CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- online doctor appointment system php full source code project doctor appointment system php full source codeMultiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of...5.4 Medium
- house rental and property listing php project rental and property listing phpMultiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House...5.4 Medium
- gitlogplus project gitlogplusCommand Injection8.1 High
- landray ekpA stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet...5.4 Medium
- learning management system project management systemSQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to...7.5 High
- e-commerce website project websiteCross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote...5.4 Medium
- victor cms project cmsArbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary...9.8 Critical
- responsive ordering system project ordering systemArbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows...9.8 Critical
- travel management system project management systemArbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows...9.8 Critical
- e-commerce website project websiteArbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers...9.8 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreServer log entry spoofing via newline injection5.3 Medium
- omekaCross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote...6.1 Medium
- asrock box-r1000 firmwareASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.9.8 Critical
- facebook folly, hhvm +1 morePassing an attacker controlled size when creating an IOBuf could cause integer overflow, leading...9.8 Critical
espeak-ngOSS-FuzzGlobal-buffer-overflow in SetUpPhonemeTableNo score- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to...8.8 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreDenial of Service in PJSIP5.9 Medium
- jumpserverAn issue in Jumpserver 2.6.2 and below allows attackers to create a connection token through an...9.8 Critical
- st stm32cube middlewareAn issue in the USBH_ParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0...4.6 Medium
- st stm32cube middlewareAn in the USBH_MSC_InterfaceInit() function of STMicroelectronics STM32Cube Middleware v1.8.0 and...4.6 Medium
- ghostPrivilege escalation: all users can access Admin-level API keys6.5 Medium
- st stm32cube middlewareA buffer overflow vulnerability in the USBH_ParseEPDesc() function of STMicroelectronics...6.8 Medium
- st stm32cube middlewareAn issue in USBH_ParseCfgDesc() of STMicroelectronics STM32Cube Middleware v1.8.0 and below...4.6 Medium
- st stm32cube middlewareA buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics...6.8 Medium
- st stm32cube middlewareA buffer overflow vulnerability in the USBH_ParseCfgDesc() function of STMicroelectronics...6.8 Medium
- lwip project lwipA buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation...7.5 High
- e-commerce website project websiteSQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to...9.8 Critical
- online ordering system project ordering systemArbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to...9.8 Critical
- rapid7 velociraptorRapid7 Velociraptor Notebooks Authenticated Persistent XSS3.5 Low
- travel management system project management systemSQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote...9.8 Critical
- theme park ticketing system project park ticketing systemSQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote...9.8 Critical
- alumni management system project management systemSQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote...9.8 Critical
- alumni management system project management systemArbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows...9.8 Critical
- casap automated enrollment system project automated enrollment systemCross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1...6.1 Medium
- fantastic blog project blogCross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote...6.1 Medium
- casap automated enrollment system project automated enrollment systemSQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows...9.8 Critical
- ivanti mobileiron, mobileiron core +1 moreIvanti MobileIron Core clish Restricted Shell Escape via Argument Injection6.5 Medium
- ivanti mobileiron, mobileiron core +1 moreIvanti MobileIron Core clish Restricted Shell Escape via OS Command Injection6.5 Medium
- akkadian provisioning manager engine (pme), akkadianlabs ova appliance, provisioning manager +2 moreAkkadian Provisioning Manager Engine (PME) Shell Escape via 'vi' editor interface7.9 High
- akkadian provisioning manager engine (pme), akkadianlabs ova appliance, provisioning manager +2 moreAkkadian Provisioning Manager Engine (PME) Shell Escape via 'exec' command8.7 High
- akkadian provisioning manager engine (pme), akkadianlabs ova appliance, provisioning manager +2 moreAkkadian Provisioning Manager Engine (PME) Hard-Coded Credentials8.2 High
- sage syracuse, x3 +1 moreSage X3 Syracuse Persistent XSS in Edit User page4.6 Medium
- sage syracuse, x3 +1 moreSage X3 Syracuse Missing Authentication for Critical Function in Developer Environment5.5 Medium
- sage adxadmin, x3 +1 moreSage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing10.0 Critical
- sage adxadmin, x3 +1 moreSage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 moreeQ-3 HomeMatic CCU2 2.57.5 and CCU3 3.57.5 devices allow remote code execution.10.0 Critical
- water billing system project billing systemSQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to...9.8 Critical
- mit kerberos 5, debian linux, netapp active iq unified manager +7 more +9 moreec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 High
- content management system project management systemCross-site scripting (XSS) vulnerability in SourceCodester Content Management System v 1.0 allows...6.1 Medium
- webgateinc edvr managerMultiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute...8.8 High
- Show moreLoading…