| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-33780 | Hig | 0.57 | 8.8 | 0.03 | Jul 14, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2021-33779 | Hig | 0.53 | 8.1 | 0.02 | Jul 14, 2021 | Windows AD FS Security Feature Bypass Vulnerability | ||
| CVE-2021-33778 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-33777 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-33776 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-33775 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-33774 | Hig | 0.46 | 7.0 | 0.01 | Jul 14, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2021-33773 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-33772 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows TCP/IP Driver Denial of Service Vulnerability | ||
| CVE-2021-33771 | Hig | 0.64 | 7.8 | 0.10 | KEV | Jul 14, 2021 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2021-33768 | Hig | 0.52 | 8.0 | 0.01 | Jul 14, 2021 | Microsoft Exchange Server Elevation of Privilege Vulnerability | ||
| CVE-2021-33767 | Hig | 0.53 | 8.2 | 0.01 | Jul 14, 2021 | Open Enclave SDK Elevation of Privilege Vulnerability | ||
| CVE-2021-33766 | Hig | 0.67 | 7.3 | 0.98 | KEV | Jul 14, 2021 | Microsoft Exchange Server Information Disclosure Vulnerability | |
| CVE-2021-33761 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-33759 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Desktop Bridge Elevation of Privilege Vulnerability | ||
| CVE-2021-33758 | Hig | 0.50 | 7.7 | 0.03 | Jul 14, 2021 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2021-33756 | Hig | 0.57 | 8.8 | 0.02 | Jul 14, 2021 | Windows DNS Snap-in Remote Code Execution Vulnerability | ||
| CVE-2021-33754 | Hig | 0.52 | 8.0 | 0.02 | Jul 14, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2021-33752 | Hig | 0.57 | 8.8 | 0.02 | Jul 14, 2021 | Windows DNS Snap-in Remote Code Execution Vulnerability | ||
| CVE-2021-33751 | Hig | 0.46 | 7.0 | 0.01 | Jul 14, 2021 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | ||
| CVE-2021-33750 | Hig | 0.57 | 8.8 | 0.02 | Jul 14, 2021 | Windows DNS Snap-in Remote Code Execution Vulnerability | ||
| CVE-2021-33749 | Hig | 0.57 | 8.8 | 0.02 | Jul 14, 2021 | Windows DNS Snap-in Remote Code Execution Vulnerability | ||
| CVE-2021-33746 | Hig | 0.52 | 8.0 | 0.02 | Jul 14, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2021-33743 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Projected File System Elevation of Privilege Vulnerability | ||
| CVE-2021-33740 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Windows Media Remote Code Execution Vulnerability | ||
| CVE-2021-31984 | Hig | 0.50 | 7.6 | 0.02 | Jul 14, 2021 | Power BI Remote Code Execution Vulnerability | ||
| CVE-2021-31979 | Hig | 0.63 | 7.8 | 0.05 | KEV | Jul 14, 2021 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2021-31947 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-31206 | Hig | 0.50 | 7.6 | 0.13 | Jul 14, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-31196 | Hig | 0.63 | 7.2 | 0.54 | KEV | Jul 14, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | |
| CVE-2021-31183 | Hig | 0.49 | 7.5 | 0.04 | Jul 14, 2021 | Windows TCP/IP Driver Denial of Service Vulnerability | ||
| CVE-2021-31859 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream. | ||
| CVE-2021-23407 | Hig | 0.42 | 7.5 | 0.02 | Jul 14, 2021 | This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path. | ||
| CVE-2020-29147 | Hig | 0.49 | 7.5 | 0.01 | Jul 14, 2021 | A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database information. | ||
| CVE-2021-36716 | Hig | 0.49 | 7.5 | 0.01 | Jul 14, 2021 | A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU. | ||
| CVE-2021-22780 | Hig | 0.46 | 7.1 | 0.00 | Jul 14, 2021 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack… | ||
| CVE-2021-22778 | Hig | 0.46 | 7.1 | 0.00 | Jul 14, 2021 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack… | ||
| CVE-2020-25445 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells… | ||
| CVE-2021-35527 | Hig | 0.49 | 7.5 | 0.01 | Jul 14, 2021 | Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions. | ||
| CVE-2021-0603 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for… | ||
| CVE-2021-0602 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for all configured APs due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges… | ||
| CVE-2021-0600 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for… | ||
| CVE-2021-0596 | Hig | 0.49 | 7.5 | 0.01 | Jul 14, 2021 | In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for… | ||
| CVE-2021-0594 | Hig | 0.52 | 8.0 | 0.01 | Jul 14, 2021 | In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no… | ||
| CVE-2021-0592 | Hig | 0.57 | 8.8 | 0.01 | Jul 14, 2021 | In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android… | ||
| CVE-2021-0589 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2021-0587 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2021-0586 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is… | ||
| CVE-2021-0577 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid… | ||
| CVE-2021-0514 | Hig | 0.53 | 8.1 | 0.01 | Jul 14, 2021 | In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… |
- risk 0.57cvss 8.8epss 0.03
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.02
Windows AD FS Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows TCP/IP Driver Denial of Service Vulnerability
- risk 0.64cvss 7.8epss 0.10
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.01
Microsoft Exchange Server Elevation of Privilege Vulnerability
- risk 0.53cvss 8.2epss 0.01
Open Enclave SDK Elevation of Privilege Vulnerability
- risk 0.67cvss 7.3epss 0.98
Microsoft Exchange Server Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Desktop Bridge Elevation of Privilege Vulnerability
- risk 0.50cvss 7.7epss 0.03
Windows Hyper-V Denial of Service Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows DNS Snap-in Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.02
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows DNS Snap-in Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows DNS Snap-in Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows DNS Snap-in Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.02
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Projected File System Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Windows Media Remote Code Execution Vulnerability
- risk 0.50cvss 7.6epss 0.02
Power BI Remote Code Execution Vulnerability
- risk 0.63cvss 7.8epss 0.05
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.50cvss 7.6epss 0.13
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.63cvss 7.2epss 0.54
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows TCP/IP Driver Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.00
Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream.
- risk 0.42cvss 7.5epss 0.02
This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.
- risk 0.49cvss 7.5epss 0.01
A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database information.
- risk 0.49cvss 7.5epss 0.01
A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmail(input) function may cause an application to consume an excessive amount of CPU.
- risk 0.46cvss 7.1epss 0.00
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack…
- risk 0.46cvss 7.1epss 0.00
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack…
- risk 0.51cvss 7.8epss 0.01
The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells…
- risk 0.49cvss 7.5epss 0.01
Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions.
- risk 0.51cvss 7.8epss 0.00
In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for…
- risk 0.51cvss 7.8epss 0.00
In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for all configured APs due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges…
- risk 0.51cvss 7.8epss 0.00
In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for…
- risk 0.49cvss 7.5epss 0.01
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for…
- risk 0.52cvss 8.0epss 0.01
In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no…
- risk 0.57cvss 8.8epss 0.01
In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android…
- risk 0.51cvss 7.8epss 0.00
In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.51cvss 7.8epss 0.00
In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.51cvss 7.8epss 0.00
In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…
- risk 0.51cvss 7.8epss 0.00
In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid…
- risk 0.53cvss 8.1epss 0.01
In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…