CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- webgateinc control centerMultiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary...8.8 High
- sales and inventory system project and inventory systemSQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote...9.8 Critical
- forgerock openam, access management (am), access management +2 moreForgeRock AM server 6.x before 7, and OpenAM 14.6.3, has a Java deserialization vulnerability in...9.8 Critical
- webgate control center, edvr manager +1 moreMultiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote...8.8 High
- casap automated enrollment system project automated enrollment systemSQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows...9.8 Critical
- oisf suricata, debian linux, fedoraproject fedora +2 moreSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."7.5 High
- dell emc openmanage enterprise, openmanage enterprise +1 moreDell EMC OpenManage Enterprise (OME) versions prior to 3.4 contain an arbitrary file overwrite...7.9 High
- dell supportassist for business pcs, supportassist for home pcs, supportassist client +2 moreDell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell...7.8 High
- cisco ip phone 8800 firmware, ip phone 8800 series with multiplatform firmware, ip phone 8811 firmware +12 more +14 moreThe TrustZone implementation in certain Broadcom MediaxChange firmware could allow an...6.8 Medium
- casap automated enrollment system project automated enrollment systemCross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1...6.1 Medium
- simple college website project college websiteSQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote...9.8 Critical
- casap automated enrollment system project automated enrollment systemCross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1...6.1 Medium
- fantastic blog cms project blog cmsSQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to...9.8 Critical
- casap automated enrollment system project automated enrollment systemSQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows...9.8 Critical
- open-xchange appsuiteOX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG...5.4 Medium
- open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet ...6.1 Medium
- open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that...6.1 Medium
- casap automated enrollment system project automated enrollment systemSQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows...9.8 Critical
- open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet ...6.1 Medium
wiresharkopenSUSESecurity update for wiresharkNo scorewiresharkSUSESecurity update for wiresharkNo score- phpgurukul student record systemSQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to...8.8 High
- phpgurukul student record systemSQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to...8.8 High
- phpgurukul student record systemSQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to...9.8 Critical
- cisco unified customer voice portal (cvp), unified customer voice portal +1 moreCisco Unified Customer Voice Portal Cross-Site Scripting Vulnerability5.4 Medium
- cisco firepower device manager on-box, firepower threat defense software +1 moreCisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability6.3 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities8.3 High
- cisco intersight virtual applianceCisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities8.3 High
- cisco sd-wan, sd-wan solution +1 moreCisco SD-WAN Software Information Disclosure Vulnerability5.3 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance Vulnerabilities6.5 Medium
- cisco intersight virtual applianceCisco Intersight Virtual Appliance Vulnerabilities6.5 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Information Disclosure Vulnerability5.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with...6.5 Medium
- arubanetworks aos-cx firmwareA local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series...6.2 Medium
- arubanetworks aos-cx firmwareA local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series,...6.1 Medium
- arubanetworks aos-cx firmwareA remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch...7.2 High
- cloudfoundry cf-deployment, user account and authentication +1 moreIn UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was...7.5 High
- sannce smart hd wifi security camera ean 2 950004 595317 firmwareAn issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. The...9.8 Critical
- greyware domain time iidttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote...7.5 High
- better-macro project better-macroRemote code execution in better-macro9.8 Critical
- sysaidSysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp ...8.8 High
- sysaidSysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.6.1 Medium
- idemia ma vp md firmware, morphowave compact md firmware, morphowave compact mdpi-m firmware +8 more +10 moreA Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices...9.8 Critical
- idemia morphowave compact md firmware, morphowave compact mdpi-m firmware, morphowave compact mdpi firmware +3 more +5 moreA path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices...5.9 Medium
- idemia morphowave compact mdpi-m firmware, morphowave compact mdpi firmware, visionpass mdpi-m firmware +1 more +3 moreA Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices...6.2 Medium
- microfocus verastream host integratorXML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7...7.6 High
- microfocus verastream host integratorReflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting...7.1 High
- mitsubishielectric fx3u-enet-l firmware, fx3u-enet-p502 firmware, fx3u-enet firmware +2 moreNULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET...7.5 High
- apache impalaImpala logs contain secrets7.5 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA vulnerability was found in the Linux kernel in versions before v5.14-rc1. Missing size...3.3 Low
- Show moreLoading…