14 July 2021

5 results · Clear filters · Feed

• Critical 9.0
  CVE-2021-35211 Exploited · Ransomware Public exploit Scanner template EPSS 91%

  Serv-U Remote Memory Escape Vulnerability

  Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds…

  SolarWinds Serv-U Managed File Transfer Server and Serv-U Secured FTP
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-18155

  SQL Injection in Subrion CMS

  SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

  intelliants/subrion Packagist
  Jul 14, 2021
• Critical 9.0
  CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-34473 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-25953

  Prototype Pollution in putil-merge

  Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution.

  putil-merge npm
  Jul 14, 2021