CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...6.1 Medium
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the...6.2 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Backend Grid View6.4 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Query Generator & Query View6.4 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Page Preview6.4 Medium
- phpgurukul employee record management systemSQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote...9.8 Critical
- faraday edgeFaraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.5.4 Medium
- foxit phantompdf, reader +1 moreFoxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in...6.1 Medium
- mozilla geckodriverMissing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF...8.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +2 moreAn incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex...7.8 High
- fortinet fortimailThe combination of various cryptographic issues in the session management of FortiMail 6.4.0...7.5 High
mbedtlsMageiaUpdated mbedtls packages fix security vulnerabilitiesNo score- gnu glibc, debian linux, netapp active iq unified manager +7 more +9 moreThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...9.1 Critical
- puppet, puppet enterprise, puppetdb +2 moreA flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows...8.8 High
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreA buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and...6.7 Medium
- fortinet fortisandboxAn instance of improper neutralization of special elements in the sniffer module of FortiSandbox...6.3 Medium
- tobesoft xplatformTobesoft XPLATFORM Arbitrary Command Execution Vulnerability8.8 High
- minecraftMinecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion...7.5 High
- libarchive, apple ipados, iphone os +4 more +6 morelibarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from...6.5 Medium
- matio project matiomatio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in...6.5 Medium
- unicorn-engine unicorn engine, fedoraproject fedora +1 moreUnicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb...5.5 Medium
- matio project matiomatio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in...8.8 High
- open62541Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion...5.5 Medium
- libass project libass, fedoraproject fedora +1 morelibass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from...7.8 High
- unicorn-engine unicorn engineUnicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.5.5 Medium
- osgeo gdalnetCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from...7.8 High
- gnu aspell, debian linux, fedoraproject fedora +2 moreobjstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top ...7.8 High
- atlassian data center, jira, jira data center +1 more +3 moreExport HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from...5.4 Medium
- atlassian data center, jira, jira data center +1 more +3 moreThe XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version...5.4 Medium
- atlassian data center, jira, jira data center +1 more +3 moreREST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0...5.3 Medium
- miraheze datadumpCross-Site Request Forgery (CSRF) in DataDump6.1 Medium
- openvswitchOpen vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in...5.5 Medium
- qpdf project qpdfQPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in...5.5 Medium
- systemd project systemd, debian linux, fedoraproject fedora +5 more +7 morebasic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 morefs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict...7.8 High
- libsndfile project libsndfile, debian linux, fedoraproject fedora +2 moreA heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows...8.8 High
- oracle graalvm, debian linux, oracle jdk +3 more +5 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...4.3 Medium
- the wireshark foundation wireshark, debian linux +1 moreCrash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service...7.5 High
- racketConfused deputy attack in sandbox module resolution6.1 Medium
- dell networking, emc powerswitch s4112f-on, emc powerswitch s4112t-on +11 more +13 moreDell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a...9.8 Critical
- dell openmanage enterprise, emc openmanage enterprise, emc openmanage enterprise-modular +2 moreDell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME...5.4 Medium
- dell emc openmanage enterprise-modular, openmanage enterprise modular +1 moreDell EMC OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a command...9.1 Critical
- dell openmanage enterprise, emc openmanage enterprise, emc openmanage enterprise-modular +2 moreDell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME...7.6 High
- dell openmanage enterprise, emc openmanage enterprise, emc openmanage enterprise-modular +2 moreDell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME...9.0 Critical
- dell emc repository manager (drm), emc repository manager +1 moreDell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage...8.8 High
- dell emc powerstore, powerstore +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.xxx contain a file permission Vulnerability. A...4.1 Medium
- dell emc powerstore, powerstore +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability...6.4 Medium
- tagdiv newspaperAn issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via...6.1 Medium
- pwndoc project pwndocPwnDoc through 2021-04-22 has incorrect JSON Webtoken handling, leading to incorrect access...8.8 High
- aruba instantA remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point ...6.5 Medium
- Show moreLoading…