# CVEs published 2021-07-30

16 CVEs were published on July 30, 2021: 1 critical, 0 high. Days are UTC.

- [CVE-2021-32807](https://cve.now/CVE-2021-32807.md): Remote Code Execution via unsafe classes in otherwise permitted modules (CVSS 4.4, zopefoundation AccessControl · zope +1)
- [CVE-2021-27495](https://cve.now/CVE-2021-27495.md): Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1. (no CVSS, Ypsomed mylife Cloud, mylife Mobile Application)
- [CVE-2021-27491](https://cve.now/CVE-2021-27491.md): Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1. (no CVSS, Ypsomed mylife Cloud, mylife Mobile Application)
- [CVE-2021-34630](https://cve.now/CVE-2021-34630.md): Reflected XSS in GTranslate Pro and GTranslate Enterprise \< 2.8.65 (CVSS 5.0, Translate AI Multilingual Solutions GTranslate Pro and GTra…)
- [CVE-2021-34629](https://cve.now/CVE-2021-34629.md): SendGrid \<= 1.11.8 – Authorization Bypass (CVSS 4.3, SendGrid)
- [CVE-2021-22521](https://cve.now/CVE-2021-22521.md): A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 (no CVSS, ZENworks Configuration Management)
- [CVE-2021-3636](https://cve.now/CVE-2021-3636.md): It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional (no CVSS, openshift)
- [CVE-2021-35193](https://cve.now/CVE-2021-35193.md): Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' i (no CVSS)
- [CVE-2021-29298](https://cve.now/CVE-2021-29298.md): Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and applicat (no CVSS)
- [CVE-2021-29297](https://cve.now/CVE-2021-29297.md): Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash (no CVSS)
- [CVE-2021-37746](https://cve.now/CVE-2021-37746.md): textview\_uri\_security\_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks befo (no CVSS)
- [CVE-2021-29781](https://cve.now/CVE-2021-29781.md): IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserializatio (CVSS 9.8, IBM Partner Engagement Manager)
- [CVE-2021-29736](https://cve.now/CVE-2021-29736.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system. (CVSS 5.0, IBM WebSphere Application Server)
- [CVE-2020-26563](https://cve.now/CVE-2020-26563.md): ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string. (no CVSS)
- [CVE-2021-37743](https://cve.now/CVE-2021-37743.md): app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format. (no CVSS)
- [CVE-2021-37742](https://cve.now/CVE-2021-37742.md): app/View/Elements/GalaxyClusters/view\_relation\_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.