CVEs published September 3, 2021
27 CVEs were published on September 3, 2021: 0 critical, 1 high.
- Published
- 27
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Microsoft Edge
- 19
- lxdui
- 1
- paritytech frontier · pallet-ethereum
- 1
- Pillow
- 1
- TryGhost Ghost · ghost
- 1
- zmartzone mod_auth_openidc
- 1
High 1
Medium, low and unrated 26
- CVE-2021-30624Chromium: CVE-2021-30624 Use after free in AutofillMicrosoft Edge
- CVE-2021-30623Chromium: CVE-2021-30623 Use after free in BookmarksMicrosoft Edge
- CVE-2021-30622Chromium: CVE-2021-30622 Use after free in WebApp InstallsMicrosoft Edge
- CVE-2021-30621Chromium: CVE-2021-30621 UI Spoofing in AutofillMicrosoft Edge
- CVE-2021-30620Chromium: CVE-2021-30620 Insufficient policy enforcement in BlinkMicrosoft Edge
- CVE-2021-30619Chromium: CVE-2021-30619 UI Spoofing in AutofillMicrosoft Edge
- CVE-2021-30618Chromium: CVE-2021-30618 Inappropriate implementation in DevToolsMicrosoft Edge
- CVE-2021-30617Chromium: CVE-2021-30617 Policy bypass in BlinkMicrosoft Edge
- CVE-2021-30616Chromium: CVE-2021-30616 Use after free in MediaMicrosoft Edge
- CVE-2021-30615Chromium: CVE-2021-30615 Cross-origin data leak in NavigationMicrosoft Edge
- CVE-2021-30614Chromium: CVE-2021-30614 Heap buffer overflow in TabStripMicrosoft Edge
- CVE-2021-30613Chromium: CVE-2021-30613 Use after free in Base internalsMicrosoft Edge
- CVE-2021-30612Chromium: CVE-2021-30612 Use after free in WebRTCMicrosoft Edge
- CVE-2021-30611Chromium: CVE-2021-30611 Use after free in WebRTCMicrosoft Edge
- CVE-2021-30610Chromium: CVE-2021-30610 Use after free in Extensions APIMicrosoft Edge
- CVE-2021-30609Chromium: CVE-2021-30609 Use after free in Sign-InMicrosoft Edge
- CVE-2021-30608Chromium: CVE-2021-30608 Use after free in Web ShareMicrosoft Edge
- CVE-2021-30607Chromium: CVE-2021-30607 Use after free in PermissionsMicrosoft Edge
- CVE-2021-30606Chromium: CVE-2021-30606 Use after free in BlinkMicrosoft Edge
- CVE-2021-39193Transaction validity oversight in pallet-ethereumparitytech frontier · pallet-ethereum
- CVE-2021-40492A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaSc
- CVE-2021-39192Privilege escalation: all users can access Admin-level API keysTryGhost Ghost · ghost
- CVE-2021-40494A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.lxdui
- CVE-2021-40490A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
- CVE-2021-39191URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidczmartzone mod_auth_openidc
- CVE-2021-40491The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server ad