Skip to content
OpenAdvisories

Archive

22 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /22 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

104 results · Feed

  • Unscored —
    CVE-2021-0559

    In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to re…

    Android
  • Unscored —
    CVE-2021-0558

    In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. Thi…

    Android
  • Unscored —
    CVE-2021-0556

    In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead…

    Android
  • Unscored —
    CVE-2021-0564

    In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local es…

    Android
  • Unscored —
    CVE-2021-0557

    In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remo…

    Android
  • Unscored —
    CVE-2021-0565

    In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to lo…

    Android
  • Unscored —
    CVE-2021-0572

    In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. …

    Android
  • Unscored —
    CVE-2021-0569

    In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This …

    Android
  • Unscored —
    CVE-2021-0554

    In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local in…

    Android
  • Unscored —
    CVE-2021-0570

    In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe P…

    Android
  • Unscored —
    CVE-2021-0568

    In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing per…

    Android
  • Unscored —
    CVE-2021-0567

    In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This cou…

    Android
  • Unscored —
    CVE-2021-0534

    In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an inse…

    Android
  • Unscored —
    CVE-2021-0571

    In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and Ap…

    Android
  • Unscored —
    CVE-2021-0555

    In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead …

    Android
  • Unscored —
    CVE-2021-20744

    Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to versi…

    EC-CUBE EC-CUBE Category contents plugin (for EC-CUBE 3.0 series)
  • Unscored —
    CVE-2021-20743

    Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions pri…

    EC-CUBE EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series)
  • Unscored —
    CVE-2021-20742

    Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to ve…

    EC-CUBE EC-CUBE Business form output plugin (for EC-CUBE 3.0 series)
  • Unscored —
    CVE-2021-20741

    Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) …

    Hitachi Hitachi Application Server Help
  • Unscored —
    CVE-2021-20737

    Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthori…

    WESEEK GROWI
  • Unscored —
    CVE-2021-20736

    NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the in…

    WESEEK GROWI
  • Unscored —
    CVE-2021-20735

    Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlie…

    ETUNA ETUNA EC-CUBE plugins
  • Unscored —
    CVE-2021-20734

    Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbi…

    Collne Welcart e-Commerce
  • Unscored —
    CVE-2021-20733

    Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions fr…

    asken あすけんダイエット (asken diet) for Android Android