CVEs published June 15, 2021
57 CVEs were published on June 15, 2021: 0 critical, 28 high. 1 is now in CISA KEV.
- Published
- 57
- Critical
- 0
- High
- 28
- Medium
- 1
- Low
- 2
- Unrated
- 26
- Now in CISA KEV
- 1
- Fix available
- 15
Most affected products
- OpenText Brava! Desktop
- 25
- Google Chrome
- 10
- QEMU
- 4
- Apache Software Foundation Apache HTTP Server
- 1
- Facebook Hermes · hermes-engine
- 1
- IBM Financial Transaction Manager
- 1
- nedb
- 1
- opencast · org.opencastproject:opencast-kernel
- 1
- Raonwiz DEXT5Editor
- 1
- SINAMICS Medium Voltage Products, Remote Access
- 1
High 28
- CVE-2021-32623Opencast vulnerable to billion laughs attack (XML bomb)opencast · org.opencastproject:opencast-kernel
- CVE-2021-30551Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2021-23395Prototype Pollutionnedb
- CVE-2021-32683XSS through createObjectURLwireapp wire-webapp
- CVE-2021-31502This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55.OpenText Brava! Desktop
- CVE-2021-31500This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31499This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31497This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31496This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31495This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31494This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31493This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31492This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31491This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31490This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31489This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31488This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31487This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31486This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31485This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31484This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31483This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31482This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31481This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31480This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31479This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31478This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2020-7864Raonwiz DEXT5 Editor File upload and Execution vulnerabilityRaonwiz DEXT5Editor
Medium, low and unrated 29
- CVE-2021-24037A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackersFacebook Hermes · hermes-engine
- CVE-2021-28857TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.
- CVE-2021-28858TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default.
- CVE-2021-30553Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2021-30552Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extensiGoogle Chrome
- CVE-2021-30550Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious exteGoogle Chrome
- CVE-2021-30549Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2021-30548Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2021-30547Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory aGoogle Chrome
- CVE-2021-30546Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2021-30545Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2021-30544Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2020-29215A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management S
- CVE-2020-29214SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authenticatio
- CVE-2021-27388SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow anSINAMICS Medium Voltage Products, Remote Access
- CVE-2020-5000IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting.IBM Financial Transaction Manager
- CVE-2021-31501This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-31498This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84.OpenText Brava! Desktop
- CVE-2021-33622Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.
- CVE-2021-33887Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot i
- CVE-2020-21316A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary w
- CVE-2021-34170Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code.
- CVE-2021-34128LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP a
- CVE-2021-34129LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall t
- CVE-2021-31618NULL pointer dereference on specially crafted HTTP/2 requestApache Software Foundation Apache HTTP Server
- CVE-2021-3592An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.QEMU
- CVE-2021-3593An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.QEMU
- CVE-2021-3594An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.QEMU
- CVE-2021-3595An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.QEMU