Archive

26 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /26 August 2021 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 7.5

CVE-2021-32789 Public exploit Scanner template EPSS 17%

Arbitrary SQL (SQL injection) possible via the Store API component.

woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a care…

woocommerce woocommerce-gutenberg-products-block Web / CMS

Jul 26, 2021
High 7.7

CVE-2020-4623

IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL…

IBM i2 iBase

Jul 26, 2021
High 7.5

CVE-2021-33900

StartTLS and SASL confidentiality protection bypass

While investigating DIRSTUDIO-1219 it was noticed that configured StartTLS encryption was not applied when any SASL authentication mechanism (DIGEST-MD5, GSSAPI) was used. While investigating DIRSTUDIO-1220 it was noticed that any configured SASL confidential…

Apache Software Foundation Apache Directory Studio org.apache.directory.studio:org.apache.directory.studio.parent apache-directory-server Ubuntu Maven

Jul 26, 2021
High 7.5

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow an…

exiv2 exiv2 Debian PyPI

Jul 26, 2021