CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- openvpn connectOpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable...7.8 High
- openvpn, openvpn openvpn-gui +1 moreOpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable...7.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...7.5 High
- deltaww dopsoftDelta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read,...7.8 High
- deltaww dopsoftDelta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read...5.5 Medium
- zyxel usg/zywall series firmware, vpn series firmware, atp series firmware +38 more +40 moreAn authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall...9.8 Critical
- djangoproject django, fedoraproject fedora +1 moreSQL Injection in Django9.8 Critical
- naturalintelligence fast xml parserfast-xml-parser vulnerable to Prototype Pollution through tag or attribute name6.5 Medium
- apache druidApache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended6.5 Medium
- nodejs node, node.js, siemens sinec infrastructure network services +2 moreOut-of-Bounds Read in Node.js5.3 Medium
- php, netapp clustered data ontap, oracle sd-wan aware +2 moreIncorrect URL validation in FILTER_VALIDATE_URL4.3 Medium
- php, netapp clustered data ontap +1 moreMultiple vulnerabilities in Firebird client extension5.0 Medium
- monstra cmsMonstra CMS 3.0.4 allows attackers to execute arbitrary code via a crafted payload entered into...8.8 High
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute...5.4 Medium
- monstra cmsA stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers...5.4 Medium
- xwiki, xwiki xwiki-platform +1 moreThe reset password form reveal users email address5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreNo CSRF protection on the password change form5.7 Medium
- xwiki, xwiki xwiki-platform +1 moreA user without PR can reset user authentication failures information2.0 Low
- akkadianlabs akkadian provisioning managerAn issue exists within the SSH console of Akkadian Provisioning Manager 4.50.02 which allows a...8.8 High
- akkadianlabs akkadian provisioning managerAn issue exists within Akkadian Provisioning Manager 4.50.02 which allows attackers to view...7.5 High
- ibm datacap navigatorIBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting....5.4 Medium
- ibm datacap navigatorIBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A...6.3 Medium
- phpgurukul teachers record management systemA stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows...5.4 Medium
- phpgurukul teachers record management systemMultiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 allow remote...8.8 High
- stormshield network securityAn issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.7.5 High
- johnson controls facility explorer snc series supervisory controllers (f4-snc), johnsoncontrols f4-snc firmware +1 moreFacility Explorer8.8 High
- johnson controls c-cure 9000, johnsoncontrols c-cure 9000 firmware +1 moreC-CURE 90008.8 High
- phone shop sales management system project shop sales management systemSourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object...4.3 Medium
- tieline ip audtio gateway firmwareTieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A...9.8 Critical
- jtekt 2port-efr firmware, fl\/et-t-v2h firmware, nano 10gx firmware +19 more +21 moreWhen JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2,...7.5 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing...5.4 Medium
- huawei emui, magic ui +1 moreThere is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation...7.5 High
- huawei emui, magic ui +1 moreThere is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of...9.1 Critical
- huawei emui, magic ui +1 moreThere is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation...5.3 Medium
- huawei emui, magic ui +1 moreThere is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation...5.3 Medium
- ec-cubeEC-CUBE Improper access control vulnerability7.5 High
- ikaika software co.,ltd. rss readerCross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to...6.1 Medium
- rarlab unrarUnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from...7.8 High
- rarlab unrarUnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen:...7.8 High
- rawspeedRawSpeed (aka librawspeed) 3.1 has a heap-based buffer overflow in TableLookUp::setTable.9.8 Critical
- openbsd libresslLibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from...7.1 High
- openbsd libresslLibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from...7.1 High
- aomedia libaviflibavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.8.8 High
- uwebsockets project uwebsocketsuWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree ...8.8 High
- keystone-engine keystone engineKeystone Engine 0.9.2 has a use-after-free in llvm_ks::X86Operand::getToken.7.8 High
- keystone-engine keystoneKeystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::...7.8 High
- Show moreLoading…