# CVEs published 2021-06-06

7 CVEs were published on June 6, 2021: 1 critical, 0 high. Days are UTC.

- [CVE-2021-33898](https://cve.now/CVE-2021-33898.md): In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php that may allow an at (no CVSS)
- [CVE-2017-20005](https://cve.now/CVE-2017-20005.md): NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that (CVSS 9.8)
- [CVE-2021-33879](https://cve.now/CVE-2021-33879.md): Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. (no CVSS)
- [CVE-2021-33881](https://cve.now/CVE-2021-33881.md): On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) over RFID to bypass a (no CVSS)
- [CVE-2021-33880](https://cve.now/CVE-2021-33880.md): The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is ena (no CVSS, websockets)
- [CVE-2021-31701](https://cve.now/CVE-2021-31701.md): Mintty before 3.4.7 mishandles Bracketed Paste Mode. (no CVSS)
- [CVE-2021-32198](https://cve.now/CVE-2021-32198.md): EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC window to change its title (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.