CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- mark senff smooth scroll page up/down buttons, smooth scroll page up\/down buttons project scroll page up\/down buttons +1 moreSmooth Scroll Page Up/Down Buttons < 1.4 - Authenticated Stored XSS4.8 Medium
- cartflows, unknown funnel builder by cartflows – create high converting sales funnels for wordpress +1 moreFunnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID4.8 Medium
- automattic wp super cacheWP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- clogica wp login security and historyWP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)6.2 Medium
- delicious brains database backup for wordpress, deliciousbrains database backup +1 moreDatabase Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)5.4 Medium
- bold-themes bello, boldthemes bello - directory & listing +1 moreBello < 1.6.0 - Unauthenticated Blind SQL Injection9.8 Critical
- bold-themes bello, boldthemes bello - directory & listing +1 moreBello < 1.6.0 - Unauthenticated Reflected XSS & XFS6.1 Medium
- bold-themes bello, boldthemes bello - directory & listing +1 moreBello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS5.4 Medium
- purethemes listeoListeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities6.5 Medium
- purethemes listeoListeo < 1.6.11 - Multiple XSS & XFS vulnerabilities6.1 Medium
- wowthemes mediumishMediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)6.1 Medium
- goprayer wp prayerWP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- automattic wp super cacheWP Super Cache < 1.7.3 - Authenticated Remote Code Execution7.2 High
- external media project media, minnur external media +1 moreExternal Media < 1.0.34 - Authenticated Arbitrary File Upload8.8 High
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title4.8 Medium
- unknown weekly schedule, weekly schedule project schedule +1 moreWeekly Schedule < 3.4.3 - Authenticated Stored XSS5.4 Medium
- in4velocity in4suite erpSQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing...9.1 Critical
- opennms meridian, opennms +1 moreIn OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian,...5.4 Medium
- synology video stationServer-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station...6.6 Medium
- synology diskstation manager, diskstation manager (dsm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...5.0 Medium
- synology download stationServer-Side request forgery (SSRF) vulnerability in task management component in Synology...7.7 High
- synology dockerImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability...7.9 High
- synology diskstation manager, diskstation manager (dsm) +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component...7.8 High
- synology photo stationUnrestricted upload of file with dangerous type vulnerability in file management component in...8.8 High
- synology media serverImproper neutralization of special elements used in an SQL command ('SQL Injection')...7.3 High
- linux kernel, nitro enclaves project enclaves, fedoraproject fedora +1 more +3 moreA flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that...6.7 Medium
- json-smart project json-smart-v1, json-smart-v2, oracle utilities framework +2 moreOut of bounds read in json-smart7.5 High
- google androidIn handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due...7.8 High
- google androidIn iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user...7.8 High
- google androidIn drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect...6.7 Medium
- google androidIn doNotification of AccountManagerService.java, there is a possible permission bypass due to an...5.5 Medium
- google androidIn ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of...7.8 High
- google androidIn sendBugreportNotification of BugreportProgressService.java, there is a possible permission...7.8 High
- google androidIn onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking...5.0 Medium
- google androidIn onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled...7.8 High
- google androidIn isRestricted of RemoteViews.java, there is a possible way to inject font files due to a...7.8 High
- google androidIn accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a...4.4 Medium
- google androidIn wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition....7.0 High
- google androidIn decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This...6.4 Medium
- google androidIn ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due...5.5 Medium
- google androidIn RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an...5.5 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds...5.5 Medium
- google androidIn Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check....6.5 Medium
- google androidIn fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a...6.5 Medium
- google androidIn setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow....8.8 High
- google androidIn getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer...5.5 Medium
- google androidIn RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null...7.5 High
- google androidIn isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This...5.5 Medium
- google androidIn onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin...7.3 High
- google androidIn getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to...5.5 Medium
- Show moreLoading…