CVEs published July 23, 2021
20 CVEs were published on July 23, 2021: 0 critical, 2 high.
- Published
- 20
- Critical
- 0
- High
- 2
- Medium
- 2
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Facebook folly · Facebook HHVM
- 1
- gitlogplus
- 1
- MongoDB Server
- 1
- pjsip pjproject
- 1
- projectcontour contour · github.com/projectcontour/contour
- 1
High 2
Medium, low and unrated 18
- CVE-2021-25809UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.
- CVE-2021-25808A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.
- CVE-2020-20741Incorrect Access Control in Beckhoff Automation GmbH & Co.
- CVE-2021-25791Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows aut
- CVE-2021-25790Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenti
- CVE-2021-3159A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows
- CVE-2021-25201SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id p
- CVE-2021-25204Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script o
- CVE-2021-25203Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\ad
- CVE-2021-25206Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the fi
- CVE-2021-25208Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file
- CVE-2021-25207Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file uploa
- CVE-2021-20333Server log entry spoofing via newline injectionMongoDB Server
- CVE-2021-26799Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script o
- CVE-2020-14032ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.
- CVE-2021-24036Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with Facebook folly · Facebook HHVM
- CVE-2021-3169An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through an API which does not
- CVE-2021-32686Denial of Service in PJSIPpjsip pjproject