CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- debian linux, fedoraproject fedora, php archive tar +2 moreDirectory Traversal in Archive_Tar7.1 High
- graphhopperPrototype Pollution5.4 Medium
- combodo itopPortal : the CSRF token isn't validated8.0 High
- combodo itopCommand Injection vulnerability in the Setup Wizard5.8 Medium
- anchorme project anchormeCross-site Scripting (XSS)5.4 Medium
- artifex mupdf, debian linux +1 moreArtifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function...5.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource...6.5 Medium
- wolfsslwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial...9.8 Critical
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- motorola cx2 firmwareAn command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2...9.8 Critical
- motorola cx2 firmwareAn issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n...5.3 Medium
- motorola cx2 firmwareA command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX...9.8 Critical
- motorola cx2 firmwareAn issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where...7.5 High
- motorola cx2 firmwareAn issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin...7.5 High
- motorola cx2 firmwareA vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows...5.3 Medium
- mv mconnectSQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a...7.5 High
- mv mconnectInformation disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker...7.5 High
- teradici pcoip clientThe fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object...5.5 Medium
- teradici pcoipThe USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands...7.8 High
- teradici pcoip standard agentThe OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled...7.8 High
- teradici pcoip clientThe OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled...7.8 High
- elastic elasticsearchAll versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by...7.5 High
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreGeneration of Error Message Containing Sensitive Information in Elasticsearch6.5 Medium
- storeapps woocommerce stock manager, stock manager for woocommerce +1 moreCross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin8.8 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 /...7.5 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...6.5 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...9.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...9.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...6.5 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...9.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 /...8.1 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting)...6.1 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site...5.4 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...5.3 Medium
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in EVlink City ...7.2 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...9.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...6.1 Medium
- schneider-electric t200e firmware, t200i firmware, t200p firmware +2 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 (...9.8 Critical
- schneider-electric c-bus toolkitA CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1...5.7 Medium
- schneider-electric sosafe configurableA CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution...7.8 High
- schneider-electric easergy t300 firmwareA CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in...7.3 High
- schneider-electric easergy t300 firmwareA CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and...6.5 Medium
- tenable nessus, nessus agent +1 moreNessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation...6.5 Medium
- qemu, redhat enterprise linux +1 moreA stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A...6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 Medium
- go-proxyproto project go-proxyprotoDenial of Service (DoS)7.5 High
- nvidia virtual gpu, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it...4.4 Medium
- Show moreLoading…