CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- zenphotoZenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by...8.8 High
- zenphotoCross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to...6.1 Medium
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows remote command execution via the events feature.8.8 High
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via...7.2 High
- pandorafms pandora fmsArtica Pandora FMS 7.44 has persistent XSS in the Messages feature.5.4 Medium
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows privilege escalation.9.8 Critical
- pandorafms pandora fmsArtica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via...7.2 High
- pandorafms pandora fmsArtica Pandora FMS 7.44 has inadequate access controls on a web folder.7.5 High
- citrix xenapp** VERSION NOT SUPPORTED WHEN ASSIGNED ** Citrix XenApp 6.5, when 2FA is enabled, allows a remote...5.3 Medium
- pydio cellsThe following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior...7.0 High
- ciphermail gateway, webmail messenger +1 moreAn issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional...5.9 Medium
- ciphermail gateway, webmail messenger +1 moreAn issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1...7.2 High
- hyperledger indy node, linuxfoundation indy-node +1 moreUncontrolled Resource Consumption in Indy Node7.5 High
- canonical whoopsieResource exhaustion vulnerability in whoopsie5.5 Medium
sudoMageiaUpdated sudo packages fix security vulnerabilityNo scoreintel-microcodeUbuntuintel-microcode regressionNo score- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....9.8 Critical
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....7.5 High
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....7.5 High
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....7.5 High
- dell client consumer and commercial platforms, latitude 5300 2-in-1 firmware, latitude 5300 firmware +16 more +18 moreSelect Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin...8.6 High
- dell client consumer and commercial platforms, chengming 3967 firmware, chengming 3977 firmware +352 more +354 moreDell Client Consumer and Commercial platforms include an improper authorization vulnerability in...7.1 High
- arista veos, cloudeos +1 moreA vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x...7.5 High
- mitsubishielectric melsec iq-r00cpu firmware, melsec iq-r01cpu firmware, melsec iq-r02cpu firmware +18 more +20 moreMitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial...7.5 High
- phpmusselPhar unserialization vulnerability in phpMussel7.7 High
- red hat undertow, netapp oncommand insight, redhat jboss enterprise application platform +1 more +3 moreAllocation of Resources Without Limits or Throttling in Undertow7.5 High
- hashicorp vaultImproper Input Validation in HashiCorp Vault9.8 Critical
- hashicorp vaultInformation Disclosure in HashiCorp Vault7.5 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...8.8 High
- liferay portalLiferay Portal and Liferay DXP Fails to Sanitize API Data6.5 Medium
- liferay portalLiferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution8.8 High
- enhancesoft osticketscp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category...5.4 Medium
- kata containers containers, katacontainers runtime +1 moreKata Containers - Containers have access to the guest root filesystem device3.8 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie5.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade7.0 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in management interface certificate generator7.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification7.2 High
- palo alto networks pan-osPAN-OS: Buffer overflow in authd authentication response7.2 High
- kata containers containers, katacontainers runtime, fedoraproject fedora +2 moreKata Containers - Guests can trick the kata-runtime into mounting the container image on any host path7.8 High
- laborator xenonThe Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate...6.1 Medium
- google androidIn checkSystemLocationAccess of LocationAccessPolicy.java, there is a possible bypass of user...5.5 Medium
- google androidIn aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow....9.8 Critical
- google androidIn sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn addListener of RegionSamplingThread.cpp, there is a possible out of bounds write due to...7.8 High
- google androidIn addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a...5.3 Medium
- google androidIn verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass...7.8 High
- google androidIn updateUidProcState of AppOpsService.java, there is a possible permission bypass due to a logic...5.5 Medium
- google androidIn onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due...7.8 High
drupal/open_readspeakerPackagistThis module enables you to add a configured ReadSpeaker button for text-to-speech for your site visitors. The module doesn't sufficiently sanitize block configuration causing a Cross Site Scripting (X…No score- Show moreLoading…