CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- naviwebs navigatecmsThe install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension...9.8 Critical
- dojo dijit, debian linux, netapp active iq unified manager +3 more +5 moreXSS in Dijit Editor's LinkDialog plugin3.7 Low
- pcre, apple macos, gitlab +12 more +14 morelibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.5.3 Medium
- fasterxml jackson-databind, netapp active iq unified manager, steelstore cloud integrated storage +9 more +11 moreDeserialization of untrusted data in Jackson Databind8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 moreDeserialization of untrusted data in Jackson Databind8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 moreDeserialization of untrusted data in Jackson Databind8.1 High
- rgb-rust project rgb-rustOut of bounds access in rgb9.1 Critical
- packagekit, canonical ubuntu linux +1 morePackagekit's apt backend lets user install untrusted local packages8.2 High
- microfocus arcsight loggerCross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all...6.1 Medium
- morganstanley hobbesIn Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking,...9.8 Critical
- nutfindMissing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android...5.9 Medium
- openshift openshift/openshift-apiserver, redhat openshift container platform +1 moreA flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens...7.5 High
- apache karafServer-Side Request Forgery in Karaf6.3 Medium
- vikisolutions veraThe Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on...7.2 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS via media attachment page in WordPress6.8 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreOpen redirect in wp_validate_redirect() in WordPress5.7 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated self-XSS via theme uploads in WordPress2.4 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreset-screen-option filter misuse by plugins leading to privilege escalation in WordPress3.5 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS through embed block in WordPress5.4 Medium
- icinga, opensuse backports sle, leap +2 moreAn issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of...7.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 32.0.0.371 and earlier, 32.0.0.371 and earlier, and 32.0.0.330 and...9.8 Critical
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected)...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based)...6.1 Medium
- adobe framemakerAdobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful...8.8 High
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored)...5.4 Medium
- adobe framemakerAdobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability....8.8 High
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability....6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf)...7.5 High
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf)...7.5 High
- adobe framemakerAdobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability....8.8 High
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- geovision door access control device, gv-gf192x firmware +1 moreGeoVision Door Access Control Device - Information disclosure vulnerability4.0 Medium
- geovision door access control device, usavisionsys geovision gv-as1010 firmware, geovision gv-as210 firmware +3 more +5 moreGeoVision Door Access Control Device - Shared cryptographic keys5.9 Medium
- geovision door access control device, usavisionsys geovision gv-as1010 firmware, geovision gv-as210 firmware +3 more +5 moreGeoVision Door Access Control Device - Hardcoded privileged password6.2 Medium
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the...9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a...7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with...7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general...7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks...8.8 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop...9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from...9.8 Critical
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated...7.5 High
python-djangoDebianpython-django - regression updateNo score- scuttlebutt ssb-dbInformation disclosure in SSB-DB7.5 High
- hashicorp consulImproper Input Validation in HashiCorp Consul7.5 High
- hashicorp consulIncorrect Permission Assignment for Critical Resource in Hashicorp Consul5.3 Medium
- hashicorp consulDenial of Service (DoS) in HashiCorp Consul7.5 High
- hashicorp consulAllocation of Resources Without Limits or Throttling in Hashicorp Consul7.5 High
- philips intellibridge enterprise (ibe), intellibridge enterprise +1 morePhilips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File2.0 Low
- redashHavoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data...7.2 High
- Show moreLoading…