14 July 2021

9 results · Clear filters · Feed

• Critical 9.0
  CVE-2021-35211 Exploited · Ransomware Public exploit EPSS 91%

  Serv-U Remote Memory Escape Vulnerability

  Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds…

  SolarWinds Serv-U Managed File Transfer Server and Serv-U Secured FTP
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.0
  CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Jul 14, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-34473 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Nov 3, 2021
• High 8.0
  CVE-2021-34470 Public exploit

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10
  Jul 14, 2021
• High 7.3
  CVE-2021-33766 Exploited Public exploit EPSS 98%

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Jul 14, 2021

  KEV Jan 18, 2022
• Unscored —
  CVE-2021-0586 Public exploit

  In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth dev…

  Android
  Jul 14, 2021
• Unscored —
  CVE-2021-0589 Public exploit

  In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This cou…

  Android
  Jul 14, 2021
• Unscored —
  CVE-2021-0600 Public exploit

  In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to imp…

  Android
  Jul 14, 2021
• Unscored —
  CVE-2021-0594 Public exploit

  In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validati…

  Android
  Jul 14, 2021