CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- ruby-lang ruby, debian linux, oracle jd edwards enterpriseone tools +2 moreAn issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A...5.8 Medium
- exiv2, debian linux +1 moreA buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a...6.5 Medium
- flowdroid project flowdroidImproper Restriction of XML External Entity Reference in de.tud.sse5.3 Medium
- icinga, icinga icingaweb2 +1 moreCustom variable protection and blacklists can be circumvented5.3 Medium
- icinga, icinga icingaweb2 +1 morePossible path traversal by use of the `doc` module5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreLack of ratelimit on public share link mount endpoint5.3 Medium
mosquittoMageia,uthashMageia +1 moreUpdated mosquitto packages fix security vulnerabilityNo score- nextcloud server, kiteworks security-advisories +1 moreFile path disclosure of shared files in Nextcloud Text application3.1 Low
- nextcloud server, kiteworks security-advisories +1 moreXSS in Nextcloud Text application4.8 Medium
- nextcloud, kiteworks security-advisories +1 moreEnd-to-end encryption device setup did not verify public key5.7 Medium
webminMageiaUpdated webmin package fixes security vulnerabilityNo scorefreeradiusMageiaUpdated freeradius packages fix security vulnerabilitiesNo score- nextcloud server, kiteworks security-advisories +1 moreWebauthn tokens not removed after user has been deleted7.1 High
- wms project wmsSQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username"...9.8 Critical
- nextcloud server, kiteworks security-advisories +1 moreDefault share permissions not respected for federated reshares3.5 Low
- unknown yop poll, yop poll +1 moreYOP Poll < 6.2.8 - Stored Cross-Site Scripting6.1 Medium
- wpdevart poll, survey, questionnaire and voting system, poll\, survey\, questionnaire and voting system +1 morePoll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection9.8 Critical
- fetch designs sign-up sheetsSign-up Sheets < 1.0.14 - Authenticated CSV Injection8.0 High
- fetch designs sign-up sheetsSign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- prothemedesign browser screenshotsBrowser Screenshots < 1.7.6 - Contributor+ Stored XSS5.4 Medium
- codeblab glassGlass <= 1.3.2 - CSRF to Stored Cross-Site Scripting (XSS)6.1 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreSalon Booking System < 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS)6.1 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.3 - Authenticated Stored XSS4.8 Medium
- unknown backup by 10web – backup and restore plugin, web-dorado backup-wd +1 moreBackup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)4.8 Medium
- unknown wp reset – most advanced wordpress reset tool, webfactoryltd wp reset +1 moreWP Reset < 1.90 - Authenticated Stored XSS5.4 Medium
- unknown wp jobsearch, eyecix jobsearch wp job board +1 moreWP JobSearch < 1.7.4 - Authenticated Stored XSS5.4 Medium
- emarket-design request a quoteRequest a Quote < 2.3.4 - Authenticated Stored XSS5.4 Medium
- futtta wp youtube lyte, wp youtube lyte project youtube lyte +1 moreWP YouTube Lyte < 1.7.16 - Authenticated Stored XSS4.8 Medium
- mark senff smooth scroll page up/down buttons, smooth scroll page up\/down buttons project scroll page up\/down buttons +1 moreSmooth Scroll Page Up/Down Buttons <= 1.4 - Authenticated Stored XSS via psb_positioning4.8 Medium
- jeff starr prismaticPrismatic < 2.8 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- jeff starr prismaticPrismatic < 2.8 - Contributor+ Stored XSS5.4 Medium
- ninjateam filebird, ninja team filebird – wordpress media library folders & file manager +1 moreFilebird 4.7.3 - Unauthenticated SQL Injection9.8 Critical
- admincolumns admin columns, admin columns pro +1 moreAdmin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field5.4 Medium
- mitre calderaA command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows...8.8 High
- nextcloud mail, kiteworks security-advisories +1 moreBypass of image blocking in Nextcloud Mail4.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk not properly disassociating users from chats after account deletion8.1 High
- haloFile Deletion vulnerability in Halo 0.4.3 via delBackup.9.1 Critical
- haloIncorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass...5.3 Medium
- haloSSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server...7.5 High
- haloCross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl.5.4 Medium
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus gui +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus gui +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This...6.4 Medium
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus gui +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This...6.4 Medium
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus gui +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This...6.4 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which...5.9 Medium
- ibm event streamsIBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create...4.7 Medium
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive...4.4 Medium
- ibm mq applianceIBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an...4.3 Medium
- netgate pfsenseNetgate pfSense 2.4.4 - p2 is affected by: Cross Site Scripting (XSS). The impact is:...5.4 Medium
- edifecs transaction managementIn Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject...5.3 Medium
- Show moreLoading…