Archive

July 2021

Vulnerabilities first published in this month (UTC), newest first.

← June 2021 2021 / July August 2021 →

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

Critical 10.0

CVE-2020-7388 Public exploit EPSS 69%

Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing

Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, …

Sage X3

Jul 22, 2021
Critical 9.8

CVE-2021-35464 Exploited · Ransomware Public exploit EPSS 100%

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple p…

Jul 22, 2021
KEV Nov 3, 2021
Critical 9.8

CVE-2021-2456 Public exploit EPSS 81%

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: An…

Oracle Business Intelligence Enterprise Edition

Jul 20, 2021
Critical 9.8

CVE-2021-2394 Public exploit EPSS 76%

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

Oracle WebLogic Server

Jul 20, 2021
Critical 9.0

CVE-2021-35211 Exploited · Ransomware Public exploit EPSS 91%

Serv-U Remote Memory Escape Vulnerability

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds…

SolarWinds Serv-U Managed File Transfer Server and Serv-U Secured FTP

Jul 14, 2021
KEV Nov 3, 2021
Critical 9.0

CVE-2021-34523 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19

Jul 14, 2021
KEV Nov 3, 2021
Critical 9.1

CVE-2021-34473 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

Jul 14, 2021
KEV Nov 3, 2021
Critical 9.8

CVE-2021-1965 Public exploit

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdrag…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Jul 13, 2021
Critical 9.8

CVE-2021-34621 Public exploit EPSS 69%

ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .

ProfilePress ProfilePress Web / CMS

Jul 7, 2021
Critical 9.8

CVE-2021-35042 Public exploit EPSS 44%

SQL Injection in Django

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.

django py3-django Alpine PyPI

Jul 2, 2021