Week 26, 2021
28 June – 4 July 2021
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 44%
-
Critical 9.8
CVE-2021-35973 NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, allowing an unauthenticated attacker to …EPSS 3.1%
- Critical 9.8 EPSS 2.8%
- Critical 9.6 EPSS 2.7%
-
Critical 9.8
CVE-2021-36088 Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).EPSS 2.4%
-
Critical 9.8
CVE-2021-35029 An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP,…EPSS 2.3%
Zyxel · USG FLEX series firmware · ATP series firmware · VPN series Firmware
- Critical 9.9 EPSS 2%
-
Critical 9.0
CVE-2020-7869 An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewe…EPSS 1.6%
-
Critical 9.8
CVE-2019-18906 cryptctl: client side password hashing is equivalent to clear text password storageEPSS 1.1%
SUSE · SUSE Manager Server 4.0 · SUSE Linux Enterprise Server for SAP 12-SP5
- Critical
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2021-34527 Windows Print Spooler Remote Code Execution VulnerabilityEPSS 100%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Unscored
CVE-2021-31813 Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD.EPSS 78%
- Medium 4.3 EPSS 43%
-
Unscored
CVE-2021-34187 main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.EPSS 16%
-
Unscored
CVE-2021-35941 Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore with…EPSS 13%
-
Unscored
CVE-2021-30557 Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially ex…EPSS 12%
-
Unscored
CVE-2021-35336 Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an …EPSS 10%
-
Medium 6.5
CVE-2021-26920 Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intendedEPSS 9.5%
Advisories
- SUSE / openSUSE Security Updates 39
- Oracle Linux Security Advisories (ELSA) 13
- AlmaLinux Security Advisories 12
- Rocky Linux Security Advisories 11
- Amazon Linux Security Center (ALAS) 11
- CISA ICS & IT advisories 111 critical
- Debian Security (DSA / DLA) 101 critical
- BSI CERT-Bund (WID) 6
- Ubuntu Security Notices (USN) 2
- Microsoft Security Response Center 11 critical
- CERT@VDE 11 critical
- VDE-2020-036 WAGO: Multiple Vulnerabilities in I/O-Check Service 4 CVEs
- MSRC-CVE-2021-34527 Windows Print Spooler Remote Code Execution Vulnerability 1 CVEs
- ICSA-21-182-05 Mitsubishi Electric Air Conditioning Systems 1 CVEs
- DLA-2693-1 xmlbeans - security update 1 CVEs