CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- realmag777 wpcs - wordpress currency switcher, wp-currency wordpress currency switcher +1 moreCross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and...8.8 High
- codemiq wordpress email template designer - wp html mail, wordpress email template designer +1 moreCross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML...8.8 High
- g.u. co., ltd. gu app for android, gu-global gu +1 moreImproper authorization in handler for custom URL scheme vulnerability in GU App for Android...4.3 Medium
- a-stage inc. sct-40cm01sr and at-40cm01sr, a-stage-inc at-40cm01sr firmware, sct-40cm01sr firmware +2 moreImproper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to...9.8 Critical
- elecom co.,ltd. wrc-300febk, wrc-f300nf, wrc-733febk, wrh-300rd, wrh-300bk, wrh-300sv, wrh-300wh, wrh-h300wh, wrh-h300bk, wrh-300bk-s, and wrh-300wh-s, elecom wrc-300febk firmware, wrc-733febk firmware +9 more +11 moreWRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH...8.8 High
- elecom co.,ltd. wrc-1167fs-w, wrc-1167fs-b, and wrc-1167fsa, elecom wrc-1167fs-b firmware, wrc-1167fs-w firmware +1 more +3 moreWRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network...6.5 Medium
- debian linux, linux kernel +1 morekernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID...7.8 High
- gitlabClient-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a...6.1 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions. Improper access control allows...6.5 Medium
- gitlabUnder certain conditions, some users were able to push to protected branches that were restricted...6.5 Medium
- monstra cmsCross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php.5.4 Medium
- gitlabHTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2...3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a...5.9 Medium
- phplistRemote Code Execution vulnerability in phplist 3.5.1. The application does not check any file...9.8 Critical
- phplistCross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage...4.8 Medium
- issabel pbxA stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX...4.8 Medium
- smashing project smashingSmashing Cross-site Scripting vulnerability6.1 Medium
- addressable project addressable, fedoraproject fedora +1 moreRegular Expression Denial of Service in Addressable templates7.5 High
- irislink irisnextMultiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated (or...5.4 Medium
- mhammond pywin32Integer overflow in pywin326.5 Medium
- delicious brains wp offload ses liteWP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)5.4 Medium
- export users with meta project users with meta, unknown export users with meta +1 moreExport Users With Meta < 0.6.5 - Authenticated SQL Injection7.2 High
- tielabs jannahJannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- gvectors wpforo forumwpForo Forum < 1.9.7 - Open Redirect6.1 Medium
- izsoft easy cookies policyEasy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting6.5 Medium
- chimpgroup foodbakery, chimpstudio wp foodbakery +1 moreFoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- e4j vikrentcar car rental management systemVik Rent Car < 1.1.7 - CSRF to Stored XSS5.4 Medium
- contempoinc wp pro real estate 7, contempothemes real estate 7 +1 moreReal Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- kubiq wp svg imagesWP SVG Images < 3.4 - Authenticated (author+) Stored XSS via SVG5.4 Medium
- beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 moreJoomSport < 5.1.8 - Unauthenticated PHP Object Injection9.8 Critical
- stockware motorMotor theme < 3.1.0 - Local File Inclusion9.8 Critical
- fortinet fortiauthenticatorUsage of hard-coded cryptographic keys to encrypt configuration files and debug logs in...4.0 Medium
re2OSS-FuzzStack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>No score- smartertools smartermailSmarterTools SmarterMail before Build 7776 allows XSS.6.1 Medium
- alpinelinux aportsIn the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to...5.9 Medium
- tcl** DISPUTED ** In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code...7.8 High
- rocket.chatThe Rocket.Chat desktop application 2.17.11 opens external links without user interaction.7.5 High
- flask-user project flask-userOpen Redirect5.4 Medium
- apache jena fusekiDisplay information UI XSS6.1 Medium
wasm3OSS-FuzzUNKNOWN READ in v_FindFunctionNo scoreieee-dataDebianieee-data - crash fixNo score- linuxptp project linuxptp, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a...7.1 High
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...8.8 High
attycrates.ioatty potential unaligned readNo scorelibjxlOSS-FuzzUse-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadataNo scoreopenscOSS-FuzzStack-buffer-overflow in sc_asn1_read_tagNo scoremrubyOSS-FuzzUNKNOWN READ in mrb_vm_ci_envNo scoremrubyOSS-FuzzHeap-buffer-overflow in dispatchNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_vm_execNo score- microsoft windows, windows server 2012, windows server 2016 +32 more +34 moreWindows Print Spooler Remote Code Execution Vulnerability8.8 High
- Show moreLoading…