CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- nch axon pbxNCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.....6.5 Medium
- nch axon pbxNCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.....8.8 High
- nchsoftware ivm attendantNCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.6.5 Medium
- nchsoftware ivm attendantNCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0...8.1 High
- nchsoftware ivm attendantNCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading...8.8 High
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop...6.5 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via...4.3 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via...8.1 High
- nchsoftware ivm attendantCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name ...5.4 Medium
- nchsoftware ivm attendantCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= ...5.4 Medium
- nchsoftware ivm attendantCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= ...5.4 Medium
- nchsoftware ivm attendantCross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= ...5.4 Medium
- nch quorumNCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating...5.5 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan...5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address ...5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field ...5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field ...5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id...5.4 Medium
- nchsoftware axon pbxCross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= ...5.4 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).5.4 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).5.4 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).5.4 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).5.4 Medium
- nchsoftware quorumIn NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).5.4 Medium
- nch reflect customer relationship managementNCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading...3.3 Low
- nch webdictateIn NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path...6.5 Medium
- nchsoftware webdictateIn NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field...5.4 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreImproper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii5.3 Medium
- jszip project jszipDenial of Service (DoS)5.3 Medium
- nervos ckbProcess crashes when the cell used as DepGroup is not alive7.5 High
- nervos ckbAllocation of Resources Without Limits or Throttling in ckb7.5 High
- nervos ckbRPC call failure in ckb9.8 Critical
open62541OSS-FuzzUse-of-uninitialized-value in fuzz_json_decode_encode.ccNo scorelibvipsOSS-FuzzUNKNOWN WRITE in jxl::ModularFrameDecoder::DecodeGroupNo scorelibjxlOSS-FuzzHeap-buffer-overflow in jxl::N_SCALAR::SingleFromSingleNo scorelibjxlOSS-FuzzUse-of-uninitialized-value in jxl::N_AVX2::UpsampleRectNo scorelibjxlOSS-FuzzContainer-overflow in jxl::InvSqueezeNo scorerabbitmq-serverDebianrabbitmq-server - regression updateNo score- amazon echo dot firmwareAmazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to...4.2 Medium
libtpmsOSS-FuzzStack-buffer-overflow in INDEX_ORDERLY_RAM_MarshalNo scoreunicornOSS-FuzzUNKNOWN READ in helper_ret_stb_mmu_x86_64No scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_vm_execNo score- projectcontour contourAuthorization bypass in Contour8.5 High
- ucms project ucmsUCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the...5.3 Medium
- bluditA code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute...7.8 High
- beckhoff cx9020Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version...9.8 Critical
- Show moreLoading…