Archive

31 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /31 September 2021 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2021-39316 Public exploit EPSS 66%

ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure

The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.

ZoomIt ZoomSounds - WordPress Wave Audio Player with Playlist Web / CMS

Aug 31, 2021
High 7.5

CVE-2021-3749 Public exploit

Inefficient Regular Expression Complexity in axios/axios

axios is vulnerable to Inefficient Regular Expression Complexity

axios axios/axios node-axios node-axios Debian Ubuntu npm

Aug 31, 2021