Archive
21 June 2021
Vulnerabilities first published on this day (UTC), newest first.
82 results · Feed
-
Unscored —
In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local es…
-
Unscored —
In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local …
-
Unscored —CVE-2021-0506 Public exploit
In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay…
-
Unscored —CVE-2021-0507 Public exploit
In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —CVE-2021-0516 Public exploit
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. Thi…
-
Unscored —
In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could …
-
Unscored —
In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a l…
-
Unscored —CVE-2021-0511 Public exploit
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This…
-
Unscored —CVE-2021-0510 Public exploit
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —CVE-2021-0509 Public exploit
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —CVE-2021-0508 Public exploit
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to l…
-
Unscored —CVE-2021-0520 Public exploit
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condit…
-
Unscored —
In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission chec…
-
Unscored —CVE-2021-0522 Public exploit
In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. T…
-
Unscored —
In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to …
-
Unscored —
In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffe…
-
Unscored —CVE-2021-0478 Public exploit
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This c…
-
Unscored —CVE-2021-0513 Public exploit
In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission b…
-
High 7.5
ReDOS in IS-SVG
A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.
-
Medium 5.3
Regular Expression Denial of Service (ReDOS)
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
-
Unscored —
Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling …
-
Unscored —
Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.
-
Unscored —
Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitra…
-
Medium 6.1
qiita-markdown Cross-site Scripting vulnerability
Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.
-
Unscored —
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead…
-
Unscored —CVE-2021-29337 Public exploit
MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate …
-
Low 3.5
Denial-of-Service (DoS) Vulnerability
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A succ…
-
Unscored —
MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session …
-
Unscored —
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituse…
-
Unscored —
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, co…
-
Unscored —
White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does n…
-
Unscored —
White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can …
-
Unscored —
White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.
-
Unscored —
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files f…
-
Unscored —
White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the u…
-
Unscored —
White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attac…
-
Unscored —
White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can mo…