Skip to main content
CVE-2021-34481 Jul 16, 21:15 HIGH PATCH Act Now

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation RCE Microsoft Windows Server 2008 Windows Server 2012 +6
NVD VulDB
CVSS 3.1
8.8
EPSS
45.4%
CVE-2021-32749 Jul 16, 18:15 HIGH POC PATCH This Week

fail2ban is a daemon to ban hosts that cause multiple authentication errors. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

RCE Command Injection Fedora Fail2Ban Fedoraproject
NVD GitHub
CVSS 3.1
8.1
EPSS
3.6%
CVE-2021-32769 Jul 16, 19:15 HIGH POC PATCH This Week

Micronaut is a JVM-based, full stack Java framework designed for building JVM applications. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Java Path Traversal Micronaut Objectcomputing
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
CVE-2021-3649 Jul 16, 14:15 HIGH POC PATCH This Week

chatwoot is vulnerable to Inefficient Regular Expression Complexity. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Chatwoot
NVD GitHub
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-21818 Jul 16, 11:15 HIGH POC This Week

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Denial Of Service D-Link Dir 3040 Firmware
NVD
CVSS 3.1
7.5
EPSS
1.9%
CVE-2021-21817 Jul 16, 11:15 HIGH POC This Week

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure D-Link Dir 3040 Firmware
NVD
CVSS 3.1
7.5
EPSS
2.0%
CVE-2021-21819 Jul 16, 11:15 HIGH POC This Week

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection D-Link Dir 3040 Firmware
NVD
CVSS 3.1
7.2
EPSS
2.9%
CVE-2021-34442 Jul 16, 21:15 HIGH PATCH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +1
NVD VulDB
CVSS 3.1
8.8
EPSS
2.9%
CVE-2021-34450 Jul 16, 21:15 HIGH PATCH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
8.5
EPSS
2.2%
CVE-2021-28053 Jul 16, 16:15 HIGH This Week

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Centreon
NVD GitHub
CVSS 3.1
8.8
EPSS
1.8%
CVE-2021-34464 Jul 16, 21:15 HIGH PATCH This Week

Microsoft Defender Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Malware Protection Engine
NVD VulDB
CVSS 3.1
7.8
EPSS
2.9%
CVE-2021-34446 Jul 16, 21:15 HIGH PATCH This Week

Windows HTML Platforms Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
8.0
EPSS
1.8%
CVE-2021-34439 Jul 16, 21:15 HIGH PATCH This Week

Microsoft Windows Media Foundation Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2016 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
2.5%
CVE-2021-34452 Jul 16, 21:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Word
NVD VulDB
CVSS 3.1
7.8
EPSS
2.0%
CVE-2021-34441 Jul 16, 21:15 HIGH PATCH This Week

Microsoft Windows Media Foundation Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
2.0%
CVE-2021-34438 Jul 16, 21:15 HIGH PATCH This Week

Windows Font Driver Host Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
2.0%
CVE-2021-34467 Jul 16, 21:15 HIGH PATCH This Week

Microsoft SharePoint Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

RCE Microsoft Sharepoint Server Sharepoint Foundation
NVD VulDB
CVSS 3.1
7.1
EPSS
5.4%
CVE-2021-1422 Jul 16, 13:15 HIGH This Week

A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Cisco Adaptive Security Appliance Software Firepower Threat Defense
NVD VulDB
CVSS 3.1
7.7
EPSS
1.2%
CVE-2021-34445 Jul 16, 21:15 HIGH PATCH This Week

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.6%
CVE-2021-34460 Jul 16, 21:15 HIGH PATCH This Week

Storage Spaces Controller Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +3
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-34456 Jul 16, 21:15 HIGH PATCH This Week

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-34461 Jul 16, 21:15 HIGH PATCH This Week

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2016 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-34459 Jul 16, 21:15 HIGH PATCH This Week

Windows AppContainer Elevation Of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +3
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-34455 Jul 16, 21:15 HIGH PATCH This Week

Windows File History Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +3
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-3550 Jul 16, 21:15 HIGH This Week

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Pcmanager Lenovo
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-35962 Jul 16, 16:15 HIGH This Week

Specific page parameters in Dr. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Door Access Control Personnel Attendance System Secom
NVD
CVSS 3.1
7.5
EPSS
1.8%
CVE-2021-34449 Jul 16, 21:15 HIGH PATCH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.0
EPSS
2.2%
CVE-2021-34462 Jul 16, 21:15 HIGH PATCH This Week

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Race Condition Microsoft Windows Server 2016 Windows Server 2019 +1
NVD VulDB
CVSS 3.1
7.0
EPSS
0.8%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy