CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.5.9 Medium
- netapp hci h610s firmware, hci baseboard management controller (bmc) hci h610c, netapp hci baseboard management controller (bmc) hci h615c, netapp hci baseboard management controller (bmc) hci h610s +1 moreThe NetApp HCI H610S Baseboard Management Controller (BMC) is shipped with a documented default...6.5 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8...5.4 Medium
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple...4.3 Medium
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to...4.3 Medium
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication...4.3 Medium
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that...4.6 Medium
- biotronik cardiomessenger ii-s gsm firmware, cardiomessenger ii-s t-line firmware +1 moreBIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at...4.6 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14,...6.1 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14,...9.8 Critical
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use...7.5 High
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store...9.1 Critical
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2,...6.1 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2,...6.1 Medium
- baxter prismaflex firmware, prismax firmware +1 moreBaxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not...7.5 High
- baxter prismaflex firmware, prismax firmware +1 moreBaxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains...4.9 Medium
- baxter prismaflex firmware, prismax firmware +1 moreBaxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not...7.5 High
- baxter phoenix x36 firmwarePhoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not...7.5 High
- baxter sigma spectrum infusion system firmwareSigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System...9.8 Critical
- baxter sigma spectrum infusion system firmwareBaxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX &...2.4 Low
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface,...9.4 Critical
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a...9.8 Critical
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless...9.8 Critical
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter...9.8 Critical
- cabsoftware reportexpress proplusReportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by...5.7 Medium
- ibm api connectIBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic...5.9 Medium
- form builder for magento 2 project builder for magento 2Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2...4.8 Medium
- mageme webforms pro m2XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field.6.1 Medium
- opensuse leap, leap 15.1, tumbleweed +2 more +4 morekopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage7.7 High
- opensuse factory, leap 15.1, leap 15.2 +2 more +4 moreProblematic permissions in hylafax+ packaging allow escalation from uucp to other users5.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to inject...5.4 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the...7.5 High
- atlassian jira, jira server, jira data center +1 more +3 moreThe Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center...5.3 Medium
- atlassian jira, jira server, jira data center +2 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to modify...4.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to view...6.5 Medium
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturn7.0 High
- asrock rgb driver firmwareAsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as...5.5 Medium
- putty, fedoraproject fedora, netapp oncommand unified manager core package +2 morePuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the...5.9 Medium
- canonical ubuntu linux, debian linux, ubuntu linux kernel (aufs filesystem module) +2 moreaufs: improperly managed inode reference counts in the vfsub_dentry_open() method4.4 Medium
- librawLibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via...6.5 Medium
- nexos project nexosThe Nexos theme through 1.7 for WordPress allows side-map/?search_order= SQL Injection.9.8 Critical
- nexos project nexosThe Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.6.1 Medium
- google chromeUse after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who...9.6 Critical
- docker desktopcom.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of...7.8 High
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...5.5 Medium
wiresharkOSS-FuzzGlobal-buffer-overflow in dissect_wassp_sub_tlvNo score- hcl notesHCL Notes is vulnerable to an information leakage vulnerability through its support for the ...6.5 Medium
- adobe magentoMagento stored cross-site scripting vulnerability6.1 Medium
- adobe magentoMagento command injection vulnerability9.8 Critical
- Show moreLoading…