Archive
27 July 2021
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 7.5CVE-2021-28966 EPSS 58%
Tempfile on Windows path traversal vulnerability
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.
-
High 8.8
Adobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation
Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitat…
-
High 8.8
Improper Privilege Management in Neo4j Graph Database
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.
-
High 7.1
IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) at…
-
High 7.1CVE-2021-32610 EPSS 73%
Directory Traversal in Archive_Tar
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.