Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-06 | CVE-2021-24394 | SQL Injection vulnerability in Easy Testimonial Manager Project Easy Testimonial Manager 1.2.0 An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection | 7.2 |
| 2021-09-06 | CVE-2021-24395 | SQL Injection vulnerability in Geekwebsolution Embed Youtube Video 1.0 The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. | 7.2 |
| 2021-09-05 | CVE-2021-40523 | Improper Check for Unusual or Exceptional Conditions vulnerability in Contiki-Os Contiki 3.0 In Contiki 3.0, Telnet option negotiation is mishandled. | 7.5 |
| 2021-09-05 | CVE-2021-40524 | Unrestricted Upload of File with Dangerous Type vulnerability in Pureftpd Pure-Ftpd In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. | 7.5 |
| 2021-09-05 | CVE-2021-40516 | Out-of-bounds Read vulnerability in multiple products WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin. | 7.5 |
| 2021-09-03 | CVE-2021-30606 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30606 Use after free in Blink | 8.8 |
| 2021-09-03 | CVE-2021-30607 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30607 Use after free in Permissions | 8.8 |
| 2021-09-03 | CVE-2021-30608 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30608 Use after free in Web Share | 8.8 |
| 2021-09-03 | CVE-2021-30609 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30609 Use after free in Sign-In | 8.8 |
| 2021-09-03 | CVE-2021-30610 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30610 Use after free in Extensions API | 8.8 |