Skip to content
OpenAdvisories

Archive

12 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /12 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2021-32726

    Webauthn tokens not removed after user has been deleted

    Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reused an earlier used username, the previous user could gain acce…

    Nextcloud security-advisories
  • High 8.1
    CVE-2021-32689

    Nextcloud Talk not properly disassociating users from chats after account deletion

    Nextcloud Talk is a fully on-premises audio/video and chat communication service. In versions prior to 11.2.2, if a user was able to reuse an earlier used username, they could get access to any chat message sent to the previous user with this username. The is…

    Nextcloud security-advisories
  • High 7.5
    CVE-2021-30639

    DoS after non-blocking IO error

    A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset b…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat Maven
  • High 8.8
    CVE-2021-32688

    Application specific tokens can change their own scope

    Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server supports application specific tokens for authentication purposes. These tokens are supposed to be granted to a specific applications (e.g. DAV sync clients), and can also be c…

    Nextcloud security-advisories
  • High 7.8
    CVE-2020-7872

    DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malfor…

    HumanTalk DaviewIndy
  • High 8.8
    CVE-2021-24013

    Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain una…

    Fortinet Fortinet FortiMail Network devices
  • High 7.2
    CVE-2021-24015

    An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of F…

    Fortinet Fortinet FortiMail Network devices
  • High 7.1
    CVE-2021-26088 Public exploit

    An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user …

    Fortinet Fortinet FSSO Windows DC Agent, FSSO Windows CA Windows Network devices
  • High 7.5
    CVE-2021-30129

    DoS/OOM leak vulnerability in Apache Mina SSHD Server

    A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache …

    Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-core org.apache.sshd:sshd-mina Maven
  • High 7.5
    CVE-2021-27293

    Incorrect Regular Expression in RestSharp

    RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck proces…

    RestSharp NuGet