CVEs published June 25, 2021
47 CVEs were published on June 25, 2021: 3 critical, 22 high.
- Published
- 47
- Critical
- 3
- High
- 22
- Medium
- 6
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Weidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- 12
- Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- 4
- Fidelis Cybersecurity Fidelis Network · Fidelis Cybersecuri…
- 4
- IBM Security Verify Privilege Vault
- 3
- Phoenix Contact FL SWITCH · Phoenix Contact FL NAT
- 3
- IBM Security Verify Privilege Manager
- 2
- Avaya Aura Devices Services
- 1
- nextjs-auth0 · @auth0/nextjs-auth0
- 1
- NVIDIA GeForce Experience Software
- 1
- Phoenix Contact Automation Worx Software Suite
- 1
Critical 3
- CVE-2021-35049Command Injection Vulnerability in Fidelis Network and DeceptionFidelis Cybersecurity Fidelis Network · Fidelis Cybersecuri…
- CVE-2021-35047Privileged Command Injection Vulnerability in Fidelis Network and DeceptionFidelis Cybersecurity Fidelis Network · Fidelis Cybersecuri…
- CVE-2021-35048Unauthenticated SQL Injection Vulnerability in Fidelis Network and DeceptionFidelis Cybersecurity Fidelis Network · Fidelis Cybersecuri…
High 22
- CVE-2021-1073NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a broNVIDIA GeForce Experience Software
- CVE-2021-33542Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerabilityPhoenix Contact Automation Worx Software Suite
- CVE-2021-33541Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerabilityPhoenix Contact ILC1x
- CVE-2021-33540Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devicesPhoenix Contact AXL F BK · Phoenix Contact IL
- CVE-2021-33539WEIDMUELLER: WLAN devices affected by authentication bypass vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33538WEIDMUELLER: WLAN devices affected by improper access control vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33537WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33536WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33535WEIDMUELLER: WLAN devices affected by exploitable format string vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33534WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33533WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33532WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33531WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33530WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33529WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-33528WEIDMUELLER: WLAN devices affected by privilege escalation vulnerabilityWeidmüller IE-WL(T)-BL-AP-CL-XX · Weidmüller IE-WL(T)-VL-AP…
- CVE-2021-21005Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series productsPhoenix Contact FL SWITCH · Phoenix Contact FL NAT
- CVE-2021-21004Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series productsPhoenix Contact FL SWITCH · Phoenix Contact FL NAT
- CVE-2021-21002Denial of Service in Phoenix Contact FL COMSERVER UNI productsPhoenix Contact FL COMSERVER
- CVE-2020-4610IBM Security Secret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local user to execute code due to improper integritIBM Security Verify Privilege Manager
- CVE-2020-4609IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checIBM Security Verify Privilege Manager
- CVE-2021-32702Reflected XSS from the callback handler's error query parameternextjs-auth0 · @auth0/nextjs-auth0
Medium, low and unrated 22
- CVE-2021-35502app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-temp
- CVE-2021-25654Avaya Aura Device Services Arbitrary Code Execution VulnerabilityAvaya Aura Devices Services
- CVE-2021-21003Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series productsPhoenix Contact FL SWITCH · Phoenix Contact FL NAT
- CVE-2021-29677IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting.IBM Security Verify Privilege Vault
- CVE-2021-29676IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection.IBM Security Verify Privilege Vault
- CVE-2021-20583IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) could disclose sensitive information through an HTTP GET request by a privIBM Security Verify Privilege Vault
- CVE-2021-3314Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS.
- CVE-2021-35501PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console.
- CVE-2021-34074PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager.
- CVE-2021-34184Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h.
- CVE-2021-34185Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.h
- CVE-2021-27043An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpectAutodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- CVE-2021-27042A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files.Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- CVE-2021-27041A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files.Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- CVE-2021-27040A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file.Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- CVE-2020-26801A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12
- CVE-2021-31615Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a c
- CVE-2021-28958Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
- CVE-2021-35050User Credentials Stored in a Recoverable Format within Fidelis Network and DeceptionFidelis Cybersecurity Fidelis Network · Fidelis Cybersecuri…
- CVE-2021-35475SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server.
- CVE-2021-33895ETINET BACKBOX E4.09 and H4.09 mismanages password access control.
- CVE-2021-34427In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (curreThe Eclipse Foundation Eclipse BIRT