Skip to content
OpenAdvisories

Archive

21 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /21 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2021-32761 EPSS 30%

    Integer overflow issues with *BIT commands on 32-bit systems

    Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` comma…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.7
    CVE-2021-32775

    Any user can see any fields (including mailbox password) with GroupBy Dashlet

    Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, a non admin user can get access to many class/field values through GroupBy Dashlet error message. This issue is fixed in versions 2.7.4 and 3.0.0.

    Combodo iTop
  • High 8.8
    CVE-2021-32756

    Arbitrary eval through MiqExpression

    ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful e…

    ManageIQ manageiq
  • High 7.3
    CVE-2021-32745

    Reflected Cross-Site-Scripting vulnerability

    Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scr…

    CollaboraOnline online
  • High 8.0
    CVE-2021-21407

    Portal : the CSRF token isn't validated

    Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation can be bypassed through iTop portal via a tricky browser procedure. The vulnerability is patched in version 2.7.4 and 3.0.0.

    Combodo iTop
  • High 8.8
    CVE-2021-34619

    Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin

    The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/im…

    StoreApps WooCommerce Stock Manager Web / CMS
  • High 7.5
    CVE-2021-23409

    Denial of Service (DoS)

    The package github.com/pires/go-proxyproto before 0.6.0 are vulnerable to Denial of Service (DoS) via creating connections without the proxy protocol header.

    golang-github-pires-go-proxyproto github.com/pires/go-proxyproto golang-github-pires-go-proxyproto Debian Ubuntu Go
  • High 7.0
    CVE-2021-1099

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) that could allow an attacker to …

    NVIDIA NVIDIA Virtual GPU Software
  • High 7.8
    CVE-2021-1098

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it doesn't release some r…

    NVIDIA NVIDIA Virtual GPU Software
  • High 7.8
    CVE-2021-1097

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it improperly validates t…

    NVIDIA NVIDIA Virtual GPU Software