Skip to content
OpenAdvisories

Archive

10 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /10 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Unscored —
    CVE-2021-35976

    The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via t…

  • Medium 6.8
    CVE-2021-3645

    Prototype Pollution in viking04/merge

    merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

    viking04 viking04/merge @viking04/merge npm
  • Critical 9.8
    CVE-2021-34346

    Stack Based Overflow Vulnerability in NVR Storage Expansion

    A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR…

    QNAP Systems NVR Storage Expansion
  • Critical 9.8
    CVE-2021-34345

    Stack Based Overflow Vulnerability in NVR Storage Expansion

    A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR…

    QNAP Systems NVR Storage Expansion
  • Critical 9.8
    CVE-2021-34344

    Stack Buffer Overflow Vulnerability in QUSBCam2

    A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.…

    QNAP Systems QUSBCam2
  • Medium 6.0
    CVE-2021-34343

    Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud

    A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of…

    QNAP Systems QTS QuTS hero QuTScloud
  • High 7.6
    CVE-2021-28816

    Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud

    A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of…

    QNAP Systems QTS QuTS hero QuTScloud
  • Critical 9.6
    CVE-2021-28813

    Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch

    A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unre…

    QNAP Systems QuNetSwitch QSW-M2116P-2T2S
  • Unscored —
    CVE-2018-19957

    Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud

    A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerabilit…

    QNAP Systems QTS QuTS hero QuTScloud
  • High 7.5
    CVE-2021-40839 Public exploit

    Infinite Loop in rencode

    The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.

    python-rencode rencode py3-rencode python-rencode Debian Ubuntu Alpine PyPI