Skip to content
OpenAdvisories

Archive

17 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /17 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Unscored —
    CVE-2021-33911

    Zoho ManageEngine ADManager Plus before 7110 allows remote code execution.

  • Unscored —
    CVE-2021-36771

    Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.

  • Unscored —
    CVE-2021-36772

    Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.

  • High 7.5
    CVE-2021-36213

    HashiCorp Consul L7 deny intention results in an allow action

    HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing the intention to incorrectly fail open, allowing L4 traffic. Fixed in 1.9.8 and 1.10.1.

    consul github.com/hashicorp/consul Ubuntu Go
  • High 7.5
    CVE-2021-32574

    Hashicorp Consul Missing SSL Certificate Validation

    HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go