CVEs published June 9, 2021
184 CVEs were published on June 9, 2021: 5 critical, 27 high. 1 is now in CISA KEV.
- Published
- 184
- Critical
- 5
- High
- 27
- Medium
- 32
- Low
- 0
- Unrated
- 120
- Now in CISA KEV
- 1
- Fix available
- 48
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 25
- Intel(R) Processors
- 11
- Intel(R) Thunderbolt(TM) controllers
- 9
- SAP SE SAP 3D Visual Enterprise Viewer
- 9
- Brocade SANnav
- 8
- SAP SE SAP Internet Graphics Service
- 7
- SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- 7
- Qualcomm Snapdragon Wired Infrastructure and Networking
- 6
- Bosch CPP Firmware
- 5
- Intel Unite(R) Client for Windows
- 4
Critical 5
- CVE-2021-23847Unauthenticated Information Extraction VulnerabilityBosch CPP Firmware
- CVE-2021-27635SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a nSAP SE SAP NetWeaver AS for JAVA
- CVE-2021-33841Circutor SGE-PLC1000 OS command InjectionCircutor SGE-PLC1000
- CVE-2020-11291Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11176While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow whichQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
High 27
- CVE-2020-12360Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilegIntel(R) Processors
- CVE-2021-32677Cross-Site Request Forgery (CSRF) in FastAPItiangolo fastapi · fastapi
- CVE-2021-23854Reflected XSS in page parameterBosch CPP Firmware
- CVE-2021-23853Improper Input Validation of HTTP HeadersBosch CPP Firmware
- CVE-2021-23848Reflected XSS in URL handlerBosch CPP Firmware
- CVE-2021-3196An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0.
- CVE-2021-33669Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file stoSAP SE SAP Mobile SDK Certificate Provider
- CVE-2021-31837Out of bounds write vulnerability in McAfee GetSuspMcAfee GetSusp
- CVE-2021-33842Circutor SGE-PLC1000 improper authenticationCircutor SGE-PLC1000
- CVE-2021-1900Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1937Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11306Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11298While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11304Possible out of bound read in DRM due to improper buffer length check.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11292Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon CompQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11267Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-27597SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.SAP SE SAP NetWeaver AS for ABAP
- CVE-2021-27606SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27607SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27628SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27629SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27630SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27631SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27632SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2021-27633SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.SAP SE SAP NetWeaver AS for ABAP
- CVE-2021-27634SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.SAP SE SAP NetWeaver AS for ABAP
Medium, low and unrated 152
- CVE-2021-33393lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account.
- CVE-2020-24489Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local acIntel(R) VT-d products
- CVE-2021-0129Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.BlueZ
- CVE-2021-0104Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 Intel(R) Rapid Storage Technology software,
- CVE-2021-0106Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3Intel(R) Optane(TM) DC Persistent Memory for Windows softwa…
- CVE-2021-0100Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an auIntel(R) SSD Data Center Tool, versions downloaded
- CVE-2021-0052Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentIntel(R) Computing Improvement Program
- CVE-2021-0074Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authenticIntel(R) Computing Improvement Program software
- CVE-2021-0134Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable dIntel(R) Security Library
- CVE-2021-0131Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allowIntel(R) Security Library
- CVE-2021-0132Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged uIntel(R) Security Library
- CVE-2021-0133Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentiallIntel(R) Security Library
- CVE-2021-0077Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an authenticated user Intel(R) VTune(TM) Profiler
- CVE-2021-0089Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via loIntel(R) Processors
- CVE-2021-0086Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enableIntel(R) Brand Verification Tool
- CVE-2021-0054Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of priviIntel(R) NUCs
- CVE-2021-0067 Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privIntel(R) NUCs
- CVE-2021-0090Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalatiIntel(R) DSA
- CVE-2021-0073Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalatIntel(R) DSA
- CVE-2021-0094Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable Intel(R) DSA
- CVE-2021-0058Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated Intel(R) NUC M15 Laptop Kit Driver Pack software
- CVE-2021-0057Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user Intel(R) NUC M15 Laptop Kit Driver Pack software
- CVE-2021-0056Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticateIntel(R) NUC M15 Laptop Kit Driver Pack software
- CVE-2021-0102Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentiaIntel Unite(R) Client for Windows
- CVE-2021-0108Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enIntel Unite(R) Client for Windows
- CVE-2021-0098Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enaIntel Unite(R) Client for Windows
- CVE-2021-0112Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enablIntel Unite(R) Client for Windows
- CVE-2021-0055Insecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user tIntel(R) NUC 9 Extreme Laptop Kit LAN Drivers
- CVE-2021-0051Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may aIntel(R) SPS versions
- CVE-2021-0001Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclIntel(R) IPP
- CVE-2020-24475Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-24473Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 mayIntel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-24474Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allIntel(R) Server Boards, Server Systems and Compute Modules
- CVE-2021-0097Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticIntel(R) Server Board M10JNP2SB
- CVE-2021-0113Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthIntel(R) Server Board M10JNP2SB
- CVE-2021-0070Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an Intel(R) Server Board M10JNP2SB
- CVE-2021-0101Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticIntel(R) Server BoardM10JNP2SB
- CVE-2021-0105Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable informatiIntel(R) ProSet/Wireless WiFi drivers
- CVE-2020-24513Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable inforIntel Atom(R) Processors
- CVE-2020-24512Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via lIntel(R) Processors
- CVE-2020-24511Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosIntel(R) Processors
- CVE-2020-24486Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of serviIntel(R) Processors
- CVE-2021-0095Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service vIntel(R) Processors
- CVE-2020-12358Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via locIntel(R) Processors
- CVE-2020-12359Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable esIntel(R) Processors
- CVE-2020-8700Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priviIntel(R) Processors
- CVE-2020-8670Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via loIntel(R) Processors
- CVE-2020-12357Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileIntel(R) Processors
- CVE-2020-24514Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege vIntel(R) RealSense(TM) IDs
- CVE-2020-24515Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilIntel(R) RealSense(TM) IDs
- CVE-2020-24506Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privilegedIntel(R) CSME versions
- CVE-2020-8703Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14Intel(R) CSME versions
- CVE-2020-24516Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow Intel(R) CSME versions
- CVE-2020-24507Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53Intel(R) CSME versions
- CVE-2020-8704Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation ofIntel(R) LMS versions
- CVE-2020-24509Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04Intel(R) SPS versions
- CVE-2020-8702Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentIntel(R) Processor Diagnostic Tool
- CVE-2021-29049Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 beforecom.liferay.portal:release.dxp.bom
- CVE-2020-12289Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service viaIntel(R) Thunderbolt(TM) controllers
- CVE-2020-12288Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of seIntel(R) Thunderbolt(TM) controllers
- CVE-2020-12290Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of serviceIntel(R) Thunderbolt(TM) controllers
- CVE-2020-12292Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of serviIntel(R) Thunderbolt(TM) controllers
- CVE-2020-12291Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12296Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial Intel(R) Thunderbolt(TM) controllers
- CVE-2020-12295Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of serviIntel(R) Thunderbolt(TM) controllers
- CVE-2020-12294Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable deniIntel(R) Thunderbolt(TM) controllers
- CVE-2020-12293Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentiaIntel(R) Thunderbolt(TM) controllers
- CVE-2021-33894In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x before 2019.2.2 (11.2.2), 2020.x before 20
- CVE-2020-27383Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User"
- CVE-2021-33358Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in /hostapd, when the
- CVE-2021-33357A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter va
- CVE-2021-33356Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary comman
- CVE-2021-33359A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// sche
- CVE-2021-33833ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGT
- CVE-2021-32942The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorizAVEVA InTouch
- CVE-2020-15386Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could leBrocade Fabric OS
- CVE-2020-15385Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission.Brocade SANnav
- CVE-2020-15384Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability.Brocade SANnav
- CVE-2020-15387The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilizBrocade SANnav & Brocade Fabric OS
- CVE-2020-15380Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.Brocade SANnav
- CVE-2020-15379Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the lBrocade SANnav
- CVE-2020-15378The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, Brocade SANnav
- CVE-2020-15377Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; Brocade SANnav
- CVE-2020-27384The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges vulnerability which can be used by an "Authen
- CVE-2021-30133A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to
- CVE-2020-15383Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, Brocade Fabric OS
- CVE-2020-15382Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided Brocade SANnav
- CVE-2020-15381Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication cBrocade SANnav
- CVE-2021-29995A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the l
- CVE-2021-23852Denial of Service (DoS) due to invalid web parameterBosch CPP Firmware
- CVE-2021-31832Cross site scripting vulnerability in DLP Endpoint for WindowsMcAfee Data Loss Prevention (DLP) Endpoint for Windows
- CVE-2021-33665SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - SAP SE SAP NetWeaver Application Server ABAP
- CVE-2021-33663SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.2SAP SE SAP NetWeaver AS ABAP
- CVE-2021-33659SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33661SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33664SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 731SAP SE SAP NetWeaver Application Server ABAP
- CVE-2021-33666When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, coulSAP SE SAP Commerce Cloud
- CVE-2021-33660SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-33662Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing SAP SE SAP Business One
- CVE-2021-27642SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27640SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27643SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27641SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27638SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in craSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27639SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in craSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-27637Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access inforSAP SE SAP Enable Now
- CVE-2021-27621Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7SAP SE SAP NetWeaver AS for Java
- CVE-2021-27615SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response.SAP SE SAP Manufacturing Execution
- CVE-2021-21473SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, contains function modulSAP SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2021-21490SAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not sufficiently encode inputSAP SE SAP NetWeaver AS for ABAP
- CVE-2021-33668Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user.SAP SE SAP InfraBox
- CVE-2021-33829A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackckeditor4 · drupal/core +1
- CVE-2021-34369portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a
- CVE-2021-34370Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.
- CVE-2021-26314AMD Speculative execution with Floating-Point Value InjectionAMD All supported processors
- CVE-2021-26313AMD Speculative Code Store BypassAMD All supported processors
- CVE-2021-34364The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document.
- CVE-2020-11266Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired InfrastructQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11265Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and NetworkiQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11262A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free isQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11260An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon MobileQualcomm Snapdragon Compute, Snapdragon Industrial IOT, Sna…
- CVE-2020-11259Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11258Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11256Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and NetworkQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11257Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2020-11250Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11241Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11239Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11240Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy ofQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11238Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11233Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without valiQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2020-11235Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon ComputeQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11182Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon ComQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11165Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11178Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11161Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11160Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11134Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup atQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11159Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer beinQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11126Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-28169For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to aThe Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…
- CVE-2021-20732The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not veriATOM tech ATOM
- CVE-2021-20731WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands witBUFFALO WSR-1166DHP3 and WSR-1166DHP4
- CVE-2021-20730Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attBUFFALO WSR-1166DHP3 and WSR-1166DHP4
- CVE-2021-20728Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote aNTT Resonant Incorporated goo blog App
- CVE-2021-27620SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service
- CVE-2021-27622SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service
- CVE-2021-27623SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service
- CVE-2021-27624SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service
- CVE-2021-27625SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service
- CVE-2021-27626SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service
- CVE-2021-27627SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing sSAP SE SAP Internet Graphics Service