# CVEs published 2021-09-20

169 CVEs were published on September 20, 2021: 0 critical, 7 high. Days are UTC.

- [CVE-2021-41083](https://cve.now/CVE-2021-41083.md): CSRF Vulnerability in dada-mail 11.15.1 and below (CVSS 8.0, justingit dada-mail)
- [CVE-2021-39229](https://cve.now/CVE-2021-39229.md): Regular expression deinal of service in apprise (CVSS 7.5, caronc apprise · apprise)
- [CVE-2021-41082](https://cve.now/CVE-2021-41082.md): Private message title and participating users leaked in discourse (CVSS 7.5, discourse)
- [CVE-2021-34650](https://cve.now/CVE-2021-34650.md): eID Easy \<= 4.6 Reflected Cross-Site Scripting (CVSS 5.4, eID Easy)
- [CVE-2021-39325](https://cve.now/CVE-2021-39325.md): OptinMonster \<= 2.6.0 Reflected Cross-Site Scripting (CVSS 6.1, OptinMonster)
- [CVE-2020-26301](https://cve.now/CVE-2020-26301.md): Command injection in mscdex/ssh2 (CVSS 7.5, mscdex ssh2 · ssh2)
- [CVE-2020-16630](https://cve.now/CVE-2020-16630.md): TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. (no CVSS)
- [CVE-2020-19915](https://cve.now/CVE-2020-19915.md): Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php. (no CVSS)
- [CVE-2021-32838](https://cve.now/CVE-2021-32838.md): Regular Expression Denial of Service in flask-restx (CVSS 7.5, python-restx flask-restx · flask-restx)
- [CVE-2021-32839](https://cve.now/CVE-2021-32839.md): Regular Expression Denial of Service in sqlparse (CVSS 7.5, andialbrecht sqlparse · sqlparse)
- [CVE-2021-25741](https://cve.now/CVE-2021-25741.md): Symlink Exchange Can Allow Host Filesystem Access (CVSS 8.8, Kubernetes · k8s.io/kubernetes)
- [CVE-2021-25740](https://cve.now/CVE-2021-25740.md): Holes in EndpointSlice Validation Enable Host Network Hijack (CVSS 3.1, Kubernetes · k8s.io/kubernetes)
- [CVE-2020-8561](https://cve.now/CVE-2020-8561.md): Webhook redirect in kube-apiserver (CVSS 4.1, Kubernetes · k8s.io/kubernetes)
- [CVE-2021-38899](https://cve.now/CVE-2021-38899.md): IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. (CVSS 4.4, IBM Cloud Pak for Data)
- [CVE-2021-29856](https://cve.now/CVE-2021-29856.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. (CVSS 6.5, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29821](https://cve.now/CVE-2021-29821.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29820](https://cve.now/CVE-2021-29820.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29819](https://cve.now/CVE-2021-29819.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29818](https://cve.now/CVE-2021-29818.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29817](https://cve.now/CVE-2021-29817.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29811](https://cve.now/CVE-2021-29811.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 stores user credentials in plain clear text which can be read by an (CVSS 4.9, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29809](https://cve.now/CVE-2021-29809.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29808](https://cve.now/CVE-2021-29808.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29807](https://cve.now/CVE-2021-29807.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29806](https://cve.now/CVE-2021-29806.md): IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-39551](https://cve.now/CVE-2021-39551.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39525](https://cve.now/CVE-2021-39525.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-32298](https://cve.now/CVE-2021-32298.md): An issue was discovered in libiff through 20190123. (no CVSS)
- [CVE-2021-39585](https://cve.now/CVE-2021-39585.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39588](https://cve.now/CVE-2021-39588.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39591](https://cve.now/CVE-2021-39591.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39582](https://cve.now/CVE-2021-39582.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39593](https://cve.now/CVE-2021-39593.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39564](https://cve.now/CVE-2021-39564.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39558](https://cve.now/CVE-2021-39558.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39594](https://cve.now/CVE-2021-39594.md): Other An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39563](https://cve.now/CVE-2021-39563.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39579](https://cve.now/CVE-2021-39579.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39587](https://cve.now/CVE-2021-39587.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39574](https://cve.now/CVE-2021-39574.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39589](https://cve.now/CVE-2021-39589.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39592](https://cve.now/CVE-2021-39592.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39595](https://cve.now/CVE-2021-39595.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39583](https://cve.now/CVE-2021-39583.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39569](https://cve.now/CVE-2021-39569.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39577](https://cve.now/CVE-2021-39577.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39590](https://cve.now/CVE-2021-39590.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39553](https://cve.now/CVE-2021-39553.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39554](https://cve.now/CVE-2021-39554.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39555](https://cve.now/CVE-2021-39555.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39556](https://cve.now/CVE-2021-39556.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39584](https://cve.now/CVE-2021-39584.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39559](https://cve.now/CVE-2021-39559.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39557](https://cve.now/CVE-2021-39557.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39561](https://cve.now/CVE-2021-39561.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39562](https://cve.now/CVE-2021-39562.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39597](https://cve.now/CVE-2021-39597.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39546](https://cve.now/CVE-2021-39546.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39547](https://cve.now/CVE-2021-39547.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39575](https://cve.now/CVE-2021-39575.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39596](https://cve.now/CVE-2021-39596.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39544](https://cve.now/CVE-2021-39544.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39598](https://cve.now/CVE-2021-39598.md): An issue was discovered in swftools through 20200710. (no CVSS)
- [CVE-2021-39538](https://cve.now/CVE-2021-39538.md): An issue was discovered in pdftools through 20200714. (no CVSS)
- [CVE-2021-39545](https://cve.now/CVE-2021-39545.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39548](https://cve.now/CVE-2021-39548.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39552](https://cve.now/CVE-2021-39552.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39539](https://cve.now/CVE-2021-39539.md): An issue was discovered in pdftools through 20200714. (no CVSS)
- [CVE-2021-39549](https://cve.now/CVE-2021-39549.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-39540](https://cve.now/CVE-2021-39540.md): An issue was discovered in pdftools through 20200714. (no CVSS)
- [CVE-2021-39541](https://cve.now/CVE-2021-39541.md): An issue was discovered in pdftools through 20200714. (no CVSS)
- [CVE-2021-39542](https://cve.now/CVE-2021-39542.md): An issue was discovered in pdftools through 20200714. (no CVSS)
- [CVE-2021-39543](https://cve.now/CVE-2021-39543.md): An issue was discovered in pdftools through 20200714. (no CVSS)
- [CVE-2021-39550](https://cve.now/CVE-2021-39550.md): An issue was discovered in sela through 20200412. (no CVSS)
- [CVE-2021-32299](https://cve.now/CVE-2021-32299.md): An issue was discovered in pbrt through 20200627. (no CVSS)
- [CVE-2021-39536](https://cve.now/CVE-2021-39536.md): An issue was discovered in libxsmm through v1.16.1-93. (no CVSS)
- [CVE-2021-39533](https://cve.now/CVE-2021-39533.md): An issue was discovered in libslax through v0.22.1. (no CVSS)
- [CVE-2021-39531](https://cve.now/CVE-2021-39531.md): An issue was discovered in libslax through v0.22.1. (no CVSS)
- [CVE-2021-39534](https://cve.now/CVE-2021-39534.md): An issue was discovered in libslax through v0.22.1. (no CVSS)
- [CVE-2021-32297](https://cve.now/CVE-2021-32297.md): An issue was discovered in LIEF through 0.11.4. (no CVSS, lief)
- [CVE-2021-39523](https://cve.now/CVE-2021-39523.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-39532](https://cve.now/CVE-2021-39532.md): An issue was discovered in libslax through v0.22.1. (no CVSS)
- [CVE-2021-39535](https://cve.now/CVE-2021-39535.md): An issue was discovered in libxsmm through v1.16.1-93. (no CVSS)
- [CVE-2021-39527](https://cve.now/CVE-2021-39527.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-39515](https://cve.now/CVE-2021-39515.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-39528](https://cve.now/CVE-2021-39528.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-39517](https://cve.now/CVE-2021-39517.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-39518](https://cve.now/CVE-2021-39518.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-39530](https://cve.now/CVE-2021-39530.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-39521](https://cve.now/CVE-2021-39521.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-39522](https://cve.now/CVE-2021-39522.md): An issue was discovered in libredwg through v0.10.1.3751. (no CVSS)
- [CVE-2021-39514](https://cve.now/CVE-2021-39514.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-39519](https://cve.now/CVE-2021-39519.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-32294](https://cve.now/CVE-2021-32294.md): An issue was discovered in libgig through 20200507. (no CVSS)
- [CVE-2021-39516](https://cve.now/CVE-2021-39516.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-32287](https://cve.now/CVE-2021-32287.md): An issue was discovered in heif through v3.6.2. (no CVSS)
- [CVE-2021-39520](https://cve.now/CVE-2021-39520.md): An issue was discovered in libjpeg through 2020021. (no CVSS)
- [CVE-2021-32283](https://cve.now/CVE-2021-32283.md): An issue was discovered in gravity through 0.8.1. (no CVSS)
- [CVE-2021-32286](https://cve.now/CVE-2021-32286.md): An issue was discovered in hcxtools through 6.1.6. (no CVSS)
- [CVE-2021-32288](https://cve.now/CVE-2021-32288.md): An issue was discovered in heif through v3.6.2. (no CVSS)
- [CVE-2021-32289](https://cve.now/CVE-2021-32289.md): An issue was discovered in heif through through v3.6.2. (no CVSS)
- [CVE-2021-32284](https://cve.now/CVE-2021-32284.md): An issue was discovered in gravity through 0.8.1. (no CVSS)
- [CVE-2021-32281](https://cve.now/CVE-2021-32281.md): An issue was discovered in gravity through 0.8.1. (no CVSS)
- [CVE-2021-32282](https://cve.now/CVE-2021-32282.md): An issue was discovered in gravity through 0.8.1. (no CVSS)
- [CVE-2021-32268](https://cve.now/CVE-2021-32268.md): Buffer overflow vulnerability in function gf\_fprintf in os\_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. (no CVSS)
- [CVE-2021-32271](https://cve.now/CVE-2021-32271.md): An issue was discovered in gpac through 20200801. (no CVSS)
- [CVE-2021-32285](https://cve.now/CVE-2021-32285.md): An issue was discovered in gravity through 0.8.1. (no CVSS)
- [CVE-2021-32269](https://cve.now/CVE-2021-32269.md): An issue was discovered in gpac through 20200801. (no CVSS)
- [CVE-2021-32270](https://cve.now/CVE-2021-32270.md): An issue was discovered in gpac through 20200801. (no CVSS)
- [CVE-2021-32275](https://cve.now/CVE-2021-32275.md): An issue was discovered in faust through v2.30.5. (no CVSS)
- [CVE-2021-32272](https://cve.now/CVE-2021-32272.md): An issue was discovered in faad2 before 2.10.0. (no CVSS)
- [CVE-2021-32274](https://cve.now/CVE-2021-32274.md): An issue was discovered in faad2 through 2.10.0. (no CVSS)
- [CVE-2021-32276](https://cve.now/CVE-2021-32276.md): An issue was discovered in faad2 through 2.10.0. (no CVSS)
- [CVE-2021-32277](https://cve.now/CVE-2021-32277.md): An issue was discovered in faad2 through 2.10.0. (no CVSS)
- [CVE-2021-32273](https://cve.now/CVE-2021-32273.md): An issue was discovered in faad2 through 2.10.0. (no CVSS)
- [CVE-2021-32278](https://cve.now/CVE-2021-32278.md): An issue was discovered in faad2 through 2.10.0. (no CVSS)
- [CVE-2021-32265](https://cve.now/CVE-2021-32265.md): An issue was discovered in Bento4 through v1.6.0-637. (no CVSS)
- [CVE-2021-38093](https://cve.now/CVE-2021-38093.md): Integer Overflow vulnerability in function filter\_robert in libavfilter/vf\_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial (no CVSS)
- [CVE-2021-38094](https://cve.now/CVE-2021-38094.md): Integer Overflow vulnerability in function filter\_sobel in libavfilter/vf\_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial (no CVSS)
- [CVE-2021-38092](https://cve.now/CVE-2021-38092.md): Integer Overflow vulnerability in function filter\_prewitt in libavfilter/vf\_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denia (no CVSS)
- [CVE-2021-38090](https://cve.now/CVE-2021-38090.md): Integer Overflow vulnerability in function filter16\_roberts in libavfilter/vf\_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Den (no CVSS)
- [CVE-2021-38091](https://cve.now/CVE-2021-38091.md): Integer Overflow vulnerability in function filter16\_sobel in libavfilter/vf\_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denia (no CVSS)
- [CVE-2020-20902](https://cve.now/CVE-2020-20902.md): A CWE-125: Out-of-bounds read vulnerability exists in long\_term\_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of th (no CVSS)
- [CVE-2020-20898](https://cve.now/CVE-2020-20898.md): Integer Overflow vulnerability in function filter16\_prewitt in libavfilter/vf\_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Den (no CVSS)
- [CVE-2020-20896](https://cve.now/CVE-2020-20896.md): An issue was discovered in function latm\_write\_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Servic (no CVSS)
- [CVE-2020-20892](https://cve.now/CVE-2020-20892.md): An issue was discovered in function filter\_frame in libavfilter/vf\_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of S (no CVSS)
- [CVE-2020-20891](https://cve.now/CVE-2020-20891.md): Buffer Overflow vulnerability in function config\_input in libavfilter/vf\_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Serv (no CVSS)
- [CVE-2020-21468](https://cve.now/CVE-2020-21468.md): A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). (no CVSS)
- [CVE-2021-40674](https://cve.now/CVE-2021-40674.md): An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php. (no CVSS)
- [CVE-2021-39402](https://cve.now/CVE-2021-39402.md): MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. (no CVSS)
- [CVE-2020-21913](https://cve.now/CVE-2020-21913.md): International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg\_createWithAssemblyCode func (no CVSS)
- [CVE-2019-16651](https://cve.now/CVE-2019-16651.md): An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. (no CVSS)
- [CVE-2021-24741](https://cve.now/CVE-2021-24741.md): Support Board \< 3.3.4 - Multiple Unauthenticated SQL Injections (no CVSS, Support Board)
- [CVE-2021-24663](https://cve.now/CVE-2021-24663.md): Simple School Staff Directory \<= 1.1 - Admin+ Arbitrary File Upload (no CVSS, Simple Schools Staff Directory)
- [CVE-2021-24657](https://cve.now/CVE-2021-24657.md): Limit Login Attempts \< 4.0.50 - Unauthenticated Stored Cross-Site Scripting (no CVSS, Limit Login Attempts)
- [CVE-2021-24640](https://cve.now/CVE-2021-24640.md): Gutenslider \< 5.2.0 - Contributor+ Stored XSS (no CVSS, WordPress Slider Block Gutenslider)
- [CVE-2021-24639](https://cve.now/CVE-2021-24639.md): OMGF \< 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion (no CVSS, OMGF | Host Google Fonts Locally)
- [CVE-2021-24638](https://cve.now/CVE-2021-24638.md): OMGF \< 4.5.4 - Unauthenticated Path Traversal in REST API (no CVSS, OMGF | Host Google Fonts Locally)
- [CVE-2021-24637](https://cve.now/CVE-2021-24637.md): Fonts Plugin \< 3.0.3 - Contributor+ Stored Cross-Site Scripting (no CVSS, Fonts Plugin | Google Fonts Typography)
- [CVE-2021-24636](https://cve.now/CVE-2021-24636.md): Print My Blog \< 3.4.2 - Plugin Deactivation via CSRF (no CVSS, Print My Blog – Print, PDF, & eBook Converter WordPress Plu…)
- [CVE-2021-24635](https://cve.now/CVE-2021-24635.md): Visual Link Preview \< 2.2.3 - Unauthorised AJAX Calls (no CVSS, Visual Link Preview)
- [CVE-2021-24618](https://cve.now/CVE-2021-24618.md): Donate With QRCode \< 1.4.5 - Stored Cross-Site Scripting (no CVSS, Donate With QRCode)
- [CVE-2021-24613](https://cve.now/CVE-2021-24613.md): Post Views Counter \< 1.3.5 - Authenticated Stored XSS (no CVSS, Post Views Counter)
- [CVE-2021-24609](https://cve.now/CVE-2021-24609.md): WP Mapa Politico Espana \< 3.7.0- Authenticated Stored XSS (no CVSS, WP Mapa Politico España)
- [CVE-2021-24606](https://cve.now/CVE-2021-24606.md): Availability Calendar \< 1.2.1 - Authenticated SQL Injection (no CVSS, Availability Calendar)
- [CVE-2021-24604](https://cve.now/CVE-2021-24604.md): Availability Calendar \< 1.2.2 - Authenticated Stored Cross-Site Scripting (no CVSS, Availability Calendar)
- [CVE-2021-24600](https://cve.now/CVE-2021-24600.md): WP Dialog \<= 1.2.5.5 - Authenticated Stored Cross-Site Scripting (no CVSS, WP Dialog)
- [CVE-2021-24597](https://cve.now/CVE-2021-24597.md): You Shang \<= 1.0.1 - Authenticated Stored Cross-Site Scripting (no CVSS, 有赏 You Shang)
- [CVE-2021-24596](https://cve.now/CVE-2021-24596.md): youForms for WordPress \<= 1.0.5 - Authenticated Stored Cross-Site Scripting (no CVSS, youForms for WordPress – Creating Forms for CopeCart)
- [CVE-2021-24587](https://cve.now/CVE-2021-24587.md): Splash Header \< 1.20.8 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, Splash Header)
- [CVE-2021-24585](https://cve.now/CVE-2021-24585.md): Timetable and Event Schedule by MotoPress \< 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure (no CVSS, Timetable and Event Schedule by MotoPress)
- [CVE-2021-24584](https://cve.now/CVE-2021-24584.md): Timetable and Event Schedule by MotoPress \< 2.4.2 - Unauthorised Event TimeSlot Update (no CVSS, Timetable and Event Schedule by MotoPress)
- [CVE-2021-24583](https://cve.now/CVE-2021-24583.md): Timetable and Event Schedule by MotoPress \< 2.4.2 - Unauthorised Event TimeSlot Deletion (no CVSS, Timetable and Event Schedule by MotoPress)
- [CVE-2021-24582](https://cve.now/CVE-2021-24582.md): ThinkTwit \< 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, ThinkTwit)
- [CVE-2021-24530](https://cve.now/CVE-2021-24530.md): Alojapro Widget \<= 1.1.15 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, Alojapro Widget)
- [CVE-2021-24525](https://cve.now/CVE-2021-24525.md): Shortcodes Ultimate \< 5.10.2 - Contributor+ Stored XSS (no CVSS, WordPress Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2021-24511](https://cve.now/CVE-2021-24511.md): Create WooCommerce Product Feeds For 40+ Merchants \< 3.3.1.0 - Authenticated SQL Injection (no CVSS, Product Feed on WooCommerce for Google, Awin, Shareasale, B…)
- [CVE-2021-24404](https://cve.now/CVE-2021-24404.md): WP-Board \<= 1.1 (beta) - Unauthenticated SQL Injection (no CVSS, WP-Board)
- [CVE-2021-24403](https://cve.now/CVE-2021-24403.md): WordPress Page Contact \<= 1.0 - Authenticated (editor+) SQL Injection (no CVSS, WordPress Page Contact)
- [CVE-2021-24402](https://cve.now/CVE-2021-24402.md): WP iCommerce \<= 1.1.1 - Authenticated (contributor+) SQL Injection (no CVSS, WP iCommerce – the first interactive ecommerce for wordpress)
- [CVE-2021-24401](https://cve.now/CVE-2021-24401.md): WP Domain Redirect \<= 1.0 - Authenticated SQL Injection (no CVSS, WP Domain Redirect)
- [CVE-2021-24400](https://cve.now/CVE-2021-24400.md): Display users \<= 2.0.0 - Authenticated SQL Injection (no CVSS, Display Users)
- [CVE-2021-24399](https://cve.now/CVE-2021-24399.md): The Sorter \<= 1.0 - Authenticated SQL Injection (no CVSS, The Sorter)
- [CVE-2021-24398](https://cve.now/CVE-2021-24398.md): Responsive 3D Slider \<= 1.2 - Authenticated SQL Injection (no CVSS, RESPONSIVE 3D SLIDER)
- [CVE-2021-24397](https://cve.now/CVE-2021-24397.md): MicroCopy \<= 1.1.0 - Authenticated SQL Injection (no CVSS, MicroCopy)
- [CVE-2021-24396](https://cve.now/CVE-2021-24396.md): GSEOR \<= 1.3 - Authenticated SQL Injection (no CVSS, GSEOR – WordPress SEO Plugin)
- [CVE-2021-38300](https://cve.now/CVE-2021-38300.md): arch/mips/net/bpf\_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs (no CVSS)
- [CVE-2021-32280](https://cve.now/CVE-2021-32280.md): An issue was discovered in fig2dev before 3.2.8.. (no CVSS)
- [CVE-2021-39537](https://cve.now/CVE-2021-39537.md): An issue was discovered in ncurses through v6.2-1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.