14 July 2021

172 results · Feed

• Medium 6.3
  CVE-2021-33755

  Windows Hyper-V Denial of Service Vulnerability

  Windows Hyper-V Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 8.0
  CVE-2021-33754

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Jul 14, 2021
• Medium 4.7
  CVE-2021-33753

  Microsoft Bing Search Spoofing Vulnerability

  Microsoft Bing Search Spoofing Vulnerability

  Microsoft Microsoft Bing Search for Android Android
  Jul 14, 2021
• High 8.8
  CVE-2021-33752

  Windows DNS Snap-in Remote Code Execution Vulnerability

  Windows DNS Snap-in Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 7.0
  CVE-2021-33751

  Windows Storage Spaces Controller Elevation of Privilege Vulnerability

  Windows Storage Spaces Controller Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 8.8
  CVE-2021-33750

  Windows DNS Snap-in Remote Code Execution Vulnerability

  Windows DNS Snap-in Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 8.8
  CVE-2021-33749

  Windows DNS Snap-in Remote Code Execution Vulnerability

  Windows DNS Snap-in Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 8.0
  CVE-2021-33746

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Jul 14, 2021
• Medium 6.5
  CVE-2021-33745

  Windows DNS Server Denial of Service Vulnerability

  Windows DNS Server Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Jul 14, 2021
• Medium 5.3
  CVE-2021-33744

  Windows Secure Kernel Mode Security Feature Bypass Vulnerability

  Windows Secure Kernel Mode Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 7.8
  CVE-2021-33743

  Windows Projected File System Elevation of Privilege Vulnerability

  Windows Projected File System Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 7.8
  CVE-2021-33740

  Windows Media Remote Code Execution Vulnerability

  Windows Media Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 7.6
  CVE-2021-31984

  Power BI Remote Code Execution Vulnerability

  Power BI Remote Code Execution Vulnerability

  Microsoft Power BI Desktop
  Jul 14, 2021
• High 7.8
  CVE-2021-31979 Exploited

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2021-31961

  Windows InstallService Elevation of Privilege Vulnerability

  Windows InstallService Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• High 7.8
  CVE-2021-31947

  HEVC Video Extensions Remote Code Execution Vulnerability

  HEVC Video Extensions Remote Code Execution Vulnerability

  Microsoft HEVC Video Extensions
  Jul 14, 2021
• High 7.6
  CVE-2021-31206 EPSS 13%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10
  Jul 14, 2021
• High 7.2
  CVE-2021-31196 Exploited EPSS 54%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 10 Microsoft Exchange Server 2016 Cumulative Update 21
  Jul 14, 2021

  KEV Aug 21, 2024
• High 7.5
  CVE-2021-31183

  Windows TCP/IP Driver Denial of Service Vulnerability

  Windows TCP/IP Driver Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021
• Unscored —
  CVE-2020-18145

  Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.

  Jul 14, 2021
• Unscored —
  CVE-2020-18144

  SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.

  Jul 14, 2021
• High 7.5
  CVE-2021-23407

  Directory Traversal

  This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.

  elFinder.Net.Core NuGet
  Jul 14, 2021
• Unscored —
  CVE-2021-31859

  Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by…

  Jul 14, 2021
• Unscored —
  CVE-2020-29147

  A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensiti…

  Jul 14, 2021
• Unscored —
  CVE-2020-29146

  A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web sc…

  Jul 14, 2021
• Unscored —
  CVE-2021-36740

  Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length he…

  varnish varnish varnish Debian Ubuntu Alpine
  Jul 14, 2021
• High 7.5
  CVE-2021-36716

  Improper Input Validation in is-email

  A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of…

  is-email npm
  Jul 14, 2021
• Unscored —
  CVE-2020-25445

  The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input…

  Jul 14, 2021
• Unscored —
  CVE-2020-27379

  Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF…

  Jul 14, 2021
• Unscored —
  CVE-2020-25444

  Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "Abou…

  Jul 14, 2021
• Unscored —
  CVE-2021-22782

  Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP…

  Jul 14, 2021
• Unscored —
  CVE-2021-22781

  Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP…

  Jul 14, 2021
• Unscored —
  CVE-2021-22780

  Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP…

  Jul 14, 2021
• Medium 6.5
  CVE-2021-22779

  Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, …

  Jul 14, 2021
• Unscored —
  CVE-2021-22778

  Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP…

  Jul 14, 2021
• Unscored —
  CVE-2021-0654

  In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This co…

  Android
  Jul 14, 2021
• Unscored —
  CVE-2020-20231

  Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet …

  Jul 14, 2021
• Unscored —
  CVE-2021-0592

  In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could …

  Android
  Jul 14, 2021
• Unscored —
  CVE-2021-33211

  A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticate…

  Jul 14, 2021
• Unscored —
  CVE-2021-0577

  In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escal…

  Android
  Jul 14, 2021