CVEs published June 3, 2021
53 CVEs were published on June 3, 2021: 0 critical, 4 high.
- Published
- 53
- Critical
- 0
- High
- 4
- Medium
- 11
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- EMUI;Magic UI
- 12
- backstage · @backstage/techdocs-common
- 2
- McAfee Database Security
- 2
- wireapp wire-ios
- 2
- backstage · @backstage/plugin-techdocs
- 1
- Foreman
- 1
- Fortinet FortiAI
- 1
- Fortinet FortiProxy
- 1
- github.com/hashicorp/vault
- 1
- glob-parent
- 1
High 4
- CVE-2021-32665Verified groups not reliablewireapp wire-ios
- CVE-2021-24023An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payloFortinet FortiAI
- CVE-2021-28812Command Injection Vulnerability in Video StationQNAP Systems Video Station
- CVE-2021-28807Post-Authentication Reflected XSS Vulnerability in Q'centerQNAP Systems Q’center
Medium, low and unrated 49
- CVE-2021-33838Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Ch
- CVE-2021-33839Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Publi
- CVE-2021-33840The server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion of many fake records related to COVID-19)
- CVE-2020-36009OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability.
- CVE-2020-36008OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability.
- CVE-2020-36007AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive
- CVE-2020-36006AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
- CVE-2020-36005AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
- CVE-2020-36004AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database informatio
- CVE-2021-32662TechDocs mkdocs.yml path traversalbackstage · @backstage/techdocs-common
- CVE-2021-32666Asset DoS vulnerabilitywireapp wire-ios
- CVE-2020-35970An issue was discovered in YzmCMS 5.8.
- CVE-2020-35971A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin
- CVE-2020-35972An issue was discovered in YzmCMS V5.8.
- CVE-2020-35973An issue was discovered in zzcms2020.
- CVE-2019-14584Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.Tianocore EDK2
- CVE-2021-25947Prototype pollution vulnerability in 'nestie' versions 0.0.0 through 1.0.0 allows an attacker to cause a denial of service and may lead to rnestie
- CVE-2021-3469Foreman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling flaw.Foreman
- CVE-2021-22334There is an Improper Access Control vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22335There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22337There is an Information Disclosure vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22333There is an Improper Validation of Array Index vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-32661TechDocs object element script injectionbackstage · @backstage/plugin-techdocs
- CVE-2021-32660TechDocs content sanitization bypassbackstage · @backstage/techdocs-common
- CVE-2021-22336There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22324There is a Credentials Management Errors vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22325There is an Information Disclosure vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22322There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22316There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22317There is an Information Disclosure vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22313There is a Security Function vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2021-22308There is a Business Logic Errors vulnerability in Huawei Smartphone.EMUI;Magic UI
- CVE-2020-28469Regular Expression Denial of Service (ReDoS)glob-parent
- CVE-2021-20380IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information IBM Qradar Advisor
- CVE-2020-21003Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.
- CVE-2020-21005WellCMS 2.0 beta3 is vulnerable to File Upload.
- CVE-2021-32926When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includeMicro800, MicroLogix
- CVE-2021-33806The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStrea
- CVE-2021-28848Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window to change its title r
- CVE-2021-3569A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA.libtpms
- CVE-2021-26584A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting.HPE OneView for VMware vCenter with Operations Manager and…
- CVE-2021-28847MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change requests that are sent repe
- CVE-2021-32923HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those withigithub.com/hashicorp/vault
- CVE-2021-32460The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer whicTrend Micro Maxmium Security
- CVE-2021-22130A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.Fortinet FortiProxy
- CVE-2021-31830Cross site Scripting (XSS) vulnerability in McAfee DBSecMcAfee Database Security
- CVE-2021-31831Incorrect access to deleted scripts vulnerability in McAfee DBSecMcAfee Database Security
- CVE-2021-28806DOM-Based XSS Vulnerability in QTS and QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2021-33815dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked.