# CVEs published 2021-09-08

276 CVEs were published on September 8, 2021: 7 critical, 25 high. 8 are now in CISA KEV. Days are UTC.

- [CVE-2021-40818](https://cve.now/CVE-2021-40818.md): scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration. (no CVSS)
- [CVE-2021-40814](https://cve.now/CVE-2021-40814.md): The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection. (no CVSS)
- [CVE-2021-30605](https://cve.now/CVE-2021-30605.md): Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects (no CVSS, Google Chrome)
- [CVE-2021-36440](https://cve.now/CVE-2021-36440.md): Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file\_url' parameter in the component A (no CVSS, showdoc/showdoc)
- [CVE-2020-26772](https://cve.now/CVE-2020-26772.md): Command Injection in PPGo\_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function. (no CVSS)
- [CVE-2020-19138](https://cve.now/CVE-2020-19138.md): Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the compon (no CVSS)
- [CVE-2020-19137](https://cve.now/CVE-2020-19137.md): Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autu (no CVSS)
- [CVE-2021-40797](https://cve.now/CVE-2021-40797.md): An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. (no CVSS, neutron)
- [CVE-2021-38388](https://cve.now/CVE-2021-38388.md): Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the (CVSS 8.8, LINE Central Dogma)
- [CVE-2021-36216](https://cve.now/CVE-2021-36216.md): LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection. (no CVSS, LINE for Windows)
- [CVE-2021-36215](https://cve.now/CVE-2021-36215.md): LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling. (no CVSS, LINE client for iOS)
- [CVE-2021-32805](https://cve.now/CVE-2021-32805.md): URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder (CVSS 7.2, dpgaspar Flask-AppBuilder · flask-appbuilder)
- [CVE-2021-40537](https://cve.now/CVE-2021-40537.md): Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user\_ldap \< 0.15.4 in the settings of the user\_ldap app. (no CVSS)
- [CVE-2021-31274](https://cve.now/CVE-2021-31274.md): In LibreNMS \< 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api-\>descrip (no CVSS, librenms/librenms)
- [CVE-2021-3055](https://cve.now/CVE-2021-3055.md): PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface (CVSS 6.5, Palo Alto Networks PAN-OS)
- [CVE-2021-3054](https://cve.now/CVE-2021-3054.md): PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2021-3053](https://cve.now/CVE-2021-3053.md): PAN-OS: Exceptional Condition Denial-of-Service (DoS) (CVSS 7.5, Palo Alto Networks PAN-OS)
- [CVE-2021-3052](https://cve.now/CVE-2021-3052.md): PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface (CVSS 8.0, Palo Alto Networks PAN-OS)
- [CVE-2021-3051](https://cve.now/CVE-2021-3051.md): Cortex XSOAR: Authentication Bypass in SAML Authentication (CVSS 8.1, Palo Alto Networks Cortex XSOAR)
- [CVE-2021-3049](https://cve.now/CVE-2021-3049.md): Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability (CVSS 2.6, Palo Alto Networks Cortex XSOAR)
- [CVE-2021-33982](https://cve.now/CVE-2021-33982.md): An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote att (no CVSS)
- [CVE-2021-33981](https://cve.now/CVE-2021-33981.md): An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and ea (no CVSS)
- [CVE-2021-40346](https://cve.now/CVE-2021-40346.md): An integer overflow exists in HAProxy 2.0 through 2.5 in htx\_add\_header that can be exploited to perform an HTTP request smuggling attack, a (no CVSS)
- [CVE-2021-28571](https://cve.now/CVE-2021-28571.md): Adobe After Effects improper neutralization of special elements could lead to remote code execution (CVSS 8.3, Adobe After Effects)
- [CVE-2021-28569](https://cve.now/CVE-2021-28569.md): Adobe Media Encoder VOB file parsing out-of-bounds read could lead to information disclosure vulnerability (CVSS 4.3, Adobe Media Encoder)
- [CVE-2021-28568](https://cve.now/CVE-2021-28568.md): Adobe Genuine Services insecure file permission could lead to privilege escalation (CVSS 5.8, Adobe GoCart)
- [CVE-2021-28567](https://cve.now/CVE-2021-28567.md): Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission (CVSS 5.0, Adobe Magento Commerce · magento/community-edition +1)
- [CVE-2021-28566](https://cve.now/CVE-2021-28566.md): Magento Commerce information disclosure during upload action leveraging a specially crafted file (CVSS 3.7, Adobe Magento Commerce · magento/community-edition)
- [CVE-2021-21105](https://cve.now/CVE-2021-21105.md): Adobe Illustrator memory corruption vulnerability could lead to remote code execution (CVSS 8.8, Adobe Illustrator)
- [CVE-2021-21104](https://cve.now/CVE-2021-21104.md): Adobe Illustrator memory corruption vulnerability could lead to remote code execution (CVSS 8.8, Adobe Illustrator)
- [CVE-2021-21103](https://cve.now/CVE-2021-21103.md): Adobe Illustrator memory corruption vulnerability could lead to information disclosure (CVSS 4.3, Adobe Illustrator)
- [CVE-2021-21897](https://cve.now/CVE-2021-21897.md): A code execution vulnerability exists in the DL\_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. (CVSS 8.8, Ribbonsoft)
- [CVE-2021-35526](https://cve.now/CVE-2021-35526.md): Storage of Sensitive Information Vulnerability in Hitachi ABB Power Grids System Data Manager – SDM600 Product (CVSS 6.3, Hitachi ABB Power Grids System Data Manager – SDM600)
- [CVE-2020-24672](https://cve.now/CVE-2020-24672.md): ABB Base Software for SoftControl Remote Code Execution vulnerability (CVSS 9.8, ABB Base Software for SoftControl)
- [CVE-2021-22004](https://cve.now/CVE-2021-22004.md): An issue was discovered in SaltStack Salt before 3003.3. (no CVSS, Saltstack Salt · salt)
- [CVE-2021-1762](https://cve.now/CVE-2021-1762.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1784](https://cve.now/CVE-2021-1784.md): A permissions issue existed in DiskArbitration. (no CVSS, Apple macOS)
- [CVE-2021-1809](https://cve.now/CVE-2021-1809.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1826](https://cve.now/CVE-2021-1826.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1824](https://cve.now/CVE-2021-1824.md): This issue was addressed with improved entitlements. (no CVSS, Apple macOS)
- [CVE-2021-1817](https://cve.now/CVE-2021-1817.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1740](https://cve.now/CVE-2021-1740.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1828](https://cve.now/CVE-2021-1828.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-1811](https://cve.now/CVE-2021-1811.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple iTunes for Windows +4)
- [CVE-2021-1807](https://cve.now/CVE-2021-1807.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2021-1812](https://cve.now/CVE-2021-1812.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-27940](https://cve.now/CVE-2020-27940.md): This issue was addressed with improved file handling. (no CVSS, Apple TV app for Fire OS)
- [CVE-2021-1822](https://cve.now/CVE-2021-1822.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2020-27942](https://cve.now/CVE-2020-27942.md): A logic issue was addressed with improved state management. (no CVSS, Apple Security Update - Catalina)
- [CVE-2021-1770](https://cve.now/CVE-2021-1770.md): A buffer overflow may result in arbitrary code execution. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1825](https://cve.now/CVE-2021-1825.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple Safari +5)
- [CVE-2021-1810](https://cve.now/CVE-2021-1810.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1816](https://cve.now/CVE-2021-1816.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-1813](https://cve.now/CVE-2021-1813.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1814](https://cve.now/CVE-2021-1814.md): This issue was addressed with improved checks. (no CVSS, Apple watchOS · Apple macOS)
- [CVE-2021-1808](https://cve.now/CVE-2021-1808.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1820](https://cve.now/CVE-2021-1820.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1739](https://cve.now/CVE-2021-1739.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1815](https://cve.now/CVE-2021-1815.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30659](https://cve.now/CVE-2021-30659.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple watchOS +1)
- [CVE-2021-30663](https://cve.now/CVE-2021-30663.md): An integer overflow was addressed with improved input validation. (CVSS 7.8, KEV, Apple macOS)
- [CVE-2021-30657](https://cve.now/CVE-2021-30657.md): A logic issue was addressed with improved state management. (CVSS 5.5, KEV, Apple macOS)
- [CVE-2021-1867](https://cve.now/CVE-2021-1867.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1876](https://cve.now/CVE-2021-1876.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2021-1875](https://cve.now/CVE-2021-1875.md): A double free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1868](https://cve.now/CVE-2021-1868.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1883](https://cve.now/CVE-2021-1883.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1884](https://cve.now/CVE-2021-1884.md): A race condition was addressed with improved locking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1877](https://cve.now/CVE-2021-1877.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1885](https://cve.now/CVE-2021-1885.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30656](https://cve.now/CVE-2021-30656.md): An access issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1864](https://cve.now/CVE-2021-1864.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30661](https://cve.now/CVE-2021-30661.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, KEV, Apple iOS and iPadOS · Apple Safari +3)
- [CVE-2021-30653](https://cve.now/CVE-2021-30653.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30658](https://cve.now/CVE-2021-30658.md): This issue was addressed with improved handling of file metadata. (no CVSS, Apple macOS)
- [CVE-2021-30652](https://cve.now/CVE-2021-30652.md): A race condition was addressed with additional validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30660](https://cve.now/CVE-2021-30660.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1882](https://cve.now/CVE-2021-1882.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1881](https://cve.now/CVE-2021-1881.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30654](https://cve.now/CVE-2021-30654.md): This issue was addressed by removing additional entitlements. (no CVSS, Apple GarageBand)
- [CVE-2021-30655](https://cve.now/CVE-2021-30655.md): An application may be able to execute arbitrary code with system privileges. (no CVSS, Apple macOS)
- [CVE-2021-1872](https://cve.now/CVE-2021-1872.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple watchOS +1)
- [CVE-2021-1874](https://cve.now/CVE-2021-1874.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30662](https://cve.now/CVE-2021-30662.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1880](https://cve.now/CVE-2021-1880.md): This issue was addressed with improved checks. (no CVSS, Apple watchOS · Apple macOS)
- [CVE-2021-1878](https://cve.now/CVE-2021-1878.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-1865](https://cve.now/CVE-2021-1865.md): An issue obscuring passwords in screenshots was addressed with improved logic. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1873](https://cve.now/CVE-2021-1873.md): An API issue in Accessibility TCC permissions was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1863](https://cve.now/CVE-2021-1863.md): An issue existed with authenticating the action triggered by an NFC tag. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1861](https://cve.now/CVE-2021-1861.md): An issue existed in determining cache occupancy. (no CVSS, Apple macOS)
- [CVE-2021-1862](https://cve.now/CVE-2021-1862.md): Description: A person with physical access may be able to access contacts. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1860](https://cve.now/CVE-2021-1860.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1859](https://cve.now/CVE-2021-1859.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1855](https://cve.now/CVE-2021-1855.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1854](https://cve.now/CVE-2021-1854.md): A call termination issue with was addressed with improved logic. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1852](https://cve.now/CVE-2021-1852.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1858](https://cve.now/CVE-2021-1858.md): Processing a maliciously crafted image may lead to arbitrary code execution. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1853](https://cve.now/CVE-2021-1853.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1848](https://cve.now/CVE-2021-1848.md): The issue was addressed with improved UI handling. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1857](https://cve.now/CVE-2021-1857.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple iTunes for Windows +4)
- [CVE-2021-1849](https://cve.now/CVE-2021-1849.md): An issue in code signature validation was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1847](https://cve.now/CVE-2021-1847.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-1851](https://cve.now/CVE-2021-1851.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1841](https://cve.now/CVE-2021-1841.md): A malicious application may be able to execute arbitrary code with kernel privileges. (no CVSS, Apple macOS)
- [CVE-2021-1832](https://cve.now/CVE-2021-1832.md): Copied files may not have the expected file permissions. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1846](https://cve.now/CVE-2021-1846.md): Processing a maliciously crafted audio file may disclose restricted memory. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1839](https://cve.now/CVE-2021-1839.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS)
- [CVE-2021-1837](https://cve.now/CVE-2021-1837.md): A certificate validation issue was addressed. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1838](https://cve.now/CVE-2021-1838.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1840](https://cve.now/CVE-2021-1840.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-1843](https://cve.now/CVE-2021-1843.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-1833](https://cve.now/CVE-2021-1833.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1835](https://cve.now/CVE-2021-1835.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1831](https://cve.now/CVE-2021-1831.md): The issue was addressed with improved permissions logic. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1834](https://cve.now/CVE-2021-1834.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-1829](https://cve.now/CVE-2021-1829.md): A type confusion issue was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2021-1836](https://cve.now/CVE-2021-1836.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple tvOS)
- [CVE-2021-1830](https://cve.now/CVE-2021-1830.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30664](https://cve.now/CVE-2021-30664.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30680](https://cve.now/CVE-2021-30680.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30719](https://cve.now/CVE-2021-30719.md): A local user may be able to cause unexpected system termination or read kernel memory. (no CVSS, Apple macOS)
- [CVE-2021-30684](https://cve.now/CVE-2021-30684.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30679](https://cve.now/CVE-2021-30679.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2021-30681](https://cve.now/CVE-2021-30681.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30685](https://cve.now/CVE-2021-30685.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30682](https://cve.now/CVE-2021-30682.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30687](https://cve.now/CVE-2021-30687.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30712](https://cve.now/CVE-2021-30712.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30689](https://cve.now/CVE-2021-30689.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30702](https://cve.now/CVE-2021-30702.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30716](https://cve.now/CVE-2021-30716.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30693](https://cve.now/CVE-2021-30693.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30709](https://cve.now/CVE-2021-30709.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30713](https://cve.now/CVE-2021-30713.md): A permissions issue was addressed with improved validation. (CVSS 7.8, KEV, Apple macOS)
- [CVE-2021-30694](https://cve.now/CVE-2021-30694.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30700](https://cve.now/CVE-2021-30700.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30708](https://cve.now/CVE-2021-30708.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30714](https://cve.now/CVE-2021-30714.md): A race condition was addressed with improved state handling. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30695](https://cve.now/CVE-2021-30695.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30715](https://cve.now/CVE-2021-30715.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30688](https://cve.now/CVE-2021-30688.md): A malicious application may be able to break out of its sandbox. (no CVSS, Apple macOS)
- [CVE-2021-30697](https://cve.now/CVE-2021-30697.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30710](https://cve.now/CVE-2021-30710.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30683](https://cve.now/CVE-2021-30683.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2021-30698](https://cve.now/CVE-2021-30698.md): A null pointer dereference was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30706](https://cve.now/CVE-2021-30706.md): Processing a maliciously crafted image may lead to disclosure of user information. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30699](https://cve.now/CVE-2021-30699.md): A window management issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30705](https://cve.now/CVE-2021-30705.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30690](https://cve.now/CVE-2021-30690.md): Multiple issues in apache were addressed by updating apache to version 2.4.46. (no CVSS, Apple Security Update - Mojave)
- [CVE-2021-30692](https://cve.now/CVE-2021-30692.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30701](https://cve.now/CVE-2021-30701.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30696](https://cve.now/CVE-2021-30696.md): An attacker in a privileged network position may be able to misrepresent application state. (no CVSS, Apple macOS)
- [CVE-2021-30718](https://cve.now/CVE-2021-30718.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30717](https://cve.now/CVE-2021-30717.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30707](https://cve.now/CVE-2021-30707.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30686](https://cve.now/CVE-2021-30686.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30691](https://cve.now/CVE-2021-30691.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30704](https://cve.now/CVE-2021-30704.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30703](https://cve.now/CVE-2021-30703.md): A double free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30675](https://cve.now/CVE-2021-30675.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple Boot Camp)
- [CVE-2021-30678](https://cve.now/CVE-2021-30678.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30673](https://cve.now/CVE-2021-30673.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2021-30676](https://cve.now/CVE-2021-30676.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30671](https://cve.now/CVE-2021-30671.md): A validation issue was addressed with improved logic. (no CVSS, Apple macOS)
- [CVE-2021-30677](https://cve.now/CVE-2021-30677.md): This issue was addressed with improved environment sanitization. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30674](https://cve.now/CVE-2021-30674.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30668](https://cve.now/CVE-2021-30668.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30666](https://cve.now/CVE-2021-30666.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 8.8, KEV, Apple iOS)
- [CVE-2021-30669](https://cve.now/CVE-2021-30669.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30667](https://cve.now/CVE-2021-30667.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30672](https://cve.now/CVE-2021-30672.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30665](https://cve.now/CVE-2021-30665.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, KEV, Apple macOS)
- [CVE-2021-30797](https://cve.now/CVE-2021-30797.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30790](https://cve.now/CVE-2021-30790.md): An information disclosure issue was addressed by removing the vulnerable code. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30795](https://cve.now/CVE-2021-30795.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30804](https://cve.now/CVE-2021-30804.md): A permissions issue was addressed with improved validation. (no CVSS, Apple iOS)
- [CVE-2021-30791](https://cve.now/CVE-2021-30791.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30789](https://cve.now/CVE-2021-30789.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30792](https://cve.now/CVE-2021-30792.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30793](https://cve.now/CVE-2021-30793.md): A logic issue was addressed with improved state management. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30802](https://cve.now/CVE-2021-30802.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS)
- [CVE-2021-30784](https://cve.now/CVE-2021-30784.md): Multiple issues were addressed with improved logic. (no CVSS, Apple macOS)
- [CVE-2021-30786](https://cve.now/CVE-2021-30786.md): A race condition was addressed with improved state handling. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30787](https://cve.now/CVE-2021-30787.md): This issue was addressed with improved checks. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30782](https://cve.now/CVE-2021-30782.md): This issue was addressed with improved checks. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30785](https://cve.now/CVE-2021-30785.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30783](https://cve.now/CVE-2021-30783.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30780](https://cve.now/CVE-2021-30780.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30778](https://cve.now/CVE-2021-30778.md): This issue was addressed with improved entitlements. (no CVSS, Apple macOS)
- [CVE-2021-30781](https://cve.now/CVE-2021-30781.md): This issue was addressed with improved checks. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30776](https://cve.now/CVE-2021-30776.md): A logic issue was addressed with improved validation. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30779](https://cve.now/CVE-2021-30779.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30773](https://cve.now/CVE-2021-30773.md): An issue in code signature validation was addressed with improved checks. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2021-30772](https://cve.now/CVE-2021-30772.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30774](https://cve.now/CVE-2021-30774.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30777](https://cve.now/CVE-2021-30777.md): An injection issue was addressed with improved validation. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30769](https://cve.now/CVE-2021-30769.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2021-30775](https://cve.now/CVE-2021-30775.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30766](https://cve.now/CVE-2021-30766.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30770](https://cve.now/CVE-2021-30770.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2021-30762](https://cve.now/CVE-2021-30762.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, KEV, Apple iOS)
- [CVE-2021-30764](https://cve.now/CVE-2021-30764.md): Processing a maliciously crafted file may lead to arbitrary code execution. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30765](https://cve.now/CVE-2021-30765.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30768](https://cve.now/CVE-2021-30768.md): A logic issue was addressed with improved validation. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30760](https://cve.now/CVE-2021-30760.md): An integer overflow was addressed through improved input validation. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30763](https://cve.now/CVE-2021-30763.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2021-30758](https://cve.now/CVE-2021-30758.md): A type confusion issue was addressed with improved state handling. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30761](https://cve.now/CVE-2021-30761.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, KEV, Apple iOS)
- [CVE-2021-30756](https://cve.now/CVE-2021-30756.md): A local attacker may be able to view Now Playing information from the lock screen. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30751](https://cve.now/CVE-2021-30751.md): This issue was addressed with improved data protection. (no CVSS, Apple macOS)
- [CVE-2021-30757](https://cve.now/CVE-2021-30757.md): This issue was addressed by enabling hardened runtime. (no CVSS, Apple iMovie)
- [CVE-2021-30759](https://cve.now/CVE-2021-30759.md): A stack overflow was addressed with improved input validation. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30755](https://cve.now/CVE-2021-30755.md): Processing a maliciously crafted font may result in the disclosure of process memory. (no CVSS, Apple macOS)
- [CVE-2021-30753](https://cve.now/CVE-2021-30753.md): Processing a maliciously crafted font may result in the disclosure of process memory. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30749](https://cve.now/CVE-2021-30749.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30743](https://cve.now/CVE-2021-30743.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30746](https://cve.now/CVE-2021-30746.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30752](https://cve.now/CVE-2021-30752.md): Processing a maliciously crafted image may lead to arbitrary code execution. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-30750](https://cve.now/CVE-2021-30750.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS)
- [CVE-2021-30748](https://cve.now/CVE-2021-30748.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30741](https://cve.now/CVE-2021-30741.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30739](https://cve.now/CVE-2021-30739.md): A local attacker may be able to elevate their privileges. (no CVSS, Apple macOS)
- [CVE-2021-30744](https://cve.now/CVE-2021-30744.md): Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30735](https://cve.now/CVE-2021-30735.md): A malicious application may be able to execute arbitrary code with kernel privileges. (no CVSS, Apple macOS)
- [CVE-2021-30742](https://cve.now/CVE-2021-30742.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30740](https://cve.now/CVE-2021-30740.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30738](https://cve.now/CVE-2021-30738.md): A malicious application may be able to overwrite arbitrary files. (no CVSS, Apple macOS)
- [CVE-2021-30737](https://cve.now/CVE-2021-30737.md): A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30729](https://cve.now/CVE-2021-30729.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30733](https://cve.now/CVE-2021-30733.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30736](https://cve.now/CVE-2021-30736.md): A buffer overflow was addressed with improved size validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30731](https://cve.now/CVE-2021-30731.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30727](https://cve.now/CVE-2021-30727.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30734](https://cve.now/CVE-2021-30734.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30725](https://cve.now/CVE-2021-30725.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30723](https://cve.now/CVE-2021-30723.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30721](https://cve.now/CVE-2021-30721.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30728](https://cve.now/CVE-2021-30728.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30726](https://cve.now/CVE-2021-30726.md): A malicious application may be able to execute arbitrary code with kernel privileges. (no CVSS, Apple macOS)
- [CVE-2021-30724](https://cve.now/CVE-2021-30724.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30722](https://cve.now/CVE-2021-30722.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30720](https://cve.now/CVE-2021-30720.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30788](https://cve.now/CVE-2021-30788.md): This issue was addressed with improved checks. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30796](https://cve.now/CVE-2021-30796.md): A logic issue was addressed with improved validation. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30805](https://cve.now/CVE-2021-30805.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple Security Update - Catalina · Apple macOS)
- [CVE-2021-30799](https://cve.now/CVE-2021-30799.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple Security Update - Catalina · Apple iOS +1)
- [CVE-2021-30798](https://cve.now/CVE-2021-30798.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30803](https://cve.now/CVE-2021-30803.md): A permissions issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30800](https://cve.now/CVE-2021-30800.md): This issue was addressed with improved checks. (no CVSS, Apple iOS)
- [CVE-2021-28581](https://cve.now/CVE-2021-28581.md): Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation (CVSS 7.3, Adobe Creative Cloud)
- [CVE-2021-28580](https://cve.now/CVE-2021-28580.md): Medium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code execution (CVSS 8.8, Adobe Medium)
- [CVE-2021-35217](https://cve.now/CVE-2021-35217.md): Insecure Deserialization of untrusted data causing Remote code execution vulnerability. (CVSS 8.9, SolarWinds Orion Platform)
- [CVE-2021-28701](https://cve.now/CVE-2021-28701.md): Another race in XENMAPSPACE\_grant\_table handling Guests are permitted access to certain Xen-owned pages of memory. (no CVSS, xen)
- [CVE-2021-1972](https://cve.now/CVE-2021-1972.md): Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Con (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1930](https://cve.now/CVE-2021-1930.md): Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect (CVSS 5.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1929](https://cve.now/CVE-2021-1929.md): Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1928](https://cve.now/CVE-2021-1928.md): Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consum (CVSS 4.6, Qualcomm Snapdragon Connectivity, Snapdragon Consumer IOT,…)
- [CVE-2021-1923](https://cve.now/CVE-2021-1923.md): Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Com (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1920](https://cve.now/CVE-2021-1920.md): Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1919](https://cve.now/CVE-2021-1919.md): Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapd (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1916](https://cve.now/CVE-2021-1916.md): Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdrago (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1914](https://cve.now/CVE-2021-1914.md): Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdra (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1904](https://cve.now/CVE-2021-1904.md): Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Au (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11301](https://cve.now/CVE-2020-11301.md): Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto (CVSS 9.1, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11264](https://cve.now/CVE-2020-11264.md): Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapd (CVSS 9.1, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-36695](https://cve.now/CVE-2021-36695.md): Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the downl (no CVSS)
- [CVE-2021-40377](https://cve.now/CVE-2021-40377.md): SmarterTools SmarterMail 16.x before build 7866 has stored XSS. (no CVSS)
- [CVE-2021-23404](https://cve.now/CVE-2021-23404.md): Cross-site Request Forgery (CSRF) (CVSS 7.6, sqlite-web)
- [CVE-2020-29012](https://cve.now/CVE-2020-29012.md): An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin (CVSS 5.6, Fortinet FortiSandbox)
- [CVE-2021-36182](https://cve.now/CVE-2021-36182.md): A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows a (CVSS 8.8, Fortinet FortiWeb)
- [CVE-2021-36179](https://cve.now/CVE-2021-36179.md): A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or (CVSS 8.0, Fortinet FortiWeb)
- [CVE-2021-39122](https://cve.now/CVE-2021-39122.md): Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclos (CVSS 5.3, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-39121](https://cve.now/CVE-2021-39121.md): Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projec (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-39116](https://cve.now/CVE-2021-39116.md): Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of S (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-21996](https://cve.now/CVE-2021-21996.md): An issue was discovered in SaltStack Salt before 3003.3. (no CVSS, Saltstack Salt · salt)
- [CVE-2021-40812](https://cve.now/CVE-2021-40812.md): The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valu (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.