CVEs published July 8, 2021
66 CVEs were published on July 8, 2021: 4 critical, 5 high.
- Published
- 66
- Critical
- 4
- High
- 5
- Medium
- 14
- Low
- 0
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- Aruba ClearPass Policy Manager
- 11
- Cisco Identity Services Engine Software
- 5
- Samsung Mobile Devices
- 5
- Samsung Mobile Tizen wearable devices
- 5
- Cisco Video Surveillance 7000 Series IP Cameras
- 4
- Samsung Mobile Samsung Members
- 3
- Accusoft
- 2
- Cisco Business Process Automation
- 2
- Octopus Deploy Octopus Server
- 2
- Trend Micro Password Manager
- 2
Critical 4
- CVE-2021-21794An out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality of Accusoft ImageGear 19.9.Accusoft"
- CVE-2021-21793An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing functionality of Accusoft ImageGear 19.8 and 19.9.Accusoft
- CVE-2021-21821A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9.Accusoft
- CVE-2021-28809Missing Authentication for Critical Function in RTRR Server in HBS3QNAP Systems HBS
High 5
- CVE-2021-1585Cisco Adaptive Security Device Manager Remote Code Execution VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2021-1576Cisco Business Process Automation Privilege Escalation VulnerabilitiesCisco Business Process Automation
- CVE-2021-1574Cisco Business Process Automation Privilege Escalation VulnerabilitiesCisco Business Process Automation
- CVE-2020-28598An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Prusa Research
- CVE-2021-21806An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64.Webkit
Medium, low and unrated 57
- CVE-2021-34616A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2021-34615A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2021-34613A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2021-34612A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2020-23580Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.
- CVE-2021-1607Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1606Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1605Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1604Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1603Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1598Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesCisco Video Surveillance 7000 Series IP Cameras
- CVE-2021-1597Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesCisco Video Surveillance 7000 Series IP Cameras
- CVE-2021-1596Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesCisco Video Surveillance 7000 Series IP Cameras
- CVE-2021-1595Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Memory Leak VulnerabilitiesCisco Video Surveillance 7000 Series IP Cameras
- CVE-2021-1562Cisco BroadWorks Application Server Information Disclosure VulnerabilityCisco BroadWorks
- CVE-2021-1359Cisco Web Security Appliance Privilege Escalation VulnerabilityCisco Web Security Appliance
- CVE-2021-1575Cisco Virtualized Voice Browser Cross-Site Scripting VulnerabilityCisco Virtualized Voice Browser
- CVE-2020-20363Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
- CVE-2021-34614A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2021-34609A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9.Aruba ClearPass Policy Manager
- CVE-2020-18741Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "
- CVE-2021-29711IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could alloIBM UrbanCode Deploy
- CVE-2020-20586A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any informa
- CVE-2020-20585A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
- CVE-2020-20584A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form paramet
- CVE-2020-20583A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.
- CVE-2020-20582A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive infor
- CVE-2021-34610A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2021-34611A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6Aruba ClearPass Policy Manager
- CVE-2021-29152A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9Aruba ClearPass Policy Manager
- CVE-2021-29151A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9.Aruba ClearPass Policy Manager
- CVE-2021-29150A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.Aruba ClearPass Policy Manager
- CVE-2021-25442Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication.Samsung Mobile Knox Mobile Enrollment
- CVE-2021-25441Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applicatiSamsung Mobile AR Emoji Editor
- CVE-2021-25440Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files witSamsung Mobile FactoryCameraFB
- CVE-2021-25439Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android PSamsung Mobile Samsung Members
- CVE-2021-25438Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android PSamsung Mobile Samsung Members
- CVE-2021-25437Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code exeSamsung Mobile Tizen wearable devices
- CVE-2021-25436Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Mobile Tizen wearable devices
- CVE-2021-25435Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using Samsung Mobile Tizen wearable devices
- CVE-2021-25434Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using Samsung Mobile Tizen wearable devices
- CVE-2021-25433Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications tSamsung Mobile Tizen wearable devices
- CVE-2021-25432Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.Samsung Mobile Samsung Members
- CVE-2021-25431Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows unSamsung Mobile Cameralyzer
- CVE-2021-25430Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the BSamsung Mobile Devices
- CVE-2021-25429Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to accessSamsung Mobile Devices
- CVE-2021-25428Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous leSamsung Mobile Devices
- CVE-2021-25427SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device informationSamsung Mobile Devices
- CVE-2021-25426Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applicSamsung Mobile Devices
- CVE-2021-34110WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious
- CVE-2020-20217Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process.
- CVE-2021-21779A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4.Webkit
- CVE-2021-32462Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vuTrend Micro Password Manager
- CVE-2021-32461Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerabiliTrend Micro Password Manager
- CVE-2021-31817When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is writtenOctopus Deploy Octopus Server
- CVE-2021-31816When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is writtenOctopus Deploy Octopus Server
- CVE-2021-34430Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the masThe Eclipse Foundation Eclipse TinyDTLS