30 July 2021

16 results · Feed

• Medium 4.4
  CVE-2021-32807

  Remote Code Execution via unsafe classes in otherwise permitted modules

  The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of `Script (Python)` objects. The policies defined …

  zopefoundation AccessControl zope accesscontrol PyPI
  Jul 30, 2021
• Unscored —
  CVE-2021-27495

  Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All…

  Jul 30, 2021
• Unscored —
  CVE-2021-27491

  Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All…

  Jul 30, 2021
• Medium 5.0
  CVE-2021-34630

  Reflected XSS in GTranslate Pro and GTranslate Enterprise < 2.8.65

  In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of all pages and echoes out the contents of $_SERVER['REQUEST_URI']. Although this uses addslashes, and most modern browsers automatically URLen…

  Translate AI Multilingual Solutions GTranslate Pro and GTranslate Enterprise
  Jul 30, 2021
• Medium 4.3
  CVE-2021-34629

  SendGrid <= 1.11.8 – Authorization Bypass

  The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versio…

  SendGrid SendGrid Web / CMS
  Jul 30, 2021
• Unscored —
  CVE-2021-22521

  A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting v…

  Jul 30, 2021
• Unscored —
  CVE-2021-3636

  It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectl…

  Jul 30, 2021
• Unscored —
  CVE-2021-35193

  Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across d…

  Jul 30, 2021
• Unscored —
  CVE-2021-29298

  Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of…

  Jul 30, 2021
• Unscored —
  CVE-2021-29297

  Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service a…

  Jul 30, 2021
• Unscored —
  CVE-2021-37746

  textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have suffic…

  claws-mail sylpheed claws-mail sylpheed Debian Ubuntu
  Jul 30, 2021
• Critical 9.8
  CVE-2021-29781

  IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an …

  IBM Partner Engagement Manager
  Jul 30, 2021
• Medium 5.0
  CVE-2021-29736

  IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the sy…

  IBM WebSphere Application Server
  Jul 30, 2021
• Unscored —
  CVE-2020-26563

  ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query s…

  Jul 30, 2021
• Unscored —
  CVE-2021-37743

  app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON f…

  Jul 30, 2021
• Unscored —
  CVE-2021-37742

  app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster r…

  Jul 30, 2021