CVEs published September 2, 2021
53 CVEs were published on September 2, 2021: 2 critical, 13 high. 1 is now in CISA KEV.
- Published
- 53
- Critical
- 2
- High
- 13
- Medium
- 20
- Low
- 3
- Unrated
- 15
- Now in CISA KEV
- 1
- Fix available
- 11
Most affected products
- Adobe Acrobat Reader
- 11
- Adobe After Effects
- 7
- Microsoft Edge
- 4
- Modicon M580 CPU (part numbers BMEP* and BMEH*, all version…
- 4
- Apache Software Foundation Apache Zeppelin · org.apache.zep…
- 3
- Redux.io Gutenberg Template Library & Redux Framework
- 2
- AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSin…
- 1
- bookstackapp/bookstack
- 1
- Cisco Enterprise NFV Infrastructure Software
- 1
- Cisco Identity Services Engine Software
- 1
Critical 2
High 13
- CVE-2021-36017Adobe After Effects PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2021-35996Adobe After Effects Memory Corruption Could Lead To Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-35994Adobe After Effects JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2021-35993Adobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2021-38312Gutenberg Template Library & Redux Framework <= 4.2.11 Incorrect Authorization check to Arbitrary plugin installation and post deletionRedux.io Gutenberg Template Library & Redux Framework
- CVE-2021-28564Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code executionAdobe Acrobat Reader
- CVE-2021-28561Adobe Acrobat Reader memory corruption vulnerability could lead to remote code executionAdobe Acrobat Reader
- CVE-2021-28560Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code executionAdobe Acrobat Reader
- CVE-2021-28553Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code executionAdobe Acrobat Reader
- CVE-2021-28558Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code executionAdobe Acrobat Reader
- CVE-2021-21086Adobe Reader CoolType Arbitrary Stack ManipulationAdobe Acrobat Reader
- CVE-2021-39187Crash server with query parameterparse-community parse-server · parse-server
- CVE-2021-3757Prototype Pollution in immerjs/immerimmerjs/immer · immer
Medium, low and unrated 38
- CVE-2021-38642Microsoft Edge for iOS Spoofing VulnerabilityMicrosoft Edge
- CVE-2021-38641Microsoft Edge for Android Spoofing VulnerabilityMicrosoft Edge
- CVE-2021-36930Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2021-26439Microsoft Edge for Android Information Disclosure VulnerabilityMicrosoft Edge for Android
- CVE-2021-26436Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2021-34436In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extThe Eclipse Foundation Eclipse Theia
- CVE-2020-18048An issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a crafted input entered into the DB Name fiel
- CVE-2021-35995Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-36019Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-36018Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-22525This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1NetIQ Access Manager versions prior to
- CVE-2021-38314Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information DisclosureRedux.io Gutenberg Template Library & Redux Framework
- CVE-2021-22704A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo DesigHarmony/HMI Products Configured by Vijeo Designer (all vers…
- CVE-2021-22793A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7)AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSin…
- CVE-2021-22792A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updatiModicon M580 CPU (part numbers BMEP* and BMEH*, all version…
- CVE-2021-22791A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating thModicon M580 CPU (part numbers BMEP* and BMEH*, all version…
- CVE-2021-22790A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating theModicon M580 CPU (part numbers BMEP* and BMEH*, all version…
- CVE-2021-22789A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on theModicon M580 CPU (part numbers BMEP* and BMEH*, all version…
- CVE-2021-22775A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution witGP-Pro EX V4.09.250 and prior
- CVE-2021-39322Easy Social Icons <= 3.0.8 - Reflected Cross-Site Scriptingcybernetikz Easy Social Icons
- CVE-2021-28559Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalationAdobe Acrobat Reader
- CVE-2021-28565Adobe Acrobat Reader out-of-bounds read could lead to information exposureAdobe Acrobat Reader
- CVE-2021-28557Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposureAdobe Acrobat Reader
- CVE-2021-28555Adobe Acrobat Reader out-of-bounds Read could lead to information disclosureAdobe Acrobat Reader
- CVE-2021-33938Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial o
- CVE-2021-33930Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a D
- CVE-2021-33929Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial o
- CVE-2021-33928Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Serv
- CVE-2021-3758Server-Side Request Forgery (SSRF) in bookstackapp/bookstackbookstackapp/bookstack
- CVE-2021-34765Cisco Nexus Insights Authenticated Information Disclosure VulnerabilityCisco Nexus Insights
- CVE-2021-34759Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2021-34733Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Information Disclosure VulnerabilityCisco Prime Infrastructure
- CVE-2021-34732Cisco Prime Collaboration Provisioning Cross-Site Scripting VulnerabilityCisco Prime Collaboration Provisioning
- CVE-2021-31796An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure.
- CVE-2021-31798The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain condition
- CVE-2019-10095bash command injection in spark interpreterApache Software Foundation Apache Zeppelin · org.apache.zep…
- CVE-2020-13929Notebook permissions bypassApache Software Foundation Apache Zeppelin · org.apache.zep…
- CVE-2021-27578Cross Site Scripting in markdown interpreterApache Software Foundation Apache Zeppelin · org.apache.zep…