Security Vulnerabilities - CVEs Published In July 2021
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD.
CVSS Score
5.4
EPSS Score
0.203
Published
2021-07-01
There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary DoS.
CVSS Score
5.3
EPSS Score
0.002
Published
2021-07-01
Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVSS Score
6.1
EPSS Score
0.002
Published
2021-07-01
Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain sensitive information via unspecified vectors.
CVSS Score
7.5
EPSS Score
0.003
Published
2021-07-01
uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree (called from uWS::TopicTree::unsubscribeAll). NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application (that uses uWebSockets) should not be allowing the large number of triggered topics to accumulate
CVSS Score
8.8
EPSS Score
0.006
Published
2021-07-01
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
CVSS Score
8.8
EPSS Score
0.005
Published
2021-07-01
GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).
CVSS Score
8.8
EPSS Score
0.004
Published
2021-07-01
Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-07-01
ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
CVSS Score
8.8
EPSS Score
0.005
Published
2021-07-01
KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.
CVSS Score
5.5
EPSS Score
0.004
Published
2021-07-01