Skip to content
OpenAdvisories

Archive

9 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /9 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2020-29014

    A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of F…

    Fortinet Fortinet FortiSandbox Network devices
  • Medium 5.9
    CVE-2021-26100

    A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenti…

    Fortinet Fortinet FortiMail Network devices
  • Medium 6.3
    CVE-2021-29730

    IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted S…

    IBM InfoSphere Information Server
  • Medium 6.1
    CVE-2021-29712

    IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

    IBM InfoSphere Information Server
  • Medium 6.5
    CVE-2021-30121

    (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6

    Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request: `https://x.x.x.x/KLC/js/Kaseya.SB.JS/js.aspx?path=C:\Kaseya\WebPages\dl.asp` A valid sessionId is required but can be easily obtained via…

  • Medium 5.4
    CVE-2021-30119 EPSS 59%

    Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6

    Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTa…

  • Medium —
    CVE-2021-36154

    Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec

    HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.

    github.com/grpc/grpc-swift SwiftURL