CVEs published in September 2021

CVE-2021-23054Medium

BIG-IP: On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a…

CVE-2021-40690Unrated

Bypass of the secureValidation property

CVE-2021-41079Unrated

Apache Tomcat DoS with unexpected TLS packet

CVE-2021-40438UnratedCISA KEV

Apache HTTP Server-Side Request Forgery (SSRF)

CVE-2021-39128High

Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon

CVE-2021-40447High

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-40444HighCISA KEV

Microsoft MSHTML Remote Code Execution Vulnerability

CVE-2021-38671High

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-38667High

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-38652High

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-38651High

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-38649HighCISA KEV

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVE-2021-38648HighCISA KEV

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVE-2021-38647CriticalCISA KEV

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVE-2021-38645HighCISA KEV

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

CVE-2021-38639High

Win32k Elevation of Privilege Vulnerability

CVE-2021-38638High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2021-38637Medium

Windows Storage Information Disclosure Vulnerability

CVE-2021-38636Medium

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

CVE-2021-38635Medium

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

CVE-2021-38634High

Microsoft Windows Update Client Elevation of Privilege Vulnerability

CVE-2021-38633High

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2021-38632Medium

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2021-38630High

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2021-38629Medium

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

CVE-2021-38628High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2021-38626High

Windows Kernel Elevation of Privilege Vulnerability

CVE-2021-38625High

Windows Kernel Elevation of Privilege Vulnerability

CVE-2021-38624Medium

Windows Key Storage Provider Security Feature Bypass Vulnerability

CVE-2021-36975High

Win32k Elevation of Privilege Vulnerability

CVE-2021-36974High

Windows SMB Elevation of Privilege Vulnerability

CVE-2021-36973High

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability

CVE-2021-36972Medium

Windows SMB Information Disclosure Vulnerability

CVE-2021-36969Medium

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

CVE-2021-36968High

Windows DNS Elevation of Privilege Vulnerability

CVE-2021-36967High

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

CVE-2021-36966High

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2021-36965High

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

CVE-2021-36964High

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2021-36963High

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2021-36962Medium

Windows Installer Information Disclosure Vulnerability

CVE-2021-36961Medium

Windows Installer Denial of Service Vulnerability

CVE-2021-36960High

Windows SMB Information Disclosure Vulnerability

CVE-2021-36959Medium

Windows Authenticode Spoofing Vulnerability

CVE-2021-36955HighCISA KEV

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CVE-2021-36954High

Windows Bind Filter Driver Elevation of Privilege Vulnerability

CVE-2021-26435High

Windows Scripting Engine Memory Corruption Vulnerability

CVE-2021-23029High

BIG-IP: On version 16.0.x before 16.0.1.2, insufficient permission checks may

CVE-2021-23027Medium

BIG-IP: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS)…

CVE-2021-23026High

BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of…

CVE-2021-23030High

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x…

CVE-2021-23028High

BIG-IP: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4

CVE-2021-23025High

BIG-IP: On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an…

CVE-2021-23036High

On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests

CVE-2021-23031Critical

BIG-IP: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and…

CVE-2021-23039High

BIG-IP: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x

CVE-2021-23038Critical

BIG-IP: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of…

CVE-2021-23037Critical

BIG-IP: On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS)…

CVE-2021-23035High

On BIG-IP 14.1.x before 14.1.4.4

CVE-2021-23034High

On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1

CVE-2021-23033High

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before…

CVE-2021-23032High

BIG-IP: On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x

CVE-2021-23045High

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all…

CVE-2021-23044High

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions…

CVE-2021-23046Medium

On all versions of Guided Configuration before 8.0.0

CVE-2021-23043Medium

On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability…

CVE-2021-23042High

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before…

CVE-2021-23040High

On BIG-IP AFM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all…

CVE-2021-23047Medium

BIG-IP: On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x

CVE-2021-23041Medium

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions…

CVE-2021-23053Medium

BIG-IP: On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6

CVE-2021-23052Medium

BIG-IP: On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled…

CVE-2021-23051High

CVE-2020-5862High

CVE-2021-23050High

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all…

CVE-2021-23049High

On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3

CVE-2021-23048High

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all…

CVE-2021-39125Medium

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users

CVE-2021-39124Medium

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0

CVE-2021-39123High

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-39118Medium

Affected versions of Atlassian Jira Server and Data Center

CVE-2019-20101Medium

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules

CVE-2021-38604High

GNU C Library (glibc) Vulnerability in NetApp Products

CVE-2021-39122Medium

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails

CVE-2021-39121Medium

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-39116Medium

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability

CVE-2021-39119Medium

Affected versions of Atlassian Jira Server and Data Center

CVE-2021-39115High

Affected versions of Atlassian Jira Service Management Server and Data Center

CVE-2021-30355High

Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to…

CVE-2021-30354High

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that

CVE-2021-39109High

The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files