CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- secom door access control, taiwan secom co., ltd., door access control and personnel attendance management system, secom personnel attendance system +2 moreTAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal7.5 High
- taiwan secom co., ltd., door access control and personnel attendance management system, secom dr.id access control +1 moreTAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials9.8 Critical
- centreonAn issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection...8.8 High
- centreonAn issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site...5.4 Medium
- chatwoot, chatwoot chatwoot/chatwoot +1 moreInefficient Regular Expression Complexity in chatwoot/chatwoot7.5 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability7.7 High
- froala editorCross-site Scripting in Froala WYSIWYG Editor5.4 Medium
- advantech r-seenetThis vulnerability is present in device_graph_page.php script, which is a part of the Advantech R...9.6 Critical
- advantech r-seenetThis vulnerability is present in device_graph_page.php script, which is a part of the Advantech R...9.6 Critical
- advantech r-seenetThis vulnerability is present in device_graph_page.php script, which is a part of the Advantech R...9.6 Critical
- advantech r-seenetA local file inclusion (LFI) vulnerability exists in the options.php script functionality of...8.1 High
- advantech r-seenetCross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech...9.6 Critical
- advantech r-seenetCross-site scripting vulnerabilities exist in the telnet_form.php script functionality of...9.6 Critical
- dlink dir-3040 firmwareAn information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1...6.5 Medium
- dlink dir-3040 firmwareAn information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D...7.5 High
- dlink dir-3040 firmwareA hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D...7.5 High
- dlink dir-3040 firmwareA code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR...9.1 Critical
- dlink dir-3040 firmwareA hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK...10.0 Critical
- medialize medialize/uri.js, uri.js project uri.js +1 moreOpen Redirect in medialize/URI.js5.3 Medium
- mozilla thunderbirdIf Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected...5.9 Medium
openscOSS-FuzzStack-buffer-overflow in piv_compute_signatureNo scorelibwebpOSS-FuzzDynamic-stack-buffer-overflow in VP8SetSegmentParamsNo score- fail2ban, fedoraproject fedora +1 morePossible RCE vulnerability in mailing action using mailutils (mail-whois)6.1 Medium
- 1password connect1Password Connect server before 1.2 is missing validation checks, permitting users to create...5.4 Medium
- cgm-remote-monitor project cgm-remote-monitorNightscout Web Monitor (aka cgm-remote-monitor) 14.2.2 allows XSS via a crafted X-Forwarded-For...6.1 Medium
- ok-file-formats project ok-file-formatsA heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at...6.5 Medium
- ok-file-formats project ok-file-formatsA heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan()...6.5 Medium
- rockcarry ffjpegA global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22...6.5 Medium
- discourseYouTube Onebox susceptible to XSS8.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly5.5 Medium
- juniper junos os evolvedJunos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames6.5 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network6.5 Medium
- juniper junos os evolvedJunos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled7.5 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine7.5 High
- juniper contrail cloudContrail Cloud: Hardcoded credentials for RabbitMQ service8.6 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.8.8 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd8.8 High
- juniper steel-belted radius carrier, juniper networks sbr carrier +1 moreSteel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.9.8 Critical
- zscaler client connectorThe Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability...7.8 High
- zscaler client connectorThe Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which...7.8 High
- Show moreLoading…