CVEs published June 14, 2021
32 CVEs were published on June 14, 2021: 1 critical, 3 high.
- Published
- 32
- Critical
- 1
- High
- 3
- Medium
- 6
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 20
Most affected products
- Simple 301 Redirects by BetterLinks
- 5
- Dell PowerEdge BIOS Intel
- 4
- The Plus Addons for Elementor Page Builder
- 3
- Android
- 2
- FooPlugins Best Image Gallery & Responsive Photo Gallery –…
- 1
- Gallery from files
- 1
- Nextend Smart Slider
- 1
- OTRS AG ((OTRS)) Community Edition · OTRS AG OTRS
- 1
- scandipwa create-magento-app · @scandipwa/magento-scripts
- 1
- Sendit WP Newsletter
- 1
Critical 1
High 3
Medium, low and unrated 28
- CVE-2021-32684Missing Handler in @scandipwa/magento-scriptsscandipwa create-magento-app · @scandipwa/magento-scripts
- CVE-2021-20027A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted requesSonicWall SonicOS
- CVE-2021-27887Stored XSS vulnerability in Ellipse APM
- CVE-2021-0324Product: AndroidVersions: Android SoCAndroid ID: A-175402462Android
- CVE-2021-0467In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2021-21556Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerabilDell PowerEdge BIOS Intel
- CVE-2021-21555Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerabiliDell PowerEdge BIOS Intel
- CVE-2021-21554Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based Dell PowerEdge BIOS Intel
- CVE-2021-24357FooGallery < 2.0.35 - Authenticated Stored Cross-Site ScriptingFooPlugins Best Image Gallery & Responsive Photo Gallery –…
- CVE-2021-24358The Plus Addons for Elementor Page Builder < 4.1.10 - Open RedirectThe Plus Addons for Elementor Page Builder
- CVE-2021-24359The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email SendingThe Plus Addons for Elementor Page Builder
- CVE-2021-24360Yes/No Chart < 1.0.12 - Authenticated (contributor+) Blind SQL InjectionYes/No Chart
- CVE-2021-24382Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)Nextend Smart Slider
- CVE-2021-24349Gallery From Files <= 1.6.0 - Reflected Cross-Site Scripting (XSS)Gallery from files
- CVE-2021-24350Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)Visitors
- CVE-2021-24351The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)The Plus Addons for Elementor Page Builder
- CVE-2021-24352Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect ExportSimple 301 Redirects by BetterLinks
- CVE-2021-24353Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect ImportSimple 301 Redirects by BetterLinks
- CVE-2021-24354Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin InstallationSimple 301 Redirects by BetterLinks
- CVE-2021-24355Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard ValueSimple 301 Redirects by BetterLinks
- CVE-2021-24356Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin ActivationSimple 301 Redirects by BetterLinks
- CVE-2021-24341Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL InjectionXllentech English Islamic Calendar
- CVE-2021-24345Sendit WP Newsletter <= 2.5.1 - Authenticated (admin+) SQL InjectionSendit WP Newsletter
- CVE-2021-24346Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)Stock in & out
- CVE-2021-24347SP Project & Document Manager <2 4.22 - Authenticated Shell UploadSP Project & Document Manager
- CVE-2021-24348Side Menu < 3.1.5 - Authenticated (admin+) SQL InjectionSide Menu – add fixed side buttons
- CVE-2021-21439Possible DoS attack using a special crafted URL in email bodyOTRS AG ((OTRS)) Community Edition · OTRS AG OTRS
- CVE-2021-34693net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts