Archive

9 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /9 July 2021 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Critical 9.8

CVE-2021-23847

Unauthenticated Information Extraction Vulnerability

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 …

Bosch CPP Firmware

Jun 9, 2021
Critical 9.0

CVE-2021-27635

SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrato…

SAP SAP NetWeaver AS for JAVA

Jun 9, 2021
Critical 10.0

CVE-2021-33841

Circutor SGE-PLC1000 OS command Injection

SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges.

Circutor SGE-PLC1000

Jun 9, 2021
Critical 9.8

CVE-2020-11291

Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Jun 9, 2021
Critical 9.8

CVE-2020-11176

While processing server certificate from IPSec server, certificate validation for subject alternative name API can caus…

Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear

Jun 9, 2021