Skip to content
OpenAdvisories

Archive

8 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /8 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.4
    CVE-2021-31962

    Kerberos AppContainer Security Feature Bypass Vulnerability

    Kerberos AppContainer Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2021-26473

    Unauthenticated arbitrary file upload and command execution in Vembu products

    In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web server process. These files can then be executed remotely by call…

  • Critical 10.0
    CVE-2021-26472

    Unauthenticated remote command execution with SYSTEM privileges in Vembu products

    In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges.

  • Critical 9.8
    CVE-2021-26471

    Unauthenticated remote command execution in Vembu products

    In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this command argument an unauthenticated attacker can execute arbitrary shell commands.