CVEs published June 8, 2021
108 CVEs were published on June 8, 2021: 4 critical, 46 high. 7 are now in CISA KEV.
- Published
- 108
- Critical
- 4
- High
- 46
- Medium
- 25
- Low
- 1
- Unrated
- 32
- Now in CISA KEV
- 7
- Fix available
- 75
Most affected products
- Microsoft Windows
- 25
- GitLab
- 9
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 7
- OpenEXR
- 4
- Google Asylo
- 3
- Microsoft 3D Viewer
- 3
- Microsoft Paint
- 3
- Dell NetWorker
- 2
- django
- 2
- Microsoft Malware Protection Engine
- 2
Critical 4
- CVE-2021-31962Kerberos AppContainer Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-26473Unauthenticated arbitrary file upload and command execution in Vembu products
- CVE-2021-26472Unauthenticated remote command execution with SYSTEM privileges in Vembu products
- CVE-2021-26471Unauthenticated remote command execution in Vembu products
High 46
- CVE-2021-33742Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-33739Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-33741Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2021-31985Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Malware Protection Engine
- CVE-2021-31980Microsoft Intune Management Extension Remote Code Execution VulnerabilityMicrosoft Intune management extension
- CVE-2021-31983Paint 3D Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2021-31976Server for NFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-31977Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-31975Server for NFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-31973Windows GPSVC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31974Server for NFS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-31969Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31968Windows Remote Desktop Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-31966Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-31967VP9 Video Extensions Remote Code Execution VulnerabilityMicrosoft VP9 Video Extensions
- CVE-2021-31963Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-31964Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-31958Windows NTLM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31956Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31954Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31952Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31953Windows Filter Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31951Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31949Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2021-31950Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-31948Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-31945Paint 3D Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2021-31946Paint 3D Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2021-319423D Viewer Remote Code Execution VulnerabilityMicrosoft 3D Viewer
- CVE-2021-319433D Viewer Remote Code Execution VulnerabilityMicrosoft 3D Viewer
- CVE-2021-31941Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2021-31939Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Online Server · Microsoft Office +2
- CVE-2021-31940Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2021-31938Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code - Kubernetes Tools
- CVE-2021-26420Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-1675Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-26474UNAUTHENTICATED SERVER SIDE REQUEST FORGERY IN VEMBU PRODUCTS
- CVE-2021-21559Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in theDell NetWorker
- CVE-2021-21558Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information Disclosure vulnerability.Dell NetWorker
- CVE-2021-22213A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access tokGitLab
- CVE-2021-32674Remote Code Execution via traversal in TAL expressionszopefoundation Zope · zope
- CVE-2021-32673Remote Command Execution in reg-keygen-git-hash-pluginreg-viz reg-suit · reg-keygen-git-hash-plugin
- CVE-2021-22215An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members'GitLab
- CVE-2021-28811Vulnerability in Roon ServerRoon Labs Roon Server
- CVE-2021-28810Vulnerability in Roon ServerRoon Labs Roon Server
- CVE-2021-33560Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att
Medium, low and unrated 58
- CVE-2021-31978Microsoft Defender Denial of Service VulnerabilityMicrosoft Malware Protection Engine
- CVE-2021-31972Event Tracing for Windows Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-31971Windows HTML Platforms Security Feature Bypass VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Ser… +1
- CVE-2021-31970Windows TCP/IP Driver Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-31965Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-31960Windows Bind Filter Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-31959Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2021-31957ASP.NET Core Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft .NET Core +3
- CVE-2021-31955Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-319443D Viewer Information Disclosure VulnerabilityMicrosoft 3D Viewer
- CVE-2021-31199Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-31201Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-26414Windows DCOM Server Security Feature BypassMicrosoft Windows
- CVE-2021-33712A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2).Siemens Mendix SAML Module
- CVE-2021-27387A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MSiemens Simcenter Femap
- CVE-2021-27390A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3).Siemens JT2Go · Siemens Teamcenter Visualization
- CVE-2021-27399A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MSiemens Simcenter Femap
- CVE-2021-31340A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2),Siemens SIMATIC RF166C · Siemens SIMATIC RF185C +23
- CVE-2021-31342The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proSiemens Solid Edge
- CVE-2021-31343The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack propeSiemens Solid Edge
- CVE-2020-26136In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.silverstripe/graphql
- CVE-2021-22216A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolleGitLab
- CVE-2021-22220An issue has been discovered in GitLab affecting all versions starting with 13.10.GitLab
- CVE-2020-28713Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notif
- CVE-2021-22221An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 beforeGitLab
- CVE-2021-22219All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting frGitLab
- CVE-2021-32658Sensitive data may not be removed from storage on account removalnextcloud security-advisories
- CVE-2021-22217A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolleGitLab
- CVE-2021-28293Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature.
- CVE-2020-25817SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser.silverstripe/framework
- CVE-2021-33203Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs.django
- CVE-2020-26138In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation.silverstripe/framework
- CVE-2021-32015In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized a
- CVE-2021-33190Bypass network access controlApache Software Foundation Apache APISIX Dashboard
- CVE-2021-22218All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting fGitLab
- CVE-2021-22214When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all veGitLab
- CVE-2021-33176VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due tovernemq
- CVE-2021-33175EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the hanEMQ Technologies EMQ X Broker
- CVE-2021-34280Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a
- CVE-2021-30357SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows pSSL Network Extender Client for Linux
- CVE-2021-22550Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBufferGoogle Asylo
- CVE-2021-22549Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCallGoogle Asylo
- CVE-2021-22548Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCallGoogle Asylo
- CVE-2020-26515An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
- CVE-2020-26517A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
- CVE-2021-32106In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of theicecoder/icecoder
- CVE-2020-26516A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
- CVE-2021-22212ntpkeygen can generate keys that ntpd fails to parse.ntpsec
- CVE-2021-3564A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI kernel
- CVE-2021-26945An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1.OpenEXR
- CVE-2021-22116RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client conRabbitMQ
- CVE-2021-31738Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.
- CVE-2021-23392Regular Expression Denial of Service (ReDoS)locutus
- CVE-2021-23169A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.OpenEXR
- CVE-2021-23215An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1.OpenEXR
- CVE-2021-26260An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1.OpenEXR
- CVE-2021-31807An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.
- CVE-2021-33571In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do notdjango