CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text...6.4 Medium
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text...6.4 Medium
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed...5.7 Medium
- dell powerflex, powerflex presentation server +1 moreDell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the...6.5 Medium
- netgate pfsenseNetgate pfSense Community Edition 2.4.4 - p2 (arm64) is affected by: Cross Site Scripting (XSS)....5.4 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on public DAV endpoint5.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on shareinfo endpoint5.3 Medium
- ipfireLightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 is affected by: Cross Site Scripting ...5.4 Medium
- totaljs total.jsArbitrary Code Execution9.8 Critical
- totaljs total4Arbitrary Code Execution9.8 Critical
- haloRemote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.9.8 Critical
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.05.3 Medium
- apache tomcat, debian linux, oracle communications cloud native core policy +4 more +6 moreAuth weakness in JNDIRealm6.5 Medium
- apache tomcat, mcafee epolicy orchestrator, oracle big data spatial and graph +2 moreDoS after non-blocking IO error7.5 High
- gespageCartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage...7.5 High
- haloCross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter.6.1 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreApplication specific tokens can change their own scope8.8 High
- hmtalk daviewindyDaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when...7.8 High
- fortinet fortimailMultiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a...8.8 High
- fortinet fortimailAn improper neutralization of special elements used in an OS Command vulnerability in the...7.2 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreAudit log is not properly logging unsetting of share expiration date3.3 Low
- fortinet fsso windows dc agent, fsso windows ca, single sign-on +1 moreAn improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an...7.1 High
- xen-orchestra xo-server, xo-web +1 moreXen Orchestra Mishandles Authorization4.3 Medium
- devolutions serverDevolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept...2.6 Low
- fortinet fortimailA missing release of memory after its effective lifetime vulnerability in the Webmail of...5.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreFilenames not escaped by default in controllers using DownloadResponse3.5 Low
- fortinet forticlient, forticlientmac +1 moreAn improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged...6.7 Medium
- metinfoSQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.9.8 Critical
- metinfoSQL Injection vulnerability in Metinfo 7.0.0beta in index.php.9.8 Critical
- metinfoSQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a...7.2 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreRatelimit not applied on OCS API responses3.7 Low
- fossil-scm fossil, fedoraproject fedora +1 moreFossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS...7.5 High
- apache sshd, apache software foundation mina sshd, oracle banking payments +7 more +9 moreDoS/OOM leak vulnerability in Apache Mina SSHD Server6.5 Medium
- delta project deltaRelative Path Traversal in git-delta7.8 High
- kramerav viawareKramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of...9.8 Critical
- jamfJamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro...6.1 Medium
- restsharpIncorrect Regular Expression in RestSharp7.5 High
- openvpn, openvpn 3 core library +1 moreOpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the...7.4 High
- brave browserBrave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by...6.5 Medium
- braveIn Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy...5.9 Medium
- nodejs node, node.js, siemens sinec infrastructure network services +2 moreIncorrect Permission Assignment for Critical Resource in Node7.8 High
- micro focus netiq advanced authenticationMulti-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server4.8 Medium
- fortinet fortimailMissing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0...4.4 Medium
freeradius-serveropenSUSESecurity update for freeradius-serverNo score- esri arcgis serverThere is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.6.1 Medium
- esri arcgis serverThere is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.9.1 Critical
- esri arcgis serverThere is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.6.1 Medium
- esri arcgis serverThere is a stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below.5.4 Medium
mdbtoolsOSS-FuzzDynamic-stack-buffer-overflow in mdb_numeric_to_stringNo scoreujsonPyPIStack-buffer-overflow in Buffer_AppendIndentUncheckedNo score- Show moreLoading…