CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- avaya ip officeIPO Information Disclosure5.5 Medium
- octobercms debugbar, rainlab debugbar-plugin +1 morePotential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar6.1 Medium
- weave net, weaveworks weave +1 moreWeave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements5.8 Medium
- google chrome, debian linux +1 moreIncorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed...6.5 Medium
- google chrome, debian linux +1 moreInsufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed...6.5 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreUse after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote...8.8 High
- google chrome, debian linux, opensuse backports +1 more +3 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed...6.5 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreIncorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a...6.5 Medium
- google chrome, debian linux, opensuse backports +1 more +3 moreUse after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote...9.6 Critical
- google chromeOut of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...8.8 High
- google chromeInsufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote...6.5 Medium
- google chromeBad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially...8.8 High
- octobercms octoberPotential CSV Injection vector in OctoberCMS4.0 Medium
- octobercms octoberArbitrary File Deletion vulnerability in OctoberCMS6.2 Medium
- octobercms octoberUpload whitelisted files to any directory in OctoberCMS3.4 Low
- octobercms octoberReflected XSS when importing CSV in OctoberCMS4.0 Medium
- octobercms octoberLocal File read vulnerability in OctoberCMS4.8 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib...5.3 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify...6.1 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify...6.1 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify...6.1 Medium
- playtubePlayTube 1.8 allows disclosure of user details via ajax.php?type=../admin-panel/autoload&page...4.3 Medium
- libjpeg-turbo, mozilla mozjpeg +1 morelibjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in...8.1 High
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 more +4 moreServer Side Request Forgery in Grafana8.2 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Denial of Service Vulnerability5.9 Medium
- cisco prime infrastructureCisco Prime Infrastructure SQL Injection Vulnerability5.4 Medium
- cisco application services engine, application policy infrastructure controller, application policy infrastructure controller (apic) +2 moreCisco Application Services Engine Software Authorization Vulnerability5.5 Medium
- cisco application services engine, application policy infrastructure controller, application policy infrastructure controller (apic) +2 moreCisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability5.3 Medium
- cisco digital network architecture center, digital network architecture center (dna center) +1 moreCisco Digital Network Architecture Center Information Disclosure Vulnerability4.3 Medium
- cisco unified contact center expressCisco Unified Contact Center Express Improper API Authorization Vulnerability5.4 Medium
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities9.8 Critical
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities8.1 High
- cisco ioxCisco IOx Application Framework Arbitrary File Creation Vulnerability8.1 High
- cisco ioxCisco IOx Application Framework Arbitrary File Overwrite Vulnerability6.3 Medium
- cisco ios, ios xe, ios 12.2(53)sg1 +1 more +3 moreCisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability7.7 High
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability8.8 High
- elastic kibanaKibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An...5.4 Medium
- elastic elasticsearchPrivilege Escalation Flaw in Elasticsearch8.8 High
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An...7.2 High
- elastic kibanaKibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the...8.8 High
- elastic app searchElastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be…6.1 Medium
- elastic cloud on kubernetesCryptographic Issues in ECK7.5 High
- cisco ioxCisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability6.4 Medium
- cisco asr 920 series aggregation services router, ios xe +1 moreCisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability6.3 Medium
- cisco ios, ios xe, ios 12.2(58)se +2 moreCisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability7.7 High
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities8.1 High
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities9.8 Critical
- cisco ios, ios xe, nx-os +1 more +3 moreCisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability6.8 Medium
- cisco ios, ios 15.2(5a)e +1 moreCisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability4.7 Medium
- cisco ios, ios xe, ios 15.1(2)t +2 moreCisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerability7.5 High
- Show moreLoading…