CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- linux acrnACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.7.5 High
- linux acrnThe polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device,...7.5 High
- linux acrnThe Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed...7.5 High
- linux acrnACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.7.5 High
- linux acrnAn issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c...7.5 High
- linux acrnAn issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an...7.8 High
- zimbra collaborationAn issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9...6.1 Medium
- zimbra collaborationAn issue was discovered in ZmMailMsgView.js in the Calendar Invite component in Zimbra...5.4 Medium
- zimbra collaborationAn issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite...9.8 Critical
- zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...6.1 Medium
- openthread wpantundOpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an...6.8 Medium
- stellar js-stellar-sdkUtils.readChallengeTx does not verify the server account signature6.5 Medium
- suluXSS Injection in Media Collection Title was possible8.4 High
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- cmsmadesimple cms made simpleA stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to...5.4 Medium
- lavaliteLavaLite Stored Cross-site Scripting vulnerability5.4 Medium
- lavaliteStored XSS in LavaLite 5.8.05.4 Medium
- lavaliteStored XSS in LavaLite 5.8.05.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in the "Import Subscribers" feature in phplist...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows authenticated...5.4 Medium
- phplistA stored cross site scripting (XSS) vulnerability in the "Import emails" module in phplist 3.5.4...5.4 Medium
- php-fusionA stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP...5.4 Medium
- php-fusionA stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of...5.4 Medium
- php-fusionThe component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60...5.4 Medium
- php-fusionA reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9...5.4 Medium
- php-fusionA stored cross site scripting (XSS) vulnerability in administration/settings_main.php of PHP...5.4 Medium
- php-fusionAn issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out,...5.4 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain...5.9 Medium
- ts-nodash project ts-nodashPrototype Pollution7.3 High
- record-like-deep-assign project record-like-deep-assignPrototype Pollution7.3 High
- nationalsecurityagency emissaryServer-Side Request Forgery (SSRF) in emissary:emissary7.2 High
- getkirby kirbyCross-site scripting (XSS) from field and configuration text displayed in the Panel7.1 High
- sitasoftware azurcmsA SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an...8.8 High
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...7.5 High
- mediawikiAn issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki...9.8 Critical
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...4.3 Medium
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for...9.8 Critical
- mediawikiAn issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups...4.3 Medium
- mediawikiAn XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within...4.8 Medium
- mediawikiAn XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within...4.8 Medium
- mediawikiAn issue was discovered in the FileImporter extension in MediaWiki through 1.36. For certain...8.8 High
- Show moreLoading…