CVEs published July 16, 2021
57 CVEs were published on July 16, 2021: 9 critical, 27 high. 1 is now in CISA KEV.
- Published
- 57
- Critical
- 9
- High
- 27
- Medium
- 17
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 1
- Fix available
- 31
Most affected products
- Microsoft Windows
- 20
- Advantech
- 6
- D-Link
- 4
- Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1
- 2
- TAIWAN SECOM CO., LTD., Door Access Control and Personnel A…
- 2
- chatwoot/chatwoot
- 1
- Cisco Adaptive Security Appliance (ASA) Software
- 1
- D-LINK
- 1
- Dell Avamar
- 1
- fail2ban
- 1
Critical 9
- CVE-2021-34458Windows Kernel Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2021-35961TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded CredentialsTAIWAN SECOM CO., LTD., Door Access Control and Personnel A…
- CVE-2021-21803This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications.Advantech
- CVE-2021-21802This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications.Advantech
- CVE-2021-21801This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications.Advantech
- CVE-2021-21800Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020).Advantech
- CVE-2021-21799Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020).Advantech
- CVE-2021-21819A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03.D-Link
- CVE-2021-21820A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03.D-Link
High 27
- CVE-2019-3752Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.Dell Avamar
- CVE-2021-3550A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation.Lenovo PCManager
- CVE-2021-34481Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34467Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-34464Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Malware Protection Engine
- CVE-2021-34462Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34461Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34460Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34459Windows AppContainer Elevation Of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34456Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34455Windows File History Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34452Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2021-34450Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34449Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34446Windows HTML Platforms Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-34445Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-34441Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34442Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-34439Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34438Windows Font Driver Host Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-32769Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-coremicronaut-projects micronaut-core · io.micronaut:micronaut-…
- CVE-2021-35962TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path TraversalTAIWAN SECOM CO., LTD., Door Access Control and Personnel A…
- CVE-2021-3649Inefficient Regular Expression Complexity in chatwoot/chatwootchatwoot/chatwoot
- CVE-2021-1422Cisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2021-21804A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020).Advantech
- CVE-2021-21817An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03.D-Link
- CVE-2021-21818A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03.D-Link
Medium, low and unrated 21
- CVE-2021-36769A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8.
- CVE-2021-3614A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under cLenovo Notebook BIOS
- CVE-2021-3453Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker wiLenovo BIOS
- CVE-2021-3452A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and eLenovo ThinkPad BIOS
- CVE-2021-34466Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-34457Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-34454Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-34451Microsoft Office Online Server Spoofing VulnerabilityMicrosoft Office Online Server
- CVE-2021-34448Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2021-34447Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-34444Windows DNS Server Denial of Service VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2021-34440GDI+ Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-4980IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enablIBM QRadar
- CVE-2020-4821IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a useIBM InfoSphere Change Data Capture for z/OS · IBM InfoSpher…
- CVE-2020-4675IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicIBM InfoSphere Master Data Management
- CVE-2021-28053An issue was discovered in Centreon-Web in Centreon Platform 20.10.0.
- CVE-2021-28054An issue was discovered in Centreon-Web in Centreon Platform 20.10.0.
- CVE-2021-28114Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.froala/wysiwyg-editor
- CVE-2021-21816An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03.D-LINK
- CVE-2021-3647Open Redirect in medialize/URI.jsmedialize/URI.js · urijs
- CVE-2021-32749Possible RCE vulnerability in mailing action using mailutils (mail-whois)fail2ban