CVEs published June 4, 2021
60 CVEs were published on June 4, 2021: 0 critical, 12 high.
- Published
- 60
- Critical
- 0
- High
- 12
- Medium
- 10
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 20
Most affected products
- Google Chrome
- 15
- Cisco Webex Meetings
- 5
- Linux kernel
- 3
- Cisco ASR 5000 Series Software
- 2
- Cisco Video Surveillance 7000 Series IP Cameras
- 2
- Cisco WebEx Meetings Server
- 2
- OpenVPN Access Server
- 2
- auth0 lock · auth0-lock
- 1
- Cisco Common Services Platform Collector Software
- 1
- Cisco SD-WAN Solution
- 1
High 12
- CVE-2021-32641Reflected XSS when using flashMessagesauth0 lock · auth0-lock
- CVE-2021-29500Missing validation of JWT signaturefxbin bubble-fireworks
- CVE-2021-1540Cisco ASR 5000 Series Software Authorization Bypass VulnerabilitiesCisco ASR 5000 Series Software
- CVE-2021-1539Cisco ASR 5000 Series Software Authorization Bypass VulnerabilitiesCisco ASR 5000 Series Software
- CVE-2021-1528Cisco SD-WAN Software Privilege Escalation VulnerabilityCisco SD-WAN Solution
- CVE-2021-1526Cisco Webex Player Memory Corruption VulnerabilityCisco Webex Meetings
- CVE-2021-1503Cisco Webex Network Recording Player and Webex Player Memory Corruption VulnerabilityCisco Webex Meetings
- CVE-2021-1502Cisco Webex Network Recording Player and Webex Player Memory Corruption VulnerabilityCisco Webex Meetings
- CVE-2021-27657Metasys Improper Privilege ManagementJohnson Controls Metasys
- CVE-2021-3491Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypassLinux kernel
- CVE-2021-3490Linux kernel eBPF bitwise ops ALU32 bounds trackingLinux kernel
- CVE-2021-3489Linux kernel eBPF RINGBUF map oversized allocationLinux kernel
Medium, low and unrated 48
- CVE-2021-31249A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of
- CVE-2021-31250Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to
- CVE-2021-31251An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows o
- CVE-2021-31252An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology
- CVE-2021-26928BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers.
- CVE-2020-29321The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an D-Link Router DIR-868L
- CVE-2020-29324The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allD-Link Router DIR-895L
- CVE-2020-29323The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmwareD-Link Router DIR-885L-MFC
- CVE-2020-29322The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an D-Link Router DIR-880L
- CVE-2021-30520Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extensioGoogle Chrome
- CVE-2021-30519Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments Google Chrome
- CVE-2021-30517Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2021-30518Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruptionGoogle Chrome
- CVE-2021-30516Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2021-30514Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2021-30515Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2021-30513Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2021-30511Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extGoogle Chrome
- CVE-2021-30512Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2021-30510Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2021-30508Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain featuGoogle Chrome
- CVE-2021-30509Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extGoogle Chrome
- CVE-2021-30507Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2021-30506Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to insGoogle Chrome
- CVE-2021-1564Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery and Link Layer Discovery Protocol Memory Leak VulnerabilitiesCisco Video Surveillance 7000 Series IP Cameras
- CVE-2021-1563Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery and Link Layer Discovery Protocol Memory Leak VulnerabilitiesCisco Video Surveillance 7000 Series IP Cameras
- CVE-2021-1544Cisco Webex Meetings Client Software Logging Information Disclosure VulnerabilityCisco Webex Meetings
- CVE-2021-1538Cisco Common Services Platform Collector Command Injection VulnerabilityCisco Common Services Platform Collector Software
- CVE-2021-1537Cisco ThousandEyes Recorder Information Disclosure VulnerabilityCisco ThousandEyes Recorder Application
- CVE-2021-1536Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection VulnerabilityCisco Webex Teams
- CVE-2021-1527Cisco Webex Player Memory Corruption VulnerabilityCisco Webex Meetings
- CVE-2021-1525Cisco Webex Meetings and Webex Meetings Server File Redirect VulnerabilityCisco WebEx Meetings Server
- CVE-2021-1517Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass VulnerabilityCisco WebEx Meetings Server
- CVE-2020-36139BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS payload within the 'fileurl' parameter.
- CVE-2020-36140BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=e
- CVE-2020-36141BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Conte
- CVE-2020-36142BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter.
- CVE-2021-33054SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives.
- CVE-2021-28091Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
- CVE-2020-27302A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when
- CVE-2020-27301A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function,
- CVE-2021-22516Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0.Secure API Manager (SAPIM).
- CVE-2020-7469In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before pFreeBSD
- CVE-2021-3565A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2.tpm2-tools
- CVE-2021-26994Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a DenClustered Data ONTAP
- CVE-2020-36382OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentOpenVPN Access Server
- CVE-2020-15077OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on serveOpenVPN Access Server
- CVE-2021-30475aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.