CVEs published August 7, 2021
12 CVEs were published on August 7, 2021: 0 critical, 1 high.
- Published
- 12
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- :linux_kernel:
- 1
- obsidian
- 1
High 1
Medium, low and unrated 11
- CVE-2021-38173Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in
- CVE-2021-38168Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.
- CVE-2021-38169Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.
- CVE-2021-38167Roxy-WI through 5.2.2.0 allows SQL Injection via check_login.
- CVE-2021-38166In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are plac:linux_kernel:
- CVE-2021-38165Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because th
- CVE-2021-29923Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) all
- CVE-2021-38159In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web application could allow
- CVE-2021-38160In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that sup
- CVE-2021-38148Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.obsidian
- CVE-2021-29922library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address