Skip to content
OpenAdvisories

Archive

July 2021

Vulnerabilities first published in this month (UTC), newest first.

← June 2021 2021 / July August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

51 results · Clear filters · Feed

  • Unscored —
    CVE-2021-35064 Public exploit EPSS 71%

    KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits run…

  • High 7.5
    CVE-2021-1585 Public exploit EPSS 20%

    Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability

    A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for spec…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Unscored —
    CVE-2021-34110 Public exploit

    WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the execut…

  • Medium 6.5
    CVE-2021-32537 Public exploit

    Realtek High definition audio Windows driver crashed

    Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed.

    Realtek HDA driver
  • Unscored —
    CVE-2021-33216 Public exploit EPSS 14%

    An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowi…

  • Unscored —
    CVE-2020-24148 Public exploit EPSS 14%

    Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the…

  • Critical 9.8
    CVE-2021-34621 Public exploit EPSS 69%

    ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

    A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .

    ProfilePress ProfilePress Web / CMS
  • High 8.3
    CVE-2021-22555 Exploited Public exploit EPSS 79%

    Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

    A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
    KEV Oct 6, 2025
  • Unscored —
    CVE-2021-24405 Public exploit EPSS 11%

    Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting

    The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them. If users can't register, this can be done through CSRF. Furthermore…

    IZSoft Easy Cookies Policy Web / CMS
  • High 8.8
    CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

    Windows Print Spooler Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-35042 Public exploit EPSS 44%

    SQL Injection in Django

    Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.

    django py3-django Alpine PyPI