CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- discourseXSS via blocked watched word in error message4.2 Medium
- mayankmetha ruckyUse of a Broken or Risky Cryptographic Algorithm in com.mayank.rucky7.5 High
- aurelia path, bluespire aurelia-path +1 morePrototype pollution in aurelia-path9.1 Critical
- sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 moreImproper neutralization of special elements in the SMA100 management interface allows a remote...6.5 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreAn improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to...9.1 Critical
- set user project userThe set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via...9.8 Critical
- datatables datatables.netCross-site Scripting (XSS)3.1 Low
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload...9.8 Critical
- dlink dir-x1560 firmware, dir-x6060 firmware +1 moreA denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1...7.5 High
- ping identity pingfederateThe Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of...9.8 Critical
- netop vision proOut of bounds write in Netop Vision Pro7.4 High
- adobe experience managerAdobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS6.5 Medium
- adobe experience managerAdobe Experience Manager Reflected Cross Site Scripting via accesskey parameter6.1 Medium
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe photoshop, photoshop 2020, photoshop 2021 +2 moreAdobe Photoshop Buffer Overflow leads to Arbitrary Code Execution7.8 High
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe digital editionsAdobe Digital Editions Installer flaw leads to Local Privilege Escalation5.8 Medium
- adobe premiere elements, not a product +1 moreAdobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe photoshop elementsAdobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe experience managerAdobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack5.9 Medium
- adobe digital editionsAdobe Digital Editions Installer flaw leads to Arbitrary File System Write6.5 Medium
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe experience managerAdobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution5.4 Medium
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud Arbitrary File Overwrite Vulnerability7.4 High
- adobe incopyAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe digital editionsAdobe Digital Editions Command Execution Vulnerability8.6 High
- adobe incopyAdobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution7.8 High
- adobe svg-native-viewer, svg native viewer +1 moresvg-native-viewer Heap Buffer overflow Vulnerability7.8 High
- yith maintenance mode (wordpress plugin), yithemes yith maintenance mode +1 moreYITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities6.9 Medium
- yith maintenance mode (wordpress plugin), yithemes yith maintenance mode +1 moreYITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability.6.9 Medium
- stylemix directory listings wordpress plugin – ulisting, stylemixthemes ulisting +1 moreWordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability5.9 Medium
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability8.6 High
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability7.1 High
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities5.4 Medium
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- maksym marko mx time zone clocks, mx time zone clocks project time zone clocks +1 moreMX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting5.4 Medium
- status301 coolclock, unknown coolclock – a javascript analog clock +1 moreCoolClock < 4.3.5 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection9.8 Critical
- post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 morePostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure4.3 Medium
- post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 morePostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 morePostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 morePostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls6.5 Medium
- wp map block project map block, unknown wp map block – gutenberg map block for google map and openstreet map +1 moreWP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown recipe card blocks by wpzoom, wpzoom recipe card blocks for gutenberg \& elementor +1 moreRecipe Card Blocks < 2.8.3 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown countdown blockCountdown Block < 1.1.2 - Missing Authorisation in AJAX action4.3 Medium
- unknown recipe card blocks by wpzoom, wpzoom recipe card blocks for gutenberg \& elementor +1 moreRecipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting6.1 Medium
- cozmoslabs translatepress, unknown translate multilingual sites – translatepress +1 moreTranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting4.8 Medium
- humanityco cookie notice & compliance for gdpr / ccpa, hu-manity cookie notice \& compliance for gdpr \/ ccpa +1 moreCookie Notice & Compliance for GDPR / CCPA < 2.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- Show moreLoading…