Skip to content
OpenAdvisories

Archive

13 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /13 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

66 results · Feed

  • High 7.2
    CVE-2021-33545

    UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • High 7.2
    CVE-2021-33544 Public exploit EPSS 96%

    UDP Technology/Geutebrück camera devices: command injection leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • Critical 9.8
    CVE-2021-33543 Public exploit EPSS 81%

    UDP Technology/Geutebrück camera devices: Authentication Bypass

    Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

    Geutebrück Encoder G-Code E2 Series
  • Unscored —
    CVE-2021-38833

    SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execut…

  • Unscored —
    CVE-2021-29643

    PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a c…

  • Unscored —
    CVE-2021-32132

    The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-32135

    The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-32137

    Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of …

    gpac gpac ccextractor Debian Ubuntu
  • Unscored —
    CVE-2021-32134

    The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) vi…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-32136

    Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service o…

    gpac gpac Debian Ubuntu
  • Medium 4.9
    CVE-2021-22526

    Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Medium 5.4
    CVE-2021-22524

    Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Medium 6.0
    CVE-2021-22527

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Unscored —
    CVE-2020-27970

    Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar

    Android
  • Unscored —
    CVE-2020-27969

    Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing

    Android
  • High 8.0
    CVE-2021-22528

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

    Micro Focus NetIQ Access Manager
  • Unscored —
    CVE-2021-40214

    Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.

  • Critical 9.8
    CVE-2021-40870 Exploited Public exploit EPSS 93%

    An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous…

    KEV Jan 18, 2022
  • High 7.8
    CVE-2021-40867

    Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthent…

  • Critical 9.8
    CVE-2021-40866

    Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (d…

  • Unscored —
    CVE-2021-33364

    Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted fi…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-33363

    Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-33365

    Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted f…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-33366

    Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a craft…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2021-33361

    Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.

    gpac gpac Debian Ubuntu
  • Medium 4.4
    CVE-2021-39212

    Issue when Configuring the ImageMagick Security Policy

    ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read …

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine