CVEs published September 20, 2021
169 CVEs were published on September 20, 2021: 0 critical, 7 high.
- Published
- 169
- Critical
- 0
- High
- 7
- Medium
- 15
- Low
- 1
- Unrated
- 146
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- IBM Tivoli Netcool/OMNIbus
- 11
- Kubernetes · k8s.io/kubernetes
- 3
- Timetable and Event Schedule by MotoPress
- 3
- Availability Calendar
- 2
- OMGF | Host Google Fonts Locally
- 2
- Alojapro Widget
- 1
- andialbrecht sqlparse · sqlparse
- 1
- caronc apprise · apprise
- 1
- discourse
- 1
- Display Users
- 1
High 7
- CVE-2021-41083CSRF Vulnerability in dada-mail 11.15.1 and belowjustingit dada-mail
- CVE-2021-39229Regular expression deinal of service in apprisecaronc apprise · apprise
- CVE-2021-41082Private message title and participating users leaked in discoursediscourse
- CVE-2020-26301Command injection in mscdex/ssh2mscdex ssh2 · ssh2
- CVE-2021-32838Regular Expression Denial of Service in flask-restxpython-restx flask-restx · flask-restx
- CVE-2021-32839Regular Expression Denial of Service in sqlparseandialbrecht sqlparse · sqlparse
- CVE-2021-25741Symlink Exchange Can Allow Host Filesystem AccessKubernetes · k8s.io/kubernetes
Medium, low and unrated 162
- CVE-2021-34650eID Easy <= 4.6 Reflected Cross-Site ScriptingeID Easy
- CVE-2021-39325OptinMonster <= 2.6.0 Reflected Cross-Site ScriptingOptinMonster
- CVE-2020-16630TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile.
- CVE-2020-19915Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php.
- CVE-2021-25740Holes in EndpointSlice Validation Enable Host Network HijackKubernetes · k8s.io/kubernetes
- CVE-2020-8561Webhook redirect in kube-apiserverKubernetes · k8s.io/kubernetes
- CVE-2021-38899IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information.IBM Cloud Pak for Data
- CVE-2021-29856IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29821IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29820IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29819IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29818IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29817IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29811IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by anIBM Tivoli Netcool/OMNIbus
- CVE-2021-29809IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29808IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29807IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-29806IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2021-39551An issue was discovered in sela through 20200412.
- CVE-2021-39525An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-32298An issue was discovered in libiff through 20190123.
- CVE-2021-39585An issue was discovered in swftools through 20200710.
- CVE-2021-39588An issue was discovered in swftools through 20200710.
- CVE-2021-39591An issue was discovered in swftools through 20200710.
- CVE-2021-39582An issue was discovered in swftools through 20200710.
- CVE-2021-39593An issue was discovered in swftools through 20200710.
- CVE-2021-39564An issue was discovered in swftools through 20200710.
- CVE-2021-39558An issue was discovered in swftools through 20200710.
- CVE-2021-39594Other An issue was discovered in swftools through 20200710.
- CVE-2021-39563An issue was discovered in swftools through 20200710.
- CVE-2021-39579An issue was discovered in swftools through 20200710.
- CVE-2021-39587An issue was discovered in swftools through 20200710.
- CVE-2021-39574An issue was discovered in swftools through 20200710.
- CVE-2021-39589An issue was discovered in swftools through 20200710.
- CVE-2021-39592An issue was discovered in swftools through 20200710.
- CVE-2021-39595An issue was discovered in swftools through 20200710.
- CVE-2021-39583An issue was discovered in swftools through 20200710.
- CVE-2021-39569An issue was discovered in swftools through 20200710.
- CVE-2021-39577An issue was discovered in swftools through 20200710.
- CVE-2021-39590An issue was discovered in swftools through 20200710.
- CVE-2021-39553An issue was discovered in swftools through 20200710.
- CVE-2021-39554An issue was discovered in swftools through 20200710.
- CVE-2021-39555An issue was discovered in swftools through 20200710.
- CVE-2021-39556An issue was discovered in swftools through 20200710.
- CVE-2021-39584An issue was discovered in swftools through 20200710.
- CVE-2021-39559An issue was discovered in swftools through 20200710.
- CVE-2021-39557An issue was discovered in swftools through 20200710.
- CVE-2021-39561An issue was discovered in swftools through 20200710.
- CVE-2021-39562An issue was discovered in swftools through 20200710.
- CVE-2021-39597An issue was discovered in swftools through 20200710.
- CVE-2021-39546An issue was discovered in sela through 20200412.
- CVE-2021-39547An issue was discovered in sela through 20200412.
- CVE-2021-39575An issue was discovered in swftools through 20200710.
- CVE-2021-39596An issue was discovered in swftools through 20200710.
- CVE-2021-39544An issue was discovered in sela through 20200412.
- CVE-2021-39598An issue was discovered in swftools through 20200710.
- CVE-2021-39538An issue was discovered in pdftools through 20200714.
- CVE-2021-39545An issue was discovered in sela through 20200412.
- CVE-2021-39548An issue was discovered in sela through 20200412.
- CVE-2021-39552An issue was discovered in sela through 20200412.
- CVE-2021-39539An issue was discovered in pdftools through 20200714.
- CVE-2021-39549An issue was discovered in sela through 20200412.
- CVE-2021-39540An issue was discovered in pdftools through 20200714.
- CVE-2021-39541An issue was discovered in pdftools through 20200714.
- CVE-2021-39542An issue was discovered in pdftools through 20200714.
- CVE-2021-39543An issue was discovered in pdftools through 20200714.
- CVE-2021-39550An issue was discovered in sela through 20200412.
- CVE-2021-32299An issue was discovered in pbrt through 20200627.
- CVE-2021-39536An issue was discovered in libxsmm through v1.16.1-93.
- CVE-2021-39533An issue was discovered in libslax through v0.22.1.
- CVE-2021-39531An issue was discovered in libslax through v0.22.1.
- CVE-2021-39534An issue was discovered in libslax through v0.22.1.
- CVE-2021-32297An issue was discovered in LIEF through 0.11.4.lief
- CVE-2021-39523An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-39532An issue was discovered in libslax through v0.22.1.
- CVE-2021-39535An issue was discovered in libxsmm through v1.16.1-93.
- CVE-2021-39527An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-39515An issue was discovered in libjpeg through 2020021.
- CVE-2021-39528An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-39517An issue was discovered in libjpeg through 2020021.
- CVE-2021-39518An issue was discovered in libjpeg through 2020021.
- CVE-2021-39530An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-39521An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-39522An issue was discovered in libredwg through v0.10.1.3751.
- CVE-2021-39514An issue was discovered in libjpeg through 2020021.
- CVE-2021-39519An issue was discovered in libjpeg through 2020021.
- CVE-2021-32294An issue was discovered in libgig through 20200507.
- CVE-2021-39516An issue was discovered in libjpeg through 2020021.
- CVE-2021-32287An issue was discovered in heif through v3.6.2.
- CVE-2021-39520An issue was discovered in libjpeg through 2020021.
- CVE-2021-32283An issue was discovered in gravity through 0.8.1.
- CVE-2021-32286An issue was discovered in hcxtools through 6.1.6.
- CVE-2021-32288An issue was discovered in heif through v3.6.2.
- CVE-2021-32289An issue was discovered in heif through through v3.6.2.
- CVE-2021-32284An issue was discovered in gravity through 0.8.1.
- CVE-2021-32281An issue was discovered in gravity through 0.8.1.
- CVE-2021-32282An issue was discovered in gravity through 0.8.1.
- CVE-2021-32268Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code.
- CVE-2021-32271An issue was discovered in gpac through 20200801.
- CVE-2021-32285An issue was discovered in gravity through 0.8.1.
- CVE-2021-32269An issue was discovered in gpac through 20200801.
- CVE-2021-32270An issue was discovered in gpac through 20200801.
- CVE-2021-32275An issue was discovered in faust through v2.30.5.
- CVE-2021-32272An issue was discovered in faad2 before 2.10.0.
- CVE-2021-32274An issue was discovered in faad2 through 2.10.0.
- CVE-2021-32276An issue was discovered in faad2 through 2.10.0.
- CVE-2021-32277An issue was discovered in faad2 through 2.10.0.
- CVE-2021-32273An issue was discovered in faad2 through 2.10.0.
- CVE-2021-32278An issue was discovered in faad2 through 2.10.0.
- CVE-2021-32265An issue was discovered in Bento4 through v1.6.0-637.
- CVE-2021-38093Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial
- CVE-2021-38094Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial
- CVE-2021-38092Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denia
- CVE-2021-38090Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Den
- CVE-2021-38091Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denia
- CVE-2020-20902A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of th
- CVE-2020-20898Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Den
- CVE-2020-20896An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Servic
- CVE-2020-20892An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of S
- CVE-2020-20891Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Serv
- CVE-2020-21468A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS).
- CVE-2021-40674An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php.
- CVE-2021-39402MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel.
- CVE-2020-21913International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode func
- CVE-2019-16651An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices.
- CVE-2021-24741Support Board < 3.3.4 - Multiple Unauthenticated SQL InjectionsSupport Board
- CVE-2021-24663Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File UploadSimple Schools Staff Directory
- CVE-2021-24657Limit Login Attempts < 4.0.50 - Unauthenticated Stored Cross-Site ScriptingLimit Login Attempts
- CVE-2021-24640Gutenslider < 5.2.0 - Contributor+ Stored XSSWordPress Slider Block Gutenslider
- CVE-2021-24639OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder DeletionOMGF | Host Google Fonts Locally
- CVE-2021-24638OMGF < 4.5.4 - Unauthenticated Path Traversal in REST APIOMGF | Host Google Fonts Locally
- CVE-2021-24637Fonts Plugin < 3.0.3 - Contributor+ Stored Cross-Site ScriptingFonts Plugin | Google Fonts Typography
- CVE-2021-24636Print My Blog < 3.4.2 - Plugin Deactivation via CSRFPrint My Blog – Print, PDF, & eBook Converter WordPress Plu…
- CVE-2021-24635Visual Link Preview < 2.2.3 - Unauthorised AJAX CallsVisual Link Preview
- CVE-2021-24618Donate With QRCode < 1.4.5 - Stored Cross-Site ScriptingDonate With QRCode
- CVE-2021-24613Post Views Counter < 1.3.5 - Authenticated Stored XSSPost Views Counter
- CVE-2021-24609WP Mapa Politico Espana < 3.7.0- Authenticated Stored XSSWP Mapa Politico España
- CVE-2021-24606Availability Calendar < 1.2.1 - Authenticated SQL InjectionAvailability Calendar
- CVE-2021-24604Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site ScriptingAvailability Calendar
- CVE-2021-24600WP Dialog <= 1.2.5.5 - Authenticated Stored Cross-Site ScriptingWP Dialog
- CVE-2021-24597You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting有赏 You Shang
- CVE-2021-24596youForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site ScriptingyouForms for WordPress – Creating Forms for CopeCart
- CVE-2021-24587Splash Header < 1.20.8 - Authenticated Stored Cross-Site Scripting (XSS)Splash Header
- CVE-2021-24585Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username DisclosureTimetable and Event Schedule by MotoPress
- CVE-2021-24584Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot UpdateTimetable and Event Schedule by MotoPress
- CVE-2021-24583Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot DeletionTimetable and Event Schedule by MotoPress
- CVE-2021-24582ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)ThinkTwit
- CVE-2021-24530Alojapro Widget <= 1.1.15 - Authenticated Stored Cross-Site Scripting (XSS)Alojapro Widget
- CVE-2021-24525Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSSWordPress Shortcodes Plugin — Shortcodes Ultimate
- CVE-2021-24511Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL InjectionProduct Feed on WooCommerce for Google, Awin, Shareasale, B…
- CVE-2021-24404WP-Board <= 1.1 (beta) - Unauthenticated SQL InjectionWP-Board
- CVE-2021-24403WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL InjectionWordPress Page Contact
- CVE-2021-24402WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL InjectionWP iCommerce – the first interactive ecommerce for wordpress
- CVE-2021-24401WP Domain Redirect <= 1.0 - Authenticated SQL InjectionWP Domain Redirect
- CVE-2021-24400Display users <= 2.0.0 - Authenticated SQL InjectionDisplay Users
- CVE-2021-24399The Sorter <= 1.0 - Authenticated SQL InjectionThe Sorter
- CVE-2021-24398Responsive 3D Slider <= 1.2 - Authenticated SQL InjectionRESPONSIVE 3D SLIDER
- CVE-2021-24397MicroCopy <= 1.1.0 - Authenticated SQL InjectionMicroCopy
- CVE-2021-24396GSEOR <= 1.3 - Authenticated SQL InjectionGSEOR – WordPress SEO Plugin
- CVE-2021-38300arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs
- CVE-2021-32280An issue was discovered in fig2dev before 3.2.8..
- CVE-2021-39537An issue was discovered in ncurses through v6.2-1.