Archive
16 July 2021
Vulnerabilities first published on this day (UTC), newest first.
18 results · Clear filters · Feed
-
Medium 6.4
A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to eleva…
-
Medium 6.8
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could…
-
Medium 6.7
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker wi…
-
Medium 5.7
Windows Hello Security Feature Bypass Vulnerability
Windows Hello Security Feature Bypass Vulnerability
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 5.3
Microsoft Office Online Server Spoofing Vulnerability
Microsoft Office Online Server Spoofing Vulnerability
-
Medium 6.8
Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
KEV Nov 3, 2021 -
Medium 6.8
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
-
Medium 6.5
Windows DNS Server Denial of Service Vulnerability
Windows DNS Server Denial of Service Vulnerability
-
Medium 5.5
GDI+ Information Disclosure Vulnerability
GDI+ Information Disclosure Vulnerability
-
Medium 5.3
IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host con…
-
Medium 5.9
IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configuratio…
-
Medium 6.5
IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an atta…
-
Medium 5.4CVE-2021-28114 EPSS 52%
Cross-site Scripting in Froala WYSIWYG Editor
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
-
Medium 6.5CVE-2021-21816 EPSS 32%
An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially craf…
-
Medium 5.3
Open Redirect in medialize/URI.js
URI.js is vulnerable to URL Redirection to Untrusted Site
-
Medium 6.1
Possible RCE vulnerability in mailing action using mailutils (mail-whois)
fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois.…