CVEs published August 29, 2021
8 CVEs were published on August 29, 2021: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 8
- CVE-2021-40172Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.
- CVE-2021-40173Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.
- CVE-2021-40174Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.
- CVE-2021-40175Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.
- CVE-2021-40176Zoho ManageEngine Log360 before Build 5225 allows stored XSS.
- CVE-2021-40177Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.
- CVE-2021-40178Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.
- CVE-2021-38154Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP