Archive
June 2021
Vulnerabilities first published in this month (UTC), newest first.
70 results · Clear filters · Feed
-
Unscored —CVE-2021-35956 Public exploit
Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote au…
-
High 7.5CVE-2021-22119 Public exploit
Resource Exhaustion in Spring Security
Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux app…
-
Unscored —CVE-2021-34824 Public exploit
Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified …
-
Unscored —CVE-2021-35475 Public exploit
SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when …
-
Unscored —
In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessib…
-
Unscored —CVE-2021-35448 Public exploit
Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by usin…
-
Critical 9.8CVE-2021-32708 Public exploit
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. The condition…
-
Unscored —CVE-2020-18662 Public exploit
SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php.
-
High 8.2
Moodle command execution vulnerability exists in the default legacy spellchecker plugin
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
-
Unscored —CVE-2021-33624 Public exploit
In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confus…
-
Unscored —CVE-2021-28976 Public exploit
Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.
-
Medium 6.4CVE-2021-32644 Public exploit
Cross-site Scripting in Random.php
Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code injection in random.php. The attack requires user authentication to access the random.php page unles…
-
Low 2.9CVE-2021-34428 Public exploit
SessionListener can prevent a session from being invalidated breaking logout
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple con…
-
Unscored —CVE-2021-24383 Public exploit
WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
-
Unscored —CVE-2021-0506 Public exploit
In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay…
-
Unscored —CVE-2021-0507 Public exploit
In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —CVE-2021-0516 Public exploit
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. Thi…
-
Unscored —CVE-2021-0511 Public exploit
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This…
-
Unscored —CVE-2021-0510 Public exploit
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —CVE-2021-0509 Public exploit
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —CVE-2021-0508 Public exploit
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to l…
-
Unscored —CVE-2021-0520 Public exploit
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condit…
-
Unscored —CVE-2021-0522 Public exploit
In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. T…
-
Unscored —CVE-2021-0478 Public exploit
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This c…
-
Unscored —CVE-2021-0513 Public exploit
In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission b…
-
Unscored —CVE-2021-29337 Public exploit
MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate …
-
Unscored —CVE-2020-8300 Public exploit
Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-…
-
Unscored —
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-messa…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corr…
KEV Nov 3, 2021 -
Critical 9.8
Multiple vulnerabilities leading to RCE
elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP c…
-
Unscored —CVE-2021-24356 Public exploit
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plu…
-
Unscored —
SP Project & Document Manager <2 4.22 - Authenticated Shell Upload
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was di…
-
High 8.1
Remote Code Execution (RCE)
The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
-
Unscored —CVE-2021-0475 Public exploit
In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lea…
-
Unscored —CVE-2021-0472 Public exploit
In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a pe…
-
Unscored —CVE-2021-0474 Public exploit
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea…
-
Unscored —CVE-2021-0466 Public exploit
In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This cou…
-
Unscored —CVE-2021-0476 Public exploit
In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local…
-
Unscored —CVE-2021-0481 Public exploit
In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpec…
-
High 8.8
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and ex…
KEV Dec 3, 2025