# CVEs published 2021-08-22

8 CVEs were published on August 22, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-39368](https://cve.now/CVE-2021-39368.md): Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter. (no CVSS)
- [CVE-2021-39367](https://cve.now/CVE-2021-39367.md): Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection. (no CVSS)
- [CVE-2021-39365](https://cve.now/CVE-2021-39365.md): In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving (no CVSS)
- [CVE-2021-39362](https://cve.now/CVE-2021-39362.md): An XSS issue was discovered in ReCaptcha Solver 5.7. (no CVSS)
- [CVE-2021-39358](https://cve.now/CVE-2021-39358.md): In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, (no CVSS)
- [CVE-2021-39360](https://cve.now/CVE-2021-39360.md): In GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, le (no CVSS)
- [CVE-2021-39361](https://cve.now/CVE-2021-39361.md): In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate verification on the SoupSessionSync objects it creates (no CVSS)
- [CVE-2021-39359](https://cve.now/CVE-2021-39359.md): In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, le (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.