Archive

17 September 2021

Vulnerabilities first published on this day (UTC), newest first.

← August 2021 2021 / September /17 October 2021 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.6

CVE-2021-38412

Digi PortServer TS 16 Improper Authentication

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and…

Digi International PortServer TS 16

Sep 17, 2021
Critical 9.8

CVE-2021-41303 EPSS 76%

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

Apache Software Foundation Apache Shiro shiro org.apache.shiro:shiro-core Debian Maven

Sep 17, 2021
Critical 9.8

CVE-2021-1976

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Sna…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Sep 17, 2021