Skip to content
OpenAdvisories

Archive

31 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /31 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2021-39316 Public exploit EPSS 66%

    ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

    The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

    ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist Web / CMS
  • High 7.5
    CVE-2021-3749 Public exploit

    Inefficient Regular Expression Complexity in axios/axios

    axios is vulnerable to Inefficient Regular Expression Complexity

    axios axios/axios node-axios node-axios Debian Ubuntu npm
  • Unscored —
    CVE-2021-36356 Public exploit EPSS 54%

    KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFileP…

  • Unscored —
    CVE-2021-36981 Public exploit

    In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to …