Skip to content
OpenAdvisories

Archive

11 June 2021

Vulnerabilities first published on this day (UTC), newest first.

158 results · Feed

  • Unscored —

    A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker …

  • Unscored —

    A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead…

  • Unscored —

    An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code exe…

  • Unscored —

    An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of pr…

  • Unscored —

    An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or …

  • Unscored —

    An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privil…

  • Unscored —

    An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the d…

  • Unscored —

    An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privi…

  • High 8.6

    Unsafe loopback forwarding interface in Restund

    Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopback address range. This allows you to reach any other service running on localhost which you might consider private. In the configuration tha…

  • Critical 10.0

    Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

  • Unscored —

    KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php fi…

  • Unscored —

    In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. T…

  • High 7.8

    UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specif…

  • Unscored —

    In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to loca…

  • Unscored —

    In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to …

  • Unscored —

    In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local es…

  • Unscored —

    In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local es…

  • Unscored —

    In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to …

  • Unscored —

    In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to loc…

  • Unscored —

    In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escal…

  • Unscored —

    In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to …

  • Unscored —

    In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could …

  • Unscored —

    In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. Th…

  • Unscored —
    CVE-2021-0475 Public exploit

    In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lea…

  • Unscored —

    In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to rem…

  • Unscored —
    CVE-2021-0472 Public exploit

    In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a pe…

  • Unscored —

    In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user c…

  • Unscored —
    CVE-2021-0474 Public exploit

    In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea…

  • Unscored —

    In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to…

  • Unscored —

    In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an uns…

  • Unscored —

    In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to …

  • Unscored —
    CVE-2021-0466 Public exploit

    In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This cou…

  • Unscored —

    In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. T…

  • Unscored —
    CVE-2021-0476 Public exploit

    In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local…

  • Unscored —
    CVE-2021-0481 Public exploit

    In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpec…

  • Unscored —

    In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead…

  • Unscored —

    In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lea…

  • Unscored —

    The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution …

  • Unscored —

    The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary c…

  • Unscored —

    The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change…