Skip to main content
CVE-2021-24472 Aug 02, 11:15 CRITICAL POC THREAT Act Now

The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SSRF Kentharadio Onair2
NVD WPScan
CVSS 3.1
9.8
EPSS
56.6%
CVE-2021-37843 Aug 02, 19:15 CRITICAL Act Now

The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e., no other authentication is provided). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Atlassian Saml Single Sign On
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2021-32810 Aug 02, 19:15 CRITICAL PATCH Act Now

crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Race Condition Fedora Crossbeam Fedoraproject +1
NVD GitHub
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-22444 Aug 02, 17:15 CRITICAL Act Now

There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-22438 Aug 02, 17:15 CRITICAL Act Now

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-22390 Aug 02, 17:15 CRITICAL Act Now

There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Emui Huawei +1
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-22389 Aug 02, 17:15 CRITICAL Act Now

There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2021-22388 Aug 02, 17:15 CRITICAL Act Now

There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-22387 Aug 02, 17:15 CRITICAL Act Now

There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to remotely execute commands. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2021-37167 Aug 02, 13:15 CRITICAL Act Now

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-37164 Aug 02, 13:15 CRITICAL Act Now

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
3.4%
CVE-2021-37163 Aug 02, 13:15 CRITICAL Act Now

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2021-37162 Aug 02, 13:15 CRITICAL Act Now

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
3.3%
CVE-2021-37161 Aug 02, 13:15 CRITICAL Act Now

A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
3.3%
CVE-2021-37160 Aug 02, 13:15 CRITICAL Act Now

A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

File Upload Jwt Attack Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
8.2%
CVE-2021-37165 Aug 02, 11:15 CRITICAL Act Now

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Hmi 3 Control Panel Firmware Swisslog Healthcare
NVD
CVSS 3.1
9.8
EPSS
3.3%
CVE-2021-33527 Aug 02, 11:15 CRITICAL Act Now

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Mbdialup Mbconnectline
NVD
CVSS 3.1
9.8
EPSS
4.5%
CVE-2021-22435 Aug 02, 17:15 CRITICAL Act Now

There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Emui Huawei Magic Ui
NVD
CVSS 3.1
9.1
EPSS
0.7%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy