Day: June 11, 2021

Microsoft Windows 10 20H2/10 21H1/10 2004/Server 20H2/Server 2004 Bind Filter Driver information disclosure

A vulnerability classified as problematic has been found in Microsoft Windows 10 2004/10 20H2/10 21H1/Server 2004/Server 20H2 (Operating System). This

Common Vulnerabilities and Exposures

Microsoft Windows 7 SP1 up to Server 2019 Kerberos AppContainer Remote Code Execution

A vulnerability classified as critical was found in Microsoft Windows (Operating System). This vulnerability affects some unknown functionality of the

Common Vulnerabilities and Exposures

Microsoft SharePoint Server 2013 SP1/2016/2019 information disclosure

A vulnerability has been found in Microsoft SharePoint Server 2013 SP1/2016/2019 (Groupware Software) and classified as problematic. Affected by this

Common Vulnerabilities and Exposures

Microsoft VP9 Video Extensions Remote Code Execution [CVE-2021-31967]

A vulnerability was found in Microsoft VP9 Video Extensions (the affected version unknown). It has been classified as critical. Applying

Common Vulnerabilities and Exposures

Microsoft Windows 7 SP1 up to Server 2019 Remote Desktop Services denial of service

A vulnerability was found in Microsoft Windows (Operating System). It has been declared as critical. This vulnerability affects an unknown

Common Vulnerabilities and Exposures

Microsoft Windows 10 20H2 up to Server 2019 Cloud Files Mini Filter Driver Remote Privilege Escalation

A vulnerability was found in Microsoft Windows 10 1809 up to Server 2019 (Operating System). It has been rated as

Common Vulnerabilities and Exposures

Microsoft Windows 8.1 up to Server 2019 TCP/IP Driver denial of service

A vulnerability classified as problematic has been found in Microsoft Windows (Operating System). Affected is an unknown part of the

Common Vulnerabilities and Exposures Countermeasures: Patch Exploit: No Local: No Product: .NET Remote: Yes Risk: problematic Vendor: Microsoft

Microsoft .NET 3.1/5.0 denial of service [CVE-2021-31957]

A vulnerability was found in Microsoft .NET 3.1/5.0. It has been classified as problematic. Affected is an unknown code block.

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: auth0-lock Remote: Yes Risk: problematic Vendor: Auth0

Auth0 auth0-lock up to 11.30.0 Sign In cross site scripting

A vulnerability, which was classified as problematic, was found in Auth0 auth0-lock up to 11.30.0. Affected is an unknown functionality

Common Vulnerabilities and Exposures

aaugustin Websockets up to 9.0 on Python HTTP Basic Authentication timing discrepancy

A vulnerability has been found in aaugustin Websockets up to 9.0 on Python and classified as problematic. Affected by this

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: Yes Product: MIFARE Ultralight/NTAG Card Remote: No Risk: problematic Vendor: NXP

NXP MIFARE Ultralight/NTAG Card protection mechanism [CVE-2021-33881]

A vulnerability was found in NXP MIFARE Ultralight and NTAG Card (affected version not known) and classified as problematic. Affected

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: ZOC Remote: Partially Risk: problematic Vendor: EmTec

EmTec ZOC up to 8.02.1 unknown vulnerability [CVE-2021-32198]

A vulnerability was found in EmTec ZOC up to 8.02.1. It has been declared as problematic. Upgrading to version 8.02.2

Common Vulnerabilities and Exposures

Invoice Ninja up to 4.3.x AccountRepository.php deserialization

A vulnerability classified as critical was found in Invoice Ninja up to 4.3.x. Affected by this vulnerability is an unknown

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: GameLoop Remote: Yes Risk: problematic Vendor: Tencent

Tencent GameLoop up to 4.1.21.89 Update cleartext transmission

A vulnerability, which was classified as problematic, was found in Tencent GameLoop up to 4.1.21.89. This affects an unknown part

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: Kernel Remote: Partially Risk: critical Type: Operating System Vendor: Linux

Linux Kernel up to 5.9 ucma.c ctx_list/ucma_migrate_id use after free

A vulnerability was found in Linux Kernel up to 5.9 (Operating System). It has been declared as critical. Affected by

Common Vulnerabilities and Exposures

IBM DataPower Gateway up to 10.0.1.0/2018.4.1.14 GET Request information disclosure

A vulnerability was found in IBM DataPower Gateway up to 10.0.1.0/2018.4.1.14. It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: No Product: Video Embed Plugin Remote: Yes Risk: critical Type: WordPress Plugin

Video Embed Plugin up to 1.0 on WordPress GET Parameter id sql injection

A vulnerability classified as critical has been found in Video Embed Plugin up to 1.0 on WordPress (WordPress Plugin). This

Common Vulnerabilities and Exposures Countermeasures: Patch Exploit: No Local: No Product: Wireshark Remote: Yes Risk: problematic Type: Packet Analyzer Software

Wireshark 3.4.0 up to 3.4.5 DVB-S2-BB Dissector denial of service

A vulnerability, which was classified as problematic, has been found in Wireshark 3.4.0 up to 3.4.5 (Packet Analyzer Software). This

Common Vulnerabilities and Exposures

FlightLog Plugin up to 3.0.2 on WordPress POST sql injection

A vulnerability, which was classified as critical, was found in FlightLog Plugin up to 3.0.2 on WordPress (WordPress Plugin). Affected

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: JNews Theme Remote: Yes Risk: problematic Type: WordPress Plugin

JNews Theme up to 8.0.5 on WordPress POST Request /?ajax-request=jnews cat_id cross site scripting

A vulnerability has been found in JNews Theme up to 8.0.5 on WordPress (WordPress Plugin) and classified as problematic. Affected

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: No Product: iFlyChat Plugin Remote: Yes Risk: problematic Type: WordPress Plugin

iFlyChat Plugin up to 4.6.4 on WordPress APP ID Setting cross site scripting

A vulnerability was found in iFlyChat Plugin up to 4.6.4 on WordPress (WordPress Plugin). It has been classified as problematic.

Common Vulnerabilities and Exposures

Sharp NEC UN462A HTTP Request Remote Privilege Escalation [CVE-2021-20698]

A vulnerability was found in Sharp NEC UN462A, UN462VA, UN492S, UN492VS, UN552A, UN552S, UN552VS, UN552, UN552V, UX552S, UN552, V864Q, C861Q,

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: No Product: ArcGIS Server Remote: Yes Risk: critical

ArcGIS Server up to 10.8.1 sql injection [CVE-2021-29099]

A vulnerability was found in ArcGIS Server up to 10.8.1. It has been rated as critical. This issue affects an

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: WildFly Remote: Partially Risk: critical Type: Application Server Software Vendor: Red Hat

Red Hat WildFly up to 19.x EJBContext Principle privileges management

A vulnerability classified as critical has been found in Red Hat WildFly up to 19.x (Application Server Software). Affected is