Skip to content
OpenAdvisories

Archive

16 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /16 October 2021 →
  1. 1115
  2. 253
  3. 327
  4. 41
  5. 54
  6. 637
  7. 7126
  8. 8276
  9. 9140
  10. 1050
  11. 112
  12. 122
  13. 1366
  14. 14102
  15. 15154
  16. 1648
  17. 1750
  18. 184
  19. 192
  20. 20171
  21. 2130
  22. 2237
  23. 23105
  24. 2425
  25. 25 
  26. 262
  27. 27115
  28. 2851
  29. 2976
  30. 3051
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.9
    CVE-2021-29825

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.1
    CVE-2021-29763

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could a…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 4.4
    CVE-2021-29752

    IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileg…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 4.3
    CVE-2021-39208

    WriteEntryToDirectory used for an archive extraction is vulnerable to partial path traversal.

    SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is…

    adamhathcock sharpcompress SharpCompress NuGet
  • Medium 4.3
    CVE-2021-34576

    Observable discrepancy in Kaden PICOFLUX AiR leaks water consumption

    In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.

    Kaden PICOFLUX AiR
  • Medium 6.2
    CVE-2021-34573

    Incorrect calculation in Enbra EWM does not report backflows or no flow events

    In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.

    Enbra EWM 1.7.29 AT-WMBUS-16-2 ER-AM DN 15
  • Medium 6.5
    CVE-2021-34572

    Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

    Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.

    Enbra EWM 1.7.29
  • Medium 6.5
    CVE-2021-34571

    Hard-coded Credentials in Enbra Wireless M-Bus devices

    Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.

    Enbra EWM 1.7.29 ER-AM DN 15 AT-WMBUS-16-2