# CVEs published 2021-06-15

57 CVEs were published on June 15, 2021: 0 critical, 28 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2021-32623](https://cve.now/CVE-2021-32623.md): Opencast vulnerable to billion laughs attack (XML bomb) (CVSS 8.1, opencast · org.opencastproject:opencast-kernel)
- [CVE-2021-24037](https://cve.now/CVE-2021-24037.md): A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers (no CVSS, Facebook Hermes · hermes-engine)
- [CVE-2021-28857](https://cve.now/CVE-2021-28857.md): TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie. (no CVSS)
- [CVE-2021-28858](https://cve.now/CVE-2021-28858.md): TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. (no CVSS)
- [CVE-2021-30553](https://cve.now/CVE-2021-30553.md): Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption v (no CVSS, Google Chrome)
- [CVE-2021-30552](https://cve.now/CVE-2021-30552.md): Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extensi (no CVSS, Google Chrome)
- [CVE-2021-30551](https://cve.now/CVE-2021-30551.md): Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, KEV, Google Chrome)
- [CVE-2021-30550](https://cve.now/CVE-2021-30550.md): Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious exte (no CVSS, Google Chrome)
- [CVE-2021-30549](https://cve.now/CVE-2021-30549.md): Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extens (no CVSS, Google Chrome)
- [CVE-2021-30548](https://cve.now/CVE-2021-30548.md): Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a craf (no CVSS, Google Chrome)
- [CVE-2021-30547](https://cve.now/CVE-2021-30547.md): Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory a (no CVSS, Google Chrome)
- [CVE-2021-30546](https://cve.now/CVE-2021-30546.md): Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome)
- [CVE-2021-30545](https://cve.now/CVE-2021-30545.md): Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to p (no CVSS, Google Chrome)
- [CVE-2021-30544](https://cve.now/CVE-2021-30544.md): Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a cra (no CVSS, Google Chrome)
- [CVE-2020-29215](https://cve.now/CVE-2020-29215.md): A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management S (no CVSS)
- [CVE-2020-29214](https://cve.now/CVE-2020-29214.md): SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authenticatio (no CVSS)
- [CVE-2021-27388](https://cve.now/CVE-2021-27388.md): SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an (no CVSS, SINAMICS Medium Voltage Products, Remote Access)
- [CVE-2021-23395](https://cve.now/CVE-2021-23395.md): Prototype Pollution (CVSS 7.3, nedb)
- [CVE-2021-32683](https://cve.now/CVE-2021-32683.md): XSS through createObjectURL (CVSS 8.8, wireapp wire-webapp)
- [CVE-2020-5000](https://cve.now/CVE-2020-5000.md): IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Financial Transaction Manager)
- [CVE-2021-31502](https://cve.now/CVE-2021-31502.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31501](https://cve.now/CVE-2021-31501.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 3.3, OpenText Brava! Desktop)
- [CVE-2021-31500](https://cve.now/CVE-2021-31500.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31499](https://cve.now/CVE-2021-31499.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31498](https://cve.now/CVE-2021-31498.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 3.3, OpenText Brava! Desktop)
- [CVE-2021-31497](https://cve.now/CVE-2021-31497.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31496](https://cve.now/CVE-2021-31496.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31495](https://cve.now/CVE-2021-31495.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31494](https://cve.now/CVE-2021-31494.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31493](https://cve.now/CVE-2021-31493.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31492](https://cve.now/CVE-2021-31492.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31491](https://cve.now/CVE-2021-31491.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31490](https://cve.now/CVE-2021-31490.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31489](https://cve.now/CVE-2021-31489.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31488](https://cve.now/CVE-2021-31488.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31487](https://cve.now/CVE-2021-31487.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31486](https://cve.now/CVE-2021-31486.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31485](https://cve.now/CVE-2021-31485.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31484](https://cve.now/CVE-2021-31484.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31483](https://cve.now/CVE-2021-31483.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31482](https://cve.now/CVE-2021-31482.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31481](https://cve.now/CVE-2021-31481.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31480](https://cve.now/CVE-2021-31480.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31479](https://cve.now/CVE-2021-31479.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-31478](https://cve.now/CVE-2021-31478.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8, OpenText Brava! Desktop)
- [CVE-2021-33622](https://cve.now/CVE-2021-33622.md): Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value. (no CVSS)
- [CVE-2021-33887](https://cve.now/CVE-2021-33887.md): Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot i (no CVSS)
- [CVE-2020-21316](https://cve.now/CVE-2020-21316.md): A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2021-34170](https://cve.now/CVE-2021-34170.md): Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2020-7864](https://cve.now/CVE-2020-7864.md): Raonwiz DEXT5 Editor File upload and Execution vulnerability (CVSS 7.8, Raonwiz DEXT5Editor)
- [CVE-2021-34128](https://cve.now/CVE-2021-34128.md): LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP a (no CVSS)
- [CVE-2021-34129](https://cve.now/CVE-2021-34129.md): LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall t (no CVSS)
- [CVE-2021-31618](https://cve.now/CVE-2021-31618.md): NULL pointer dereference on specially crafted HTTP/2 request (no CVSS, Apache Software Foundation Apache HTTP Server)
- [CVE-2021-3592](https://cve.now/CVE-2021-3592.md): An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. (no CVSS, QEMU)
- [CVE-2021-3593](https://cve.now/CVE-2021-3593.md): An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. (no CVSS, QEMU)
- [CVE-2021-3594](https://cve.now/CVE-2021-3594.md): An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. (no CVSS, QEMU)
- [CVE-2021-3595](https://cve.now/CVE-2021-3595.md): An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. (no CVSS, QEMU)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-06-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.