Skip to content
OpenAdvisories

Archive

1 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /1 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Unscored —
    CVE-2020-36401

    mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).

    mruby mruby Debian Ubuntu
  • Unscored —
    CVE-2020-36400

    ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability than CVE-2021-20235.

  • Unscored —
    CVE-2021-36089

    Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from …

    libgrokj2k Debian
  • Critical 9.8
    CVE-2021-36088

    Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_p…

  • Unscored —
    CVE-2021-36087

    The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_chec…

    libsepol libsepol Debian Ubuntu
  • Unscored —
    CVE-2021-36086

    The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set…

    libsepol libsepol Debian Ubuntu
  • Unscored —
    CVE-2021-36085

    The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classper…

    libsepol libsepol Debian Ubuntu
  • Unscored —
    CVE-2021-36084

    The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissi…

    libsepol libsepol Debian Ubuntu
  • Unscored —
    CVE-2021-36083

    KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.

    kimageformats kimageformats Debian Ubuntu
  • Unscored —
    CVE-2021-36082

    ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.

    ndpi Debian
  • Unscored —
    CVE-2021-36081

    Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

    tesseract tesseract Debian Ubuntu
  • Unscored —
    CVE-2021-36080

    GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_…

  • Unscored —
    CVE-2021-28804

    Command Injection Vulnerabilities in QTS and QuTS hero

    A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1…

    QNAP Systems QTS QuTS hero
  • Unscored —
    CVE-2021-28803

    Stored XSS Vulnerability in Q'center

    This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004.

    QNAP Systems Q'center
  • Unscored —
    CVE-2021-28802

    Command Injection Vulnerabilities in QTS and QuTS hero

    A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1…

    QNAP Systems QTS QuTS hero
  • Unscored —
    CVE-2020-36196

    Stored XSS Vulnerability in QuLog Center

    A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.

    QNAP Systems QuLog Center
  • Medium 6.1
    CVE-2020-36194

    XSS Vulnerability in QTS and QuTS heroCommand Injection Vulnerabilities in QTS and QuTS hero

    An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202. QNAP System…

    QNAP Systems QTS QuTS hero