CVEs published August 19, 2021
33 CVEs were published on August 19, 2021: 0 critical, 2 high.
- Published
- 33
- Critical
- 0
- High
- 2
- Medium
- 2
- Low
- 1
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- exiv2
- 1
- icinga2
- 1
- org.owasp:csrfguard
- 1
- Rapid7 Nexpose
- 1
- Siemens SINEMA Remote Connect Client
- 1
- WP EasyCart Shopping Cart & eCommerce Store
- 1
High 2
Medium, low and unrated 31
- CVE-2020-18900A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128.
- CVE-2020-18898A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a cr
- CVE-2020-18897An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a de
- CVE-2021-37597WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.
- CVE-2021-37598WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.
- CVE-2021-28490In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.org.owasp:csrfguard
- CVE-2020-20645Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.
- CVE-2020-20642Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admi
- CVE-2021-39302MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.
- CVE-2020-18748Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration er
- CVE-2021-29280In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow
- CVE-2021-31868Rapid7 Nexpose Security Console Ticket Access Authentication VulnerabilityRapid7 Nexpose
- CVE-2021-27822A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers
- CVE-2021-28002A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attacke
- CVE-2021-28001A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to exec
- CVE-2021-28000A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows re
- CVE-2021-27999A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0.
- CVE-2021-39273In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to
- CVE-2021-39274In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user
- CVE-2021-31401An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1.
- CVE-2020-35685An issue was discovered in HCC Nichestack 3.0.
- CVE-2020-35684An issue was discovered in HCC Nichestack 3.0.
- CVE-2020-35683An issue was discovered in HCC Nichestack 3.0.
- CVE-2021-36762An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3.
- CVE-2021-27565The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking out
- CVE-2021-31400An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1.
- CVE-2021-31228An issue was discovered in HCC embedded InterNiche 4.0.1.
- CVE-2021-31227An issue was discovered in HCC embedded InterNiche 4.0.1.
- CVE-2021-31226An issue was discovered in HCC embedded InterNiche 4.0.1.
- CVE-2021-31338A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1).Siemens SINEMA Remote Connect Client
- CVE-2020-18899An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of serexiv2