Skip to content
OpenAdvisories

Archive

4 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /4 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • High 7.8
    CVE-2021-34844

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34843

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34842 EPSS 13%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34841

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34840

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34839

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34838

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34837

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34836

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34835

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34834

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34833 EPSS 96%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34832

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0…

    Foxit PDF Reader
  • High 7.8
    CVE-2021-34831

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.3…

    Foxit Reader
  • Medium 6.5
    CVE-2021-36168

    A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0…

    Fortinet Fortinet FortiPortal Network devices
  • High 8.1
    CVE-2021-24010

    Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.…

    Fortinet Fortinet FortiSandbox Network devices
  • Medium 4.3
    CVE-2021-24018

    A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker lo…

    Fortinet Fortinet FortiOS Network devices
  • Unscored —
    CVE-2020-24827

    A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service…

    libelfin libelfin Debian Ubuntu
  • Unscored —
    CVE-2020-24826

    A vulnerability in the elf::section::as_strtab function of Libelfin v0.3 allows attackers to cause a denial of service …

    libelfin libelfin Debian Ubuntu
  • Unscored —
    CVE-2020-24825

    A vulnerability in the line_table::line_table function of Libelfin v0.3 allows attackers to cause a denial of service (…

    libelfin libelfin Debian Ubuntu
  • Unscored —
    CVE-2020-24824

    A global buffer overflow issue in the dwarf::line_table::line_table function of Libelfin v0.3 allows attackers to cause…

    libelfin libelfin Debian Ubuntu
  • Unscored —
    CVE-2020-24823

    A vulnerability in the dwarf::to_string function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) t…

    libelfin libelfin Debian Ubuntu
  • Unscored —
    CVE-2020-24822

    A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service (DOS…

    libelfin libelfin Debian Ubuntu
  • Unscored —
    CVE-2020-24821

    A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service…

    libelfin libelfin Debian Ubuntu
  • Medium 5.9
    CVE-2021-29765

    IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service acc…

    IBM PowerVM Hypervisor
  • Medium 5.4
    CVE-2020-4707

    IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

    IBM API Connect
  • Unscored —
    CVE-2021-36764

    In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a…

  • Critical 9.9
    CVE-2021-32590

    Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 throug…

    Fortinet Fortinet FortiPortal Network devices
  • Medium 5.4
    CVE-2021-32594

    An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5,…

    Fortinet Fortinet FortiPortal Network devices
  • Unscored —
    CVE-2021-36765

    In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloa…

  • Medium 6.1
    CVE-2021-35463

    Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module

    Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter.

    com.liferay.portal:release.portal.bom com.liferay:com.liferay.frontend.taglib.clay Maven
  • Medium 5.3
    CVE-2021-26098

    An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in posses…

    Fortinet Fortinet FortiSandbox Network devices
  • Medium 6.1
    CVE-2021-33337

    Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module

    Cross-site scripting (XSS) vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTM…

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.document.library.web Maven
  • High 7.5
    CVE-2021-3678

    Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

    showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    star7th star7th/showdoc showdoc/showdoc Packagist
  • High 7.5
    CVE-2021-33338

    Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs

    The Layout module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 6, exposes the CSRF token in URLs, which allows man-in-the-middle attackers to obtain the token and conduct Cross-Site Request Forgery (CS…

    com.liferay.portal:release.portal.bom com.liferay.portal:release.dxp.bom Maven
  • Medium 5.4
    CVE-2021-33336

    Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3, and Liferay DXP 7.1 fix pack 18, and 7.2 fix pack 5 through 7, allows remote attackers to inject arbitrary web script or HTML via the _com…

    com.liferay.portal:release.portal.bom com.liferay.portal:release.dxp.bom Maven
  • Medium 5.3
    CVE-2021-3680

    Missing Cryptographic Step in star7th/showdoc

    showdoc is vulnerable to Missing Cryptographic Step

    star7th star7th/showdoc showdoc/showdoc Packagist
  • Medium 4.8
    CVE-2021-33339

    Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting

    Cross-site scripting (XSS) vulnerability in the Fragment module in Liferay Portal 7.2.1 through 7.3.4, and Liferay DXP 7.2 before fix pack 9 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_admin_web_portlet_SiteAdminPo…

    com.liferay.portal:release.portal.bom com.liferay.portal:release.dxp.bom Maven
  • Unscored —
    CVE-2021-35397

    A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticate…

  • Unscored —
    CVE-2021-36483

    DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.