# CVEs published 2021-06-14

32 CVEs were published on June 14, 2021: 1 critical, 3 high. Days are UTC.

- [CVE-2021-32684](https://cve.now/CVE-2021-32684.md): Missing Handler in @scandipwa/magento-scripts (CVSS 6.2, scandipwa create-magento-app · @scandipwa/magento-scripts)
- [CVE-2021-20027](https://cve.now/CVE-2021-20027.md): A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted reques (no CVSS, SonicWall SonicOS)
- [CVE-2021-26845](https://cve.now/CVE-2021-26845.md): eSOMS Report Function Vulnerability (CVSS 7.5)
- [CVE-2021-27887](https://cve.now/CVE-2021-27887.md): Stored XSS vulnerability in Ellipse APM (CVSS 6.3)
- [CVE-2021-27196](https://cve.now/CVE-2021-27196.md): Specially Crafted IEC 61850 Protocol Sequence Vulnerability (CVSS 7.5)
- [CVE-2021-0324](https://cve.now/CVE-2021-0324.md): Product: AndroidVersions: Android SoCAndroid ID: A-175402462 (no CVSS, Android)
- [CVE-2021-0467](https://cve.now/CVE-2021-0467.md): In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-21557](https://cve.now/CVE-2021-21557.md): Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. (CVSS 8.1, Dell PowerEdge BIOS Intel)
- [CVE-2021-21556](https://cve.now/CVE-2021-21556.md): Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerabil (CVSS 6.1, Dell PowerEdge BIOS Intel)
- [CVE-2021-21555](https://cve.now/CVE-2021-21555.md): Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerabili (CVSS 6.1, Dell PowerEdge BIOS Intel)
- [CVE-2021-21554](https://cve.now/CVE-2021-21554.md): Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based (CVSS 6.1, Dell PowerEdge BIOS Intel)
- [CVE-2021-32682](https://cve.now/CVE-2021-32682.md): Multiple vulnerabilities leading to RCE (CVSS 9.8, Studio-42 elFinder · studio-42/elfinder)
- [CVE-2021-24357](https://cve.now/CVE-2021-24357.md): FooGallery \< 2.0.35 - Authenticated Stored Cross-Site Scripting (no CVSS, FooPlugins Best Image Gallery & Responsive Photo Gallery –…)
- [CVE-2021-24358](https://cve.now/CVE-2021-24358.md): The Plus Addons for Elementor Page Builder \< 4.1.10 - Open Redirect (no CVSS, The Plus Addons for Elementor Page Builder)
- [CVE-2021-24359](https://cve.now/CVE-2021-24359.md): The Plus Addons for Elementor Page Builder \< 4.1.11 - Arbitrary Reset Pwd Email Sending (no CVSS, The Plus Addons for Elementor Page Builder)
- [CVE-2021-24360](https://cve.now/CVE-2021-24360.md): Yes/No Chart \< 1.0.12 - Authenticated (contributor+) Blind SQL Injection (no CVSS, Yes/No Chart)
- [CVE-2021-24382](https://cve.now/CVE-2021-24382.md): Smart Slider 3 \< 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS) (no CVSS, Nextend Smart Slider)
- [CVE-2021-24349](https://cve.now/CVE-2021-24349.md): Gallery From Files \<= 1.6.0 - Reflected Cross-Site Scripting (XSS) (no CVSS, Gallery from files)
- [CVE-2021-24350](https://cve.now/CVE-2021-24350.md): Visitors \<= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS) (no CVSS, Visitors)
- [CVE-2021-24351](https://cve.now/CVE-2021-24351.md): The Plus Addons for Elementor \< 4.1.12 - Reflected Cross-Site Scripting (XSS) (no CVSS, The Plus Addons for Elementor Page Builder)
- [CVE-2021-24352](https://cve.now/CVE-2021-24352.md): Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export (no CVSS, Simple 301 Redirects by BetterLinks)
- [CVE-2021-24353](https://cve.now/CVE-2021-24353.md): Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Import (no CVSS, Simple 301 Redirects by BetterLinks)
- [CVE-2021-24354](https://cve.now/CVE-2021-24354.md): Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin Installation (no CVSS, Simple 301 Redirects by BetterLinks)
- [CVE-2021-24355](https://cve.now/CVE-2021-24355.md): Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value (no CVSS, Simple 301 Redirects by BetterLinks)
- [CVE-2021-24356](https://cve.now/CVE-2021-24356.md): Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation (no CVSS, Simple 301 Redirects by BetterLinks)
- [CVE-2021-24341](https://cve.now/CVE-2021-24341.md): Xllentech English Islamic Calendar \< 2.6.8 - Authenticated SQL Injection (no CVSS, Xllentech English Islamic Calendar)
- [CVE-2021-24345](https://cve.now/CVE-2021-24345.md): Sendit WP Newsletter \<= 2.5.1 - Authenticated (admin+) SQL Injection (no CVSS, Sendit WP Newsletter)
- [CVE-2021-24346](https://cve.now/CVE-2021-24346.md): Stock in & out \<= 1.0.4 - Reflected Cross-Site Scripting (XSS) (no CVSS, Stock in & out)
- [CVE-2021-24347](https://cve.now/CVE-2021-24347.md): SP Project & Document Manager \<2 4.22 - Authenticated Shell Upload (no CVSS, SP Project & Document Manager)
- [CVE-2021-24348](https://cve.now/CVE-2021-24348.md): Side Menu \< 3.1.5 - Authenticated (admin+) SQL Injection (no CVSS, Side Menu – add fixed side buttons)
- [CVE-2021-21439](https://cve.now/CVE-2021-21439.md): Possible DoS attack using a special crafted URL in email body (CVSS 6.5, OTRS AG ((OTRS)) Community Edition · OTRS AG OTRS)
- [CVE-2021-34693](https://cve.now/CVE-2021-34693.md): net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-06-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.