CVEs published July 14, 2021
172 CVEs were published on July 14, 2021: 3 critical, 70 high. 7 are now in CISA KEV.
- Published
- 172
- Critical
- 3
- High
- 70
- Medium
- 34
- Low
- 1
- Unrated
- 64
- Now in CISA KEV
- 7
- Fix available
- 111
Most affected products
- Microsoft Windows
- 52
- Android
- 24
- Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1
- 8
- Microsoft Exchange Server 2013 Cumulative Update · Micro… +1
- 6
- EcoStruxure Control Expert (all versions prior to V15.0 SP1…
- 5
- Microsoft HEVC Video Extensions
- 5
- Microsoft Visual Studio Code
- 3
- Apache Software Foundation Apache Ant · org.apache.ant:ant
- 2
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 2
- Retty App
- 2
Critical 3
- CVE-2021-35211Serv-U Remote Memory Escape VulnerabilitySolarWinds Serv-U Managed File Transfer Server and Serv-U S…
- CVE-2021-34523Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-34473Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
High 70
- CVE-2021-34529Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2021-34528Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2021-34525Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2021-34522Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Malware Protection Engine
- CVE-2021-34521Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34520Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-34518Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel 2013 Service Pack · Microsoft Excel +1
- CVE-2021-34516Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34514Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34513Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34512Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34511Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34510Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34508Windows Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34504Windows Address Book Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34503Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34501Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +2
- CVE-2021-34498Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34494Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-34492Windows Certificate Spoofing VulnerabilityMicrosoft Windows
- CVE-2021-34490Windows TCP/IP Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-34489DirectWrite Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34488Windows Console Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34479Microsoft Visual Studio Spoofing VulnerabilityMicrosoft Visual Studio Code
- CVE-2021-34477Visual Studio Code .NET Runtime Elevation of Privilege VulnerabilityMicrosoft .NET Education Bundle SDK Install Tool · Microsof…
- CVE-2021-34476Bowser.sys Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-34474Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityMicrosoft Dynamics 365 Business Central 2020 Release Wav… +1
- CVE-2021-34470Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-34469Microsoft Office Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 201… +1
- CVE-2021-34468Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-33788Windows LSA Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-33786Windows LSA Security Feature Bypass VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-33785Windows AF_UNIX Socket Provider Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-33784Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33781Azure AD Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-33780Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-33779Windows AD FS Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2021-33778HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2021-33777HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2021-33776HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2021-33775HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2021-33774Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33773Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33772Windows TCP/IP Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-33771Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33768Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2021-33767Open Enclave SDK Elevation of Privilege VulnerabilityMicrosoft Open Enclave SDK
- CVE-2021-33766Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-33761Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33759Windows Desktop Bridge Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33758Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-33756Windows DNS Snap-in Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33754Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-33752Windows DNS Snap-in Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33751Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33750Windows DNS Snap-in Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33749Windows DNS Snap-in Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33746Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-33743Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33740Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-31984Power BI Remote Code Execution VulnerabilityMicrosoft Power BI Desktop
- CVE-2021-31979Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31947HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2021-31206Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-31196Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2021-31183Windows TCP/IP Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-23407Directory TraversalelFinder.Net.Core
- CVE-2021-35527Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS ApplicationHitachi ABB Power Grids eSOMS
- CVE-2021-33670SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send SAP SE SAP NetWeaver AS for Java
- CVE-2021-33671SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorizSAP SE SAP NetWeaver Guided Procedures
Medium, low and unrated 99
- CVE-2020-36420Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header.
- CVE-2020-24133A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute ar
- CVE-2021-22867Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise ServerGitHub Enterprise Server
- CVE-2020-29157An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted.
- CVE-2020-18155SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.intelliants/subrion
- CVE-2021-34174A vulnerability exists in Broadcom BCM4352 and BCM43684 chips.
- CVE-2021-34173An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame.
- CVE-2020-18151Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.thinkcmf/thinkcmf
- CVE-2021-34519Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +1
- CVE-2021-34517Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2021-34509Storage Spaces Controller Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-34507Windows Remote Assistance Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-34500Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-34499Windows DNS Server Denial of Service VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-34497Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34496Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-34493Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34491Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-33783Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-33782Windows Authenticode Spoofing VulnerabilityMicrosoft Windows
- CVE-2021-33765Windows Installer Spoofing VulnerabilityMicrosoft Windows
- CVE-2021-33764Windows Key Distribution Center Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-33763Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-33760Media Foundation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-33757Windows Security Account Manager Remote Protocol Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-33755Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-33753Microsoft Bing Search Spoofing VulnerabilityMicrosoft Bing Search for Android
- CVE-2021-33745Windows DNS Server Denial of Service VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-33744Windows Secure Kernel Mode Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-31961Windows InstallService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-18145Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.
- CVE-2020-18144SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.
- CVE-2021-31859Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the exec
- CVE-2020-29147A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database informati
- CVE-2020-29146A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a c
- CVE-2021-36740Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST reque
- CVE-2021-36716A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js.is-email
- CVE-2020-25445The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection.
- CVE-2020-27379Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 .
- CVE-2020-25444Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section u
- CVE-2021-22782Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versEcoStruxure Control Expert (all versions prior to V15.0 SP1…
- CVE-2021-22781Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versEcoStruxure Control Expert (all versions prior to V15.0 SP1…
- CVE-2021-22780Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versEcoStruxure Control Expert (all versions prior to V15.0 SP1…
- CVE-2021-22779Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versionEcoStruxure Control Expert (all versions prior to V15.0 SP1…
- CVE-2021-22778Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versEcoStruxure Control Expert (all versions prior to V15.0 SP1…
- CVE-2021-0654In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check.Android
- CVE-2020-20231Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process.
- CVE-2021-0592In various functions in WideVine, there are possible out of bounds writes due to improper input validation.Android
- CVE-2021-33211A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write file
- CVE-2021-0577In flv extractor, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2021-0587In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free.Android
- CVE-2021-0585In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation.Android
- CVE-2021-0603In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlAndroid
- CVE-2021-0586In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjackiAndroid
- CVE-2021-0596In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-0589In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2021-0601In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free.Android
- CVE-2021-0604In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputyAndroid
- CVE-2021-0600In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validatioAndroid
- CVE-2021-0602In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for allAndroid
- CVE-2021-0588In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check.Android
- CVE-2021-0518In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check.Android
- CVE-2021-0597In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing peAndroid
- CVE-2021-0594In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation.Android
- CVE-2021-0599In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to Android
- CVE-2021-33212A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated
- CVE-2021-0590In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID withouAndroid
- CVE-2021-0441In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI.Android
- CVE-2021-0486In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass.Android
- CVE-2021-0515In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2021-0514In several functions of the V8 library, there is a possible use after free due to a race condition.Android
- CVE-2020-0417In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent.Android
- CVE-2021-33213An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTT
- CVE-2019-11098Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, deniTianocore
- CVE-2021-0144Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of pIntel BSSA DFTrs
- CVE-2021-24117In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attacker
- CVE-2021-24116In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain i
- CVE-2021-35469The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry
- CVE-2021-33682SAP Lumira Server version 2.4 does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.SAP SE SAP Lumira Server
- CVE-2021-33687SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP SAP SE SAP NetWeaver AS JAVA
- CVE-2021-33683SAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22SAP SE SAP Web Dispatcher and Internet Communication Manager
- CVE-2021-33689When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version SAP SE SAP NetWeaver AS JAVA
- CVE-2021-33684SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUCSAP SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2021-33678A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75ASAP SE SAP NetWeaver AS ABAP
- CVE-2021-33681SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which causes out ofSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33677SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead SAP SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2021-33676A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to comSAP SE SAP CRM
- CVE-2021-33680SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which causes bufferSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33667Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source SAP SE SAP Business Objects Web Intelligence
- CVE-2021-22318A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability.HarmonyOS
- CVE-2021-25953Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to putil-merge
- CVE-2021-36374Apache Ant ZIP, and ZIP based, archive denial of service vulerabilityApache Software Foundation Apache Ant · org.apache.ant:ant
- CVE-2021-36373Apache Ant TAR archive denial of service vulnerabilityApache Software Foundation Apache Ant · org.apache.ant:ant
- CVE-2021-20784HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject anvoidtools Everything
- CVE-2021-20782Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the auTips and Tricks HQ Software License Manager
- CVE-2021-20781Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prirealmag777 WordPress Meta Data Filter & Taxonomies Filter
- CVE-2021-20748Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external serRetty App
- CVE-2021-20747Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iORetty App
- CVE-2021-24119In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers