CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- huawei emui, magic ui +1 more There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of... 9.8 Critical
- huawei emui, magic ui +1 more There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful... 5.3 Medium
- huawei emui, magic ui +1 more There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful... 9.8 Critical
- huawei emui, magic ui +1 more There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of... 7.5 High
- huawei emui, magic ui +1 more There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of... 7.8 High
- huawei emui, magic ui +1 more There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful... 8.1 High
- huawei emui, magic ui +1 more There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful... 7.5 High
- artica pandora fms In Artica Pandora FMS <=754 in the File Manager component, there is sensitive information exposed... 5.9 Medium
- huawei emui, magic ui +1 more There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of... 9.8 Critical
- thinkjs think-helper Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in think-helper 7.5 High
- huawei emui, magic ui +1 more There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this... 7.5 High
- huawei emui, magic ui +1 more There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of... 9.1 Critical
- huawei emui, magic ui +1 more There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful... 7.5 High
-
drupal/block_content_revision_uiPackagist This module provides a revision UI for Block Content entities. The module doesn't sufficiently respect access restrictions to certain entities when used in conjunction with specific modules. This vuln… No score - jenkins requests, jenkins project requests-plugin plugin +1 more Missing permission check in Jenkins requests-plugin Plugin allows sending emails 4.3 Medium
- jenkins requests, jenkins project requests-plugin plugin +1 more CSRF vulnerabilities in Jenkins requests-plugin Plugin 6.5 Medium
- jenkins requests, jenkins project requests-plugin plugin +1 more Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests 4.3 Medium
- jenkins cas, jenkins project cas plugin +1 more Open redirect vulnerability in Jenkins CAS Plugin 6.1 Medium
- jenkins selenium html report, jenkins project selenium html report plugin +1 more XXE vulnerability in Jenkins Selenium HTML report Plugin 4.3 Medium
- jenkins Session fixation vulnerability in Jenkins 7.5 High
- jenkins Improper permission checks allow canceling queue items and aborting builds in Jenkins 4.3 Medium
-
drupal/linky_revision_uiPackagist This module provides a revision UI for Linky entities. The module doesn't sufficiently respect access restrictions to certain entities when used in conjunction with specific modules. This vulnerabilit… No score -
drupal/apigee_edgePackagist The Apigee Edge module allows connecting a Drupal site to Apigee Edge in order to build a developer portal. The module did not properly validate user access for data creation in certain circumstances. No score - huawei emui, magic ui +1 more There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful... 7.5 High
- huawei emui, magic ui +1 more There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these... 9.8 Critical
- huawei emui, magic ui +1 more There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone.... 8.1 High
- huawei emui, magic ui +1 more There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful... 7.5 High
- netgear wac104 firmware NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in ... 9.8 Critical
- veeam backup \& replication Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507... 9.8 Critical
- voxmedia coral talk Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other... 7.5 High
- huawei emui, magic ui +1 more There is a Defects Introduced in the Design Process Vulnerability in Huawei Smartphone.... 9.1 Critical
- huawei harmonyos There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful... 8.4 High
- huawei emui, magic ui +1 more There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this... 7.5 High
- huawei emui, magic ui +1 more There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful... 7.5 High
- huawei emui, magic ui +1 more There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of... 9.8 Critical
- huawei harmonyos There is an Incorrect Privilege Assignment Vulnerability in Huawei Smartphone. Successful... 7.1 High
- huawei emui There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone.... 9.1 Critical
- djvulibre project djvulibre, debian linux, fedoraproject fedora +2 more An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in... 5.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 more IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the... 4.3 Medium
- sloan basys efx-100 firmware, basys efx-150 firmware, basys efx-175 firmware +68 more +70 more There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima... 5.4 Medium
- plixer scrutinizer Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive... 7.5 High
- craftcms craft cms Craft CMS Remote Code Injection 9.8 Critical
- craftcms craft cms Craft CMS Cross-site Scripting Vulnerability 6.1 Medium
- akcp sensorprobe2 firmware, sensorprobe4 firmware, sensorprobe8-x20 firmware +2 more +4 more Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480... 5.4 Medium
- xml2dict project xml2dict XML2Dict XML Entity Expansion Vulnerability 7.5 High
- chevereto Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload... 6.1 Medium
- broadcom symantec advanced secure gateway 500-10 firmware, symantec advanced secure gateway s200-30 firmware, symantec advanced secure gateway s200-40 firmware +5 more +7 more The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to... 9.8 Critical
- xen xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel,... 5.5 Medium
- nvidia jetson linux, jetson tx1 +1 more Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the... 6.3 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx +1 more Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause... 6.3 Medium
- Show olderLoading…