CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- google chrome, fedoraproject fedora +1 moreUse after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a...8.8 High
- qemuA divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB...6.5 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- gnu binutils, netapp ontap select deploy administration utility +1 moreA flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed...7.5 High
- merge-deep project merge-deep, netapp e-series performance analyzer +1 morePrototype pollution in Merge-deep9.8 Critical
- openstack swiftTemporary urls leaked via logging4.3 Medium
- qemu, debian linux +1 moreA flaw was found in vhost-user-gpu of QEMU in versions up to and including 6.0. An out-of-bounds...8.2 High
- qemu, debian linux +1 moreAn information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user...6.5 Medium
- qemu, debian linux +1 moreSeveral memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in...6.5 Medium
- satori uuidgo.uuid has Predictable UUID Identifiers9.8 Critical
- qemu, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of...6.0 Medium
- red hat, inc. jboss-remotingUncontrolled Resource Consumption in jboss-remoting5.9 Medium
- redhat openshiftAn insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local a…7.0 High
- mcafee database security, mcafee,llc mcafee database security (dbsec) +1 moreCleartext Transmission of Sensitive Information in McAfee DBSec3.2 Low
- mcafee database security, mcafee,llc mcafee database security (dbsec) +1 moreAuthorized deserialization of untrusted data in McAfee DBSec9.0 Critical
- mcafee database security, mcafee,llc mcafee database security (dbsec) +1 moreUnauthorized deserialization of untrusted data in McAfee DBSec9.6 Critical
- fortinet fortiosAn improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0...6.5 Medium
- redhat 3scale api managementA flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an...6.3 Medium
- red hat satelliteAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 High
- red hat satelliteA credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute...6.5 Medium
- redhat xnio, oracle communications cloud native core console, communications cloud native core network repository function +11 more +13 moreUncontrolled Resource Consumption in XNIO5.9 Medium
- red hat satelliteA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Medium
- redhat openshift container platformA flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to...6.5 Medium
- redhat jboss enterprise application platform, red hat wildfly +1 moreIt was found that the issue for security flaw CVE-2019-3805 appeared again in a further version...5.5 Medium
- red hat resteasy, netapp oncommand insight, redhat integration camel k +2 moreRESTEasy 4.5.5.Final in hash flooding7.5 High
- red hat infinispan, infinispan infinispan-server-rest, netapp oncommand insight +1 more +3 moreA flaw was found in Infinispan version 10, where it is possible to perform various actions that...7.1 High
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to...6.0 Medium
- fortinet fortipresenceTwo authorization bypass through user-controlled key vulnerabilities in the Fortinet...4.3 Medium
- djangoproject django, fedoraproject fedora +1 moreDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks7.5 High
- djangoproject django, fedoraproject fedora +1 morePath Traversal in Django4.9 Medium
- synology photo stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...9.8 Critical
- synology photo stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...7.2 High
- synology photo stationImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...7.7 High
jsonconsOSS-FuzzStack-buffer-overflow in jsoncons::bson::decimal128_to_charsNo scoreqemuOSS-FuzzUNKNOWN READ in virtio_gpu_disable_scanoutNo score- aomediaaom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed...8.8 High
- mozilla firefoxWhen styling and rendering an oversized `<select>` element, Firefox did not apply correct...4.3 Medium
- mozilla firefoxFirefox used to cache the last filename used for printing a file. When generating a filename for...4.3 Medium
- mozilla firefoxWhen a user has already allowed a website to access microphone and camera, disabling camera...4.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreMalicious user could break user administration page4.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreTrusted servers exchange can be triggered by attacker8.6 High
github.com/hpcng/singularityGoAction Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint6.3 Medium- Show moreLoading…