Skip to content
OpenAdvisories

Archive

7 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /7 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.8
    CVE-2021-21786

    A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2…

  • High 8.8
    CVE-2021-21789

    A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Pri…

  • High 8.8
    CVE-2021-21788

    A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Pri…

  • High 8.8
    CVE-2021-21787

    A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Pri…

  • High 7.5
    CVE-2021-32532

    QSAN XEVO - Path Traversal

    Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.

    QSAN XEVO
  • High 7.5
    CVE-2021-32527

    QSAN Storage Manager - Path Traversal-2

    Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download function. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

    QSAN Storage Manager
  • High 7.3
    CVE-2021-32521

    QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

    Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

    QSAN Storage Manager SANOS XEVO
  • High 7.5
    CVE-2021-32518

    QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following

    A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

    QSAN Storage Manager
  • High 7.5
    CVE-2021-32517

    QSAN Storage Manager - Improper Access Control

    Improper access control vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storag…

    QSAN Storage Manager
  • High 7.5
    CVE-2021-32516

    QSAN Storage Manager - Path Traversal

    Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

    QSAN Storage Manager
  • High 7.5
    CVE-2021-32514

    QSAN Storage Manager - Improper Access Control Following via FirwareUpgrade function

    Improper access control vulnerability in FirmwareUpgrade in QSAN Storage Manager allows remote attackers to reboot and discontinue the device. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

    QSAN Storage Manager
  • High 8.8
    CVE-2021-28931

    Arbitrary file upload in Fork CMS

    Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.

    forkcms/forkcms Packagist
  • High 8.8
    CVE-2021-34620

    CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation

    The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Privilege Escalation due to a missing nonce check in the access control function for administrative AJAX actions

    WP Manage Ninja WP Fluent Forms
  • High 7.1
    CVE-2021-22224

    A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 8.3
    CVE-2021-22555 Exploited Public exploit EPSS 79%

    Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

    A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
    KEV Oct 6, 2025