- zoom meeting connector, zoom video communications inc on-premise meeting connector controller +1 moreThe Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4...7.5 High
- zoom meeting connector, recording connector, virtual room connector +1 more +3 moreThe network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller...7.2 High
- zoom meetings, zoom video communications inc client for meetings for windows +1 moreDuring the installation process for all versions of the Zoom Client for Meetings for Windows...7.8 High
- zoom rooms, zoom video communications inc rooms for conference room for windows +1 moreDuring the installation process forZoom Rooms for Conference Room for Windows before version 5.3...7.8 High
- zoom plugin for microsoft outlookA user-writable application bundle unpacked during the install for all versions of the Zoom...7.8 High
- zoom meetings, rooms, zoom video communications inc client for meetings for macos (standard and for it admin) +3 more +5 moreZoom Client Installer Local Privilege Escalation7.8 High
- zoom meetings, zoom video communications inc client for meetings for windows +1 moreThe Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to...7.8 High
- zoom meetings, zoom video communications inc client for meetings for windows +1 moreThe Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate...9.8 Critical
- bag covid certificateCertain Federal Office of Information Technology Systems and Telecommunication FOITT products are...4.6 Medium
- abb mybuildings, mybuildings.abb.com, busch-jaeger my.busch-jaeger.de +1 more +3 moreControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.6.5 Medium
- skale sgxwalletAn issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of...7.5 High
- skale sgxwalletAn issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a...9.8 Critical
- nltk, nltk nltk/nltk +1 moreInefficient Regular Expression Complexity in nltk/nltk7.5 High
- josdejong josdejong/jsoneditor, jsoneditoronline jsoneditor +1 moreInefficient Regular Expression Complexity in josdejong/jsoneditor5.3 Medium
- inflect project inflect, pksunkara pksunkara/inflect +1 moreInefficient Regular Expression Complexity in pksunkara/inflect5.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Medium
- getgrav getgrav/grav, grav +1 moreReliance on Cookies without Validation and Integrity Checking in getgrav/grav6.3 Medium
- getgrav getgrav/grav-plugin-admin, grav-plugin-admin +1 moreImproper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin5.4 Medium
- google androidIn Oppo's battery application, the third-party SDK provides the function of loading a third-party...7.8 High
- concretecms concrete cmsA SSRF issue was discovered in Concrete CMS through 8.5.5. Users can access forbidden files on...6.4 Medium
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF....8.8 High
- nix project nixOut-of-bounds Write in nix9.8 Critical
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in...6.1 Medium
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. There is XSS via Markdown Comments.6.1 Medium
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass.7.5 High
- google androidIn ccu, there is a possible out of bounds read due to incorrect error handling. This could lead...4.9 Medium
- google androidIn m4u, there is a possible memory corruption due to a use after free. This could lead to local...7.8 High
- google androidIn m4u, there is a possible memory corruption due to a use after free. This could lead to local...7.8 High
- google androidIn memory management driver, there is a possible memory corruption due to an integer overflow....7.8 High
- google androidIn memory management driver, there is a possible side channel information disclosure. This could...5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- google androidIn memory management driver, there is a possible information disclosure due to uninitialized data...5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- google androidIn memory management driver, there is a possible information disclosure due to a missing bounds...5.5 Medium
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File...7.5 High
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external...9.8 Critical
- concretecms concrete cmsAn issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to...8.8 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of...6.1 Medium
- debian linux, linux kernel +1 moreA flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing...4.4 Medium
- phoenix contact plcnext, ietf rfc, phoenix contact axc f +6 more +8 morePhoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS7.5 High
- passportjs passport-oauth2Improper Access Control in passport-oauth25.3 Medium
- spomky-labs webauthn framework, webauthn framwork +1 moreImproper Access Control in Webauthn Framework9.8 Critical
- securonix snyprThe third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an...6.5 Medium
- datalust seqDatalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see...6.5 Medium
- asus armoury crate lite serviceASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a...7.3 High
- Show moreLoading…