Skip to content
OpenAdvisories

Archive

23 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /23 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • High 8.5
    CVE-2021-32783

    Authorization bypass in Contour

    Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container…

    projectcontour contour github.com/projectcontour/contour Go
  • Unscored —
    CVE-2021-25809

    UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() …

  • Unscored —
    CVE-2021-25808

    A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2020-20741

    Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_…

  • Unscored —
    CVE-2021-25791 Public exploit

    Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment …

  • Unscored —
    CVE-2021-25790 Public exploit

    Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listin…

  • High 8.1
    CVE-2021-23412

    Command Injection

    All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization.

    gitlogplus npm
  • Unscored —
    CVE-2021-3159

    A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0…

  • Unscored —
    CVE-2021-25201

    SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statem…

  • Unscored —
    CVE-2021-25204

    Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject a…

  • Unscored —
    CVE-2021-25203

    Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload …

  • Unscored —
    CVE-2021-25206

    Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbi…

  • Unscored —
    CVE-2021-25208

    Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitr…

  • Unscored —
    CVE-2021-25207

    Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary co…

  • Medium 5.3
    CVE-2021-20333

    Server log entry spoofing via newline injection

    Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and Mongo…

    MongoDB MongoDB Server mongodb Ubuntu
  • Unscored —
    CVE-2021-26799

    Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject a…

  • Unscored —
    CVE-2020-14032

    ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.

  • Unscored —
    CVE-2021-24036

    Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds wr…

    Facebook HHVM folly hhvm Ubuntu
  • Medium 5.9
    CVE-2021-32686

    Denial of Service in PJSIP

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. Firs…

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-3169

    An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through a…