July 2021

9 results · Clear filters · Feed

• High 7.5
  CVE-2021-32789 Public exploit EPSS 17%

  Arbitrary SQL (SQL injection) possible via the Store API component.

  woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a care…

  woocommerce woocommerce-gutenberg-products-block Web / CMS
  Jul 26, 2021
• High 7.8
  CVE-2021-36934 Exploited Public exploit EPSS 67%

  Windows Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

  Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows
  Jul 22, 2021

  KEV Feb 10, 2022
• High 8.8
  CVE-2021-34481 Public exploit EPSS 48%

  Windows Print Spooler Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 16, 2021
• High 8.0
  CVE-2021-34470 Public exploit

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 21 Microsoft Exchange Server 2019 Cumulative Update 10
  Jul 14, 2021
• High 7.3
  CVE-2021-33766 Exploited Public exploit EPSS 98%

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Exchange Server Information Disclosure Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  Jul 14, 2021

  KEV Jan 18, 2022
• High 7.1
  CVE-2021-26088 Public exploit

  An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user …

  Fortinet Fortinet FSSO Windows DC Agent, FSSO Windows CA Windows Network devices
  Jul 12, 2021
• High 7.5
  CVE-2021-1585 Public exploit EPSS 20%

  Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability

  A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for spec…

  Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  Jul 8, 2021
• High 8.3
  CVE-2021-22555 Exploited Public exploit EPSS 79%

  Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Jul 7, 2021

  KEV Oct 6, 2025
• High 8.8
  CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

  Windows Print Spooler Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 2, 2021

  KEV Nov 3, 2021