CVEs published July 28, 2021
27 CVEs were published on July 28, 2021: 1 critical, 3 high.
- Published
- 27
- Critical
- 1
- High
- 3
- Medium
- 7
- Low
- 1
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Japan Total System Co. GroupSession
- 5
- curly-bracket-parser
- 1
- deepmergefn
- 1
- Dell Avamar Virtual Edition
- 1
- Dell Data Protection Advisor
- 1
- Dell PowerScale OneFS
- 1
- elFinder.AspNet
- 1
- IBM Engineering Test Management · IBM Rational Team Conc… +6
- 1
- IBM Rational Team Concert · IBM Rational Quality Manager +6
- 1
- SoftBank Optical BB unit E-WMTA2.3
- 1
Critical 1
High 3
- CVE-2021-23415Directory TraversalelFinder.AspNet
- CVE-2021-37601muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and b
- CVE-2020-5351Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with aDell Data Protection Advisor
Medium, low and unrated 23
- CVE-2020-15948eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.
- CVE-2021-37606Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits o
- CVE-2020-21854Cross Site Scripting vulnerabiity exists in WDScanner 1.1 in the system management page.
- CVE-2021-23416Cross-site Scripting (XSS)curly-bracket-parser
- CVE-2021-23417Prototype Pollutiondeepmergefn
- CVE-2021-25200Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the f
- CVE-2021-34166A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin.
- CVE-2021-34165A SQL Injection vulnerability in Sourcecodester Basic Shopping Cart 1.0 allows a remote attacker to Bypass Authentication and become Admin.
- CVE-2020-5004IBM Jazz Foundation products are vulnerable to cross-site scripting.IBM Rational Team Concert · IBM Rational Quality Manager +6
- CVE-2020-4974IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).IBM Engineering Test Management · IBM Rational Team Conc… +6
- CVE-2020-10590Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration.
- CVE-2021-32000clone-master-clean-up: dangerous file system operationsSUSE Linux Enterprise Server 12 SP3 · SUSE Linux Enterpr… +1
- CVE-2021-32001K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a tokenSUSE Rancher
- CVE-2021-23414Cross-site Scripting (XSS)video.js
- CVE-2021-36983replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /t
- CVE-2021-20789Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud Japan Total System Co. GroupSession
- CVE-2021-20788Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, Japan Total System Co. GroupSession
- CVE-2021-20787Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession bJapan Total System Co. GroupSession
- CVE-2021-20786Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GJapan Total System Co. GroupSession
- CVE-2021-20785Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession bJapan Total System Co. GroupSession
- CVE-2021-20783Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of adminiSoftBank Optical BB unit E-WMTA2.3
- CVE-2020-26180Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with thDell PowerScale OneFS
- CVE-2021-37600An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in