# CVEs published 2021-07-26

62 CVEs were published on July 26, 2021: 0 critical, 2 high. Days are UTC.

- [CVE-2020-18430](https://cve.now/CVE-2020-18430.md): tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (no CVSS)
- [CVE-2020-18428](https://cve.now/CVE-2020-18428.md): tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (no CVSS)
- [CVE-2021-37576](https://cve.now/CVE-2021-37576.md): arch/powerpc/kvm/book3s\_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory (no CVSS)
- [CVE-2021-37555](https://cve.now/CVE-2021-37555.md): TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. (no CVSS)
- [CVE-2020-23243](https://cve.now/CVE-2020-23243.md): Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong\_path\_redirect" feature. (no CVSS)
- [CVE-2020-23242](https://cve.now/CVE-2020-23242.md): Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature. (no CVSS)
- [CVE-2020-23241](https://cve.now/CVE-2020-23241.md): Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News \> Article" feature. (no CVSS)
- [CVE-2020-23240](https://cve.now/CVE-2020-23240.md): Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature. (no CVSS)
- [CVE-2020-23239](https://cve.now/CVE-2020-23239.md): Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature. (no CVSS)
- [CVE-2020-17952](https://cve.now/CVE-2020-17952.md): A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. (no CVSS, topthink/think)
- [CVE-2020-23238](https://cve.now/CVE-2020-23238.md): Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature. (no CVSS)
- [CVE-2021-32795](https://cve.now/CVE-2021-32795.md): Denial of Service via Steam chat in ArchiSteamFarm (CVSS 6.5, JustArchiNET ArchiSteamFarm)
- [CVE-2020-23234](https://cve.now/CVE-2020-23234.md): Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event (no CVSS, lavalite/cms)
- [CVE-2021-32794](https://cve.now/CVE-2021-32794.md): Accidental removal of IPCPassword (\< 5.1.2.4) (CVSS 6.8, JustArchiNET ArchiSteamFarm)
- [CVE-2020-18174](https://cve.now/CVE-2020-18174.md): A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges. (no CVSS)
- [CVE-2020-18173](https://cve.now/CVE-2020-18173.md): A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code. (no CVSS)
- [CVE-2020-18172](https://cve.now/CVE-2020-18172.md): A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges. (no CVSS)
- [CVE-2020-18171](https://cve.now/CVE-2020-18171.md): TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to (no CVSS)
- [CVE-2020-18170](https://cve.now/CVE-2020-18170.md): An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a cha (no CVSS)
- [CVE-2020-18169](https://cve.now/CVE-2020-18169.md): A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. (no CVSS)
- [CVE-2021-36563](https://cve.now/CVE-2021-36563.md): The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the WATO module. (no CVSS)
- [CVE-2021-37478](https://cve.now/CVE-2021-37478.md): In NavigateCMS version 2.9.4 and below, function \`block\` is vulnerable to sql injection on parameter \`block-order\`, which results in arbitra (no CVSS)
- [CVE-2021-37477](https://cve.now/CVE-2021-37477.md): In NavigateCMS version 2.9.4 and below, function in \`structure.php\` is vulnerable to sql injection on parameter \`children\_order\`, which resu (no CVSS)
- [CVE-2021-37476](https://cve.now/CVE-2021-37476.md): In NavigateCMS version 2.9.4 and below, function in \`product.php\` is vulnerable to sql injection on parameter \`id\` through a post request, w (no CVSS)
- [CVE-2021-37475](https://cve.now/CVE-2021-37475.md): In NavigateCMS version 2.9.4 and below, function in \`templates.php\` is vulnerable to sql injection on parameter \`template-properties-order\`, (no CVSS)
- [CVE-2021-37473](https://cve.now/CVE-2021-37473.md): In NavigateCMS version 2.9.4 and below, function in \`product.php\` is vulnerable to sql injection on parameter \`products-order\` through a pos (no CVSS)
- [CVE-2021-37394](https://cve.now/CVE-2021-37394.md): In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration. (no CVSS)
- [CVE-2021-37393](https://cve.now/CVE-2021-37393.md): In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. (no CVSS)
- [CVE-2021-37392](https://cve.now/CVE-2021-37392.md): In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. (no CVSS)
- [CVE-2021-32790](https://cve.now/CVE-2021-32790.md): Blind SQL Injection possible via Authenticated Web-hook Search API Endpoint (CVSS 4.9, woocommerce)
- [CVE-2021-25804](https://cve.now/CVE-2021-25804.md): A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. (no CVSS)
- [CVE-2021-25803](https://cve.now/CVE-2021-25803.md): A buffer overflow vulnerability in the vlc\_input\_attachment\_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an o (no CVSS)
- [CVE-2021-25802](https://cve.now/CVE-2021-25802.md): A buffer overflow vulnerability in the AVI\_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of (no CVSS)
- [CVE-2021-25801](https://cve.now/CVE-2021-25801.md): A buffer overflow vulnerability in the \_\_Parse\_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds (no CVSS)
- [CVE-2021-32789](https://cve.now/CVE-2021-32789.md): Arbitrary SQL (SQL injection) possible via the Store API component. (CVSS 7.5, woocommerce-gutenberg-products-block)
- [CVE-2021-32631](https://cve.now/CVE-2021-32631.md): JSON Web Tokens not properly verified (CVSS 6.5, nimble-platform common)
- [CVE-2021-33629](https://cve.now/CVE-2021-33629.md): isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not rem (no CVSS)
- [CVE-2021-37534](https://cve.now/CVE-2021-37534.md): app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster. (no CVSS)
- [CVE-2021-26824](https://cve.now/CVE-2021-26824.md): DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to byp (no CVSS)
- [CVE-2021-29784](https://cve.now/CVE-2021-29784.md): IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message (CVSS 4.3, IBM i2 Analyze)
- [CVE-2021-29770](https://cve.now/CVE-2021-29770.md): IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions (CVSS 4.1, IBM i2 Analyze)
- [CVE-2021-29769](https://cve.now/CVE-2021-29769.md): IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or sess (CVSS 3.1, IBM i2 Analyze)
- [CVE-2021-29767](https://cve.now/CVE-2021-29767.md): IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed tech (CVSS 5.3, IBM i2 Analyst's Notebook Premium)
- [CVE-2021-29766](https://cve.now/CVE-2021-29766.md): IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information whe (CVSS 5.3, IBM i2 Analyze)
- [CVE-2021-20560](https://cve.now/CVE-2021-20560.md): IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the vi (CVSS 5.4, IBM Sterling Connect:Direct Browser User Interface)
- [CVE-2021-20431](https://cve.now/CVE-2021-20431.md): IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtai (CVSS 4.3, IBM i2 Analyst's Notebook Premium)
- [CVE-2021-20430](https://cve.now/CVE-2021-20430.md): IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information whe (CVSS 5.3, IBM i2 Analyze)
- [CVE-2021-20337](https://cve.now/CVE-2021-20337.md): IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker (CVSS 5.9, IBM QRadar SIEM)
- [CVE-2020-4623](https://cve.now/CVE-2020-4623.md): IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacki (CVSS 7.7, IBM i2 iBase)
- [CVE-2021-22144](https://cve.now/CVE-2021-22144.md): In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was (no CVSS, org.elasticsearch:elasticsearch)
- [CVE-2020-12681](https://cve.now/CVE-2020-12681.md): Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by (no CVSS)
- [CVE-2021-35030](https://cve.now/CVE-2021-35030.md): A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and c (CVSS 3.5, Zyxel GS1900-8 Firmware)
- [CVE-2021-33900](https://cve.now/CVE-2021-33900.md): StartTLS and SASL confidentiality protection bypass (no CVSS, Apache Software Foundation Apache Directory Studio · org.ap…)
- [CVE-2021-36092](https://cve.now/CVE-2021-36092.md): XSS attack using special link in email (CVSS 6.5, OTRS AG ((OTRS)) Community Edition · OTRS AG OTRS)
- [CVE-2021-36091](https://cve.now/CVE-2021-36091.md): Unautorized access to the calendar appointments (CVSS 3.5, OTRS AG ((OTRS)) Community Edition · OTRS AG OTRS)
- [CVE-2021-21443](https://cve.now/CVE-2021-21443.md): Unautorized listing of the customer user emails (CVSS 3.5, OTRS AG ((OTRS)) Community Edition · OTRS AG OTRS)
- [CVE-2021-21442](https://cve.now/CVE-2021-21442.md): XSS vulnerability in Time Accounting (CVSS 4.5, OTRS AG Time Accounting)
- [CVE-2021-21440](https://cve.now/CVE-2021-21440.md): Support Bundle includes S/Mime and PGP keys (CVSS 5.2, OTRS AG ((OTRS)) Community Edition · OTRS AG OTRS)
- [CVE-2021-31292](https://cve.now/CVE-2021-31292.md): An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of s (no CVSS, exiv2)
- [CVE-2021-32791](https://cve.now/CVE-2021-32791.md): Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod\_auth\_openidc (CVSS 5.9, zmartzone mod\_auth\_openidc)
- [CVE-2021-32792](https://cve.now/CVE-2021-32792.md): XSS vulnerability when using OIDCPreservePost On in mod\_auth\_openidc (CVSS 3.1, zmartzone mod\_auth\_openidc)
- [CVE-2021-3664](https://cve.now/CVE-2021-3664.md): Open Redirect in unshiftio/url-parse (CVSS 5.3, unshiftio/url-parse · url-parse)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.