CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- commscope ruckus iot controllerAn issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented...9.8 Critical
- commscope ruckus iot controllerAn issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows...4.3 Medium
- pexip infinityPexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote...7.5 High
- fork-cms fork cmsArbitrary file upload in Fork CMS8.8 High
- ninjarmmThe Agent in NinjaRMM 5.0.909 has Insecure Permissions.7.1 High
- ninjarmmThe Agent in NinjaRMM 5.0.909 has Incorrect Access Control.7.8 High
- icewarp webclientCross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote...6.1 Medium
- pexip infinityPexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An...7.5 High
- secondline podcast importer secondlineServer-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer...7.5 High
- mooveagency import xml and rss feedsServer-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1...9.1 Critical
- xylusthemes wp smart importServer-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1...9.1 Critical
- cminds cm download managerDirectory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for...8.1 High
- cminds cm download managerCross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager)...6.1 Medium
- media file organizer project file organizerDirectory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for...8.6 High
- ninjateam video downloader for tiktokDirectory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for...7.5 High
- ninjateam video downloader for tiktokServer-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3...9.8 Critical
- wp-downloadmanager project wp-downloadmanagerServer-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an...5.3 Medium
- eram myfax150 firmware, myfax250 firmware, myfax450 firmware +2 moremyFax version 229 logs sensitive information in the export log module which allows any user to...6.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in...6.5 Medium
- teradici pcoip management consoleIn Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject...6.1 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the ...6.5 Medium
- gitlabAn information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to...4.3 Medium
- misp-project mispapp/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view.6.1 Medium
- wp upload restriction upload restriction, wp-upload-restriction project wp-upload-restriction +1 moreWP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting6.4 Medium
- wp upload restriction upload restriction, wp-upload-restriction project wp-upload-restriction +1 moreWP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function4.3 Medium
- wp upload restriction upload restriction, wp-upload-restriction project wp-upload-restriction +1 moreWP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function4.3 Medium
- profilepressProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component9.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation9.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component9.8 Critical
- wp manage ninja fluent forms, fluentforms contact form +1 moreCSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation8.8 High
- profilepressProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation9.8 Critical
- tokioRace condition in tokio5.9 Medium
- hyperLenient Parsing of Content-Length Header When Prefixed with Plus Sign3.1 Low
- hyperInteger Overflow in Chunked Transfer-Encoding5.9 Medium
- just-safe-set project just-safe-setPrototype polluation in just-safe-set9.8 Critical
- gitlabA cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and...7.1 High
- broadcom fabric operating system, linux kernel, netapp aff 500f firmware +18 more +20 moreHeap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE8.3 High
- gitlabInsufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to...4.7 Medium
- gitlabImproper code rendering while rendering merge requests could be exploited to submit malicious...4.9 Medium
- gitlabA reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2...6.1 Medium
- gitlabA denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows...3.5 Low
- joomla joomla\!, joomla! project cms +1 more[20210705] - Core - XSS in com_media imagelist6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210704] - Core - Privilege escalation through com_installer7.5 High
- joomla! project cms, joomla joomla\! +1 more[20210703] - Core - Lack of enforced session termination5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210702] - Core - DoS through usergroup table manipulation7.5 High
- joomla joomla\!, joomla! project cms +1 more[20210701] - Core - XSS in JForm Rules field6.1 Medium
- Show moreLoading…