# CVEs published 2021-07-12

88 CVEs were published on July 12, 2021: 2 critical, 7 high. Days are UTC.

- [CVE-2021-32754](https://cve.now/CVE-2021-32754.md): Improper Restriction of XML External Entity Reference in de.tud.sse (CVSS 5.3, secure-software-engineering FlowDroid)
- [CVE-2021-32747](https://cve.now/CVE-2021-32747.md): Custom variable protection and blacklists can be circumvented (CVSS 5.3, icingaweb2)
- [CVE-2021-32746](https://cve.now/CVE-2021-32746.md): Possible path traversal by use of the \`doc\` module (CVSS 5.3, icingaweb2)
- [CVE-2021-32741](https://cve.now/CVE-2021-32741.md): Lack of ratelimit on public share link mount endpoint (CVSS 5.3, nextcloud security-advisories)
- [CVE-2021-32734](https://cve.now/CVE-2021-32734.md): File path disclosure of shared files in Nextcloud Text application (CVSS 3.1, nextcloud security-advisories)
- [CVE-2021-32733](https://cve.now/CVE-2021-32733.md): XSS in Nextcloud Text application (CVSS 4.8, nextcloud security-advisories)
- [CVE-2021-32727](https://cve.now/CVE-2021-32727.md): End-to-end encryption device setup did not verify public key (CVSS 5.7, nextcloud security-advisories)
- [CVE-2021-32726](https://cve.now/CVE-2021-32726.md): Webauthn tokens not removed after user has been deleted (CVSS 7.1, nextcloud security-advisories)
- [CVE-2020-18544](https://cve.now/CVE-2020-18544.md): SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php". (no CVSS)
- [CVE-2021-32725](https://cve.now/CVE-2021-32725.md): Default share permissions not respected for federated reshares (CVSS 3.5, nextcloud security-advisories)
- [CVE-2021-24454](https://cve.now/CVE-2021-24454.md): YOP Poll \< 6.2.8 - Stored Cross-Site Scripting (no CVSS, YOP Poll)
- [CVE-2021-24442](https://cve.now/CVE-2021-24442.md): Poll, Survey, Questionnaire and Voting system \< 1.5.3 - Unauthenticated Blind SQL Injection (no CVSS, wpdevart Poll, Survey, Questionnaire and Voting system)
- [CVE-2021-24441](https://cve.now/CVE-2021-24441.md): Sign-up Sheets \< 1.0.14 - Authenticated CSV Injection (no CVSS, Sign-up Sheets)
- [CVE-2021-24440](https://cve.now/CVE-2021-24440.md): Sign-up Sheets \< 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, Sign-up Sheets)
- [CVE-2021-24439](https://cve.now/CVE-2021-24439.md): Browser Screenshots \< 1.7.6 - Contributor+ Stored XSS (no CVSS, Browser Screenshots)
- [CVE-2021-24434](https://cve.now/CVE-2021-24434.md): Glass \<= 1.3.2 - CSRF to Stored Cross-Site Scripting (XSS) (no CVSS, Glass)
- [CVE-2021-24429](https://cve.now/CVE-2021-24429.md): Salon Booking System \< 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS) (no CVSS, Salon booking system)
- [CVE-2021-24426](https://cve.now/CVE-2021-24426.md): Backup by 10Web \<= 1.0.20 - Reflected Cross-Site Scripting (XSS) (no CVSS, Backup by 10Web – Backup and Restore Plugin)
- [CVE-2021-24427](https://cve.now/CVE-2021-24427.md): W3 Total Cache \< 2.1.3 - Authenticated Stored XSS (no CVSS, BoldGrid W3 Total Cache)
- [CVE-2021-24424](https://cve.now/CVE-2021-24424.md): WP Reset \< 1.90 - Authenticated Stored XSS (no CVSS, WP Reset – Most Advanced WordPress Reset Tool)
- [CVE-2021-24421](https://cve.now/CVE-2021-24421.md): WP JobSearch \< 1.7.4 - Authenticated Stored XSS (no CVSS, WP JobSearch)
- [CVE-2021-24420](https://cve.now/CVE-2021-24420.md): Request a Quote \< 2.3.4 - Authenticated Stored XSS (no CVSS, Request a Quote)
- [CVE-2021-24419](https://cve.now/CVE-2021-24419.md): WP YouTube Lyte \< 1.7.16 - Authenticated Stored XSS (no CVSS, WP YouTube Lyte)
- [CVE-2021-24418](https://cve.now/CVE-2021-24418.md): Smooth Scroll Page Up/Down Buttons \<= 1.4 - Authenticated Stored XSS via psb\_positioning (no CVSS, Mark Senff Smooth Scroll Page Up/Down Buttons)
- [CVE-2021-24409](https://cve.now/CVE-2021-24409.md): Prismatic \< 2.8 - Reflected Cross-Site Scripting (XSS) (no CVSS, Jeff Starr Prismatic)
- [CVE-2021-24408](https://cve.now/CVE-2021-24408.md): Prismatic \< 2.8 - Contributor+ Stored XSS (no CVSS, Jeff Starr Prismatic)
- [CVE-2021-24385](https://cve.now/CVE-2021-24385.md): Filebird 4.7.3 - Unauthenticated SQL Injection (no CVSS, Ninja Team FileBird – WordPress Media Library Folders & Fil…)
- [CVE-2021-24365](https://cve.now/CVE-2021-24365.md): Admin Columns Free (\< 4.3.2) & Pro (\< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field (no CVSS, AdminColumns Admin Columns)
- [CVE-2020-19907](https://cve.now/CVE-2020-19907.md): A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command o (no CVSS)
- [CVE-2021-32707](https://cve.now/CVE-2021-32707.md): Bypass of image blocking in Nextcloud Mail (CVSS 4.3, nextcloud security-advisories)
- [CVE-2021-32689](https://cve.now/CVE-2021-32689.md): Nextcloud Talk not properly disassociating users from chats after account deletion (CVSS 8.1, nextcloud security-advisories)
- [CVE-2020-19038](https://cve.now/CVE-2020-19038.md): File Deletion vulnerability in Halo 0.4.3 via delBackup. (no CVSS)
- [CVE-2020-19037](https://cve.now/CVE-2020-19037.md): Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookie (no CVSS)
- [CVE-2020-23079](https://cve.now/CVE-2020-23079.md): SSRF vulnerability in Halo \<=1.3.2 exists in the SMTP configuration, which can detect the server intranet. (no CVSS)
- [CVE-2020-18982](https://cve.now/CVE-2020-18982.md): Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl. (no CVSS)
- [CVE-2021-29822](https://cve.now/CVE-2021-29822.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29805](https://cve.now/CVE-2021-29805.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29804](https://cve.now/CVE-2021-29804.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29803](https://cve.now/CVE-2021-29803.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2021-29794](https://cve.now/CVE-2021-29794.md): IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic a (CVSS 5.9, IBM Tivoli Netcool Impact)
- [CVE-2021-29792](https://cve.now/CVE-2021-29792.md): IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the c (CVSS 4.7, IBM Event Streams)
- [CVE-2021-20414](https://cve.now/CVE-2021-20414.md): IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number o (CVSS 4.4, IBM Guardium Data Encryption)
- [CVE-2020-4938](https://cve.now/CVE-2020-4938.md): IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized (CVSS 4.3, IBM MQ Appliance)
- [CVE-2020-19201](https://cve.now/CVE-2020-19201.md): A Stored Cross-Site Scripting (XSS) vulnerability was found in status\_filter\_reload.php, a page in the pfSense software WebGUI, on Netgate p (no CVSS)
- [CVE-2021-36381](https://cve.now/CVE-2021-36381.md): In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp? (no CVSS)
- [CVE-2021-21591](https://cve.now/CVE-2021-21591.md): Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. (CVSS 6.4, Dell Unity)
- [CVE-2021-21590](https://cve.now/CVE-2021-21590.md): Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. (CVSS 6.4, Dell Unity)
- [CVE-2021-21589](https://cve.now/CVE-2021-21589.md): Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. (CVSS 5.7, Dell Unity)
- [CVE-2021-21588](https://cve.now/CVE-2021-21588.md): Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. (CVSS 6.5, Dell PowerFlex)
- [CVE-2020-19203](https://cve.now/CVE-2020-19203.md): An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake\_on\_lan\_widget.php, a component of the pfSense so (no CVSS)
- [CVE-2021-32705](https://cve.now/CVE-2021-32705.md): Lack of ratelimit on public DAV endpoint (CVSS 5.3, nextcloud security-advisories)
- [CVE-2021-32703](https://cve.now/CVE-2021-32703.md): Lack of ratelimit on shareinfo endpoint (CVSS 5.3, nextcloud security-advisories)
- [CVE-2020-19204](https://cve.now/CVE-2020-19204.md): An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86\_64) - Core Update 130 in th (no CVSS)
- [CVE-2021-23389](https://cve.now/CVE-2021-23389.md): Arbitrary Code Execution (CVSS 9.8, total.js)
- [CVE-2021-23390](https://cve.now/CVE-2021-23390.md): Arbitrary Code Execution (CVSS 9.8, total4)
- [CVE-2020-18980](https://cve.now/CVE-2020-18980.md): Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters. (no CVSS)
- [CVE-2021-33037](https://cve.now/CVE-2021-33037.md): Incorrect Transfer-Encoding handling with HTTP/1.0 (no CVSS, Apache Software Foundation Apache Tomcat · tomcat +1)
- [CVE-2021-30640](https://cve.now/CVE-2021-30640.md): Auth weakness in JNDIRealm (no CVSS, Apache Software Foundation Apache Tomcat · tomcat +1)
- [CVE-2021-30639](https://cve.now/CVE-2021-30639.md): DoS after non-blocking IO error (no CVSS, Apache Software Foundation Apache Tomcat · org.apache.tomca…)
- [CVE-2021-33807](https://cve.now/CVE-2021-33807.md): Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. (no CVSS)
- [CVE-2020-18979](https://cve.now/CVE-2020-18979.md): Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter. (no CVSS)
- [CVE-2021-32688](https://cve.now/CVE-2021-32688.md): Application specific tokens can change their own scope (CVSS 8.8, nextcloud security-advisories)
- [CVE-2020-7872](https://cve.now/CVE-2020-7872.md): DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that (CVSS 7.8, HumanTalk DaviewIndy)
- [CVE-2021-24013](https://cve.now/CVE-2021-24013.md): Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to f (CVSS 8.8, Fortinet FortiMail)
- [CVE-2021-24015](https://cve.now/CVE-2021-24015.md): An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 (CVSS 7.2, Fortinet FortiMail)
- [CVE-2021-32680](https://cve.now/CVE-2021-32680.md): Audit log is not properly logging unsetting of share expiration date (CVSS 3.3, nextcloud security-advisories)
- [CVE-2021-26088](https://cve.now/CVE-2021-26088.md): An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO fire (CVSS 7.1, Fortinet FSSO Windows DC Agent, FSSO Windows CA)
- [CVE-2021-36383](https://cve.now/CVE-2021-36383.md): Xen Orchestra (with xo-web through 5.80.0 and xo-server through 5.84.0) mishandles authorization, as demonstrated by modified WebSocket reso (no CVSS, xo-web · xo-server)
- [CVE-2021-36382](https://cve.now/CVE-2021-36382.md): Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack aga (CVSS 2.6)
- [CVE-2021-26090](https://cve.now/CVE-2021-26090.md): A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2 (CVSS 5.3, Fortinet FortiMail)
- [CVE-2021-32679](https://cve.now/CVE-2021-32679.md): Filenames not escaped by default in controllers using DownloadResponse (CVSS 3.5, nextcloud security-advisories)
- [CVE-2021-26089](https://cve.now/CVE-2021-26089.md): An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell (CVSS 6.7, Fortinet FortiClientMac)
- [CVE-2020-21133](https://cve.now/CVE-2020-21133.md): SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid. (no CVSS)
- [CVE-2020-21132](https://cve.now/CVE-2020-21132.md): SQL Injection vulnerability in Metinfo 7.0.0beta in index.php. (no CVSS)
- [CVE-2020-21131](https://cve.now/CVE-2020-21131.md): SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language\_web&a=doAddLanguage. (no CVSS)
- [CVE-2021-32678](https://cve.now/CVE-2021-32678.md): Ratelimit not applied on OCS API responses (CVSS 3.7, nextcloud security-advisories)
- [CVE-2021-36377](https://cve.now/CVE-2021-36377.md): Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation. (no CVSS)
- [CVE-2021-30129](https://cve.now/CVE-2021-30129.md): DoS/OOM leak vulnerability in Apache Mina SSHD Server (no CVSS, Apache Software Foundation Apache Mina SSHD · org.apache… +1)
- [CVE-2021-35064](https://cve.now/CVE-2021-35064.md): KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. (no CVSS)
- [CVE-2021-35037](https://cve.now/CVE-2021-35037.md): Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-pre (no CVSS)
- [CVE-2021-27293](https://cve.now/CVE-2021-27293.md): RestSharp \< 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when convertin (no CVSS, RestSharp)
- [CVE-2021-3547](https://cve.now/CVE-2021-3547.md): OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unre (no CVSS, OpenVPN 3 Core Library)
- [CVE-2021-22917](https://cve.now/CVE-2021-22917.md): Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowi (no CVSS, https://github.com/brave/brave-core)
- [CVE-2021-22916](https://cve.now/CVE-2021-22916.md): In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblock (no CVSS, https://github.com/brave/brave-core)
- [CVE-2021-22921](https://cve.now/CVE-2021-22921.md): Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platform (no CVSS, NodeJS Node)
- [CVE-2021-22515](https://cve.now/CVE-2021-22515.md): Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server (CVSS 4.8, Micro Focus NetIQ Advanced Authentication)
- [CVE-2021-26099](https://cve.now/CVE-2021-26099.md): Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession (CVSS 4.4, Fortinet FortiMail)
- [CVE-2021-22918](https://cve.now/CVE-2021-22918.md): Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv\_\_idna\_toascii() is used to convert strings to ASCII. (no CVSS, NodeJS Node)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.