CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- aruba instantA remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access...6.1 Medium
- baidu xuperchainAn issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary...7.5 High
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the...6.5 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the...6.5 Medium
- aat novus management systemCross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2....6.1 Medium
- aat novus management systemWeb Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the...7.5 High
- att alienvault ossimA memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service ...7.5 High
- basixonline nex-formsBasix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.7.5 High
- basixonline nex-formsBasix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.7.5 High
- knx engineering tool software 5KNX ETS5 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev.8.8 High
- victronenergy venus os** DISPUTED ** In Victron Energy Venus OS through 2.72, root access is granted by default to...6.8 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the...6.5 Medium
- ibm resilient onprem, resilient security orchestration automation and response +1 moreIBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform...4.7 Medium
- ibm hardware management console, power hmc +1 moreIBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to...8.4 High
- ibm engineering lifecycle optimization, engineering workflow management, engineering requirements quality assistant on-premises +4 more +6 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, rational collaborative lifecycle management +3 more +5 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- gnome gthumbGNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.5.5 Medium
- buildah project buildah, redhat enterprise linux, enterprise linux for ibm z systems +1 more +3 moreBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 Medium
- antisamy project antisamy, netapp active iq unified manager, oracle banking enterprise default management +8 more +10 moreCross-site Scripting in OWASP AntiSamy6.1 Medium
- zohocorp manageengine assetexplorerDue to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker...9.8 Critical
- zohocorp manageengine assetexplorerManage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS...7.5 High
- zohocorp manageengine assetexplorerDue to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can...7.5 High
- lexmark g2 driver, g3 driver, g4 driver +1 more +3 moreThe Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3...7.8 High
- etherpadA Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote...6.1 Medium
- sheetjs, sheetjs pro, oracle rest data services +2 moreDenial of Service in SheetJS Pro5.5 Medium
- sheetjs project sheetjs, pro, oracle rest data services +2 moreDenial of Service in SheetsJS Pro5.5 Medium
- sheetjs project sheetjs, pro, oracle rest data services +2 moreDenial of Service in SheetJS Pro5.5 Medium
- siren investigateSiren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built...8.1 High
- fortics szchatsz.chat version 4 allows injection of web scripts and HTML in the message box.6.1 Medium
- tar project tarLinks in archive can create arbitrary directories7.5 High
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Path Traversal-24.3 Medium
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Path Traversal-15.3 Medium
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Hard-code password9.8 Critical
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Broken Authentication7.3 High
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Unrestricted Upload of File with Dangerous Type9.8 Critical
- sylabs singularitySylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.9.8 Critical
- overwolfOverwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore...9.6 Critical
- microkid related posts for wordpress, never5 related posts +1 moreRelated Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFS4.8 Medium
- include me project me, stefano lissa include me +1 moreInclude Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoning8.8 High
- boldgrid w3 total cacheW3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)6.1 Medium
- silkypress wp image zoomWP Image Zoom < 1.47 - Local File Inclusion5.3 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)6.1 Medium
- naver toolbarNAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted...9.8 Critical
- containerd, fedoraproject fedora +1 moreArchive package allows chmod of file outside of unpack target directory5.0 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer...7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check...5.3 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for...4.7 Medium
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext...7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC...5.3 Medium
- Show moreLoading…