CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
serenityOSS-FuzzHeap-buffer-overflow in AK::Formatter<char const*, void>::formatNo scorecaribouDebiancaribou - regression updateNo score- ffmpegdwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because...8.8 High
- htmldoc project htmldocA flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension()...7.8 High
- fangfa fdcmsFDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a...9.8 Critical
- fangfa fdcmsFDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib...9.8 Critical
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain...4.3 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery ...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery ...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery ...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery ...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery ...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This...5.4 Medium
- ibm engineering lifecycle optimization, engineering lifecycle optimization - publishing, collaborative lifecycle management +9 more +11 moreIBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting....5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain...4.3 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +9 more +11 moreIBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security...8.8 High
- redis, fedoraproject fedora +1 moreRedis vulnerability in STRALGO LCS on 32-bit systems7.5 High
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input...6.5 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set...6.5 Medium
drupal/openid_connectPackagistThis module allows users to authenticate against an Oauth 2.0 / OpenID Connect identity provider to login to your Drupal site. The module doesn't sufficiently protect against unauthorized local access…No scoredrupal/graphqlPackagistThis module lets you craft and expose a GraphQL web service API. The module does not sufficiently protect arbitrary exception and error messages thereby exposing an information disclosure vulnerabilit…No score- online shopping alphaware project shopping alphawareThe id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an...7.5 High
- pharmacy medical store and sale point project medical store and sale pointThe catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable...7.5 High
- mozilla firefoxCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7...6.1 Medium
- redhat noobaa-operator, openshift container platform +1 moreA flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an...7.1 High
- ffmpegA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame...6.5 Medium
- apple filesMultiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3)...9.8 Critical
- apple filesMultiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in...9.8 Critical
- eclipse mojarra, oracle banking enterprise default management, banking platform +6 more +8 moreDirectory traversal in Eclipse Mojarra6.5 Medium
- ovn ovn-kubernetesImproper Input Validation5.6 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- ffmpeg, debian linux +1 moreA Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the...6.5 Medium
- istioIstio before 1.8.6 and 1.9.x before 1.9.5, when a gateway is using the AUTO_PASSTHROUGH routing...9.8 Critical
- librawLibraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in...8.8 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77...5.4 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...8.1 High
- google chrome, fedoraproject fedora +1 moreDouble free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a...6.5 Medium
- google chrome, fedoraproject fedora, google chromium popupblocker +2 moreInsufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77...6.5 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a...8.8 High
- Show moreLoading…