Skip to content
OpenAdvisories

Archive

16 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /16 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Unscored —
    CVE-2021-28054

    An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Con…

    centreon-engine Ubuntu
  • High 7.5
    CVE-2021-3649

    Inefficient Regular Expression Complexity in chatwoot/chatwoot

    chatwoot is vulnerable to Inefficient Regular Expression Complexity

    chatwoot chatwoot/chatwoot
  • High 7.7
    CVE-2021-1422

    Cisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability

    A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle posit…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 5.4
    CVE-2021-28114 EPSS 52%

    Cross-site Scripting in Froala WYSIWYG Editor

    Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

    froala/wysiwyg-editor Packagist
  • Critical 9.6
    CVE-2021-21803 Scanner template

    This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applicatio…

  • Critical 9.6
    CVE-2021-21802 Scanner template

    This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applicatio…

  • Critical 9.6
    CVE-2021-21801 Scanner template EPSS 59%

    This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applicatio…

  • High 8.1
    CVE-2021-21804

    A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.1…

  • Critical 9.6
    CVE-2021-21800 Scanner template EPSS 14%

    Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.…

  • Critical 9.6
    CVE-2021-21799 Scanner template EPSS 12%

    Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (…

  • Medium 6.5
    CVE-2021-21816 Scanner template EPSS 32%

    An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially craf…

  • High 7.5
    CVE-2021-21817

    An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03…

  • High 7.5
    CVE-2021-21818

    A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A …

  • Critical 9.1
    CVE-2021-21819

    A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specia…

  • Critical 10.0
    CVE-2021-21820

    A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A s…

  • Medium 5.3
    CVE-2021-3647

    Open Redirect in medialize/URI.js

    URI.js is vulnerable to URL Redirection to Untrusted Site

    medialize medialize/URI.js urijs node-uri-js Ubuntu npm
  • Medium 6.1
    CVE-2021-32749

    Possible RCE vulnerability in mailing action using mailutils (mail-whois)

    fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois.…

    fail2ban fail2ban fail2ban fail2ban Debian Ubuntu Alpine