CVEs published June 9, 2021
184 CVEs were published on June 9, 2021: 5 critical, 27 high. 1 is now in CISA KEV.
- Published
- 184
- Critical
- 5
- High
- 27
- Medium
- 32
- Low
- 0
- Unrated
- 120
- Now in CISA KEV
- 1
- Fix available
- 48
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 25
- Intel(R) Processors
- 11
- Intel(R) Thunderbolt(TM) controllers
- 9
- SAP SE SAP 3D Visual Enterprise Viewer
- 9
- Brocade SANnav
- 8
- SAP SE SAP Internet Graphics Service
- 7
- SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- 7
- Qualcomm Snapdragon Wired Infrastructure and Networking
- 6
- Bosch CPP Firmware
- 5
- Intel Unite(R) Client for Windows
- 4
Critical 5
- CVE-2021-23847Unauthenticated Information Extraction VulnerabilityBosch CPP Firmware
- CVE-2021-27635SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a…SAP SE SAP NetWeaver AS for JAVA
- CVE-2021-33841Circutor SGE-PLC1000 OS command InjectionCircutor SGE-PLC1000
- CVE-2020-11291Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11176While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
High 27
- CVE-2020-12360Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilegIntel(R) Processors
- CVE-2021-32677Cross-Site Request Forgery (CSRF) in FastAPItiangolo fastapi · fastapi
- CVE-2021-23854Reflected XSS in page parameterBosch CPP Firmware
- CVE-2021-23853Improper Input Validation of HTTP HeadersBosch CPP Firmware
- CVE-2021-23848Reflected XSS in URL handlerBosch CPP Firmware
- CVE-2021-3196An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0.
- CVE-2021-33669Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file…SAP SE SAP Mobile SDK Certificate Provider
- CVE-2021-31837Out of bounds write vulnerability in McAfee GetSuspMcAfee GetSusp
- CVE-2021-33842Circutor SGE-PLC1000 improper authenticationCircutor SGE-PLC1000
- CVE-2021-1900Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1937Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11306Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11298While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11304Possible out of bound read in DRM due to improper buffer length check.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11292Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11267Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-27597SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver AS for ABAP
- CVE-2021-27606SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27607SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27628SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27629SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27630SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27631SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27632SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
Show all 27 entriesShow fewer entries
- CVE-2021-27633SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver AS for ABAP
- CVE-2021-27634SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver AS for ABAP
Medium, low and unrated 152
- CVE-2021-33393lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account.
- CVE-2020-24489Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local acIntel(R) VT-d products
- CVE-2021-0129Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.BlueZ
- CVE-2021-0104Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34…Intel(R) Rapid Storage Technology software,
- CVE-2021-0106Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or…Intel(R) Optane(TM) DC Persistent Memory for Windows softwa…
- CVE-2021-0100Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an…Intel(R) SSD Data Center Tool, versions downloaded
- CVE-2021-0052Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to…Intel(R) Computing Improvement Program
- CVE-2021-0074Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an…Intel(R) Computing Improvement Program software
- CVE-2021-0134Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable…Intel(R) Security Library
- CVE-2021-0131Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may…Intel(R) Security Library
- CVE-2021-0132Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged…Intel(R) Security Library
- CVE-2021-0133Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to…Intel(R) Security Library
- CVE-2021-0077Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an authenticated…Intel(R) VTune(TM) Profiler
- CVE-2021-0089Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via…Intel(R) Processors
- CVE-2021-0086Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially…Intel(R) Brand Verification Tool
- CVE-2021-0054Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of…Intel(R) NUCs
- CVE-2021-0067 Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of…Intel(R) NUCs
- CVE-2021-0090Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an…Intel(R) DSA
- CVE-2021-0073Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable…Intel(R) DSA
- CVE-2021-0094Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially…Intel(R) DSA
- CVE-2021-0058Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an…Intel(R) NUC M15 Laptop Kit Driver Pack software
- CVE-2021-0057Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated…Intel(R) NUC M15 Laptop Kit Driver Pack software
- CVE-2021-0056Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an…Intel(R) NUC M15 Laptop Kit Driver Pack software
- CVE-2021-0102Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to…Intel Unite(R) Client for Windows
- CVE-2021-0108Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially…Intel Unite(R) Client for Windows
Show all 152 entriesShow fewer entries
- CVE-2021-0098Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially…Intel Unite(R) Client for Windows
- CVE-2021-0112Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially…Intel Unite(R) Client for Windows
- CVE-2021-0055Insecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user…Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers
- CVE-2021-0051Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may…Intel(R) SPS versions
- CVE-2021-0001Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information…Intel(R) IPP
- CVE-2020-24475Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-24473Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-24474Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2021-0097Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an…Intel(R) Server Board M10JNP2SB
- CVE-2021-0113Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an…Intel(R) Server Board M10JNP2SB
- CVE-2021-0070Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow…Intel(R) Server Board M10JNP2SB
- CVE-2021-0101Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an…Intel(R) Server BoardM10JNP2SB
- CVE-2021-0105Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable…Intel(R) ProSet/Wireless WiFi drivers
- CVE-2020-24513Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable inforIntel Atom(R) Processors
- CVE-2020-24512Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via lIntel(R) Processors
- CVE-2020-24511Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosIntel(R) Processors
- CVE-2020-24486Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of serviIntel(R) Processors
- CVE-2021-0095Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service vIntel(R) Processors
- CVE-2020-12358Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via locIntel(R) Processors
- CVE-2020-12359Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable esIntel(R) Processors
- CVE-2020-8700Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priviIntel(R) Processors
- CVE-2020-8670Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via loIntel(R) Processors
- CVE-2020-12357Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileIntel(R) Processors
- CVE-2020-24514Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege…Intel(R) RealSense(TM) IDs
- CVE-2020-24515Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of…Intel(R) RealSense(TM) IDs
- CVE-2020-24506Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a…Intel(R) CSME versions
- CVE-2020-8703Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17…Intel(R) CSME versions
- CVE-2020-24516Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may…Intel(R) CSME versions
- CVE-2020-24507Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17…Intel(R) CSME versions
- CVE-2020-8704Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation…Intel(R) LMS versions
- CVE-2020-24509Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0…Intel(R) SPS versions
- CVE-2020-8702Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to…Intel(R) Processor Diagnostic Tool
- CVE-2021-29049Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1…com.liferay.portal:release.dxp.bom
- CVE-2020-12289Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12288Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12290Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12292Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12291Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12296Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12295Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12294Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable…Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12293Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to…Intel(R) Thunderbolt(TM) controllers
- CVE-2021-33894In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x before 2019.2.2 (11.2.2), 2020.x before…
- CVE-2020-27383Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated…
- CVE-2021-33358Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in /hostapd, when…
- CVE-2021-33357A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter…
- CVE-2021-33356Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary…
- CVE-2021-33359A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file://…
- CVE-2021-33833ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or…
- CVE-2021-32942The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an…AVEVA InTouch
- CVE-2020-15386Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could…Brocade Fabric OS
- CVE-2020-15385Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission.Brocade SANnav
- CVE-2020-15384Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability.Brocade SANnav
- CVE-2020-15387The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1…Brocade SANnav & Brocade Fabric OS
- CVE-2020-15380Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.Brocade SANnav
- CVE-2020-15379Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the…Brocade SANnav
- CVE-2020-15378The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the…Brocade SANnav
- CVE-2020-15377Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a…Brocade SANnav
- CVE-2020-27384The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges vulnerability which can be used by an…
- CVE-2021-30133A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers…
- CVE-2020-15383Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS…Brocade Fabric OS
- CVE-2020-15382Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not…Brocade SANnav
- CVE-2020-15381Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication…Brocade SANnav
- CVE-2021-29995A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the…
- CVE-2021-23852Denial of Service (DoS) due to invalid web parameterBosch CPP Firmware
- CVE-2021-31832Cross site scripting vulnerability in DLP Endpoint for WindowsMcAfee Data Loss Prevention (DLP) Endpoint for Windows
- CVE-2021-33665SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL…SAP SE SAP NetWeaver Application Server ABAP
- CVE-2021-33663SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC…SAP SE SAP NetWeaver AS ABAP
- CVE-2021-33659SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33661SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33664SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702…SAP SE SAP NetWeaver Application Server ABAP
- CVE-2021-33666When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances…SAP SE SAP Commerce Cloud
- CVE-2021-33660SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33662Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system…SAP SE SAP Business One
- CVE-2021-27642SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27640SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27643SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27641SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27638SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27639SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27637Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access…SAP SE SAP Enable Now
- CVE-2021-27621Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions…SAP SE SAP NetWeaver AS for Java
- CVE-2021-27615SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response.SAP SE SAP Manufacturing Execution
- CVE-2021-21473SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, contains function…SAP SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2021-21490SAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not sufficiently encode…SAP SE SAP NetWeaver AS for ABAP
- CVE-2021-33668Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user.SAP SE SAP InfraBox
- CVE-2021-33829A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote…ckeditor4 · drupal/core +1
- CVE-2021-34369portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via…
- CVE-2021-34370Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.
- CVE-2021-26314AMD Speculative execution with Floating-Point Value InjectionAMD All supported processors
- CVE-2021-26313AMD Speculative Code Store BypassAMD All supported processors
- CVE-2021-34364The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document.
- CVE-2020-11266Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired…Qualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11265Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and…Qualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11262A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11260An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon MobileQualcomm Snapdragon Compute, Snapdragon Industrial IOT, Sna…
- CVE-2020-11259Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11258Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11256Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and…Qualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11257Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11250Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11241Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11239Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11240Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11238Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11233Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2020-11235Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11182Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11165Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11178Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11161Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11160Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11134Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11159Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11126Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-28169For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to…The Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…
- CVE-2021-20732The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not…ATOM tech ATOM
- CVE-2021-20731WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands…BUFFALO WSR-1166DHP3 and WSR-1166DHP4
- CVE-2021-20730Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an…BUFFALO WSR-1166DHP3 and WSR-1166DHP4
- CVE-2021-20728Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote…NTT Resonant Incorporated goo blog App
- CVE-2021-27620SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service
- CVE-2021-27622SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service
- CVE-2021-27623SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service
- CVE-2021-27624SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service
- CVE-2021-27625SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service
- CVE-2021-27626SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service
- CVE-2021-27627SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing…SAP SE SAP Internet Graphics Service