Archive

18 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /18 July 2021 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.8

CVE-2021-3604

Primion-Digitek Secure 8 SQL injection vulnerability

Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database.

PRIMION DIGITEK Secure 8 (Evalos)

Jun 18, 2021
Critical 9.8

CVE-2021-21669 EPSS 26%

XXE vulnerability in Jenkins Generic Webhook Trigger Plugin

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Generic Webhook Trigger Plugin org.jenkins-ci.plugins:generic-webhook-trigger Web / CMS Maven

Jun 18, 2021
Critical 9.9

CVE-2021-34809

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management co…

Synology Download Station

Jun 18, 2021
Critical 9.9

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows rem…

Synology Download Station

Jun 18, 2021