Skip to content
OpenAdvisories

Archive

August 2021

Vulnerabilities first published in this month (UTC), newest first.

← July 2021 2021 / August September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-34646 Public exploit EPSS 51%

    Booster for WooCommerce <= 5.4.3 Authentication Bypass

    Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function …

    Pluggabl Booster for WooCommcerce Web / CMS
  • Critical 9.8
    CVE-2021-26084 Exploited · Ransomware Public exploit EPSS 100%

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an u…

    Atlassian Confluence Data Center Confluence Server Web / CMS
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-3711 Public exploit EPSS 88%

    SM2 Decryption Buffer Overflow

    In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramet…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io
  • Critical 9.8
    CVE-2021-34730 Public exploit EPSS 19%

    Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

    A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resu…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.3
    CVE-2021-37678 Public exploit

    Arbitrary code execution due to YAML deserialization

    TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The [implementation](https://github.com/tens…

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Critical 9.8
    CVE-2021-34371 Public exploit EPSS 13%

    Deserialization of Untrusted Data in Neo4j

    Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadg…

    org.neo4j:neo4j Maven