Archive

14 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /14 August 2021 →

All Critical High Medium Low Exploited only Public exploit

172 results · Feed

High 7.6

CVE-2021-33671

SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perfo…

SAP SAP NetWeaver Guided Procedures (Administration Workset)

Jul 14, 2021
Medium 4.3

CVE-2021-33667

Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker …

SAP SAP Business Objects Web Intelligence (BI Launchpad)

Jul 14, 2021
Unscored —

CVE-2021-22318

A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnera…

Jul 14, 2021
Critical 9.8

CVE-2021-25953

Prototype Pollution in putil-merge

Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution.

putil-merge npm

Jul 14, 2021
Medium 5.5

CVE-2021-36374

Apache Ant ZIP, and ZIP based, archive denial of service vulerability

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly …

Apache Software Foundation Apache Ant javapackages-bootstrap ant Debian Ubuntu Azure Linux Alpine Maven

Jul 14, 2021
Medium 5.5

CVE-2021-36373

Apache Ant TAR archive denial of service vulnerability

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.…

Apache Software Foundation Apache Ant javapackages-bootstrap ant Debian Ubuntu Azure Linux Alpine Maven

Jul 14, 2021
Medium 6.1

CVE-2021-20784

HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote …

Voidtools Everything

Jul 14, 2021
Unscored —

CVE-2021-20782

Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attac…

Tips and Tricks HQ Software License Manager

Jul 14, 2021
Unscored —

CVE-2021-20781

Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1…

RealMag777 WordPress Meta Data Filter & Taxonomies Filter Web / CMS

Jul 14, 2021
Unscored —

CVE-2021-20748

Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API ke…

Retty Retty App

Jul 14, 2021
Unscored —

CVE-2021-20747

Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13…

Retty Retty App

Jul 14, 2021
Unscored —

CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (admi…

mbedtls mbedtls Debian Ubuntu

Jul 14, 2021