CVEs published July 29, 2021
28 CVEs were published on July 29, 2021: 2 critical, 5 high. 2 are now in CISA KEV.
- Published
- 28
- Critical
- 2
- High
- 5
- Medium
- 3
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 2
- Fix available
- 9
Most affected products
- TCExam
- 4
- nukeviet/nukeviet
- 3
- Trend Micro Apex One · Trend Micro OfficeScan +1
- 2
- Apache Software Foundation Apache jUDDI · org.apache.juddi:…
- 1
- Atlassian Jira Data Center · Atlassian Jira Core Data Ce… +2
- 1
- Dell Avamar
- 1
- Dell Isilon OneFS
- 1
- Dell NetWorker
- 1
- Glances
- 1
- IBM PowerVM Hypervisor
- 1
Critical 2
- CVE-2021-21538Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability.Integrated Dell Remote Access Controller
- CVE-2020-36239Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 bAtlassian Jira Data Center · Atlassian Jira Core Data Ce… +2
High 5
- CVE-2021-36742A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-36741An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-21546Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information Disclosure in Log Files vulnerability.Dell NetWorker
- CVE-2020-5353The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (Dell Isilon OneFS
- CVE-2021-31799In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a rdoc
Medium, low and unrated 21
- CVE-2021-25273Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.Sophos UTM
- CVE-2021-20114When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ direcTCExam
- CVE-2021-20113An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1.TCExam
- CVE-2021-20112A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1.TCExam
- CVE-2021-20111A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1.TCExam
- CVE-2021-23418XML External Entity (XXE) InjectionGlances
- CVE-2021-37144CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion.
- CVE-2021-36624Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authenticat
- CVE-2021-36621Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection.
- CVE-2020-18175SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php.
- CVE-2020-18158Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php.
- CVE-2020-18157Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.
- CVE-2020-5329Dell EMC Avamar Server contains an open redirect vulnerability.Dell Avamar
- CVE-2020-21809SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price onukeviet/nukeviet
- CVE-2020-21808SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php.nukeviet/nukeviet
- CVE-2020-22765Cross Site Scripting (XSS) vulnerability in NukeViet cms 4.4.0 via the editor in the News module.nukeviet/nukeviet
- CVE-2020-22761Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php.
- CVE-2021-36386report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mai
- CVE-2021-20505The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compIBM PowerVM Hypervisor
- CVE-2021-30124The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitra
- CVE-2021-37578Remote code execution via RMIApache Software Foundation Apache jUDDI · org.apache.juddi:…