CVEs published July 30, 2021
16 CVEs were published on July 30, 2021: 1 critical, 0 high.
- Published
- 16
- Critical
- 1
- High
- 0
- Medium
- 4
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Ypsomed mylife Cloud, mylife Mobile Application
- 2
- IBM Partner Engagement Manager
- 1
- IBM WebSphere Application Server
- 1
- openshift
- 1
- SendGrid
- 1
- Translate AI Multilingual Solutions GTranslate Pro and GTra…
- 1
- ZENworks Configuration Management
- 1
- zopefoundation AccessControl · zope +1
- 1
Critical 1
Medium, low and unrated 15
- CVE-2021-32807Remote Code Execution via unsafe classes in otherwise permitted moduleszopefoundation AccessControl · zope +1
- CVE-2021-27495Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.Ypsomed mylife Cloud, mylife Mobile Application
- CVE-2021-27491Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.Ypsomed mylife Cloud, mylife Mobile Application
- CVE-2021-34630Reflected XSS in GTranslate Pro and GTranslate Enterprise < 2.8.65Translate AI Multilingual Solutions GTranslate Pro and GTra…
- CVE-2021-34629SendGrid <= 1.11.8 – Authorization BypassSendGrid
- CVE-2021-22521A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 ZENworks Configuration Management
- CVE-2021-3636It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additionalopenshift
- CVE-2021-35193Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' i
- CVE-2021-29298Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and applicat
- CVE-2021-29297Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash
- CVE-2021-37746textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks befo
- CVE-2021-29736IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system.IBM WebSphere Application Server
- CVE-2020-26563ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string.
- CVE-2021-37743app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format.
- CVE-2021-37742app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships.