Archive
July 2021
Vulnerabilities first published in this month (UTC), newest first.
51 results · Clear filters · Feed
-
Unscored —CVE-2021-37593 Public exploit
PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious S…
-
Unscored —CVE-2021-36563 Public exploit
The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the …
-
Unscored —CVE-2021-25804 Public exploit
A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the …
-
Unscored —CVE-2021-25801 Public exploit
A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to c…
-
High 7.5
Arbitrary SQL (SQL injection) possible via the Store API component.
woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a care…
-
Unscored —CVE-2021-25791 Public exploit
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment …
-
Unscored —CVE-2021-25790 Public exploit
Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listin…
-
Critical 10.0
Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing
Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, …
-
Medium 5.3
Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor
Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-7388 to achieve full R…
-
Unscored —
Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unsp…
-
Unscored —
Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified ve…
-
Critical 9.8
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple p…
KEV Nov 3, 2021 -
High 7.8
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…
KEV Feb 10, 2022 -
Unscored —
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters…
-
Medium 6.5
Generation of Error Message Containing Sensitive Information in Elasticsearch
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing p…
-
Critical 9.8
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: An…
-
Critical 9.8
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
Unscored —CVE-2021-36747 Public exploit
Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.
-
Unscored —CVE-2021-33909 Public exploit
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …
-
Unscored —CVE-2021-27338 Public exploit
Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.
-
Unscored —CVE-2021-36799 Public exploit
KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local us…
-
Unscored —CVE-2021-35449 Public exploit
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below…
-
Unscored —CVE-2021-3279 Public exploit
sz.chat version 4 allows injection of web scripts and HTML in the message box.
-
High 8.8
Windows Print Spooler Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…
-
Medium 5.3
Encoded URIs can access WEB-INF directory in Eclipse Jetty
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reporte…
-
Unscored —CVE-2021-34558 Public exploit
Panic on certain certificates in crypto/tls
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
-
Unscored —CVE-2020-25736 Public exploit
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XP…
-
Critical 9.0
Serv-U Remote Memory Escape Vulnerability
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds…
KEV Nov 3, 2021 -
Critical 9.0
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
KEV Nov 3, 2021 -
Critical 9.1
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
KEV Nov 3, 2021 -
High 8.0CVE-2021-34470 Public exploit
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
-
High 7.3
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Exchange Server Information Disclosure Vulnerability
KEV Jan 18, 2022 -
Unscored —CVE-2021-0586 Public exploit
In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth dev…
-
Unscored —CVE-2021-0589 Public exploit
In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This cou…
-
Unscored —CVE-2021-0600 Public exploit
In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to imp…
-
Unscored —CVE-2021-0594 Public exploit
In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validati…
-
Unscored —CVE-2021-21994 Public exploit
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with ne…
-
Critical 9.8CVE-2021-1965 Public exploit
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdrag…
-
Medium 6.7CVE-2021-1931 Public exploit
Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon …
-
High 7.1CVE-2021-26088 Public exploit
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user …