Archive
July 2021
Vulnerabilities first published in this month (UTC), newest first.
303 results · Clear filters · Feed
-
High 7.3
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Exchange Server Information Disclosure Vulnerability
KEV Jan 18, 2022 -
High 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
-
High 7.8
Windows Desktop Bridge Elevation of Privilege Vulnerability
Windows Desktop Bridge Elevation of Privilege Vulnerability
-
High 7.7
Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability
-
High 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
-
High 8.0
Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
-
High 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
-
High 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
-
High 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
-
High 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
Windows DNS Snap-in Remote Code Execution Vulnerability
-
High 8.0
Windows DNS Server Remote Code Execution Vulnerability
Windows DNS Server Remote Code Execution Vulnerability
-
High 7.8
Windows Projected File System Elevation of Privilege Vulnerability
Windows Projected File System Elevation of Privilege Vulnerability
-
High 7.8
Windows Media Remote Code Execution Vulnerability
Windows Media Remote Code Execution Vulnerability
-
High 7.6
Power BI Remote Code Execution Vulnerability
Power BI Remote Code Execution Vulnerability
-
High 7.8CVE-2021-31979 Exploited
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
KEV Nov 3, 2021 -
High 7.8
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
-
High 7.6CVE-2021-31206 EPSS 13%
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
-
High 7.2
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
KEV Aug 21, 2024 -
High 7.5
Windows TCP/IP Driver Denial of Service Vulnerability
Windows TCP/IP Driver Denial of Service Vulnerability
-
High 7.5
Directory Traversal
This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.
-
High 7.5
Improper Input Validation in is-email
A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of…
-
High 7.5
Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application
Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and pri…
-
High 7.5
SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows…
-
High 7.6
SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perfo…
-
High 8.8
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper applica…
-
High 7.5
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data store…
-
High 7.8
Relative Path Traversal in git-delta
dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.
-
High 8.1
A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), …
-
High 7.5
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service conditi…
-
High 7.5CVE-2021-36090 EPSS 13%
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Co…
-
High 7.5CVE-2021-35517 EPSS 11%
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Co…
-
High 7.5CVE-2021-35516 EPSS 12%
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Com…
-
High 7.5CVE-2021-35515 EPSS 12%
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
-
High 7.5
Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapd…
-
High 7.5
Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Aut…
-
High 7.5
Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, …
-
High 7.5
Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Aut…
-
High 7.5
Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 f…
-
High 7.5
Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snap…
-
High 7.5
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beaco…