CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
@aws-crypto/client-browsernpm,@aws-crypto/client-nodenpm +1 moreImproper Verification of Cryptographic Signature in aws-encryption-sdk-javascriptNo score- python urllib3, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moreCatastrophic backtracking in URL authority parser when passed URL containing many @ characters7.5 High
aws-encryption-sdk-cliPyPIImproper Verification of Cryptographic Signature in aws-encryption-sdk-cliNo scoreaws-encryption-sdkPyPIImproper Verification of Cryptographic Signature in aws-encryption-sdkNo score- amazon aws encryption sdkAWS Encryption SDK for Java Improper Verification of Cryptographic Signature5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreFiles Drop public link can be added as federated share3.5 Low
- nextcloud server, kiteworks security-advisories +1 moreAttacker can obtain write access to any federated share/public link8.1 High
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- fortinet fortiwebAn OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3...7.6 High
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the...6.5 Medium
- fortinet fortiswitchA missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6,...6.5 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by:...6.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreDefault settings leak federated cloud ID to lookup server of all users2.7 Low
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in...6.5 Medium
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc...6.5 Medium
- redhat jboss a-mqA flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when...4.4 Medium
- nextcloud mail, kiteworks security-advisories +1 moreMissing permission check on email metadata retrieval8.8 High
- keycloak, redhat single sign-on +1 moreKeycloak is vulnerable to IDN homograph attack5.3 Medium
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter...8.8 High
- invisioncommunity ips community suiteInvision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by...8.8 High
- onedev project onedevLDAP injection via OneDev may leak some LDAP directory information3.1 Low
- cmsmadesimple cms made simpleA cross-site scripting (XSS) vulnerability was discovered in the Administrator panel on the ...4.8 Medium
- libjpeg-turboLibjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A...8.8 High
- pfsenseA stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which allows...5.4 Medium
- chiyu-tech bf-630 firmware, bf-631 firmware, biosense firmware +8 more +10 moreAn XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC,...5.4 Medium
- chiyu-tech bf-630 firmware, bf-631 firmware, biosense firmware +8 more +10 moreA denial of service condition exists after an integer overflow in several IoT devices from CHIYU...6.5 Medium
- bigtreecms bigtree cmsA vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an...8.8 High
- bigtreecms bigtree cmsA stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and...5.4 Medium
- bigtreecms bigtree cmsA SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and...8.8 High
- chiyu-tech bf-430 firmware, bf-431 firmware, bf-450m firmware +12 more +14 moreAn unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology,...6.1 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is...8.4 High
- redhat 3scale, 3scale api management +1 moreIt was found that all versions of 3Scale developer portal lacked brute force protections. An...7.3 High
- redhat jbpm, red hat business-central, redhat descision manager +1 more +3 moreA flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any...4.3 Medium
- 2ndquadrant pglogicalA shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An...6.7 Medium
- netlify kiali-operator, redhat openshift service mesh +1 moreAccess control flaw in Kiali8.8 High
shimSUSESecurity update for shimNo score- f5 nginx controllerThe Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf...5.5 Medium
- f5 nginx controllerThe NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and...5.5 Medium
- f5 nginx controllerThe NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed...7.8 High
- mopa project mopaIncorrect reliance on Trait memory layout in mopa9.8 Critical
- entrouvert lasso, debian linux, fedoraproject fedora +2 moreLasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.7.5 High
- f5 nginx controllerIntra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before...7.4 High
- facebook react-nativeRegular expression denial of service in react-native7.5 High
- unknown car repair services & auto mechanic, smartdatasoft car repair services \& auto mechanic +1 moreCar Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS6.1 Medium
- unknown instant images – one click unsplash uploads, connekthq instant images - one click unsplash uploads +1 moreInstant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS5.4 Medium
- unknown content copy protection & prevent image save, content copy protection \& prevent image save project copy protection \& prevent image save +1 moreContent Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)6.5 Medium
- Show moreLoading…