# CVEs published 2021-06-22

104 CVEs were published on June 22, 2021: 2 critical, 2 high. Days are UTC.

- [CVE-2021-34397](https://cve.now/CVE-2021-34397.md): Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service. (CVSS 1.9, NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier…)
- [CVE-2021-34396](https://cve.now/CVE-2021-34396.md): Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, whic (CVSS 3.0, NVIDIA Jetson TX2 series, TX2 NX)
- [CVE-2021-34395](https://cve.now/CVE-2021-34395.md): Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user w (CVSS 3.9, NVIDIA Jetson TX1)
- [CVE-2021-34394](https://cve.now/CVE-2021-34394.md): Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. (CVSS 4.2, NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier…)
- [CVE-2021-34393](https://cve.now/CVE-2021-34393.md): Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. (CVSS 4.2, NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier…)
- [CVE-2021-34392](https://cve.now/CVE-2021-34392.md): Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz\_map\_shared\_mem function can bypass boundary (CVSS 4.4, NVIDIA Jetson TX1)
- [CVE-2021-34391](https://cve.now/CVE-2021-34391.md): Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow thro (CVSS 5.3, NVIDIA Jetson TX1)
- [CVE-2021-34390](https://cve.now/CVE-2021-34390.md): Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow thro (CVSS 5.3, NVIDIA Jetson TX1)
- [CVE-2021-34372](https://cve.now/CVE-2021-34372.md): Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing cod (CVSS 8.2, NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier…)
- [CVE-2020-36394](https://cve.now/CVE-2020-36394.md): pam\_setquota.c in the pam\_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesyst (no CVSS)
- [CVE-2021-32701](https://cve.now/CVE-2021-32701.md): Possible bypass of token claim validation when OAuth2 Introspection caching is enabled (CVSS 7.5, ory oathkeeper · github.com/ory/oathkeeper)
- [CVE-2021-32700](https://cve.now/CVE-2021-32700.md): Supply chain attack via MiTM against users (CVSS 9.1, ballerina-platform ballerina-lang)
- [CVE-2021-32699](https://cve.now/CVE-2021-32699.md): Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings (CVSS 6.5, pterodactyl wings · github.com/pterodactyl/wings)
- [CVE-2021-22383](https://cve.now/CVE-2021-22383.md): There is an out-of-bounds read vulnerability in eCNS280\_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC (no CVSS, eCNS280\_TD;eSE620X vESS)
- [CVE-2021-22382](https://cve.now/CVE-2021-22382.md): Huawei LTE USB Dongle products have an improper permission assignment vulnerability. (no CVSS, E3372)
- [CVE-2021-22363](https://cve.now/CVE-2021-22363.md): There is a resource management error vulnerability in eCNS280\_TD V100R005C10SPC650. (no CVSS, eCNS280\_TD)
- [CVE-2021-22342](https://cve.now/CVE-2021-22342.md): There is an information leak vulnerability in Huawei products. (no CVSS, IPS Module;NGFW Module;SeMG9811;USG9500)
- [CVE-2021-22378](https://cve.now/CVE-2021-22378.md): There is a race condition vulnerability in eCNS280\_TD V100R005C00 and V100R005C10. (no CVSS, eCNS280\_TD)
- [CVE-2021-22377](https://cve.now/CVE-2021-22377.md): There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00S (no CVSS, S12700;S2700;S5700;S6700;S7700)
- [CVE-2021-22366](https://cve.now/CVE-2021-22366.md): There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. (no CVSS, eSE620X vESS)
- [CVE-2021-22365](https://cve.now/CVE-2021-22365.md): There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. (no CVSS, eSE620X vESS)
- [CVE-2021-32644](https://cve.now/CVE-2021-32644.md): Cross-site Scripting in Random.php (CVSS 6.4, ampache)
- [CVE-2021-22361](https://cve.now/CVE-2021-22361.md): There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. (no CVSS, eCNS280;eSE620X vESS)
- [CVE-2021-3044](https://cve.now/CVE-2021-3044.md): Cortex XSOAR: Unauthorized Usage of the REST API (CVSS 9.8, Palo Alto Networks Cortex XSOAR)
- [CVE-2020-18654](https://cve.now/CVE-2020-18654.md): Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component (no CVSS)
- [CVE-2020-15732](https://cve.now/CVE-2020-15732.md): Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacke (CVSS 6.5, Bitdefender Total Security · Bitdefender Internet Securi… +1)
- [CVE-2021-34428](https://cve.now/CVE-2021-34428.md): For Eclipse Jetty versions \<= 9.4.40, \<= 10.0.2, \<= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, th (CVSS 2.9, The Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…)
- [CVE-2020-18648](https://cve.now/CVE-2020-18648.md): Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS\_v1.0/admin (no CVSS)
- [CVE-2020-18647](https://cve.now/CVE-2020-18647.md): Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor". (no CVSS)
- [CVE-2020-18646](https://cve.now/CVE-2020-18646.md): Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php". (no CVSS)
- [CVE-2020-22176](https://cve.now/CVE-2020-22176.md): PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. (no CVSS)
- [CVE-2020-22170](https://cve.now/CVE-2020-22170.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\get\_doctor.php. (no CVSS)
- [CVE-2020-22164](https://cve.now/CVE-2020-22164.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\check\_availability.php. (no CVSS)
- [CVE-2020-22165](https://cve.now/CVE-2020-22165.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\user-login.php. (no CVSS)
- [CVE-2020-22166](https://cve.now/CVE-2020-22166.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\forgot-password.php. (no CVSS)
- [CVE-2020-22167](https://cve.now/CVE-2020-22167.md): PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \\hms\\admin\\appointment-history.php. (no CVSS)
- [CVE-2020-22168](https://cve.now/CVE-2020-22168.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\change-emaild.php. (no CVSS)
- [CVE-2020-22169](https://cve.now/CVE-2020-22169.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\appointment-history.php. (no CVSS)
- [CVE-2020-22171](https://cve.now/CVE-2020-22171.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\registration.php. (no CVSS)
- [CVE-2020-22172](https://cve.now/CVE-2020-22172.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\get\_doctor.php. (no CVSS)
- [CVE-2020-22173](https://cve.now/CVE-2020-22173.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\edit-profile.php. (no CVSS)
- [CVE-2020-22174](https://cve.now/CVE-2020-22174.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\book-appointment.php. (no CVSS)
- [CVE-2020-22175](https://cve.now/CVE-2020-22175.md): PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \\hms\\admin\\betweendates-detailsreports.php. (no CVSS)
- [CVE-2010-4816](https://cve.now/CVE-2010-4816.md): It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of servi (no CVSS, FreeBSD and OpenBSD ftpd service)
- [CVE-2021-35206](https://cve.now/CVE-2021-35206.md): Gitpod before 0.6.0 allows unvalidated redirects. (no CVSS)
- [CVE-2010-4266](https://cve.now/CVE-2010-4266.md): It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher. (no CVSS, vanilla forums)
- [CVE-2010-4264](https://cve.now/CVE-2010-4264.md): It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute o (no CVSS, vanilla forums)
- [CVE-2021-35046](https://cve.now/CVE-2021-35046.md): A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted s (no CVSS)
- [CVE-2021-35045](https://cve.now/CVE-2021-35045.md): Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ en (no CVSS)
- [CVE-2021-34244](https://cve.now/CVE-2021-34244.md): A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or (no CVSS)
- [CVE-2021-34243](https://cve.now/CVE-2021-34243.md): A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbitrary web script (no CVSS)
- [CVE-2010-3300](https://cve.now/CVE-2010-3300.md): It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks. (no CVSS, OWASP ESAPI · org.owasp.esapi:esapi)
- [CVE-2010-2525](https://cve.now/CVE-2010-2525.md): A flaw was discovered in gfs2 file system’s handling of acls (access control lists). (no CVSS, kernel)
- [CVE-2021-0608](https://cve.now/CVE-2021-0608.md): In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. (no CVSS, Android)
- [CVE-2021-0607](https://cve.now/CVE-2021-0607.md): In iaxxx\_calc\_i2s\_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0606](https://cve.now/CVE-2021-0606.md): In drm\_syncobj\_handle\_to\_fd of drm\_syncobj.c, there is a possible use after free due to incorrect refcounting. (no CVSS, Android)
- [CVE-2021-0605](https://cve.now/CVE-2021-0605.md): In pfkey\_dump of af\_key.c, there is a possible out-of-bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0551](https://cve.now/CVE-2021-0551.md): In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to improper input valid (no CVSS, Android)
- [CVE-2021-0552](https://cve.now/CVE-2021-0552.md): In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2021-0549](https://cve.now/CVE-2021-0549.md): In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. (no CVSS, Android)
- [CVE-2021-0542](https://cve.now/CVE-2021-0542.md): In updateNotification of BeamTransferManager.java, there is a missing permission check. (no CVSS, Android)
- [CVE-2021-0541](https://cve.now/CVE-2021-0541.md): In phNxpNciHal\_ext\_process\_nfc\_init\_rsp of phNxpNciHal\_ext.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0553](https://cve.now/CVE-2021-0553.md): In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. (no CVSS, Android)
- [CVE-2021-0550](https://cve.now/CVE-2021-0550.md): In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE\_EXTERNAL\_STORAGE permissions without user consent due to a c (no CVSS, Android)
- [CVE-2021-0548](https://cve.now/CVE-2021-0548.md): In rw\_i93\_send\_to\_lower of rw\_i93.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0547](https://cve.now/CVE-2021-0547.md): In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a miss (no CVSS, Android)
- [CVE-2021-0546](https://cve.now/CVE-2021-0546.md): In phNxpNciHal\_print\_res\_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0545](https://cve.now/CVE-2021-0545.md): In phNxpNciHal\_print\_res\_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0544](https://cve.now/CVE-2021-0544.md): In phNxpNciHal\_print\_res\_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0543](https://cve.now/CVE-2021-0543.md): In phNxpNciHal\_process\_ext\_rsp of phNxpNciHal\_ext.cc, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2021-0540](https://cve.now/CVE-2021-0540.md): In halWrapperDataCallback of hal\_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0539](https://cve.now/CVE-2021-0539.md): In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missi (no CVSS, Android)
- [CVE-2021-0538](https://cve.now/CVE-2021-0538.md): In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. (no CVSS, Android)
- [CVE-2021-0537](https://cve.now/CVE-2021-0537.md): In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay atta (no CVSS, Android)
- [CVE-2021-0536](https://cve.now/CVE-2021-0536.md): In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. (no CVSS, Android)
- [CVE-2021-0535](https://cve.now/CVE-2021-0535.md): In wpas\_ctrl\_msg\_queue\_timeout of ctrl\_iface\_unix.c, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2021-0566](https://cve.now/CVE-2021-0566.md): In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0563](https://cve.now/CVE-2021-0563.md): In ih264e\_fmt\_conv\_422i\_to\_420sp of ih264e\_fmt\_conv.c, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0562](https://cve.now/CVE-2021-0562.md): In RasterIntraUpdate of motion\_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-0561](https://cve.now/CVE-2021-0561.md): In append\_to\_verify\_fifo\_interleaved\_ of stream\_encoder.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0559](https://cve.now/CVE-2021-0559.md): In Lag\_max of p\_ol\_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0558](https://cve.now/CVE-2021-0558.md): In fillMainDataBuf of pvmp3\_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0556](https://cve.now/CVE-2021-0556.md): In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0564](https://cve.now/CVE-2021-0564.md): In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2021-0557](https://cve.now/CVE-2021-0557.md): In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2021-0565](https://cve.now/CVE-2021-0565.md): In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. (no CVSS, Android)
- [CVE-2021-0572](https://cve.now/CVE-2021-0572.md): In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2021-0569](https://cve.now/CVE-2021-0569.md): In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. (no CVSS, Android)
- [CVE-2021-0554](https://cve.now/CVE-2021-0554.md): In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. (no CVSS, Android)
- [CVE-2021-0570](https://cve.now/CVE-2021-0570.md): In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2021-0568](https://cve.now/CVE-2021-0568.md): In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. (no CVSS, Android)
- [CVE-2021-0567](https://cve.now/CVE-2021-0567.md): In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. (no CVSS, Android)
- [CVE-2021-0534](https://cve.now/CVE-2021-0534.md): In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. (no CVSS, Android)
- [CVE-2021-0571](https://cve.now/CVE-2021-0571.md): In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and AppTaskImpl.java, there (no CVSS, Android)
- [CVE-2021-0555](https://cve.now/CVE-2021-0555.md): In RenderStruct of protostream\_objectsource.cc, there is a possible crash due to a missing null check. (no CVSS, Android)
- [CVE-2021-20744](https://cve.now/CVE-2021-20744.md): Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a rem (no CVSS, EC-CUBE CO. EC-CUBE Category contents plugin)
- [CVE-2021-20743](https://cve.now/CVE-2021-20743.md): Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 a (no CVSS, EC-CUBE CO. EC-CUBE Email newsletters management plugin)
- [CVE-2021-20742](https://cve.now/CVE-2021-20742.md): Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a (no CVSS, EC-CUBE CO. EC-CUBE Business form output plugin)
- [CVE-2021-20741](https://cve.now/CVE-2021-20741.md): Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) version 10-11-01 and (no CVSS, Hitachi Application Server Help)
- [CVE-2021-20737](https://cve.now/CVE-2021-20737.md): Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without acc (no CVSS, WESEEK GROWI)
- [CVE-2021-20736](https://cve.now/CVE-2021-20736.md): NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in t (no CVSS, WESEEK GROWI)
- [CVE-2021-20735](https://cve.now/CVE-2021-20735.md): Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip numb (no CVSS, ETUNA EC-CUBE plugins)
- [CVE-2021-20734](https://cve.now/CVE-2021-20734.md): Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML (no CVSS, Collne Welcart e-Commerce)
- [CVE-2021-20733](https://cve.now/CVE-2021-20733.md): Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions from v.3.0.0 to v.4.2.x (no CVSS, あすけんダイエット (asken diet) for Android)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.