CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
ovmfopenSUSESecurity update for ovmfNo score- esri arcgis serverThere is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.4.7 Medium
- esri arcgis serverThere is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.6.1 Medium
sql-parserOSS-FuzzDynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iterNo scorekimageformatsOSS-FuzzUse-of-uninitialized-value in residual_codingNo scoresql-parserOSS-FuzzDynamic-stack-buffer-overflow in hsql::SQLParserResult::addStatementNo score- cszcms csz cmsA cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web...5.4 Medium
- cszcms csz cmsA cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary...5.4 Medium
- mozilo mozilocmsA stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 allows authenticated attackers...5.4 Medium
- codologic codoforumA stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2...5.4 Medium
- codologic codoforumA stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2...5.4 Medium
- blackcat-cms blackcat cmsA stored cross site scripting (XSS) vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6...5.4 Medium
- blackcat-cms blackcat cmsA stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1...4.8 Medium
- codologic codoforumA stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0...5.4 Medium
- rukovoditelA stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2...5.4 Medium
- rukovoditelA stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2...5.4 Medium
- rukovoditelA stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of...5.4 Medium
- rukovoditelA stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2...5.4 Medium
- dotcmsA stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1...4.8 Medium
- dotcmsA reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1...4.8 Medium
- dotcmsA reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1...4.8 Medium
- sonicwall switchMultiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows...8.1 High
- getambassador emissary-ingressEmissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allows attackers to bypass...3.7 Low
- edgexfoundry edgex foundry, edgex-go +1 moreWeak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authen…8.3 High
- fortinet fortimailMultiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail...9.8 Critical
- fortinet fortiap, fortiap-s, fortiap-w2 +1 more +3 moreAn improper neutralization of special elements used in an OS Command vulnerability in FortiAP's...7.8 High
- fortinet fortimailMultiple instances of incorrect calculation of buffer size in the Webmail and Administrative...8.8 High
- fortinet fortisandboxA concurrent execution using shared resource with improper synchronization ('race condition') in...6.3 Medium
- fortinet fortimailA missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0...5.9 Medium
- fortinet fortimailA missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4...7.5 High
- hms-networks ecatcherIn HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to...6.1 Medium
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted...7.8 High
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures...5.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could...6.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
libopenmptopenSUSESecurity update for libopenmptNo score- publiccmsCross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the...5.4 Medium
- pbootcmsIncorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update...6.5 Medium
- autodesk autocad, design review +1 moreA maliciously crafted TIFF file in Autodesk 2018, 2017, 2013, 2012, 2011 can be forced to read...7.8 High
- autodesk design reviewA Type Confusion vulnerability in Autodesk 2018, 2017, 2013, 2012, 2011 can occur when processing...7.8 High
- autodesk design reviewA maliciously crafted PNG, PDF or DWF file in Autodesk 2018, 2017, 2013, 2012, 2011 can be used...7.8 High
- autodesk design reviewA maliciously crafted PDF, PICT or TIFF file can be used to write beyond the allocated buffer...7.8 High
- autodesk design reviewA maliciously crafted TIFF, PDF, PICT or DWF files in Autodesk 2018, 2017, 2013, 2012, 2011 can...7.8 High
- autodesk design reviewA heap-based buffer overflow could occur while parsing PICT or TIFF files in Autodesk 2018, 2017,...7.8 High
- autodesk design reviewDouble Free File Parsing Vulnerability in Autodesk Design Review8.1 High
- ethercreative logsFiles or Directories Accessible to External Parties in ether/logs7.2 High
- rockwellautomation micrologix 1100 firmwareRockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker...8.6 High
- vaporUntrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash7.5 High
- kaseya vsaUnauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.67.5 High
- kaseya vsa(Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.66.5 Medium
- Show moreLoading…