| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-31980 | Hig | 0.53 | 8.1 | 0.03 | Jun 8, 2021 | Microsoft Intune Management Extension Remote Code Execution Vulnerability | ||
| CVE-2021-31977 | Hig | 0.56 | 8.6 | 0.03 | Jun 8, 2021 | Windows Hyper-V Denial of Service Vulnerability | ||
| CVE-2021-31976 | Hig | 0.49 | 7.5 | 0.04 | Jun 8, 2021 | Server for NFS Information Disclosure Vulnerability | ||
| CVE-2021-31975 | Hig | 0.49 | 7.5 | 0.04 | Jun 8, 2021 | Server for NFS Information Disclosure Vulnerability | ||
| CVE-2021-31974 | Hig | 0.49 | 7.5 | 0.07 | Jun 8, 2021 | Server for NFS Denial of Service Vulnerability | ||
| CVE-2021-31973 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Windows GPSVC Elevation of Privilege Vulnerability | ||
| CVE-2021-31969 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-31968 | Hig | 0.49 | 7.5 | 0.03 | Jun 8, 2021 | Windows Remote Desktop Services Denial of Service Vulnerability | ||
| CVE-2021-31967 | Hig | 0.51 | 7.8 | 0.03 | Jun 8, 2021 | VP9 Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-31966 | Hig | 0.47 | 7.2 | 0.05 | Jun 8, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-31964 | Hig | 0.50 | 7.6 | 0.02 | Jun 8, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-31963 | Hig | 0.46 | 7.1 | 0.02 | Jun 8, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-31958 | Hig | 0.49 | 7.5 | 0.03 | Jun 8, 2021 | Windows NTLM Elevation of Privilege Vulnerability | ||
| CVE-2021-31956 | Hig | 0.64 | 7.8 | 0.22 | KEV | Jun 8, 2021 | Windows NTFS Elevation of Privilege Vulnerability | |
| CVE-2021-31954 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-31953 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Windows Filter Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-31952 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-31951 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2021-31950 | Hig | 0.53 | 7.6 | 0.05 | Jun 8, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-31949 | Hig | 0.48 | 7.3 | 0.03 | Jun 8, 2021 | Microsoft Outlook Remote Code Execution Vulnerability | ||
| CVE-2021-31948 | Hig | 0.50 | 7.6 | 0.01 | Jun 8, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-31946 | Hig | 0.51 | 7.8 | 0.03 | Jun 8, 2021 | Paint 3D Remote Code Execution Vulnerability | ||
| CVE-2021-31945 | Hig | 0.51 | 7.8 | 0.02 | Jun 8, 2021 | Paint 3D Remote Code Execution Vulnerability | ||
| CVE-2021-31943 | Hig | 0.51 | 7.8 | 0.02 | Jun 8, 2021 | 3D Viewer Remote Code Execution Vulnerability | ||
| CVE-2021-31942 | Hig | 0.51 | 7.8 | 0.02 | Jun 8, 2021 | 3D Viewer Remote Code Execution Vulnerability | ||
| CVE-2021-31941 | Hig | 0.51 | 7.8 | 0.03 | Jun 8, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-31940 | Hig | 0.51 | 7.8 | 0.02 | Jun 8, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-31939 | Hig | 0.52 | 7.8 | 0.13 | Jun 8, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-31938 | Hig | 0.48 | 7.3 | 0.02 | Jun 8, 2021 | Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability | ||
| CVE-2021-26420 | Hig | 0.46 | 7.1 | 0.03 | Jun 8, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-1675 | Hig | 0.79 | 7.8 | 0.85 | KEV | Jun 8, 2021 | Windows Print Spooler Remote Code Execution Vulnerability | |
| CVE-2021-33712 | Hig | 0.57 | 8.8 | 0.01 | Jun 8, 2021 | A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate… | ||
| CVE-2021-31343 | Hig | 0.57 | 8.8 | 0.03 | Jun 8, 2021 | The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation… | ||
| CVE-2021-31342 | Hig | 0.57 | 8.8 | 0.03 | Jun 8, 2021 | The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated… | ||
| CVE-2021-31340 | Hig | 0.49 | 7.5 | 0.01 | Jun 8, 2021 | A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2), SIMATIC RF186C (All versions > V1.1 and < V1.3.2), SIMATIC RF186CI (All versions > V1.1 and < V1.3.2), SIMATIC RF188C (All versions > V1.1… | ||
| CVE-2021-27399 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of… | ||
| CVE-2021-27390 | Hig | 0.51 | 7.8 | 0.02 | Jun 8, 2021 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out… | ||
| CVE-2021-27387 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of… | ||
| CVE-2021-26474 | Hig | 0.56 | 8.6 | 0.01 | Jun 8, 2021 | Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family may be affected too.) | ||
| CVE-2021-22213 | Hig | 0.57 | 8.8 | 0.02 | Jun 8, 2021 | A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari | ||
| CVE-2021-33571 | Hig | 0.42 | 7.5 | 0.05 | Jun 8, 2021 | In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses.… | ||
| CVE-2021-32674 | Hig | 0.50 | 8.8 | 0.02 | Jun 8, 2021 | Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules are not available… | ||
| CVE-2021-21559 | Hig | 0.46 | 7.1 | 0.00 | Jun 8, 2021 | Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in the client (NetWorker Management Console) components which uses SSL encrypted connection in order to communicate with the application server.… | ||
| CVE-2021-21558 | Hig | 0.53 | 8.2 | 0.00 | Jun 8, 2021 | Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information Disclosure vulnerability. A local administrator of the gstd system may potentially exploit this vulnerability to read LDAP credentials from local logs and use the stolen credentials to… | ||
| CVE-2021-32673 | Hig | 0.50 | 8.8 | 0.02 | Jun 8, 2021 | reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve… | ||
| CVE-2021-22215 | Hig | 0.49 | 7.5 | 0.01 | Jun 8, 2021 | An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations in other projects | ||
| CVE-2021-34280 | Hig | 0.51 | 7.8 | 0.01 | Jun 8, 2021 | Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file. | ||
| CVE-2021-33176 | Hig | 0.49 | 7.5 | 0.01 | Jun 8, 2021 | VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application… | ||
| CVE-2021-33175 | Hig | 0.49 | 7.5 | 0.01 | Jun 8, 2021 | EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being… | ||
| CVE-2020-26516 | Hig | 0.57 | 8.8 | 0.01 | Jun 8, 2021 | A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain a CSRF token and can therefore be entirely predicted allowing attackers to cause the victim's browser to execute undesired actions in the… |
- risk 0.53cvss 8.1epss 0.03
Microsoft Intune Management Extension Remote Code Execution Vulnerability
- risk 0.56cvss 8.6epss 0.03
Windows Hyper-V Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.04
Server for NFS Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Server for NFS Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.07
Server for NFS Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GPSVC Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows Remote Desktop Services Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.03
VP9 Video Extensions Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.05
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.50cvss 7.6epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows NTLM Elevation of Privilege Vulnerability
- risk 0.64cvss 7.8epss 0.22
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Filter Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.53cvss 7.6epss 0.05
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.48cvss 7.3epss 0.03
Microsoft Outlook Remote Code Execution Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.03
Paint 3D Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Paint 3D Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
3D Viewer Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
3D Viewer Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.52cvss 7.8epss 0.13
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.02
Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.79cvss 7.8epss 0.85
Windows Print Spooler Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate…
- risk 0.57cvss 8.8epss 0.03
The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation…
- risk 0.57cvss 8.8epss 0.03
The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated…
- risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC RF185C (All versions > V1.1 and < V1.3.2), SIMATIC RF186C (All versions > V1.1 and < V1.3.2), SIMATIC RF186CI (All versions > V1.1 and < V1.3.2), SIMATIC RF188C (All versions > V1.1…
- risk 0.51cvss 7.8epss 0.01
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of…
- risk 0.51cvss 7.8epss 0.02
A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out…
- risk 0.51cvss 7.8epss 0.01
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of…
- risk 0.56cvss 8.6epss 0.01
Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family may be affected too.)
- risk 0.57cvss 8.8epss 0.02
A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari
- risk 0.42cvss 7.5epss 0.05
In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses.…
- risk 0.50cvss 8.8epss 0.02
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules are not available…
- risk 0.46cvss 7.1epss 0.00
Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in the client (NetWorker Management Console) components which uses SSL encrypted connection in order to communicate with the application server.…
- risk 0.53cvss 8.2epss 0.00
Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information Disclosure vulnerability. A local administrator of the gstd system may potentially exploit this vulnerability to read LDAP credentials from local logs and use the stolen credentials to…
- risk 0.50cvss 8.8epss 0.02
reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve…
- risk 0.49cvss 7.5epss 0.01
An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations in other projects
- risk 0.51cvss 7.8epss 0.01
Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file.
- risk 0.49cvss 7.5epss 0.01
VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application…
- risk 0.49cvss 7.5epss 0.01
EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being…
- risk 0.57cvss 8.8epss 0.01
A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain a CSRF token and can therefore be entirely predicted allowing attackers to cause the victim's browser to execute undesired actions in the…