CVEs published in September 2021
2,096 vulnerabilities, 219 critical, 26 exploited.
- nagios xiNagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards.9.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.9.8 Critical
- nagios xiNagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards.9.8 Critical
- nagios xiNagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.9.8 Critical
- irfanviewA buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute...7.8 High
- irfanviewIrfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS...5.5 Medium
- irfanviewA buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows...7.8 High
- irfanviewA buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to...7.8 High
- irfanviewA buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to...7.8 High
- irfanviewA buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to...7.8 High
- irfanviewA buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers...7.8 High
- irfanviewA buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers...7.8 High
- irfanviewA buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to...5.5 Medium
- esphome, esphome firmware +1 moreweb_server allows OTA update without checking user defined basic auth username & password7.5 High
apache2Ubuntuapache2 regressionNo score- huawei fusioncomputeThere is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0....7.5 High
- huawei fusioncomputeThere is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6...7.2 High
- huawei p40 firmwareThere is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118...7.5 High
- microfocus arcsight enterprise security managerRemote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM)...9.8 Critical
- microfocus netiq directory and resource administratorUnauthorized information security disclosure vulnerability on Micro Focus Directory and Resource...4.9 Medium
- wpdevart countdown and countup, woocommerce sales timers, countdown and countup\, woocommerce sales timer +1 moreCountdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
apache2Ubuntuapache2 regressionNo scoreshibboleth-spopenSUSESecurity update for shibboleth-spNo scoreshibboleth-spSUSESecurity update for shibboleth-spNo score- siemens solid edge se2021, solid edge +1 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...7.8 High
- siemens solid edge se2021, solid edge +1 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...7.8 High
- siemens nx 1953 series, nx 1980 series, solid edge se2021 +7 more +9 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...3.3 Low
- siemens solid edge se2021, solid edge +1 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...7.8 High
- siemens solid edge se2021, solid edge +1 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...7.8 High
- siemens nx 1953 series, nx 1980 series, solid edge se2021 +7 more +9 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...7.8 High
- siemens nx 1980 series, solid edge se2021, solid edge +2 more +4 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...3.3 Low
- siemens nx 1980 series, solid edge se2021, solid edge +2 more +4 moreA vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected...3.3 Low
- riconmobile s9922l firmwareRICON Industrial Cellular Router S9922L 16.10.3(3794) is affected by cleartext storage of...5.3 Medium
- f-secure internet gatekeeperArbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper7.6 High
- f-secure internet gatekeeperDenial of Service Vulnerability in Web Interface of F-Secure Internet Gatekeeper5.4 Medium
uwebsocketsOSS-FuzzContainer-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>No scoreuwebsocketsOSS-FuzzContainer-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>No scoreopenexrOSS-FuzzNegative-size-param in Imf_3_1::memstream_readNo scoreuwebsocketsOSS-FuzzContainer-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LLNo scoreuwebsocketsOSS-FuzzContainer-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::No scoreassimpOSS-FuzzHeap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8No score- gilacms gila cmsCross-Site Request Forgery in GilaCMS8.8 High
- gilacms gila cmsCross-site Scripting in GilaCMS5.4 Medium
- gilacms gila cmsCross-site Scripting in GilaCMS5.4 Medium
- gilacms gila cmsGilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter...7.2 High
- monstra cmsAn issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via...6.5 Medium
- kingdee kis cloudKingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the...8.8 High
- wuzhicmsBeijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management...8.1 High
- s-cms cms enterprise website construction systemThere is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5...9.8 Critical
- nokogiriImproper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby7.5 High
- Show moreLoading…