# CVEs published 2021-06-09

184 CVEs were published on June 9, 2021: 5 critical, 27 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-33393](https://cve.now/CVE-2021-33393.md): lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. (no CVSS)
- [CVE-2020-24489](https://cve.now/CVE-2020-24489.md): Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local ac (no CVSS, Intel(R) VT-d products)
- [CVE-2021-0129](https://cve.now/CVE-2021-0129.md): Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. (no CVSS, BlueZ)
- [CVE-2021-0104](https://cve.now/CVE-2021-0104.md): Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 (no CVSS, Intel(R) Rapid Storage Technology software,)
- [CVE-2021-0106](https://cve.now/CVE-2021-0106.md): Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3 (no CVSS, Intel(R) Optane(TM) DC Persistent Memory for Windows softwa…)
- [CVE-2021-0100](https://cve.now/CVE-2021-0100.md): Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an au (no CVSS, Intel(R) SSD Data Center Tool, versions downloaded)
- [CVE-2021-0052](https://cve.now/CVE-2021-0052.md): Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potent (no CVSS, Intel(R) Computing Improvement Program)
- [CVE-2021-0074](https://cve.now/CVE-2021-0074.md): Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authentic (no CVSS, Intel(R) Computing Improvement Program software)
- [CVE-2021-0134](https://cve.now/CVE-2021-0134.md): Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable d (no CVSS, Intel(R) Security Library)
- [CVE-2021-0131](https://cve.now/CVE-2021-0131.md): Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow (no CVSS, Intel(R) Security Library)
- [CVE-2021-0132](https://cve.now/CVE-2021-0132.md): Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged u (no CVSS, Intel(R) Security Library)
- [CVE-2021-0133](https://cve.now/CVE-2021-0133.md): Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentiall (no CVSS, Intel(R) Security Library)
- [CVE-2021-0077](https://cve.now/CVE-2021-0077.md): Insecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before version 2021.1.1 may allow an authenticated user (no CVSS, Intel(R) VTune(TM) Profiler)
- [CVE-2021-0089](https://cve.now/CVE-2021-0089.md): Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via lo (no CVSS, Intel(R) Processors)
- [CVE-2021-0086](https://cve.now/CVE-2021-0086.md): Observable response discrepancy in floating-point operations for some Intel(R) Processors may allow an authorized user to potentially enable (no CVSS, Intel(R) Brand Verification Tool)
- [CVE-2021-0054](https://cve.now/CVE-2021-0054.md): Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privi (no CVSS, Intel(R) NUCs)
- [CVE-2021-0067](https://cve.now/CVE-2021-0067.md):  Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of priv (no CVSS, Intel(R) NUCs)
- [CVE-2021-0090](https://cve.now/CVE-2021-0090.md): Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalati (no CVSS, Intel(R) DSA)
- [CVE-2021-0073](https://cve.now/CVE-2021-0073.md): Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalat (no CVSS, Intel(R) DSA)
- [CVE-2021-0094](https://cve.now/CVE-2021-0094.md): Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable (no CVSS, Intel(R) DSA)
- [CVE-2021-0058](https://cve.now/CVE-2021-0058.md): Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated (no CVSS, Intel(R) NUC M15 Laptop Kit Driver Pack software)
- [CVE-2021-0057](https://cve.now/CVE-2021-0057.md): Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user (no CVSS, Intel(R) NUC M15 Laptop Kit Driver Pack software)
- [CVE-2021-0056](https://cve.now/CVE-2021-0056.md): Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticate (no CVSS, Intel(R) NUC M15 Laptop Kit Driver Pack software)
- [CVE-2021-0102](https://cve.now/CVE-2021-0102.md): Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentia (no CVSS, Intel Unite(R) Client for Windows)
- [CVE-2021-0108](https://cve.now/CVE-2021-0108.md): Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially en (no CVSS, Intel Unite(R) Client for Windows)
- [CVE-2021-0098](https://cve.now/CVE-2021-0098.md): Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially ena (no CVSS, Intel Unite(R) Client for Windows)
- [CVE-2021-0112](https://cve.now/CVE-2021-0112.md): Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enabl (no CVSS, Intel Unite(R) Client for Windows)
- [CVE-2021-0055](https://cve.now/CVE-2021-0055.md): Insecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user t (no CVSS, Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers)
- [CVE-2021-0051](https://cve.now/CVE-2021-0051.md): Improper input validation in the Intel(R) SPS versions before SPS\_E5\_04.04.04.023.0, SPS\_E5\_04.04.03.228.0 or SPS\_SoC-A\_05.00.03.098.0 may a (no CVSS, Intel(R) SPS versions)
- [CVE-2021-0001](https://cve.now/CVE-2021-0001.md): Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information discl (no CVSS, Intel(R) IPP)
- [CVE-2020-24475](https://cve.now/CVE-2020-24475.md): Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2020-24473](https://cve.now/CVE-2020-24473.md): Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2020-24474](https://cve.now/CVE-2020-24474.md): Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may all (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2021-0097](https://cve.now/CVE-2021-0097.md): Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic (no CVSS, Intel(R) Server Board M10JNP2SB)
- [CVE-2021-0113](https://cve.now/CVE-2021-0113.md): Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauth (no CVSS, Intel(R) Server Board M10JNP2SB)
- [CVE-2021-0070](https://cve.now/CVE-2021-0070.md): Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an (no CVSS, Intel(R) Server Board M10JNP2SB)
- [CVE-2021-0101](https://cve.now/CVE-2021-0101.md): Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic (no CVSS, Intel(R) Server BoardM10JNP2SB)
- [CVE-2021-0105](https://cve.now/CVE-2021-0105.md): Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable informati (no CVSS, Intel(R) ProSet/Wireless WiFi drivers)
- [CVE-2020-24513](https://cve.now/CVE-2020-24513.md): Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable infor (no CVSS, Intel Atom(R) Processors)
- [CVE-2020-24512](https://cve.now/CVE-2020-24512.md): Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via l (no CVSS, Intel(R) Processors)
- [CVE-2020-24511](https://cve.now/CVE-2020-24511.md): Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclos (no CVSS, Intel(R) Processors)
- [CVE-2020-24486](https://cve.now/CVE-2020-24486.md): Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of servi (no CVSS, Intel(R) Processors)
- [CVE-2020-12360](https://cve.now/CVE-2020-12360.md): Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privileg (CVSS 7.8, Intel(R) Processors)
- [CVE-2021-0095](https://cve.now/CVE-2021-0095.md): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service v (no CVSS, Intel(R) Processors)
- [CVE-2020-12358](https://cve.now/CVE-2020-12358.md): Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via loc (no CVSS, Intel(R) Processors)
- [CVE-2020-12359](https://cve.now/CVE-2020-12359.md): Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable es (CVSS 6.8, Intel(R) Processors)
- [CVE-2020-8700](https://cve.now/CVE-2020-8700.md): Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privi (no CVSS, Intel(R) Processors)
- [CVE-2020-8670](https://cve.now/CVE-2020-8670.md): Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via lo (no CVSS, Intel(R) Processors)
- [CVE-2020-12357](https://cve.now/CVE-2020-12357.md): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privile (no CVSS, Intel(R) Processors)
- [CVE-2020-24514](https://cve.now/CVE-2020-24514.md): Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege v (no CVSS, Intel(R) RealSense(TM) IDs)
- [CVE-2020-24515](https://cve.now/CVE-2020-24515.md): Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privil (no CVSS, Intel(R) RealSense(TM) IDs)
- [CVE-2020-24506](https://cve.now/CVE-2020-24506.md): Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged (no CVSS, Intel(R) CSME versions)
- [CVE-2020-8703](https://cve.now/CVE-2020-8703.md): Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14 (no CVSS, Intel(R) CSME versions)
- [CVE-2020-24516](https://cve.now/CVE-2020-24516.md): Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow (no CVSS, Intel(R) CSME versions)
- [CVE-2020-24507](https://cve.now/CVE-2020-24507.md): Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53 (no CVSS, Intel(R) CSME versions)
- [CVE-2020-8704](https://cve.now/CVE-2020-8704.md): Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of (no CVSS, Intel(R) LMS versions)
- [CVE-2020-24509](https://cve.now/CVE-2020-24509.md): Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS\_E3\_05.01.04.300.0, SPS\_SoC-A\_05.00.03.091.0, SPS\_E5\_04 (no CVSS, Intel(R) SPS versions)
- [CVE-2020-8702](https://cve.now/CVE-2020-8702.md): Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potent (no CVSS, Intel(R) Processor Diagnostic Tool)
- [CVE-2021-29049](https://cve.now/CVE-2021-29049.md): Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before (no CVSS, com.liferay.portal:release.dxp.bom)
- [CVE-2020-12289](https://cve.now/CVE-2020-12289.md): Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12288](https://cve.now/CVE-2020-12288.md): Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of se (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12290](https://cve.now/CVE-2020-12290.md): Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12292](https://cve.now/CVE-2020-12292.md): Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of servi (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12291](https://cve.now/CVE-2020-12291.md): Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12296](https://cve.now/CVE-2020-12296.md): Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12295](https://cve.now/CVE-2020-12295.md): Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of servi (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12294](https://cve.now/CVE-2020-12294.md): Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable deni (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2020-12293](https://cve.now/CVE-2020-12293.md): Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentia (no CVSS, Intel(R) Thunderbolt(TM) controllers)
- [CVE-2021-33894](https://cve.now/CVE-2021-33894.md): In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x before 2019.2.2 (11.2.2), 2020.x before 20 (no CVSS)
- [CVE-2020-27383](https://cve.now/CVE-2020-27383.md): Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" (no CVSS)
- [CVE-2021-33358](https://cve.now/CVE-2021-33358.md): Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa\_passphrase" POST parameters in /hostapd, when the (no CVSS)
- [CVE-2021-33357](https://cve.now/CVE-2021-33357.md): A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get\_netcfg.php, when the "iface" parameter va (no CVSS)
- [CVE-2021-33356](https://cve.now/CVE-2021-33356.md): Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary comman (no CVSS)
- [CVE-2021-33359](https://cve.now/CVE-2021-33359.md): A vulnerability exists in gowitness \< 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// sche (no CVSS)
- [CVE-2021-33833](https://cve.now/CVE-2021-33833.md): ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGT (no CVSS)
- [CVE-2021-32677](https://cve.now/CVE-2021-32677.md): Cross-Site Request Forgery (CSRF) in FastAPI (CVSS 8.2, tiangolo fastapi · fastapi)
- [CVE-2021-32942](https://cve.now/CVE-2021-32942.md): The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authoriz (CVSS 6.6, AVEVA InTouch)
- [CVE-2020-15386](https://cve.now/CVE-2020-15386.md): Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could le (no CVSS, Brocade Fabric OS)
- [CVE-2020-15385](https://cve.now/CVE-2020-15385.md): Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission. (no CVSS, Brocade SANnav)
- [CVE-2020-15384](https://cve.now/CVE-2020-15384.md): Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. (no CVSS, Brocade SANnav)
- [CVE-2020-15387](https://cve.now/CVE-2020-15387.md): The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utiliz (no CVSS, Brocade SANnav & Brocade Fabric OS)
- [CVE-2020-15380](https://cve.now/CVE-2020-15380.md): Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level. (no CVSS, Brocade SANnav)
- [CVE-2020-15379](https://cve.now/CVE-2020-15379.md): Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the l (no CVSS, Brocade SANnav)
- [CVE-2020-15378](https://cve.now/CVE-2020-15378.md): The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, (no CVSS, Brocade SANnav)
- [CVE-2020-15377](https://cve.now/CVE-2020-15377.md): Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; (no CVSS, Brocade SANnav)
- [CVE-2020-27384](https://cve.now/CVE-2020-27384.md): The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges vulnerability which can be used by an "Authen (no CVSS)
- [CVE-2021-30133](https://cve.now/CVE-2021-30133.md): A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to (no CVSS)
- [CVE-2020-15383](https://cve.now/CVE-2020-15383.md): Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, (no CVSS, Brocade Fabric OS)
- [CVE-2020-15382](https://cve.now/CVE-2020-15382.md): Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided (no CVSS, Brocade SANnav)
- [CVE-2020-15381](https://cve.now/CVE-2020-15381.md): Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication c (no CVSS, Brocade SANnav)
- [CVE-2021-29995](https://cve.now/CVE-2021-29995.md): A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the l (no CVSS)
- [CVE-2021-23854](https://cve.now/CVE-2021-23854.md): Reflected XSS in page parameter (CVSS 8.3, Bosch CPP Firmware)
- [CVE-2021-23847](https://cve.now/CVE-2021-23847.md): Unauthenticated Information Extraction Vulnerability (CVSS 9.8, Bosch CPP Firmware)
- [CVE-2021-23853](https://cve.now/CVE-2021-23853.md): Improper Input Validation of HTTP Headers (CVSS 8.3, Bosch CPP Firmware)
- [CVE-2021-23848](https://cve.now/CVE-2021-23848.md): Reflected XSS in URL handler (CVSS 8.3, Bosch CPP Firmware)
- [CVE-2021-23852](https://cve.now/CVE-2021-23852.md): Denial of Service (DoS) due to invalid web parameter (CVSS 4.9, Bosch CPP Firmware)
- [CVE-2021-3196](https://cve.now/CVE-2021-3196.md): An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. (CVSS 8.8)
- [CVE-2021-33669](https://cve.now/CVE-2021-33669.md): Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file sto (CVSS 7.8, SAP SE SAP Mobile SDK Certificate Provider)
- [CVE-2021-31832](https://cve.now/CVE-2021-31832.md): Cross site scripting vulnerability in DLP Endpoint for Windows (CVSS 5.2, McAfee Data Loss Prevention (DLP) Endpoint for Windows)
- [CVE-2021-31837](https://cve.now/CVE-2021-31837.md): Out of bounds write vulnerability in McAfee GetSusp (CVSS 8.8, McAfee GetSusp)
- [CVE-2021-33665](https://cve.now/CVE-2021-33665.md): SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - (CVSS 5.4, SAP SE SAP NetWeaver Application Server ABAP)
- [CVE-2021-33663](https://cve.now/CVE-2021-33663.md): SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.2 (CVSS 5.8, SAP SE SAP NetWeaver AS ABAP)
- [CVE-2021-33659](https://cve.now/CVE-2021-33659.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-33661](https://cve.now/CVE-2021-33661.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-33664](https://cve.now/CVE-2021-33664.md): SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP\_UI - 750,752,753,754,755, SAP\_BASIS - 702, 731 (CVSS 5.4, SAP SE SAP NetWeaver Application Server ABAP)
- [CVE-2021-33666](https://cve.now/CVE-2021-33666.md): When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, coul (CVSS 4.7, SAP SE SAP Commerce Cloud)
- [CVE-2021-33660](https://cve.now/CVE-2021-33660.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-33662](https://cve.now/CVE-2021-33662.md): Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing (CVSS 6.7, SAP SE SAP Business One)
- [CVE-2021-27642](https://cve.now/CVE-2021-27642.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-27640](https://cve.now/CVE-2021-27640.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-27643](https://cve.now/CVE-2021-27643.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-27641](https://cve.now/CVE-2021-27641.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in cr (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-27638](https://cve.now/CVE-2021-27638.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in cra (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-27635](https://cve.now/CVE-2021-27635.md): SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a n (CVSS 9.0, SAP SE SAP NetWeaver AS for JAVA)
- [CVE-2021-27639](https://cve.now/CVE-2021-27639.md): SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in cra (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2021-27637](https://cve.now/CVE-2021-27637.md): Under certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions - 1.0, 10 allows an attacker to access infor (CVSS 5.9, SAP SE SAP Enable Now)
- [CVE-2021-27621](https://cve.now/CVE-2021-27621.md): Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7 (CVSS 5.5, SAP SE SAP NetWeaver AS for Java)
- [CVE-2021-27615](https://cve.now/CVE-2021-27615.md): SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response. (CVSS 5.4, SAP SE SAP Manufacturing Execution)
- [CVE-2021-21473](https://cve.now/CVE-2021-21473.md): SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, contains function modul (CVSS 6.3, SAP SE SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2021-21490](https://cve.now/CVE-2021-21490.md): SAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not sufficiently encode input (CVSS 6.1, SAP SE SAP NetWeaver AS for ABAP)
- [CVE-2021-33668](https://cve.now/CVE-2021-33668.md): Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. (CVSS 5.3, SAP SE SAP InfraBox)
- [CVE-2021-33829](https://cve.now/CVE-2021-33829.md): A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attack (no CVSS, ckeditor4 · drupal/core +1)
- [CVE-2021-33841](https://cve.now/CVE-2021-33841.md): Circutor SGE-PLC1000 OS command Injection (CVSS 10.0, Circutor SGE-PLC1000)
- [CVE-2021-33842](https://cve.now/CVE-2021-33842.md): Circutor SGE-PLC1000 improper authentication (CVSS 8.8, Circutor SGE-PLC1000)
- [CVE-2021-34369](https://cve.now/CVE-2021-34369.md): portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a (no CVSS)
- [CVE-2021-34370](https://cve.now/CVE-2021-34370.md): Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. (no CVSS)
- [CVE-2021-26314](https://cve.now/CVE-2021-26314.md): AMD Speculative execution with Floating-Point Value Injection (no CVSS, AMD All supported processors)
- [CVE-2021-26313](https://cve.now/CVE-2021-26313.md): AMD Speculative Code Store Bypass (no CVSS, AMD All supported processors)
- [CVE-2021-34364](https://cve.now/CVE-2021-34364.md): The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. (no CVSS)
- [CVE-2021-1900](https://cve.now/CVE-2021-1900.md): Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdrag (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1937](https://cve.now/CVE-2021-1937.md): Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11306](https://cve.now/CVE-2020-11306.md): Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdrag (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11298](https://cve.now/CVE-2020-11298.md): While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by H (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11304](https://cve.now/CVE-2020-11304.md): Possible out of bound read in DRM due to improper buffer length check. (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11292](https://cve.now/CVE-2020-11292.md): Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Comp (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11267](https://cve.now/CVE-2020-11267.md): Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11291](https://cve.now/CVE-2020-11291.md): Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11176](https://cve.now/CVE-2020-11176.md): While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which (CVSS 9.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11266](https://cve.now/CVE-2020-11266.md): Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastruct (no CVSS, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2020-11265](https://cve.now/CVE-2020-11265.md): Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networki (no CVSS, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2020-11262](https://cve.now/CVE-2020-11262.md): A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free is (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11260](https://cve.now/CVE-2020-11260.md): An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Industrial IOT, Sna…)
- [CVE-2020-11261](https://cve.now/CVE-2020-11261.md): Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, (CVSS 7.8, KEV, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11259](https://cve.now/CVE-2020-11259.md): Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking (no CVSS, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2020-11258](https://cve.now/CVE-2020-11258.md): Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking (no CVSS, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2020-11256](https://cve.now/CVE-2020-11256.md): Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Network (no CVSS, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2020-11257](https://cve.now/CVE-2020-11257.md): Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking (no CVSS, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2020-11250](https://cve.now/CVE-2020-11250.md): Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11241](https://cve.now/CVE-2020-11241.md): Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon A (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11239](https://cve.now/CVE-2020-11239.md): Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11240](https://cve.now/CVE-2020-11240.md): Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11238](https://cve.now/CVE-2020-11238.md): Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11233](https://cve.now/CVE-2020-11233.md): Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without vali (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2020-11235](https://cve.now/CVE-2020-11235.md): Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11182](https://cve.now/CVE-2020-11182.md): Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Com (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11165](https://cve.now/CVE-2020-11165.md): Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in S (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11178](https://cve.now/CVE-2020-11178.md): Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11161](https://cve.now/CVE-2020-11161.md): Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon A (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11160](https://cve.now/CVE-2020-11160.md): Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdrag (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11134](https://cve.now/CVE-2020-11134.md): Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup at (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11159](https://cve.now/CVE-2020-11159.md): Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer bein (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11126](https://cve.now/CVE-2020-11126.md): Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-28169](https://cve.now/CVE-2021-28169.md): For Eclipse Jetty versions \<= 9.4.40, \<= 10.0.2, \<= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to a (CVSS 5.3, The Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…)
- [CVE-2021-20732](https://cve.now/CVE-2021-20732.md): The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not veri (no CVSS, ATOM tech ATOM)
- [CVE-2021-20731](https://cve.now/CVE-2021-20731.md): WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands wit (no CVSS, BUFFALO WSR-1166DHP3 and WSR-1166DHP4)
- [CVE-2021-20730](https://cve.now/CVE-2021-20730.md): Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an att (no CVSS, BUFFALO WSR-1166DHP3 and WSR-1166DHP4)
- [CVE-2021-20728](https://cve.now/CVE-2021-20728.md): Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote a (no CVSS, NTT Resonant Incorporated goo blog App)
- [CVE-2021-27597](https://cve.now/CVE-2021-27597.md): SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7. (CVSS 7.5, SAP SE SAP NetWeaver AS for ABAP)
- [CVE-2021-27606](https://cve.now/CVE-2021-27606.md): SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27607](https://cve.now/CVE-2021-27607.md): SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2 (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27620](https://cve.now/CVE-2021-27620.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27622](https://cve.now/CVE-2021-27622.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27623](https://cve.now/CVE-2021-27623.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27624](https://cve.now/CVE-2021-27624.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27625](https://cve.now/CVE-2021-27625.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27626](https://cve.now/CVE-2021-27626.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27627](https://cve.now/CVE-2021-27627.md): SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20\_EX2,7.81, allows an unauthenticated attacker after retrieving an existing s (CVSS 5.9, SAP SE SAP Internet Graphics Service)
- [CVE-2021-27628](https://cve.now/CVE-2021-27628.md): SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2 (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27629](https://cve.now/CVE-2021-27629.md): SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27630](https://cve.now/CVE-2021-27630.md): SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27631](https://cve.now/CVE-2021-27631.md): SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27632](https://cve.now/CVE-2021-27632.md): SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - (CVSS 7.5, SAP SE SAP NetWeaver ABAP Server and ABAP Platform)
- [CVE-2021-27633](https://cve.now/CVE-2021-27633.md): SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7. (CVSS 7.5, SAP SE SAP NetWeaver AS for ABAP)
- [CVE-2021-27634](https://cve.now/CVE-2021-27634.md): SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7. (CVSS 7.5, SAP SE SAP NetWeaver AS for ABAP)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.