CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- discoursePost creator of a whisper post can be revealed to non-staff users in Discourse4.3 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreWOPI API not protected by credentials/IP check4.3 Medium
perl-MojoliciousMageiaUpdated perl-Mojolicious package fixes security vulnerabilityNo scoreperl-Net-CIDR-LiteMageiaUpdated perl-Net-CIDR-Lite package fixes a security vulnerabilityNo score- isomorphic-gitDirectory Traversal in isomorphic-git5.3 Medium
- yzmcmsCross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index...5.4 Medium
- ectouchSQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..9.8 Critical
- solarwinds orion platformThe node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to...5.4 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send...7.5 High
- whatsnsSQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned...9.8 Critical
- engineercms project engineercmsengineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the...5.4 Medium
- crestron dm-nvx-dir-160 firmware, dm-nvx-dir-80 firmware, dm-nvx-dir-ent firmware +2 moreOn Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch,...7.5 High
- acronis agentA logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094...7.5 High
- adobe indesignAdobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation8.8 High
- nagios log serverNagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert...5.4 Medium
- nagios log serverNagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history...5.4 Medium
- neo4j graph databseImproper Privilege Management in Neo4j Graph Database8.8 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External...7.1 High
- redhat libvirt, netapp ontap select deploy administration utility, redhat enterprise linux +1 more +3 moreA flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels...6.3 Medium
- concretecms concrete cmsConcrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the...7.2 High
- powerdns authoritative serverPowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a...7.5 High
- online pet shop we app project pet shop we appOnline Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products)...9.8 Critical
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before...7.5 High
- digium asteriskAn issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re...6.5 Medium
- open-xchange documentsOX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML...4.8 Medium
- open-xchange documentsOX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash...6.5 Medium
- open-xchange documentsOX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash...6.5 Medium
- thimpress learnpressThe LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the...8.1 High
unicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo score- apple ios, macos, iphone os +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple ios, macos, safari +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2,...8.8 High
- apple ios, macos, safari +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ios, macos, safari +3 more +5 moreA type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14...8.8 High
- apple ipados, macos, safari +4 more +6 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple ipados, macos, safari +4 more +6 moreDescription: A cross-origin issue with iframe elements was addressed with improved tracking of...6.1 Medium
- apple ipados, macos, safari +4 more +6 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple ipados, macos, safari +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14...5.4 Medium
- apple ipados, macos, safari +4 more +6 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS...6.1 Medium
- apple ipados, macos, tvos +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +3 more +5 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5...8.8 High
- tinyexr project tinyexrtinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage...7.5 High
- tinyexr project tinyexrtinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR...7.5 High
- linux kernel, fedoraproject fedora +1 morearch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows...7.8 High
- trixie tx9 automatic food dispenser firmwareTX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related...9.8 Critical
- naviwebs navigatecmsCross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name=...4.8 Medium
- naviwebs navigatecmsCross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via...4.8 Medium
- cmsmadesimple cms made simpleCross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article...4.8 Medium
- cmsmadesimple cms made simpleCross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the...4.8 Medium
- textpatternCross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu...4.8 Medium
- Show moreLoading…