CVEs published August 11, 2021
117 CVEs were published on August 11, 2021: 5 critical, 16 high.
- Published
- 117
- Critical
- 5
- High
- 16
- Medium
- 24
- Low
- 2
- Unrated
- 70
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- 8
- Intel(R) Ethernet Adapters 800 Series Controllers and assoc…
- 6
- Palo Alto Networks PAN-OS
- 5
- FATEK Automation FvDesigner
- 3
- IBM Security Guardium
- 3
- contao · contao/core-bundle +1
- 2
- F-Secure Mobile Security
- 2
- Intel(R) Ethernet Controllers 800 series Linux drivers
- 2
- Intel(R) Graphics Driver
- 2
- tmercswims tmerc-cogs
- 2
Critical 5
- CVE-2020-28589An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader developmenttinyobjloader
- CVE-2021-38513Certain NETGEAR devices are affected by authentication bypass.
- CVE-2021-38516Certain NETGEAR devices are affected by lack of access control at the function level.
- CVE-2021-38528Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2021-38530Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
High 16
- CVE-2021-37697Sensitive information leak in Welcome of tmerc-cogstmercswims tmerc-cogs
- CVE-2021-37696Sensitive information leak in MassDM of tmerc-cogstmercswims tmerc-cogs
- CVE-2021-37627Privilege escalation via form generatorcontao · contao/core-bundle +1
- CVE-2021-37626PHP file inclusion via insert tagscontao · contao/core-bundle +1
- CVE-2021-1110NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validNVIDIA Jetson AGX Xavier series, Jetson Xavier NX.
- CVE-2021-1109NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-1108NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-1107NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code eNVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-1106NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in esNVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-37694Code injection issue for java-spring-cloud-stream-templateasyncapi java-spring-cloud-stream-template · @asyncapi/java…
- CVE-2021-3050PAN-OS: OS Command Injection Vulnerability in Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-23420Deserialization of Untrusted Datacodeception/codeception
- CVE-2021-38515Certain NETGEAR devices are affected by denial of service.
- CVE-2021-38518Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2021-38527Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2021-38529Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
Medium, low and unrated 96
- CVE-2021-37699Open Redirect in Next.js versions below 11.1.0vercel next.js · next
- CVE-2021-38591An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883.
- CVE-2021-38584The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585).
- CVE-2021-38585The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585).
- CVE-2021-38586In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589).
- CVE-2021-38587In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586).
- CVE-2021-38588In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587).
- CVE-2021-38589In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588).
- CVE-2021-38590In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
- CVE-2021-36770Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in t
- CVE-2021-1114NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of serNVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-1113NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-1112NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service.NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-1111Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds checkNVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2021-38563An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
- CVE-2021-38564An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
- CVE-2021-38565An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
- CVE-2021-38566An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
- CVE-2021-38567An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS.
- CVE-2021-38568An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2021-38569An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2021-38570An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2021-38571An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2021-38572An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2021-38573An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2021-38574An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
- CVE-2020-21363An arbitrary file deletion vulnerability exists within Maccms10.
- CVE-2020-21362A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts o
- CVE-2020-21359An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification
- CVE-2021-22098UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability.UAA server
- CVE-2020-25566In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC.
- CVE-2020-25565In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the por
- CVE-2020-25564In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessi
- CVE-2020-25563In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing Remot
- CVE-2020-25562In SapphireIMS 5.0, there is no CSRF token present in the entire application.
- CVE-2020-25561SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server.
- CVE-2020-25560In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the por
- CVE-2017-16632In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
- CVE-2017-16631In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Referenc
- CVE-2017-16630In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Ins
- CVE-2017-16629In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of
- CVE-2021-32440The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file
- CVE-2021-32439Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary c
- CVE-2021-32438The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted fi
- CVE-2021-32437The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in
- CVE-2021-33793Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during O
- CVE-2021-33794Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key d
- CVE-2020-21976An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execu
- CVE-2021-38085The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue.
- CVE-2021-23421Prototype Pollutionmerge-change
- CVE-2021-3048PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutagePalo Alto Networks PAN-OS
- CVE-2021-3047PAN-OS: Weak Cryptography Used in Web Interface AuthenticationPalo Alto Networks PAN-OS
- CVE-2021-3046PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect PortalPalo Alto Networks PAN-OS
- CVE-2021-3045PAN-OS: OS Command Argument Injection in Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-20427IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.IBM Security Guardium
- CVE-2021-20420IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks againsIBM Security Guardium
- CVE-2021-20418IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to comprIBM Security Guardium
- CVE-2021-38543TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equi
- CVE-2021-38544Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a tele
- CVE-2021-38545Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equip
- CVE-2021-38546CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and a
- CVE-2021-38547Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telesco
- CVE-2021-38548JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an elect
- CVE-2021-38549MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipmen
- CVE-2021-34640Securimage-WP-Fixed <= 3.5.4 Reflected Cross-Site ScriptingSecurimage-WP-Fixed
- CVE-2019-25052In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions dire
- CVE-2021-0196Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticatedIntel(R) NUC 9 Extreme Laptop Kits
- CVE-2021-0160Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authIntel(R) NUC Pro Chassis Element AverMedia Capture Card dri…
- CVE-2021-0003Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated usIntel(R) Ethernet Controllers 800 series Linux drivers
- CVE-2021-0002Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated usIntel(R) Ethernet Controllers 800 series Linux drivers
- CVE-2021-0084Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authIntel(R) Ethernet Controllers X722 and 800 series Linux RMD…
- CVE-2021-0083Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to Intel(R) Optane(TM) PMem versions
- CVE-2021-0062Improper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially enaIntel(R) Graphics Drivers
- CVE-2021-0012Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated uIntel(R) Graphics Driver
- CVE-2021-0061Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enableIntel(R) Graphics Driver
- CVE-2021-0009Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may Intel(R) Ethernet Adapters 800 Series Controllers and assoc…
- CVE-2021-0008Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1Intel(R) Ethernet Adapters 800 Series Controllers and assoc…
- CVE-2021-0007Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.1.0 may alloIntel(R) Ethernet Adapters 800 Series Controllers and assoc…
- CVE-2021-0006Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 mIntel(R) Ethernet Adapters 800 Series Controllers and assoc…
- CVE-2021-0005Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may alloIntel(R) Ethernet Adapters 800 Series Controllers and assoc…
- CVE-2021-0004Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5Intel(R) Ethernet Adapters 800 Series Controllers and assoc…
- CVE-2021-32939FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an aFATEK Automation FvDesigner
- CVE-2021-32947FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to executFATEK Automation FvDesigner
- CVE-2021-32931An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing projFATEK Automation FvDesigner
- CVE-2021-33594F-Secure Safe browser for Android vulnerable to Address Bar SpoofingF-Secure Mobile Security
- CVE-2021-33595F-Secure Safe browser for iOS vulnerable to Address Bar SpoofingF-Secure Mobile Security
- CVE-2021-38517Certain NETGEAR devices are affected by out-of-bounds reads and writes.
- CVE-2021-38519Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2021-38520Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2021-38521Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2021-38522NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2021-38523NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2021-38524Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2021-38525Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2021-38526Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
- CVE-2021-38531Certain NETGEAR devices are affected by incorrect configuration of security settings.