CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a...9.8 Critical
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when...6.5 Medium
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application...9.8 Critical
- homey firmware, pro firmware +1 moreAn issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0....4.3 Medium
- foxitsoftware 3dAn issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430....9.8 Critical
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference.7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via...9.8 Critical
- foxitsoftware foxit studio photoAn issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain...7.8 High
- cybelesoft thinfinity virtualuiCybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data...6.5 Medium
- cybelesoft thinfinity virtualuiCybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter...6.1 Medium
- foxitsoftware foxit studio photoAn issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain...7.8 High
- qemu, canonical ubuntu linux, debian linux +2 morerom_copy() in hw/core/loader.c in QEMU 4.1.0 does not validate the relationship between two...5.6 Medium
- foxitsoftware foxit studio photoAn issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via...7.8 High
- qemuhw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing...5.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...6.0 Medium
- postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 moreImproper Restriction of XML External Entity Reference7.7 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference...7.5 High
- phplistphpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.6.1 Medium
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack...9.8 Critical
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information...9.8 Critical
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows...7.5 High
- indutny ellipticSignature Malleabillity in elliptic7.7 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when...7.6 High
- ibm security guardiumIBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote...4.4 Medium
- ibm security guardiumIBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an...4.1 Medium
- ibm security guardiumIBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users...6.1 Medium
- zohocorp manageengine opmanagerIn Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal...7.5 High
- fortinet fortianalyzerAn improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow...5.4 Medium
- fortinet fortisiem windows agent, fortisiemwindowsagent +1 moreAn unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an...9.8 Critical
- ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...5.9 Medium
- fortinet forticlient, forticlient for windows +1 moreUse of a hard-coded cryptographic key to encrypt security sensitive data in local storage and...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...7.4 High
- rconfigrConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection....9.8 Critical
- rconfigrConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL...9.8 Critical
- rconfigrConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because,...9.8 Critical
- rconfigrConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because,...9.8 Critical
- Show moreLoading…