Archive
July 2021
Vulnerabilities first published in this month (UTC), newest first.
1,584 results · Feed
-
Unscored —
A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.…
-
Unscored —
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the …
-
Medium 4.9
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, a…
-
Unscored —
A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attacker…
-
Unscored —
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive databas…
-
Unscored —
A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML…
-
Unscored —
A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive databa…
-
Unscored —
A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to a…
-
Unscored —
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior t…
-
Unscored —
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior t…
-
Unscored —
A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.…
-
Unscored —
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10…
-
Unscored —
A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6…
-
Unscored —
Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Ma…
-
Unscored —
Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allow…
-
Unscored —
Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to acces…
-
Unscored —
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3…
-
Unscored —
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3…
-
Unscored —
Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers …
-
Unscored —
Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrar…
-
Unscored —
Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary …
-
Unscored —
Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary …
-
Unscored —
Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows unt…
-
Unscored —
Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.…
-
Unscored —
Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.42…
-
Unscored —
Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted applic…
-
Unscored —
Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted …
-
Unscored —
Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted application…
-
Unscored —
SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device i…
-
Unscored —
Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 al…
-
Unscored —CVE-2021-34110 Public exploit
WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the execut…
-
Unscored —
Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nov…
-
High 8.8
An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research P…
-
Medium 6.8
A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A…
-
Critical 9.8
An out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality of Accusoft ImageGear 1…
-
Critical 9.8
An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing functionality of Accusoft ImageGea…
-
High 8.8
An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML we…
-
Critical 9.8
A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9…
-
Unscored —
Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Rem…
-
Unscored —
Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege E…