CVEs published August 4, 2021
84 CVEs were published on August 4, 2021: 4 critical, 35 high. 1 is now in CISA KEV.
- Published
- 84
- Critical
- 4
- High
- 35
- Medium
- 20
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 1
- Fix available
- 9
Most affected products
- Foxit PDF Reader
- 22
- Fortinet FortiSandbox
- 6
- Akaunting
- 5
- Fortinet FortiPortal
- 4
- Cisco Small Business RV Series Router Firmware
- 3
- com.liferay.portal:release.portal.bom · com.liferay.portal:…
- 3
- pi-hole AdminLTE
- 2
- star7th/showdoc · showdoc/showdoc
- 2
- Akaunting · akaunting/akaunting
- 1
- Cisco ConfD
- 1
Critical 4
- CVE-2021-20028Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, sSonicWall SRA/SMA100
- CVE-2021-1610Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1609Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-32590Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 througFortinet FortiPortal
High 35
- CVE-2021-36801Akaunting Authentication Bypass in Company SelectionAkaunting
- CVE-2021-36800Akaunting OS Command Injection in 'Money.php'Akaunting
- CVE-2021-22124An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 throuFortinet FortiSandbox, FortiAuthenticator
- CVE-2021-32706(Authenticated) Remote Code Execution Possible in Web Interface 5.5pi-hole AdminLTE
- CVE-2021-1602Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2021-1593Cisco Packet Tracer for Windows DLL Injection VulnerabilityCisco Packet Tracer
- CVE-2021-1572ConfD CLI Secure Shell Server Privilege Escalation VulnerabilityCisco ConfD
- CVE-2021-26097An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4,Fortinet FortiSandbox
- CVE-2020-29011Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 Fortinet FortiSandbox
- CVE-2021-34853This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34852This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34851This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34850This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34849This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34848This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34847This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34846This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34845This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34844This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34843This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34842This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34841This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34840This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34839This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34838This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34837This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34836This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34835This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34834This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34833This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34832This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.Foxit PDF Reader
- CVE-2021-34831This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.37651.Foxit Reader
- CVE-2021-24010Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 mayFortinet FortiSandbox
- CVE-2021-3678Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdocstar7th/showdoc · showdoc/showdoc
- CVE-2021-38111The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI (Near Field Magnetic I
Medium, low and unrated 45
- CVE-2021-3539EspoCRM Avatar Persistent XSSEspoCRM
- CVE-2021-36805Akaunting Invoice Footer Persistent XSSAkaunting
- CVE-2021-36804Akaunting Password Reset RelayAkaunting · akaunting/akaunting
- CVE-2021-36803Akaunting Avatar Persistent XSSAkaunting
- CVE-2021-36802Akaunting DoS via User-Controlled 'locale' VariableAkaunting
- CVE-2021-31869Pimcore AdminBundle 'specificID' SQL InjectionPimcore AdminBundle
- CVE-2021-31867Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL InjectionPimcore Customer Data Framework
- CVE-2021-38114libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
- CVE-2020-24829An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box.
- CVE-2020-22352The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a craft
- CVE-2021-38113In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the
- CVE-2021-32465An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remoteTrend Micro Apex One · Trend Micro OfficeScan
- CVE-2021-32464An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free BusinessTrend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2021-24014Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an Fortinet FortiSandbox
- CVE-2021-26096Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to maFortinet FortiSandbox
- CVE-2021-32793Stored XSS Vulnerability in the Pi-hole Webinterfacepi-hole AdminLTE
- CVE-2021-34707Cisco Evolved Programmable Network Manager Sensitive Information Disclosure VulnerabilityCisco Evolved Programmable Network Manager
- CVE-2021-1522Cisco Connected Mobile Experiences Strong Authentication Requirements Enforcement BypassCisco Connected Mobile Experiences
- CVE-2021-32596A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow anFortinet FortiPortal
- CVE-2021-36168A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.5, FortiPortal 5.3.xFortinet FortiPortal
- CVE-2021-24018A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacentFortinet FortiOS
- CVE-2020-24827A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segm
- CVE-2020-24826A vulnerability in the elf::section::as_strtab function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segme
- CVE-2020-24825A vulnerability in the line_table::line_table function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmen
- CVE-2020-24824A global buffer overflow issue in the dwarf::line_table::line_table function of Libelfin v0.3 allows attackers to cause a denial of service
- CVE-2020-24823A vulnerability in the dwarf::to_string function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation
- CVE-2020-24822A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentat
- CVE-2020-24821A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segm
- CVE-2021-29765IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP.IBM PowerVM Hypervisor
- CVE-2020-4707IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting.IBM API Connect
- CVE-2021-36764In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference.
- CVE-2021-32594An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5,Fortinet FortiPortal
- CVE-2021-36765In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherN
- CVE-2021-35463Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary wcom.liferay.portal:release.portal.bom · com.liferay:com.lif…
- CVE-2021-26098An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few informaFortinet FortiSandbox
- CVE-2021-33337Cross-site scripting (XSS) vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Lifercom.liferay:com.liferay.document.library.web · com.liferay.…
- CVE-2021-33338The Layout module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 6, exposes the CSRFcom.liferay.portal:release.portal.bom · com.liferay.portal:…
- CVE-2021-33336Cross-site scripting (XSS) vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3, and Liferay DXP 7.1com.liferay.portal:release.portal.bom · com.liferay.portal:…
- CVE-2021-3680Missing Cryptographic Step in star7th/showdocstar7th/showdoc · showdoc/showdoc
- CVE-2021-33339Cross-site scripting (XSS) vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7.2 before fix pack 9com.liferay.portal:release.portal.bom · com.liferay.portal:…
- CVE-2021-35397A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to
- CVE-2021-36483DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.
- CVE-2021-37231A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsing a crafted mp4 fil
- CVE-2021-37232A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through APar_read64() in src/util.cpp due to the lack of buff
- CVE-2021-38115read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-o