CVEs published June 6, 2021
7 CVEs were published on June 6, 2021: 1 critical, 0 high.
- Published
- 7
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- websockets
- 1
Critical 1
Medium, low and unrated 6
- CVE-2021-33898In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php that may allow an at
- CVE-2021-33879Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection.
- CVE-2021-33881On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a
- CVE-2021-33880The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enawebsockets
- CVE-2021-31701Mintty before 3.4.7 mishandles Bracketed Paste Mode.
- CVE-2021-32198EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC window to change its title