CVEs published June 11, 2021
158 CVEs were published on June 11, 2021: 14 critical, 15 high. 5 are now in CISA KEV.
- Published
- 158
- Critical
- 14
- High
- 15
- Medium
- 19
- Low
- 3
- Unrated
- 107
- Now in CISA KEV
- 5
- Fix available
- 73
Most affected products
- Samsung Mobile Devices
- 26
- Android
- 24
- IGSS Definition (Def.exe) V15.0.0.21140 and prior
- 12
- AMD Radeon Software
- 7
- Gallagher Command Centre
- 7
- Accusoft
- 4
- E-Series SANtricity OS Controller Software 11.x
- 4
- PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…
- 4
- Canonical apport
- 3
- https://github.com/curl/curl
- 3
Critical 14
- CVE-2021-34679Thycotic Password Reset Server before 5.3.0 allows credential disclosure.
- CVE-2021-21795A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear 19.9.Accusoft
- CVE-2021-21833An improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack functionality of Accusoft ImageGear 19.9.Accusoft
- CVE-2021-23140Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised CommandGallagher Command Centre
- CVE-2021-23230A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modGallagher Command Centre
- CVE-2021-22763A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and…
- CVE-2021-22765A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All VersionsPowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…
- CVE-2021-22767A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All VersionsPowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…
- CVE-2021-22768A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All VersionsPowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…
- CVE-2021-25383An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers Samsung Mobile Devices
- CVE-2021-25384An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-Samsung Mobile Devices
- CVE-2021-25385An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows aSamsung Mobile Devices
- CVE-2021-25386An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows aSamsung Mobile Devices
- CVE-2021-25387An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackerSamsung Mobile Devices
High 15
- CVE-2021-21382Unsafe loopback forwarding interface in Restundwireapp restund
- CVE-2020-7860UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishaEstsoft UnEGG
- CVE-2021-21808A memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9.Accusoft
- CVE-2021-21824An out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft ImageGear 19.9.Accusoft
- CVE-2021-23204Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be eGallagher Command Centre
- CVE-2021-23205Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers Gallagher Command Centre
- CVE-2021-22181A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relatiGitLab
- CVE-2021-22766A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All VersionsPowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic…
- CVE-2021-25388Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.Samsung Mobile Devices
- CVE-2021-26828OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP f
- CVE-2021-28814Improper Access Control Vulnerability in HelpdeskQNAP Systems Helpdesk
- CVE-2021-28805Inclusion of Sensitive Information in QSSQNAP Systems QSS
- CVE-2021-25684apport can be stalled by reading a FIFOCanonical apport
- CVE-2021-25683apport improperly parses /proc/pid/statCanonical apport
- CVE-2021-25682apport improperly parses /proc/pid/statusCanonical apport
Medium, low and unrated 129
- CVE-2020-12988A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system wh1st/2nd/3rd Gen AMD EPYC™ Processors
- CVE-2020-12987A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.AMD Radeon Software
- CVE-2020-12986An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel,AMD Radeon Software
- CVE-2020-12985An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of AMD Radeon Software
- CVE-2020-12983An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.AMD Radeon Software
- CVE-2020-12982An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of servAMD Radeon Software
- CVE-2020-12981An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially caAMD Radeon Software
- CVE-2020-12980An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of serAMD Radeon Software
- CVE-2021-3256KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file.
- CVE-2021-27200In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php.
- CVE-2021-0489In memory management driver, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0490In memory management driver, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0491In memory management driver, there is a possible escalation of privilege due to a missing permission check.Android
- CVE-2021-0493In memory management driver, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0494In memory management driver, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2021-0495In memory management driver, there is a possible out of bounds write due to uninitialized data.Android
- CVE-2021-0496In memory management driver, there is a possible memory corruption due to a use after free.Android
- CVE-2021-0497In memory management driver, there is a possible memory corruption due to a use after free.Android
- CVE-2021-0498In memory management driver, there is a possible memory corruption due to a double free.Android
- CVE-2021-0472In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass.Android
- CVE-2021-0473In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data.Android
- CVE-2021-0474In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2021-0475In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free.Android
- CVE-2021-0477In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2021-0480In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier.Android
- CVE-2021-0485In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypassAndroid
- CVE-2021-0487In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjaAndroid
- CVE-2021-0492In memory management driver, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0466In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device.Android
- CVE-2021-0476In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition.Android
- CVE-2021-0481In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler.Android
- CVE-2021-0482In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free.Android
- CVE-2021-0484In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check.Android
- CVE-2019-9475In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass.Android
- CVE-2021-27410The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution on the Welch Allyn meWelch Allyn medical device management tools
- CVE-2021-27408The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chaiWelch Allyn medical device management tools
- CVE-2021-32930The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and eiView
- CVE-2021-32932The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versioiView
- CVE-2021-20591Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/MELSEC iQ-R series CPU modules
- CVE-2021-22905Nextcloud Android App (com.nextcloud.client) before v3.16.0 is vulnerable to information disclosure due to searches for sharees being perforNextcloud Android App
- CVE-2021-22906Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticNextcloud End-to-End Encryption
- CVE-2021-22895Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when usinNextcloud Desktop Client
- CVE-2021-22896Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to creNextcloud Mail
- CVE-2021-22897curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST whttps://github.com/curl/curl
- CVE-2021-22901curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session thttps://github.com/curl/curl
- CVE-2021-22902The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible dhttps://github.com/rails/rails · actionpack
- CVE-2021-22903The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability.https://github.com/rails/rails · actionpack
- CVE-2021-22904The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authenthttps://github.com/rails/rails · actionpack
- CVE-2021-22915Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limitNextcloud Server
- CVE-2021-22898curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurhttps://github.com/curl/curl
- CVE-2021-22912Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by defauNextcloud iOS app
- CVE-2021-22913Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server Nextcloud Deck
- CVE-2021-23182Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be dGallagher Command Centre
- CVE-2021-23211Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption keyGallagher Command Centre
- CVE-2021-23136Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command CeGallagher Command Centre
- CVE-2021-22762A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and priIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22764A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (sePowerLogic PM55xx, PowerLogic EGX100, and PowerLogic EGX300
- CVE-2021-22769A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that coulEasergy T300 with firmware V2.7.1 and older
- CVE-2021-22752A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data orIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22753A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or IGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22754A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data orIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22755A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of iIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22756A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of inIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22757A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of inIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22758A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in losIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22759A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remoIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22760A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resulIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22761A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.IGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22749A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prModicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior
- CVE-2021-22750A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data orIGSS Definition (Def.exe) V15.0.0.21041 and prior
- CVE-2021-22751A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of iIGSS Definition (Def.exe) V15.0.0.21140 and prior
- CVE-2021-22175When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versionsGitLab
- CVE-2021-28210An unlimited recursion in DxeCore in EDK II.TianoCore EDK II
- CVE-2021-28211A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.TianoCore EDK II
- CVE-2021-28213Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.TianoCore EDK II
- CVE-2020-13688Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in orDrupal Core · drupal/core
- CVE-2020-13663Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, whichDrupal Core · drupal/core +1
- CVE-2021-28687HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and dispxen
- CVE-2021-28689x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1.Xen
- CVE-2021-25399Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege.Samsung Mobile Smart Manager
- CVE-2021-25400Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.Samsung Mobile Samsug Internet
- CVE-2021-25401Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action.Samsung Mobile Samsung Health
- CVE-2021-25402Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information.Samsung Mobile Samsung Notes
- CVE-2021-25403Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) aSamsung Mobile Samsung Account
- CVE-2021-25404Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.Samsung Mobile SmartThings
- CVE-2021-25405An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to aSamsung Mobile Samsung Notes
- CVE-2021-25406Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT dSamsung Mobile Gear S Plugin
- CVE-2021-25390Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.Samsung Mobile Devices
- CVE-2021-25391Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.Samsung Mobile Devices
- CVE-2021-25392Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive infoSamsung Mobile Devices
- CVE-2021-25393Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access Samsung Mobile Devices
- CVE-2021-25394A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radioSamsung Mobile Devices
- CVE-2021-25395A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilSamsung Mobile Devices
- CVE-2021-25396An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution.Samsung Mobile Devices
- CVE-2021-25397An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of tSamsung Mobile Devices
- CVE-2021-25398Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.Samsung Mobile Bixby Voice
- CVE-2021-25389Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication.Samsung Mobile Devices
- CVE-2021-25420Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak WSamsung Mobile Galaxy Watch PlugIn
- CVE-2021-25421Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Samsung Mobile Galaxy Watch3 PlugIn
- CVE-2021-25422Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak WSamsung Mobile Watch Active PlugIn
- CVE-2021-25423Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Samsung Mobile Watch Active2 PlugIn
- CVE-2021-25424Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take ovSamsung Mobile Tizen wearable devices
- CVE-2021-25425Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.Samsung Mobile Samsung Health
- CVE-2021-25412An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected acSamsung Mobile Devices
- CVE-2021-25413Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to acSamsung Mobile Devices
- CVE-2021-25414Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbSamsung Mobile Devices
- CVE-2021-25415Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memorSamsung Mobile Devices
- CVE-2021-25416Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executabSamsung Mobile Devices
- CVE-2021-25417Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage.Samsung Mobile Devices
- CVE-2021-25418Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrarSamsung Mobile Samsung Internet
- CVE-2021-25419Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in adSamsung Mobile Samsung Internet
- CVE-2021-25407A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.Samsung Mobile Devices
- CVE-2021-25408A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution.Samsung Mobile Devices
- CVE-2021-25409Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification Samsung Mobile Devices
- CVE-2021-25410Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files wiSamsung Mobile Devices
- CVE-2021-25411Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-onSamsung Mobile Devices
- CVE-2021-29754IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web InbounIBM WebSphere Application Server
- CVE-2021-20396IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can be read by another usIBM QRadar Analyst Workflow
- CVE-2020-5003IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.IBM Financial Transaction Manager
- CVE-2021-26993E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploitE-Series SANtricity OS Controller Software 11.x
- CVE-2021-26995E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploitE-Series SANtricity OS Controller Software 11.x
- CVE-2021-26996E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploitE-Series SANtricity OS Controller Software 11.x
- CVE-2021-26997E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploitE-Series SANtricity OS Controller Software 11.x
- CVE-2021-33205Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content
- CVE-2021-34540Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.
- CVE-2021-3013ripgrep before 13 on Windows allows attackers to trigger execution of arbitrary programs from the current working directory via the -z/--seagrep-cli · ripgrep
- CVE-2021-26829OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
- CVE-2021-28801Out-of-Bounds Read Vulnerability in QSSQNAP Systems QSS
- CVE-2021-24035A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 Facebook WhatsApp Business for Android · Facebook WhatsApp…