CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- sap se crm, sap customer relationship management +1 moreA missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged...6.8 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received...4.3 Medium
- sap netweaver guided procedures, sap se netweaver guided procedures (administration workset) +1 moreSAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40...7.6 High
- sap se business objects web intelligence (bi launchpad), sap businessobjects web intelligence +1 moreUnder certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420,...4.3 Medium
- huawei harmonyosA component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers...5.5 Medium
- putil-merge project putil-mergePrototype Pollution in putil-merge9.8 Critical
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerability5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerability5.5 Medium
- voidtools everythingHTTP header injection vulnerability in Everything all versions except the Lite version may allow...6.1 Medium
- tips and tricks hq software license managerCross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4...8.8 High
- realmag777 wordpress meta data filter & taxonomies filter, pluginus wordpress meta data and taxonomies filter +1 moreCross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter...8.8 High
- retty, retty inc. app +1 moreRetty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14...7.5 High
- retty, retty inc. app +1 moreImproper authorization in handler for custom URL scheme vulnerability in Retty App for Android...4.3 Medium
geosOSS-FuzzDynamic-stack-buffer-overflow in std::__1::__wrap_iter<char const*>::__wrap_iterNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in ZSTD_createDDict_advancedNo scorefmtOSS-FuzzDynamic-stack-buffer-overflow in fmt::v8::detail::dragonbox::umul192_upper64No scoreserenityOSS-FuzzUse-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo score- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in code shared between Firefox and...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...8.8 High
- arm mbed tls, debian linux, fedoraproject fedora +2 moreIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...4.9 Medium
ffmpegMageiaUpdated ffmpeg packages fix security vulnerabilitiesNo score- axiosys bento4An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct...6.5 Medium
- axiosys bento4A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of...6.5 Medium
- axiosys bento4An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL...6.5 Medium
- axiosys bento4A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of...6.5 Medium
- axiosys bento4An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL...6.5 Medium
- axiosys bento4An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL...6.5 Medium
- wire, wireapp wire-ios-transport +1 moreCertificate pinning is not enforced on the web socket connection5.4 Medium
- vmware esxi, cloud foundation +1 moreOpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue...7.5 High
- vmware esxi, cloud foundation +1 moreSFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A...9.8 Critical
- vmware thinappVMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure...7.8 High
- solarwinds dameware mini remote controlIn SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow...9.1 Critical
- line corporation client for ios, linecorp line +1 moreLINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.6.1 Medium
- mikrotik routerosMikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in...6.5 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information...4.3 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges...8.8 High
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker...7.5 High
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for applicationsIBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- jsishStack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote...7.5 High
- artifex mujsBuffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows...7.5 High
- artifex mujsBuffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase,...7.5 High
- espruinoBuffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09,...9.8 Critical
- Show moreLoading…