CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, ipados, macos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13...7.8 High
- apple ios, ipados, macos +4 more +6 moreAn information disclosure issue was addressed by removing the vulnerable code. This issue is...5.5 Medium
- apple ios, ipados, macos +2 more +4 moreA validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13...4.6 Medium
- apple macos, mac os x +1 moreThis issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5....6.5 Medium
- gitlabInsecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1...4.3 Medium
- opencartOpenCart Cross-site Scripting4.8 Medium
- dd-wrt** DISPUTED ** An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote...8.8 High
- nagios, fedoraproject fedora +1 moreNagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for...4.9 Medium
- monstra cms** DISPUTED ** Monstra CMS 3.0.4 allows an attacker, who already has administrative access to...7.2 High
- qemu, canonical ubuntu linux, opensuse leap +2 more +4 moreAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 Medium
- sony wf-1000x firmware, wf-sp700n firmware, wh-1000xm2 firmware +9 more +11 moreMultiple SONY Wireless Headphones have vulnerability that someone within the Bluetooth range can...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 5.7.1. drivers/tty/vt/keyboard.c has an...7.8 High
- owasp json-sanitizerCross-site scripting in json-sanitizer6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include...6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS...6.1 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...7.5 High
- redhat enterprise linuxA PGP signature bypass flaw was found in fwupd (all versions), which could lead to the...6.0 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 moreA flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows...3.3 Low
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...7.5 High
- google android, debian linux +1 moreIn exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing...6.5 Medium
- mumble, qt, fedoraproject fedora +1 more +3 moreQt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products,...7.5 High
- arm cortex-a32 firmware, cortex-a34 firmware, cortex-a35 firmware +5 more +7 moreArm Armv8-A core implementations utilizing speculative execution past unconditional changes in...5.5 Medium
- boltThe filename of uploaded files vulnerable to stored XSS in Bolt CMS7.4 High
- boltCSRF issue on preview pages in Bolt CMS8.6 High
- graphql graphql-playground, prisma graphql-playground-html, graphql-playground-middleware-express +3 more +5 moreReflected XSS in GraphQL Playground7.4 High
- dlink dir-600m firmware, dsl-2730u firmware +1 moreD-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in...7.5 High
- citrix workspace appCitrix Workspace App before 2006.1 on Windows has Insecure Permissions for %PROGRAMDATA%\Citrix ...7.8 High
- citrix workspace appCitrix Workspace App before 2006.1 on Windows has Insecure Permissions for "%PROGRAMDATA%\Citrix...7.8 High
- huawei alp-al00b, alp-al00b firmware, alp-l09 +53 more +55 moreSome Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability....4.6 Medium
- videolan vlc media player, debian linux +1 moreA heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c...7.8 High
- rejetto http file serverrejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used,...7.5 High
- [red hat] networkmanager, fedoraproject fedora +1 moreIt was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...4.3 Medium
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...7.5 High
- openbrowser project openbrowserOpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in...5.4 Medium
- codedropz drag and drop multiple file upload - contact form 7The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows...9.8 Critical
- whitesourcesoftware whitesourceThe dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1...7.5 High
- qbik wingateWinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local...7.8 High
- libreoffice, fedoraproject fedora, opensuse leap +2 moreXForms submissions could overwrite local files6.5 Medium
- otrsInformation disclosure in external interface3.5 Low
- libreoffice, fedoraproject fedora, opensuse leap +2 moreremote graphics contained in docx format retrieved in 'stealth mode'5.3 Medium
- couchbase server java sdkCouchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate...7.5 High
- couchbase server, sync gateway +1 moreIn Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views...7.5 High
- couchbase serverIn Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if...8.8 High
- huawei ips module firmware, ngfw module firmware, nip6300 firmware +6 more +8 moreHuawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace...9.8 Critical
- zoomAn exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10...8.0 High
- zoomAn exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes...8.5 High
- nextcloud talkA too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not...9.9 Critical
- Show moreLoading…