CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- microsoft windows 10 version 1507, windows 10 version 1809, windows 10 version 1909 +23 more +25 moreWindows DNS Snap-in Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1809, windows 10 version 1909 +23 more +25 moreWindows DNS Snap-in Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability8.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +12 more +14 moreWindows DNS Server Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +7 more +9 moreWindows Secure Kernel Mode Security Feature Bypass Vulnerability5.3 Medium
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows Projected File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1809, windows 10 version 2004 +5 more +7 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft power bi desktop, power bi report server +1 morePower BI Remote Code Execution Vulnerability7.6 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows InstallService Elevation of Privilege Vulnerability6.1 Medium
- microsoft hevc video extensionsHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 20 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability7.6 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 20 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows TCP/IP Driver Denial of Service Vulnerability7.5 High
- baidu umeditorCross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php...6.1 Medium
- ectouchSQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.9.8 Critical
- elfinder.net.core project elfinder.net.coreDirectory Traversal7.5 High
- ysoft safeqIncorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user...7.8 High
- wayang-cms project wayang-cmsA SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows...7.5 High
- wayang-cms project wayang-cmsA cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to...6.1 Medium
- varnish-cache varnish cache, varnish cache project cache, debian linux +1 more +3 moreVarnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a...6.5 Medium
- segment is-emailImproper Input Validation in is-email7.5 High
- bookingcore booking coreThe “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV...7.8 High
- bookingcore booking coreCross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking...6.5 Medium
- bookingcore booking coreCross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1...5.4 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreMissing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all...5.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...5.5 Medium
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...7.1 High
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +29 more +31 moreAuthentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all...9.1 Critical
- schneider-electric ecostruxure control expert, ecostruxure process expert, remoteconnect +2 moreInsufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all...7.1 High
- mikrotik routerosMikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in...6.5 Medium
- element-it http commanderA Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3...6.5 Medium
- google androidIn handleSendStatusChangeBroadcast of WifiDisplayAdapter.java, there is a possible leak of...5.5 Medium
- element-it http commanderA Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP...5.4 Medium
- element-it http commanderAn SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows...6.5 Medium
- tianocore edk iiInsufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to...6.8 Medium
- intel atom c3000, atom c3308, atom c3336 +1,061 more +1,063 moreInsecure default variable initialization for the Intel BSSA DFT feature may allow a privileged...6.7 Medium
- hitachi abb power grids esomsPassword Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application7.5 High
- apache teaclave sgx sdkIn Rust SGX 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level ...4.9 Medium
- wolfsslIn wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system...4.9 Medium
- lexmark printer software g2, printer software g3, printer software g4 +2 moreThe Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of...7.8 High
- sap lumira serverSAP Lumira Server version 2.4 does not sufficiently encode user controlled inputs, resulting in...5.4 Medium
- sap se netweaver as java (enterprise portal), sap netweaver application server java +1 moreSAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals...4.5 Medium
- sap internet communication manager, web dispatcher, sap se web dispatcher and internet communication manager +2 moreSAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT,...5.4 Medium
- sap netweaver application server java, sap se netweaver as java (administrator applications) +1 moreWhen user with insufficient privileges tries to access any application in SAP NetWeaver...3.5 Low
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...5.3 Medium
- sap se netweaver as abap (reconciliation framework), sap netweaver application server abap +1 moreA function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702,...6.5 Medium
- sap netweaver application server java, sap se netweaver as for java (http service) +1 moreSAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7...7.5 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received...4.3 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784,...6.5 Medium
- Show moreLoading…