CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- graylog A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate... 9.8 Critical
- graylog A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate... 9.8 Critical
- zohocorp manageengine password manager pro Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp... 5.3 Medium
- objectplanet opinio ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList... 7.5 High
- objectplanet opinio ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <... 6.5 Medium
- objectplanet opinio admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable... 8.8 High
-
tidy-html5OSS-Fuzz Heap-buffer-overflow in prvTidygrowStack No score -
tidy-html5OSS-Fuzz UNKNOWN READ in ParseXMLElement No score -
unicornOSS-Fuzz UNKNOWN READ in helper_uc_tracecode No score - zope accesscontrol Remote Code Execution via unsafe classes in otherwise permitted modules 4.4 Medium
- ypsomed mylife, mylife cloud +1 more Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2... 7.1 High
- ypsomed mylife, mylife cloud +1 more Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2... 7.5 High
- gtranslate, translate ai multilingual solutions gtranslate pro and gtranslate enterprise +1 more Reflected XSS in GTranslate Pro and GTranslate Enterprise < 2.8.65 5.0 Medium
- sendgrid SendGrid <= 1.11.8 – Authorization Bypass 4.3 Medium
- microfocus zenworks configuration management, zenworks endpoint security management +1 more A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration... 6.7 Medium
- redhat openshift It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster... 4.6 Medium
- pattersondental eaglesoft Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate... 7.5 High
- emerson proficy machine edition Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an... 5.3 Medium
- emerson proficy machine edition Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause... 5.3 Medium
- sylpheed project sylpheed, claws-mail, fedoraproject fedora +2 more textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0... 6.1 Medium
- nervos molecule The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule. 9.8 Critical
- crossbeam-rs crossbeam, fedoraproject fedora +1 more Data race in crossbeam-deque 9.8 Critical
- ibm partner engagement manager IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the... 9.8 Critical
- ibm websphere application server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain... 5.0 Medium
- objectplanet opinio ObjectPlanet Opinio before 7.13 allows reflected XSS via the survey/admin/surveyAdmin.do?action... 6.1 Medium
- misp-project misp app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy... 5.4 Medium
-
skiaOSS-Fuzz Use-of-uninitialized-value in SkBaseDevice::save No score -
skiaOSS-Fuzz Heap-use-after-free in SkCanvas::MCRec::MCRec No score - misp-project misp app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when... 5.4 Medium
- trend micro apex one, officescan, worry-free business security +3 more +5 more A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,... 7.8 High
- trend micro apex one, officescan, worry-free business security +3 more +5 more An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service,... 8.8 High
- sophos utm, unified threat management +1 more Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before... 4.8 Medium
- tecnick tcexam When installed following the default/recommended settings, TCExam <= 14.8.1 allowed... 7.5 High
- tecnick tcexam An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password... 5.3 Medium
- tecnick tcexam A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via... 5.4 Medium
- tecnick tcexam A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via... 5.4 Medium
- glances project glances XML External Entity (XXE) Injection 6.3 Medium
- cszcms csz cms CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink()... 9.1 Critical
- phone shop sales management system project shop sales management system Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL... 9.8 Critical
- online covid vaccination scheduler system project covid vaccination scheduler system Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The... 8.1 High
- metinfo SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php. 9.8 Critical
- hucart Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php. 5.4 Medium
- metinfo Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin... 8.8 High
- dell emc networker, networker +1 more Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information... 7.8 High
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper... 9.6 Critical
- dell emc powerscale onefs, isilon onefs, emc isilon onefs +2 more The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0... 8.8 High
- dell avamar, emc avamar server +1 more Dell EMC Avamar Server contains an open redirect vulnerability. A remote unauthenticated attacker... 6.1 Medium
- nukeviet NukeViet SQL Injection vulnerability 9.8 Critical
- nukeviet NukeViet SQL Injection vulnerability via topicsid parameter 9.8 Critical
- nukeviet NukeViet Cross-site Scripting via the editor in the News module 6.1 Medium
- Show olderLoading…