# CVEs published 2021-07-16

57 CVEs were published on July 16, 2021: 9 critical, 27 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-36769](https://cve.now/CVE-2021-36769.md): A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. (no CVSS)
- [CVE-2019-3752](https://cve.now/CVE-2019-3752.md): Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2. (CVSS 8.2, Dell Avamar)
- [CVE-2021-3614](https://cve.now/CVE-2021-3614.md): A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under c (CVSS 6.4, Lenovo Notebook BIOS)
- [CVE-2021-3550](https://cve.now/CVE-2021-3550.md): A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation. (CVSS 7.8, Lenovo PCManager)
- [CVE-2021-3453](https://cve.now/CVE-2021-3453.md): Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker wi (CVSS 6.8, Lenovo BIOS)
- [CVE-2021-3452](https://cve.now/CVE-2021-3452.md): A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and e (CVSS 6.7, Lenovo ThinkPad BIOS)
- [CVE-2021-34481](https://cve.now/CVE-2021-34481.md): Windows Print Spooler Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2021-34467](https://cve.now/CVE-2021-34467.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 7.1, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2021-34464](https://cve.now/CVE-2021-34464.md): Microsoft Defender Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Malware Protection Engine)
- [CVE-2021-34466](https://cve.now/CVE-2021-34466.md): Windows Hello Security Feature Bypass Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2021-34462](https://cve.now/CVE-2021-34462.md): Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2021-34461](https://cve.now/CVE-2021-34461.md): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34460](https://cve.now/CVE-2021-34460.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34459](https://cve.now/CVE-2021-34459.md): Windows AppContainer Elevation Of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34458](https://cve.now/CVE-2021-34458.md): Windows Kernel Remote Code Execution Vulnerability (CVSS 9.9, Microsoft Windows Server)
- [CVE-2021-34457](https://cve.now/CVE-2021-34457.md): Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2021-34456](https://cve.now/CVE-2021-34456.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34454](https://cve.now/CVE-2021-34454.md): Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2021-34455](https://cve.now/CVE-2021-34455.md): Windows File History Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34452](https://cve.now/CVE-2021-34452.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2021-34451](https://cve.now/CVE-2021-34451.md): Microsoft Office Online Server Spoofing Vulnerability (CVSS 5.3, Microsoft Office Online Server)
- [CVE-2021-34450](https://cve.now/CVE-2021-34450.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.5, Microsoft Windows)
- [CVE-2021-34449](https://cve.now/CVE-2021-34449.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2021-34448](https://cve.now/CVE-2021-34448.md): Scripting Engine Memory Corruption Vulnerability (CVSS 6.8, KEV, Microsoft Windows)
- [CVE-2021-34447](https://cve.now/CVE-2021-34447.md): Windows MSHTML Platform Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2021-34446](https://cve.now/CVE-2021-34446.md): Windows HTML Platforms Security Feature Bypass Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2021-34445](https://cve.now/CVE-2021-34445.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34444](https://cve.now/CVE-2021-34444.md): Windows DNS Server Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2021-34441](https://cve.now/CVE-2021-34441.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34442](https://cve.now/CVE-2021-34442.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2021-34440](https://cve.now/CVE-2021-34440.md): GDI+ Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2021-34439](https://cve.now/CVE-2021-34439.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-34438](https://cve.now/CVE-2021-34438.md): Windows Font Driver Host Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-32769](https://cve.now/CVE-2021-32769.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core (CVSS 7.5, micronaut-projects micronaut-core · io.micronaut:micronaut-…)
- [CVE-2020-4980](https://cve.now/CVE-2020-4980.md): IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabl (CVSS 5.3, IBM QRadar)
- [CVE-2020-4821](https://cve.now/CVE-2020-4821.md): IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a use (CVSS 5.9, IBM InfoSphere Change Data Capture for z/OS · IBM InfoSpher…)
- [CVE-2020-4675](https://cve.now/CVE-2020-4675.md): IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malic (CVSS 6.5, IBM InfoSphere Master Data Management)
- [CVE-2021-35962](https://cve.now/CVE-2021-35962.md): TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal (CVSS 7.5, TAIWAN SECOM CO., LTD., Door Access Control and Personnel A…)
- [CVE-2021-35961](https://cve.now/CVE-2021-35961.md): TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials (CVSS 9.8, TAIWAN SECOM CO., LTD., Door Access Control and Personnel A…)
- [CVE-2021-28053](https://cve.now/CVE-2021-28053.md): An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. (no CVSS)
- [CVE-2021-28054](https://cve.now/CVE-2021-28054.md): An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. (no CVSS)
- [CVE-2021-3649](https://cve.now/CVE-2021-3649.md): Inefficient Regular Expression Complexity in chatwoot/chatwoot (CVSS 7.5, chatwoot/chatwoot)
- [CVE-2021-1422](https://cve.now/CVE-2021-1422.md): Cisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability (CVSS 7.7, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2021-28114](https://cve.now/CVE-2021-28114.md): Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing. (no CVSS, froala/wysiwyg-editor)
- [CVE-2021-21803](https://cve.now/CVE-2021-21803.md): This vulnerability is present in device\_graph\_page.php script, which is a part of the Advantech R-SeeNet web applications. (CVSS 9.6, Advantech)
- [CVE-2021-21802](https://cve.now/CVE-2021-21802.md): This vulnerability is present in device\_graph\_page.php script, which is a part of the Advantech R-SeeNet web applications. (CVSS 9.6, Advantech)
- [CVE-2021-21801](https://cve.now/CVE-2021-21801.md): This vulnerability is present in device\_graph\_page.php script, which is a part of the Advantech R-SeeNet web applications. (CVSS 9.6, Advantech)
- [CVE-2021-21804](https://cve.now/CVE-2021-21804.md): A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). (CVSS 8.1, Advantech)
- [CVE-2021-21800](https://cve.now/CVE-2021-21800.md): Cross-site scripting vulnerabilities exist in the ssh\_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). (CVSS 9.6, Advantech)
- [CVE-2021-21799](https://cve.now/CVE-2021-21799.md): Cross-site scripting vulnerabilities exist in the telnet\_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). (CVSS 9.6, Advantech)
- [CVE-2021-21816](https://cve.now/CVE-2021-21816.md): An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. (CVSS 6.5, D-LINK)
- [CVE-2021-21817](https://cve.now/CVE-2021-21817.md): An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. (CVSS 7.5, D-Link)
- [CVE-2021-21818](https://cve.now/CVE-2021-21818.md): A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. (CVSS 7.5, D-Link)
- [CVE-2021-21819](https://cve.now/CVE-2021-21819.md): A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. (CVSS 9.1, D-Link)
- [CVE-2021-21820](https://cve.now/CVE-2021-21820.md): A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. (CVSS 10.0, D-Link)
- [CVE-2021-3647](https://cve.now/CVE-2021-3647.md): Open Redirect in medialize/URI.js (CVSS 5.3, medialize/URI.js · urijs)
- [CVE-2021-32749](https://cve.now/CVE-2021-32749.md): Possible RCE vulnerability in mailing action using mailutils (mail-whois) (CVSS 6.1, fail2ban)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.