CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- obottle project obottleOBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability.8.1 High
- appcmsAppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability...6.1 Medium
- appcmsAppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows...6.5 Medium
- appcmsAppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows...6.5 Medium
- appcmsAppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows...6.5 Medium
- backstageTechDocs mkdocs.yml path traversal6.5 Medium
- wire, wireapp wire-ios +1 moreAsset DoS vulnerability6.5 Medium
- wire, wireapp wire-ios +1 moreVerified groups not reliable8.8 High
- yzmcmsAn issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection...7.5 High
- yzmcmsA storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS...5.4 Medium
- yzmcmsAn issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user...4.3 Medium
- zzcmsAn issue was discovered in zzcms2020. There is a XSS vulnerability that can insert and execute JS...5.4 Medium
- nestie project nestiePrototype pollution in nestie9.8 Critical
- the foreman foremanForeman versions before 2.3.4 and before 2.4.0 is affected by an improper authorization handling...5.4 Medium
- huawei emui, magic ui +1 moreThere is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation...7.4 High
- huawei emui, magic ui +1 moreThere is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful...7.8 High
- huawei emui, magic ui +1 moreThere is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of...5.3 Medium
- huawei emui, magic ui +1 moreThere is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful...9.8 Critical
- backstage, linuxfoundation \@backstage\/plugin-techdocs +1 moreTechDocs object element script injection6.8 Medium
- backstage, linuxfoundation \@backstage\/techdocs-common +1 moreTechDocs content sanitization bypass6.8 Medium
- huawei emui, magic ui +1 moreThere is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful...7.5 High
- huawei emui, magic ui +1 moreThere is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful...7.5 High
- huawei emui, magic ui +1 moreThere is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of...5.3 Medium
- opensuse inn, backports sle-15-sp2, leap 15.2 +1 more +3 moreinn: %post calls user owned file allowing local privilege escalation to root6.8 Medium
- huawei emui, magic ui +1 moreThere is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone....7.5 High
- huawei emui, magic ui +1 moreThere is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone....6.8 Medium
- huawei emui, magic ui +1 moreThere is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of...7.5 High
- huawei emui, magic ui +1 moreThere is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed...3.3 Low
- gulpjs glob-parent, oracle communications cloud native core policy +1 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- ibm qradar advisor, qradar advisor with watson +1 moreIBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a...5.3 Medium
- pbootcmsPbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.4.8 Medium
- wellcmsWellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and...6.5 Medium
- rockwellautomation micro800 firmware, micrologix 1400 firmware +1 moreWhen an authenticated password change request takes place, this vulnerability could allow the...7.5 High
- bdew bdlibThe BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it...9.8 Critical
- mintty project minttyMintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by...7.5 High
- libtpms project libtpms, redhat enterprise linux +1 moreA stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while...5.5 Medium
- hp oneview for vmware vcenterA security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to...6.1 Medium
- mobatek mobaxtermMobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via...7.5 High
- hashicorp vaultInvalid session token expiration7.4 High
- trendmicro maximum security 2021, trend micro maxmium security (consumer) +1 moreThe Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access...7.8 High
- fortinet fortiai, fortiai firmware +1 moreAn improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to...7.8 High
- fortinet fortiproxyA stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1,...6.7 Medium
- mcafee database security, mcafee,llc mcafee database security (dbsec) +1 moreCross site Scripting (XSS) vulnerability in McAfee DBSec5.9 Medium
- mcafee database security, mcafee,llc mcafee database security (dbsec) +1 moreIncorrect access to deleted scripts vulnerability in McAfee DBSec4.9 Medium
- dogtagpki, fedoraproject fedora, oracle linux +9 more +11 moreA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores...7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...7.8 High
- qnap video stationCommand Injection Vulnerability in Video Station8.8 High
- qnap systems inc. q’center, qnap q\'center +1 morePost-Authentication Reflected XSS Vulnerability in Q'center7.7 High
- qnap qts, quts hero, qutscloud +2 moreDOM-Based XSS Vulnerability in QTS and QuTS hero5.7 Medium
- Show moreLoading…