# CVEs published 2021-08-11

117 CVEs were published on August 11, 2021: 5 critical, 16 high. Days are UTC.

- [CVE-2021-37699](https://cve.now/CVE-2021-37699.md): Open Redirect in Next.js versions below 11.1.0 (CVSS 6.9, vercel next.js · next)
- [CVE-2021-38591](https://cve.now/CVE-2021-38591.md): An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. (no CVSS)
- [CVE-2021-37697](https://cve.now/CVE-2021-37697.md): Sensitive information leak in Welcome of tmerc-cogs (CVSS 7.1, tmercswims tmerc-cogs)
- [CVE-2021-38584](https://cve.now/CVE-2021-38584.md): The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585). (no CVSS)
- [CVE-2021-38585](https://cve.now/CVE-2021-38585.md): The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585). (no CVSS)
- [CVE-2021-38586](https://cve.now/CVE-2021-38586.md): In cPanel before 98.0.1, /scripts/cpan\_config performs unsafe operations on files (SEC-589). (no CVSS)
- [CVE-2021-38587](https://cve.now/CVE-2021-38587.md): In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586). (no CVSS)
- [CVE-2021-38588](https://cve.now/CVE-2021-38588.md): In cPanel before 96.0.13, fix\_cpanel\_perl lacks verification of the integrity of downloads (SEC-587). (no CVSS)
- [CVE-2021-38589](https://cve.now/CVE-2021-38589.md): In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588). (no CVSS)
- [CVE-2021-37696](https://cve.now/CVE-2021-37696.md): Sensitive information leak in MassDM of tmerc-cogs (CVSS 7.1, tmercswims tmerc-cogs)
- [CVE-2021-38590](https://cve.now/CVE-2021-38590.md): In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584). (no CVSS)
- [CVE-2021-37627](https://cve.now/CVE-2021-37627.md): Privilege escalation via form generator (CVSS 8.0, contao · contao/core-bundle +1)
- [CVE-2021-36770](https://cve.now/CVE-2021-36770.md): Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in t (no CVSS)
- [CVE-2021-37626](https://cve.now/CVE-2021-37626.md): PHP file inclusion via insert tags (CVSS 7.2, contao · contao/core-bundle +1)
- [CVE-2021-1114](https://cve.now/CVE-2021-1114.md): NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of ser (CVSS 4.4, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1113](https://cve.now/CVE-2021-1113.md): NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification (CVSS 4.7, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1112](https://cve.now/CVE-2021-1112.md): NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service. (CVSS 5.5, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1111](https://cve.now/CVE-2021-1111.md): Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check (CVSS 6.7, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1110](https://cve.now/CVE-2021-1110.md): NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after valid (CVSS 7.1, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX.)
- [CVE-2021-1109](https://cve.now/CVE-2021-1109.md): NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result (CVSS 7.2, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1108](https://cve.now/CVE-2021-1108.md): NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation (CVSS 7.3, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1107](https://cve.now/CVE-2021-1107.md): NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP\_IOC\_WRITE\* paths, where improper access controls may lead to code e (CVSS 7.8, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-1106](https://cve.now/CVE-2021-1106.md): NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in es (CVSS 7.8, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2021-38563](https://cve.now/CVE-2021-38563.md): An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. (no CVSS)
- [CVE-2021-38564](https://cve.now/CVE-2021-38564.md): An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. (no CVSS)
- [CVE-2021-38565](https://cve.now/CVE-2021-38565.md): An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. (no CVSS)
- [CVE-2021-38566](https://cve.now/CVE-2021-38566.md): An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. (no CVSS)
- [CVE-2021-38567](https://cve.now/CVE-2021-38567.md): An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. (no CVSS)
- [CVE-2021-38568](https://cve.now/CVE-2021-38568.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2021-38569](https://cve.now/CVE-2021-38569.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2021-38570](https://cve.now/CVE-2021-38570.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2021-38571](https://cve.now/CVE-2021-38571.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2021-38572](https://cve.now/CVE-2021-38572.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2021-38573](https://cve.now/CVE-2021-38573.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2021-38574](https://cve.now/CVE-2021-38574.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. (no CVSS)
- [CVE-2020-21363](https://cve.now/CVE-2020-21363.md): An arbitrary file deletion vulnerability exists within Maccms10. (no CVSS)
- [CVE-2020-21362](https://cve.now/CVE-2020-21362.md): A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts o (no CVSS)
- [CVE-2020-21359](https://cve.now/CVE-2020-21359.md): An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification (no CVSS)
- [CVE-2021-22098](https://cve.now/CVE-2021-22098.md): UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. (no CVSS, UAA server)
- [CVE-2020-25566](https://cve.now/CVE-2020-25566.md): In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save\_Password form as shown in POC. (no CVSS)
- [CVE-2020-25565](https://cve.now/CVE-2020-25565.md): In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the por (no CVSS)
- [CVE-2020-25564](https://cve.now/CVE-2020-25564.md): In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessi (no CVSS)
- [CVE-2020-25563](https://cve.now/CVE-2020-25563.md): In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing Remot (no CVSS)
- [CVE-2020-25562](https://cve.now/CVE-2020-25562.md): In SapphireIMS 5.0, there is no CSRF token present in the entire application. (no CVSS)
- [CVE-2020-25561](https://cve.now/CVE-2020-25561.md): SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. (no CVSS)
- [CVE-2020-25560](https://cve.now/CVE-2020-25560.md): In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the por (no CVSS)
- [CVE-2017-16632](https://cve.now/CVE-2017-16632.md): In SapphireIMS 4097\_1, the password in the database is stored in Base64 format. (no CVSS)
- [CVE-2017-16631](https://cve.now/CVE-2017-16631.md): In SapphireIMS 4097\_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Referenc (no CVSS)
- [CVE-2017-16630](https://cve.now/CVE-2017-16630.md): In SapphireIMS 4097\_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Ins (no CVSS)
- [CVE-2017-16629](https://cve.now/CVE-2017-16629.md): In SapphireIMS 4097\_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of (no CVSS)
- [CVE-2021-32440](https://cve.now/CVE-2021-32440.md): The Media\_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file (no CVSS)
- [CVE-2021-32439](https://cve.now/CVE-2021-32439.md): Buffer overflow in the stbl\_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary c (no CVSS)
- [CVE-2021-32438](https://cve.now/CVE-2021-32438.md): The gf\_media\_export\_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted fi (no CVSS)
- [CVE-2021-32437](https://cve.now/CVE-2021-32437.md): The gf\_hinter\_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in (no CVSS)
- [CVE-2021-33793](https://cve.now/CVE-2021-33793.md): Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during O (no CVSS)
- [CVE-2021-33794](https://cve.now/CVE-2021-33794.md): Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key d (no CVSS)
- [CVE-2020-21976](https://cve.now/CVE-2020-21976.md): An arbitrary file upload in the \<input type="file" name="user\_image"\> component of NewsOne CMS v1.1.0 allows attackers to webshell and execu (no CVSS)
- [CVE-2021-38085](https://cve.now/CVE-2021-38085.md): The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. (no CVSS)
- [CVE-2021-23421](https://cve.now/CVE-2021-23421.md): Prototype Pollution (CVSS 5.6, merge-change)
- [CVE-2021-37694](https://cve.now/CVE-2021-37694.md): Code injection issue for java-spring-cloud-stream-template (CVSS 8.7, asyncapi java-spring-cloud-stream-template · @asyncapi/java…)
- [CVE-2021-3050](https://cve.now/CVE-2021-3050.md): PAN-OS: OS Command Injection Vulnerability in Web Interface (CVSS 8.8, Palo Alto Networks PAN-OS)
- [CVE-2021-3048](https://cve.now/CVE-2021-3048.md): PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage (CVSS 5.9, Palo Alto Networks PAN-OS)
- [CVE-2021-3047](https://cve.now/CVE-2021-3047.md): PAN-OS: Weak Cryptography Used in Web Interface Authentication (CVSS 4.2, Palo Alto Networks PAN-OS)
- [CVE-2021-3046](https://cve.now/CVE-2021-3046.md): PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal (CVSS 6.8, Palo Alto Networks PAN-OS)
- [CVE-2021-3045](https://cve.now/CVE-2021-3045.md): PAN-OS: OS Command Argument Injection in Web Interface (CVSS 4.9, Palo Alto Networks PAN-OS)
- [CVE-2021-20427](https://cve.now/CVE-2021-20427.md): IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. (CVSS 5.3, IBM Security Guardium)
- [CVE-2021-20420](https://cve.now/CVE-2021-20420.md): IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks agains (CVSS 4.3, IBM Security Guardium)
- [CVE-2021-20418](https://cve.now/CVE-2021-20418.md): IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compr (CVSS 4.7, IBM Security Guardium)
- [CVE-2021-38543](https://cve.now/CVE-2021-38543.md): TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equi (no CVSS)
- [CVE-2021-38544](https://cve.now/CVE-2021-38544.md): Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a tele (no CVSS)
- [CVE-2021-38545](https://cve.now/CVE-2021-38545.md): Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equip (no CVSS)
- [CVE-2021-38546](https://cve.now/CVE-2021-38546.md): CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and a (no CVSS)
- [CVE-2021-38547](https://cve.now/CVE-2021-38547.md): Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telesco (no CVSS)
- [CVE-2021-38548](https://cve.now/CVE-2021-38548.md): JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an elect (no CVSS)
- [CVE-2021-38549](https://cve.now/CVE-2021-38549.md): MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipmen (no CVSS)
- [CVE-2021-34640](https://cve.now/CVE-2021-34640.md): Securimage-WP-Fixed \<= 3.5.4 Reflected Cross-Site Scripting (CVSS 6.1, Securimage-WP-Fixed)
- [CVE-2019-25052](https://cve.now/CVE-2019-25052.md): In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions dire (no CVSS)
- [CVE-2021-0196](https://cve.now/CVE-2021-0196.md): Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticated (no CVSS, Intel(R) NUC 9 Extreme Laptop Kits)
- [CVE-2021-0160](https://cve.now/CVE-2021-0160.md): Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an auth (no CVSS, Intel(R) NUC Pro Chassis Element AverMedia Capture Card dri…)
- [CVE-2021-0003](https://cve.now/CVE-2021-0003.md): Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated us (no CVSS, Intel(R) Ethernet Controllers 800 series Linux drivers)
- [CVE-2021-0002](https://cve.now/CVE-2021-0002.md): Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated us (no CVSS, Intel(R) Ethernet Controllers 800 series Linux drivers)
- [CVE-2021-0084](https://cve.now/CVE-2021-0084.md): Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an auth (no CVSS, Intel(R) Ethernet Controllers X722 and 800 series Linux RMD…)
- [CVE-2021-0083](https://cve.now/CVE-2021-0083.md): Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to (no CVSS, Intel(R) Optane(TM) PMem versions)
- [CVE-2021-0062](https://cve.now/CVE-2021-0062.md): Improper input validation in some Intel(R) Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially ena (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2021-0012](https://cve.now/CVE-2021-0012.md): Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated u (no CVSS, Intel(R) Graphics Driver)
- [CVE-2021-0061](https://cve.now/CVE-2021-0061.md): Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable (no CVSS, Intel(R) Graphics Driver)
- [CVE-2021-0009](https://cve.now/CVE-2021-0009.md): Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may (no CVSS, Intel(R) Ethernet Adapters 800 Series Controllers and assoc…)
- [CVE-2021-0008](https://cve.now/CVE-2021-0008.md): Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1 (no CVSS, Intel(R) Ethernet Adapters 800 Series Controllers and assoc…)
- [CVE-2021-0007](https://cve.now/CVE-2021-0007.md): Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.1.0 may allo (no CVSS, Intel(R) Ethernet Adapters 800 Series Controllers and assoc…)
- [CVE-2021-0006](https://cve.now/CVE-2021-0006.md): Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 m (no CVSS, Intel(R) Ethernet Adapters 800 Series Controllers and assoc…)
- [CVE-2021-0005](https://cve.now/CVE-2021-0005.md): Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allo (no CVSS, Intel(R) Ethernet Adapters 800 Series Controllers and assoc…)
- [CVE-2021-0004](https://cve.now/CVE-2021-0004.md): Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5 (no CVSS, Intel(R) Ethernet Adapters 800 Series Controllers and assoc…)
- [CVE-2021-32939](https://cve.now/CVE-2021-32939.md): FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an a (no CVSS, FATEK Automation FvDesigner)
- [CVE-2021-32947](https://cve.now/CVE-2021-32947.md): FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to execut (no CVSS, FATEK Automation FvDesigner)
- [CVE-2021-32931](https://cve.now/CVE-2021-32931.md): An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing proj (no CVSS, FATEK Automation FvDesigner)
- [CVE-2020-28589](https://cve.now/CVE-2020-28589.md): An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development (CVSS 9.6, tinyobjloader)
- [CVE-2021-23420](https://cve.now/CVE-2021-23420.md): Deserialization of Untrusted Data (CVSS 7.7, codeception/codeception)
- [CVE-2021-33594](https://cve.now/CVE-2021-33594.md): F-Secure Safe browser for Android vulnerable to Address Bar Spoofing (CVSS 3.5, F-Secure Mobile Security)
- [CVE-2021-33595](https://cve.now/CVE-2021-33595.md): F-Secure Safe browser for iOS vulnerable to Address Bar Spoofing (CVSS 3.5, F-Secure Mobile Security)
- [CVE-2021-38513](https://cve.now/CVE-2021-38513.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 9.6)
- [CVE-2021-38515](https://cve.now/CVE-2021-38515.md): Certain NETGEAR devices are affected by denial of service. (CVSS 7.4)
- [CVE-2021-38516](https://cve.now/CVE-2021-38516.md): Certain NETGEAR devices are affected by lack of access control at the function level. (CVSS 10.0)
- [CVE-2021-38517](https://cve.now/CVE-2021-38517.md): Certain NETGEAR devices are affected by out-of-bounds reads and writes. (CVSS 6.9)
- [CVE-2021-38518](https://cve.now/CVE-2021-38518.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.4)
- [CVE-2021-38519](https://cve.now/CVE-2021-38519.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.3)
- [CVE-2021-38520](https://cve.now/CVE-2021-38520.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.6)
- [CVE-2021-38521](https://cve.now/CVE-2021-38521.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.1)
- [CVE-2021-38522](https://cve.now/CVE-2021-38522.md): NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2021-38523](https://cve.now/CVE-2021-38523.md): NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.9)
- [CVE-2021-38524](https://cve.now/CVE-2021-38524.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 4.5)
- [CVE-2021-38525](https://cve.now/CVE-2021-38525.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2021-38526](https://cve.now/CVE-2021-38526.md): Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. (CVSS 4.3)
- [CVE-2021-38527](https://cve.now/CVE-2021-38527.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.1)
- [CVE-2021-38528](https://cve.now/CVE-2021-38528.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2021-38529](https://cve.now/CVE-2021-38529.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.3)
- [CVE-2021-38530](https://cve.now/CVE-2021-38530.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 9.6)
- [CVE-2021-38531](https://cve.now/CVE-2021-38531.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 4.7)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.