# CVEs published 2021-08-31

69 CVEs were published on August 31, 2021: 2 critical, 20 high. Days are UTC.

- [CVE-2020-20495](https://cve.now/CVE-2020-20495.md): bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the \`deleteBackup' parameter. (no CVSS)
- [CVE-2020-20490](https://cve.now/CVE-2020-20490.md): A heap buffer-overflow in the client\_example1.c component of libiec\_iccp\_mod v1.5 leads to a denial of service (DOS). (no CVSS)
- [CVE-2020-20486](https://cve.now/CVE-2020-20486.md): IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x\_Sta\_Addr. (no CVSS)
- [CVE-2021-22003](https://cve.now/CVE-2021-22003.md): VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. (no CVSS, VMware Workspace ONE Access and Identity Manager)
- [CVE-2021-22002](https://cve.now/CVE-2021-22002.md): VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2021-22029](https://cve.now/CVE-2021-22029.md): VMware Workspace ONE UEM REST API contains a denial of service vulnerability. (no CVSS, VMware Workspace ONE UEM console)
- [CVE-2021-39176](https://cve.now/CVE-2021-39176.md): Missing Release of Memory after Effective Lifetime in detect-character-encoding (CVSS 7.5, sonicdoe detect-character-encoding · detect-character-encod…)
- [CVE-2021-39180](https://cve.now/CVE-2021-39180.md): Path Traversal in Archive Handling Leading to Code Execution (CVSS 8.1, OpenOLAT)
- [CVE-2021-36233](https://cve.now/CVE-2021-36233.md): The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary (no CVSS)
- [CVE-2021-36234](https://cve.now/CVE-2021-36234.md): Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors. (no CVSS)
- [CVE-2021-36231](https://cve.now/CVE-2021-36231.md): Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operat (no CVSS)
- [CVE-2021-36232](https://cve.now/CVE-2021-36232.md): Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges. (no CVSS)
- [CVE-2021-40085](https://cve.now/CVE-2021-40085.md): An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. (no CVSS, neutron)
- [CVE-2021-37794](https://cve.now/CVE-2021-37794.md): A stored cross-site scripting (XSS) vulnerability exists in FileBrowser \< v2.16.0 that allows an authenticated user authorized to upload a m (no CVSS)
- [CVE-2021-39135](https://cve.now/CVE-2021-39135.md): UNIX Symbolic Link (Symlink) Following in @npmcli/arborist (CVSS 8.2, npm arborist · @npmcli/arborist)
- [CVE-2021-27668](https://cve.now/CVE-2021-27668.md): HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. (no CVSS)
- [CVE-2021-35212](https://cve.now/CVE-2021-35212.md): Blind SQL injection Vulnerability (CVSS 8.9, SolarWinds Orion Platform)
- [CVE-2021-21811](https://cve.now/CVE-2021-21811.md): A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. (CVSS 8.1, AT&T)
- [CVE-2021-39134](https://cve.now/CVE-2021-39134.md): UNIX Symbolic Link (Symlink) Following in @npmcli/arborist (CVSS 8.2, npm arborist · @npmcli/arborist)
- [CVE-2021-22929](https://cve.now/CVE-2021-22929.md): An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps o (no CVSS, https://github.com/brave/brave-core)
- [CVE-2021-22943](https://cve.now/CVE-2021-22943.md): A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network (no CVSS, UniFi Protect application)
- [CVE-2021-22944](https://cve.now/CVE-2021-22944.md): A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to (no CVSS, UniFi Protect application)
- [CVE-2021-37713](https://cve.now/CVE-2021-37713.md): Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization (CVSS 8.2, npm node-tar · tar)
- [CVE-2021-22684](https://cve.now/CVE-2021-22684.md): Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions\_calloc and mm\_zalloc. (no CVSS, Tizen RT RTOS)
- [CVE-2021-39164](https://cve.now/CVE-2021-39164.md): Improper authorisation of /members discloses room membership to non-members (CVSS 3.1, matrix-org synapse · matrix-synapse)
- [CVE-2021-29907](https://cve.now/CVE-2021-29907.md): IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. (CVSS 8.8, IBM OpenPages with Watson)
- [CVE-2021-35223](https://cve.now/CVE-2021-35223.md): Execute Command Function Allows Remote Code Execution (RCE)Vulnerability (CVSS 8.5, SolarWinds Serv-U)
- [CVE-2021-39163](https://cve.now/CVE-2021-39163.md): Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. (CVSS 3.1, matrix-org synapse · matrix-synapse)
- [CVE-2021-35213](https://cve.now/CVE-2021-35213.md): Orion User setting Improper Access Control Privilege Escalation Vulnerability (CVSS 8.9, SolarWinds Orion Platform)
- [CVE-2021-35240](https://cve.now/CVE-2021-35240.md): Stored XSS via Help Server settings (CVSS 6.5, SolarWinds Orion Platform)
- [CVE-2021-35239](https://cve.now/CVE-2021-35239.md): Stored XSS in Maps text box hyperlink Vulnerability (CVSS 7.5, SolarWinds Orion Platform)
- [CVE-2021-21681](https://cve.now/CVE-2021-21681.md): Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where the (no CVSS, Jenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…)
- [CVE-2021-21680](https://cve.now/CVE-2021-21680.md): Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks. (no CVSS, Jenkins project Jenkins Nested View Plugin · org.jenkins-ci…)
- [CVE-2021-21679](https://cve.now/CVE-2021-21679.md): Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL (no CVSS, Jenkins project Jenkins Azure AD Plugin · org.jenkins-ci.pl…)
- [CVE-2021-21678](https://cve.now/CVE-2021-21678.md): Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. (no CVSS, Jenkins project Jenkins SAML Plugin · org.jenkins-ci.plugin…)
- [CVE-2021-21677](https://cve.now/CVE-2021-21677.md): Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes (no CVSS, Jenkins project Jenkins Code Coverage API Plugin · io.jenki…)
- [CVE-2020-19049](https://cve.now/CVE-2020-19049.md): Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Description" field found (no CVSS)
- [CVE-2020-19048](https://cve.now/CVE-2020-19048.md): Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the (no CVSS)
- [CVE-2020-19047](https://cve.now/CVE-2020-19047.md): Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the compon (no CVSS)
- [CVE-2020-19046](https://cve.now/CVE-2020-19046.md): Cross Site Scripting (XSS) in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='. (no CVSS)
- [CVE-2021-35222](https://cve.now/CVE-2021-35222.md): Resource.aspx Reflected Cross-Site Scripting Vulnerability (CVSS 8.0, SolarWinds Orion Platform)
- [CVE-2021-35221](https://cve.now/CVE-2021-35221.md): ImportAlert Improper Access Control Tampering Vulnerability (CVSS 6.3, SolarWinds Orion Platform)
- [CVE-2021-39316](https://cve.now/CVE-2021-39316.md): ZoomSounds \<= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure (CVSS 7.5, ZoomIt ZoomSounds - WordPress Wave Audio Player with Playli…)
- [CVE-2021-35220](https://cve.now/CVE-2021-35220.md): EmailWebPage Command Injection RCE (CVSS 8.1, SolarWinds Orion Platform)
- [CVE-2021-35219](https://cve.now/CVE-2021-35219.md): ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability (CVSS 6.0, SolarWinds Orion Platform)
- [CVE-2021-3749](https://cve.now/CVE-2021-3749.md): Inefficient Regular Expression Complexity in axios/axios (CVSS 7.5, axios/axios · axios)
- [CVE-2021-34581](https://cve.now/CVE-2021-34581.md): WAGO: Denial of Service vulnerability inside the OpenSSL implementation (CVSS 7.5, WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889)
- [CVE-2021-34578](https://cve.now/CVE-2021-34578.md): WAGO: Authentication Vulnerability in Web-Based Management (CVSS 9.8, WAGO PLC)
- [CVE-2021-34565](https://cve.now/CVE-2021-34565.md): In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found (CVSS 9.8, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-34564](https://cve.now/CVE-2021-34564.md): In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie (CVSS 5.5, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-34563](https://cve.now/CVE-2021-34563.md): In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it (CVSS 3.3, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-34562](https://cve.now/CVE-2021-34562.md): A vulnerability in WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response (CVSS 5.4, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-34561](https://cve.now/CVE-2021-34561.md): A vulnerability in WirelessHART-Gateway \<= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding (CVSS 7.5, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-34560](https://cve.now/CVE-2021-34560.md): A vulnerability in WirelessHART-Gateway \<= 3.0.9 could lead to information exposure of sensitive information (CVSS 5.5, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-34559](https://cve.now/CVE-2021-34559.md): A vulnerability in WirelessHART-Gateway \<= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings (CVSS 5.4, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-33555](https://cve.now/CVE-2021-33555.md): A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway (CVSS 7.5, Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH · Phoenix Contact…)
- [CVE-2021-38144](https://cve.now/CVE-2021-38144.md): An issue was discovered in Form Tools through 3.0.20. (no CVSS)
- [CVE-2021-38143](https://cve.now/CVE-2021-38143.md): An issue was discovered in Form Tools through 3.0.20. (no CVSS)
- [CVE-2021-38145](https://cve.now/CVE-2021-38145.md): An issue was discovered in Form Tools through 3.0.20. (no CVSS)
- [CVE-2020-13639](https://cve.now/CVE-2020-13639.md): A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. (no CVSS)
- [CVE-2021-36356](https://cve.now/CVE-2021-36356.md): KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts a (no CVSS)
- [CVE-2021-27558](https://cve.now/CVE-2021-27558.md): A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such (no CVSS)
- [CVE-2021-27557](https://cve.now/CVE-2021-27557.md): A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a C (no CVSS)
- [CVE-2021-27556](https://cve.now/CVE-2021-27556.md): The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type par (no CVSS)
- [CVE-2021-3634](https://cve.now/CVE-2021-3634.md): A flaw has been found in libssh in versions prior to 0.9.6. (no CVSS, libssh)
- [CVE-2021-36981](https://cve.now/CVE-2021-36981.md): In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary cod (no CVSS)
- [CVE-2021-37701](https://cve.now/CVE-2021-37701.md): Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links (CVSS 8.2, npm node-tar · tar)
- [CVE-2021-37712](https://cve.now/CVE-2021-37712.md): Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links (CVSS 8.2, npm node-tar · tar)
- [CVE-2021-40330](https://cve.now/CVE-2021-40330.md): git\_connect\_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.