CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- gatsbyjs gatsby, gatsby-source-wordpress +1 moreBasic-auth app bundle credential exposure in gatsby-source-wordpress7.5 High
- unisys stealthUnisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path...6.7 Medium
- d-link dap-1330, dlink dap-1330 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dap-1330, dlink dap-1330 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dap-1330, dlink dap-1330 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dap-1330, dlink dap-1330 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the...7.9 High
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary...6.6 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or...6.5 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing...4.5 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute...8.4 High
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This...4.8 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive...2.7 Low
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on...5.2 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be...6.8 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local...4.4 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive...2.7 Low
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requets that could...5.3 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to...2.7 Low
- zscaler client connectorThe Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when...9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse Jetty5.3 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console7.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation7.8 High
- muwire project muwireDe-anonymization via message6.8 Medium
- dell wyse management suiteDell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability....5.3 Medium
- dell wyse management suiteWyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability....8.1 High
- icinga, debian linux, icinga icinga2 +2 morePasswords used to access external services inadvertently exposed through API8.8 High
- ibm secure external authentication server, secure proxy, sterling secure proxy +2 moreIBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to...6.5 Medium
- ibm secure external authentication server, secure proxy, sterling secure proxy +2 moreIBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0...7.5 High
- ibm security access manager, security verify access docker, security verify access +2 moreIBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user...7.5 High
- jasper project jasperA Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper...5.5 Medium
- libvipsDivision-By-Zero vulnerability in Libvips 8.10.5 in the function vips_eye_point, eye.c#L83, and...6.5 Medium
- depstech wifi digital microscope 3 firmwareDEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of...6.5 Medium
- depstech wifi digital microscope 3 firmwareCertain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar...7.5 High
- depstech wifi digital microscope 3 firmwareDEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and...8.1 High
- magicsmotion flamingo 2 firmwareMagicMotion Flamingo 2 has a lack of access control for reading from device descriptors.4.6 Medium
- magicsmotion flamingo 2 firmwareMagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.5.3 Medium
- magicsmotion flamingo 2 firmwareThe MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt...7.5 High
- icinga, debian linux, icinga icinga2 +2 moreResults of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities8.8 High
- acronis true imageAcronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to...7.8 High
- acronis true imageAcronis True Image through 2021 on macOS allows local privilege escalation from admin to root due...6.7 Medium
- acronis true imageAcronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to...7.8 High
- golang go, fedoraproject fedora, netapp cloud insights telegraf +3 more +5 moreThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Medium
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged...7.8 High
- idrive remotepciDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated...7.5 High
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and...9.8 Critical
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated...5.5 Medium
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated...3.3 Low
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can...5.3 Medium
- Show moreLoading…