# CVEs published 2021-07-13

139 CVEs were published on July 13, 2021: 2 critical, 19 high. Days are UTC.

- [CVE-2020-19722](https://cve.now/CVE-2020-19722.md): An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a (no CVSS)
- [CVE-2020-19721](https://cve.now/CVE-2020-19721.md): A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading (no CVSS)
- [CVE-2020-19720](https://cve.now/CVE-2020-19720.md): An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of (no CVSS)
- [CVE-2020-19719](https://cve.now/CVE-2020-19719.md): A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS). (no CVSS)
- [CVE-2020-19718](https://cve.now/CVE-2020-19718.md): An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of serv (no CVSS)
- [CVE-2020-19717](https://cve.now/CVE-2020-19717.md): An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of (no CVSS)
- [CVE-2021-32755](https://cve.now/CVE-2021-32755.md): Certificate pinning is not enforced on the web socket connection (CVSS 5.4, wireapp wire-ios-transport)
- [CVE-2021-21995](https://cve.now/CVE-2021-21995.md): OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. (no CVSS, VMware ESXi and VMware Cloud Foundation)
- [CVE-2021-21994](https://cve.now/CVE-2021-21994.md): SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. (no CVSS, VMware ESXi and VMware Cloud Foundation)
- [CVE-2021-22000](https://cve.now/CVE-2021-22000.md): VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. (no CVSS, Vmware Thinapp)
- [CVE-2021-31217](https://cve.now/CVE-2021-31217.md): In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM. (no CVSS)
- [CVE-2021-36214](https://cve.now/CVE-2021-36214.md): LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView. (CVSS 6.1, LINE client for iOS)
- [CVE-2020-20252](https://cve.now/CVE-2020-20252.md): Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. (no CVSS)
- [CVE-2021-20424](https://cve.now/CVE-2021-20424.md): IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is (CVSS 4.3, IBM Cloud Pak for Applications)
- [CVE-2021-20423](https://cve.now/CVE-2021-20423.md): IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions. (CVSS 8.8, IBM Cloud Pak for Applications)
- [CVE-2021-20422](https://cve.now/CVE-2021-20422.md): IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory. (CVSS 7.5, IBM Cloud Pak for Applications)
- [CVE-2021-20369](https://cve.now/CVE-2021-20369.md): IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti (CVSS 5.9, IBM Cloud Pak for Applications)
- [CVE-2021-20368](https://cve.now/CVE-2021-20368.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20366](https://cve.now/CVE-2021-20366.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20365](https://cve.now/CVE-2021-20365.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20364](https://cve.now/CVE-2021-20364.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20363](https://cve.now/CVE-2021-20363.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20362](https://cve.now/CVE-2021-20362.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20361](https://cve.now/CVE-2021-20361.md): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Pak for Applications)
- [CVE-2021-20360](https://cve.now/CVE-2021-20360.md): IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti (CVSS 5.9, IBM Cloud Pak for Applications)
- [CVE-2020-22907](https://cve.now/CVE-2020-22907.md): Stack overflow vulnerability in function jsi\_evalcode\_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a (no CVSS)
- [CVE-2020-22886](https://cve.now/CVE-2020-22886.md): Buffer overflow vulnerability in function jsG\_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2020-22885](https://cve.now/CVE-2020-22885.md): Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2020-22884](https://cve.now/CVE-2020-22884.md): Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE\_2V09, allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2020-22882](https://cve.now/CVE-2020-22882.md): Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload. (no CVSS)
- [CVE-2020-22876](https://cve.now/CVE-2020-22876.md): Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. (no CVSS)
- [CVE-2020-22875](https://cve.now/CVE-2020-22875.md): Integer overflow vulnerability in function Jsi\_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2020-22874](https://cve.now/CVE-2020-22874.md): Integer overflow vulnerability in function Jsi\_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2020-22873](https://cve.now/CVE-2020-22873.md): Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2021-36122](https://cve.now/CVE-2021-36122.md): An issue was discovered in Echo ShareCare 8.15.5. (no CVSS)
- [CVE-2021-36121](https://cve.now/CVE-2021-36121.md): An issue was discovered in Echo ShareCare 8.15.5. (no CVSS)
- [CVE-2021-36124](https://cve.now/CVE-2021-36124.md): An issue was discovered in Echo ShareCare 8.15.5. (no CVSS)
- [CVE-2021-36123](https://cve.now/CVE-2021-36123.md): An issue was discovered in Echo ShareCare 8.15.5. (no CVSS)
- [CVE-2021-33578](https://cve.now/CVE-2021-33578.md): Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticated and unauthenticat (no CVSS)
- [CVE-2021-31221](https://cve.now/CVE-2021-31221.md): SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration cons (no CVSS)
- [CVE-2021-20593](https://cve.now/CVE-2021-20593.md): Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers (G-50A Ver.2.50 (no CVSS, Air Conditioning System/Centralized Controllers G-50A; GB-5…)
- [CVE-2021-31222](https://cve.now/CVE-2021-31222.md): SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration cons (no CVSS)
- [CVE-2021-31223](https://cve.now/CVE-2021-31223.md): SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration conso (no CVSS)
- [CVE-2021-31220](https://cve.now/CVE-2021-31220.md): SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. (no CVSS)
- [CVE-2021-31224](https://cve.now/CVE-2021-31224.md): SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security (no CVSS)
- [CVE-2021-35957](https://cve.now/CVE-2021-35957.md): Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can re (no CVSS)
- [CVE-2021-31225](https://cve.now/CVE-2021-31225.md): SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer hav (no CVSS)
- [CVE-2021-36376](https://cve.now/CVE-2021-36376.md): dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory. (no CVSS, git-delta)
- [CVE-2020-20250](https://cve.now/CVE-2020-20250.md): Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. (no CVSS)
- [CVE-2021-22440](https://cve.now/CVE-2021-22440.md): There is a path traversal vulnerability in some Huawei products. (no CVSS, HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;Oxf…)
- [CVE-2021-22399](https://cve.now/CVE-2021-22399.md): The Bluetooth function of some Huawei smartphones has a DoS vulnerability. (no CVSS, HUAWEI P30)
- [CVE-2021-34332](https://cve.now/CVE-2021-34332.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34333](https://cve.now/CVE-2021-34333.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34331](https://cve.now/CVE-2021-34331.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34330](https://cve.now/CVE-2021-34330.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34329](https://cve.now/CVE-2021-34329.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Solid Edge SE2021 (All Versions \< SE2021MP5), Teamcenter Visualization (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +1)
- [CVE-2021-34328](https://cve.now/CVE-2021-34328.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Solid Edge SE2021 (All Versions \< SE2021MP5), Teamcenter Visualization (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +1)
- [CVE-2021-34327](https://cve.now/CVE-2021-34327.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Solid Edge SE2021 (All Versions \< SE2021MP5), Teamcenter Visualization (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +1)
- [CVE-2021-34326](https://cve.now/CVE-2021-34326.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Solid Edge SE2021 (All Versions \< SE2021MP5), Teamcenter Visualization (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +1)
- [CVE-2021-34325](https://cve.now/CVE-2021-34325.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34324](https://cve.now/CVE-2021-34324.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34323](https://cve.now/CVE-2021-34323.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34322](https://cve.now/CVE-2021-34322.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34321](https://cve.now/CVE-2021-34321.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34319](https://cve.now/CVE-2021-34319.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34320](https://cve.now/CVE-2021-34320.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34318](https://cve.now/CVE-2021-34318.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34317](https://cve.now/CVE-2021-34317.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34316](https://cve.now/CVE-2021-34316.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34315](https://cve.now/CVE-2021-34315.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34314](https://cve.now/CVE-2021-34314.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34313](https://cve.now/CVE-2021-34313.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34312](https://cve.now/CVE-2021-34312.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34311](https://cve.now/CVE-2021-34311.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34310](https://cve.now/CVE-2021-34310.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34309](https://cve.now/CVE-2021-34309.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34308](https://cve.now/CVE-2021-34308.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34307](https://cve.now/CVE-2021-34307.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34306](https://cve.now/CVE-2021-34306.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34305](https://cve.now/CVE-2021-34305.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34304](https://cve.now/CVE-2021-34304.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34303](https://cve.now/CVE-2021-34303.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34302](https://cve.now/CVE-2021-34302.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34301](https://cve.now/CVE-2021-34301.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34300](https://cve.now/CVE-2021-34300.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34299](https://cve.now/CVE-2021-34299.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34298](https://cve.now/CVE-2021-34298.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34297](https://cve.now/CVE-2021-34297.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34296](https://cve.now/CVE-2021-34296.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34295](https://cve.now/CVE-2021-34295.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34294](https://cve.now/CVE-2021-34294.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34293](https://cve.now/CVE-2021-34293.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34292](https://cve.now/CVE-2021-34292.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-34291](https://cve.now/CVE-2021-34291.md): A vulnerability has been identified in JT2Go (All versions \< V13.2), Teamcenter Visualization (All versions \< V13.2). (no CVSS, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2021-33718](https://cve.now/CVE-2021-33718.md): A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions \< V7.23.22), Mendix Applications using Mendix 8 (All (no CVSS, Siemens Mendix Applications using Mendix)
- [CVE-2021-33715](https://cve.now/CVE-2021-33715.md): A vulnerability has been identified in JT Utilities (All versions \< V13.0.2.0). (no CVSS, Siemens JT Utilities)
- [CVE-2021-33714](https://cve.now/CVE-2021-33714.md): A vulnerability has been identified in JT Utilities (All versions \< V13.0.2.0). (no CVSS, Siemens JT Utilities)
- [CVE-2021-33713](https://cve.now/CVE-2021-33713.md): A vulnerability has been identified in JT Utilities (All versions \< V13.0.2.0). (no CVSS, Siemens JT Utilities)
- [CVE-2021-33711](https://cve.now/CVE-2021-33711.md): A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \< V4.3.9), Teamcenter Active Workspace V5.0 (All version (no CVSS, Siemens Teamcenter Active Workspace)
- [CVE-2021-33710](https://cve.now/CVE-2021-33710.md): A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \< V4.3.9), Teamcenter Active Workspace V5.0 (All version (no CVSS, Siemens Teamcenter Active Workspace)
- [CVE-2021-33709](https://cve.now/CVE-2021-33709.md): A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \< V4.3.9), Teamcenter Active Workspace V5.0 (All version (no CVSS, Siemens Teamcenter Active Workspace)
- [CVE-2021-31895](https://cve.now/CVE-2021-31895.md): A vulnerability has been identified in RUGGEDCOM i800 (All versions \< V4.3.7), RUGGEDCOM i801 (All versions \< V4.3.7), RUGGEDCOM i802 (All v (CVSS 8.1, Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i801 +61)
- [CVE-2021-31894](https://cve.now/CVE-2021-31894.md): A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions \< V9.1 SP2), SIMATIC (no CVSS, Siemens SIMATIC PCS 7 V8.2 and earlier · Siemens SIMATIC… +3)
- [CVE-2021-31893](https://cve.now/CVE-2021-31893.md): A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions \< V9.0 SP3), SIMATIC (no CVSS, Siemens SIMATIC PCS 7 V8.2 and earlier · Siemens SIMATIC… +3)
- [CVE-2021-31892](https://cve.now/CVE-2021-31892.md): A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMER (no CVSS, Siemens SINUMERIK Analyse MyCondition · Siemens SINUMERI… +9)
- [CVE-2021-25671](https://cve.now/CVE-2021-25671.md): A vulnerability has been identified in RWG1.M12 (All versions \< V1.16.16), RWG1.M12D (All versions \< V1.16.16), RWG1.M8 (All versions \< V1.1 (no CVSS, Siemens RWG1.M12 · Siemens RWG1.M12D +1)
- [CVE-2020-28400](https://cve.now/CVE-2020-28400.md): Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. (CVSS 7.5, Siemens Development/Evaluation Kits for PROFINET IO: D… +179)
- [CVE-2021-20595](https://cve.now/CVE-2021-20595.md): Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers ( (no CVSS, Air Conditioning System/Centralized Controllers G-50A; GB-5…)
- [CVE-2020-26153](https://cve.now/CVE-2020-26153.md): A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin\_pages/messages/templates/ee\_msg\_admin\_overvie (no CVSS)
- [CVE-2021-36090](https://cve.now/CVE-2021-36090.md): Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (no CVSS, Apache Software Foundation Apache Commons Compress · org.ap…)
- [CVE-2021-35517](https://cve.now/CVE-2021-35517.md): Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (no CVSS, Apache Software Foundation Apache Commons Compress · org.ap…)
- [CVE-2021-35516](https://cve.now/CVE-2021-35516.md): Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (no CVSS, Apache Software Foundation Apache Commons Compress · org.ap…)
- [CVE-2021-35515](https://cve.now/CVE-2021-35515.md): Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (no CVSS, Apache Software Foundation Apache Commons Compress · org.ap…)
- [CVE-2021-1970](https://cve.now/CVE-2021-1970.md): Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1965](https://cve.now/CVE-2021-1965.md): Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdrago (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1964](https://cve.now/CVE-2021-1964.md): Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1955](https://cve.now/CVE-2021-1955.md): Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, S (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1954](https://cve.now/CVE-2021-1954.md): Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1953](https://cve.now/CVE-2021-1953.md): Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Au (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1945](https://cve.now/CVE-2021-1945.md): Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1943](https://cve.now/CVE-2021-1943.md): Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdra (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1938](https://cve.now/CVE-2021-1938.md): Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1931](https://cve.now/CVE-2021-1931.md): Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Comp (CVSS 6.7, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1907](https://cve.now/CVE-2021-1907.md): Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1901](https://cve.now/CVE-2021-1901.md): Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap (CVSS 4.6, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2021-1899](https://cve.now/CVE-2021-1899.md): Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap (CVSS 4.6, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2021-1898](https://cve.now/CVE-2021-1898.md): Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, S (CVSS 4.6, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2021-1897](https://cve.now/CVE-2021-1897.md): Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Indu (CVSS 4.6, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2021-1896](https://cve.now/CVE-2021-1896.md): Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connec (CVSS 4.3, Qualcomm Snapdragon Compute, Snapdragon Connectivity)
- [CVE-2021-1890](https://cve.now/CVE-2021-1890.md): Improper length check of public exponent in RSA import key function could cause memory corruption. (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1889](https://cve.now/CVE-2021-1889.md): Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1888](https://cve.now/CVE-2021-1888.md): Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1887](https://cve.now/CVE-2021-1887.md): An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure (CVSS 7.5, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2021-1886](https://cve.now/CVE-2021-1886.md): Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Comp (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11307](https://cve.now/CVE-2020-11307.md): Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-19716](https://cve.now/CVE-2020-19716.md): A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS). (no CVSS)
- [CVE-2021-1940](https://cve.now/CVE-2021-1940.md): Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-31810](https://cve.now/CVE-2021-31810.md): An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. (no CVSS)
- [CVE-2021-34552](https://cve.now/CVE-2021-34552.md): Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a conv (no CVSS, pillow)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.