2021-07-16 - CVE Archive

CVE-2021-21820 Jul 16, 11:15 CRITICAL POC Act Now

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass RCE D-Link Dir 3040 Firmware

NVD

CVSS 3.1

9.8

EPSS

3.0%

CVE-2021-21804 Jul 16, 11:15 CRITICAL POC Act Now

A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE LFI R Seenet Advantech

NVD

CVSS 3.1

9.8

EPSS

3.7%

CVE-2021-34458 Jul 16, 21:15 CRITICAL PATCH Act Now

Windows Kernel Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows Server 2016 Windows Server 2019

NVD VulDB

CVSS 3.1

9.9

EPSS

2.5%

CVE-2021-35961 Jul 16, 16:15 CRITICAL Act Now

Dr. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Dr Id Access Control Secom

NVD

CVSS 3.1

9.8

EPSS

2.2%