CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
KernelLinuxbtrfs: return whole extents in fiemapNo scoreKernelLinuxmld: fix panic in mld_newpack()No scoreKernelLinuxbtrfs: release path before starting transaction when cloning inline extentNo scoreKernelLinuxdrm/amd/amdgpu: fix refcount leakNo scoreKernelLinuxbtrfs: do not BUG_ON in link_to_fixup_dirNo scoreKernelLinuxnet/smc: remove device from smcd_dev_list after failed device_add()No scoreKernelLinuxdrm/amd/amdgpu: fix a potential deadlock in gpu resetNo scoreKernelLinuxdrm/amdgpu: Fix a use-after-freeNo scoreKernelLinuxgve: Add NULL pointer checks when freeing irqs.No scoreKernelLinuxnet: hns3: put off calling register_netdev() until client initialize completeNo scoreKernelLinuxiommu/amd: Clear DMA ops when switching domainNo scoreKernelLinuxcxgb4: avoid accessing registers when clearing filtersNo scoreKernelLinuxnet: lantiq: fix memory corruption in RX ringNo scoreKernelLinuxnet: zero-initialize tc skb extension on allocationNo score- auth0 lockReflected XSS when using flashMessages8.1 High
- cisco video surveillance 7000 series ip cameras, video surveillance 7070 firmware, video surveillance 7530pd firmware +2 moreCisco Video Surveillance 7000 Series IP Cameras Cisco Discovery and Link Layer Discovery Protocol Memory Leak Vulnerabilities6.5 Medium
- cisco video surveillance 7000 series ip cameras, video surveillance 7070 firmware, video surveillance 7530pd firmware +2 moreCisco Video Surveillance 7000 Series IP Cameras Cisco Discovery and Link Layer Discovery Protocol Memory Leak Vulnerabilities6.5 Medium
- cisco webex meetingsCisco Webex Meetings Client Software Logging Information Disclosure Vulnerability5.5 Medium
- cisco asr 5000 series software, staros, virtualized packet core +2 moreCisco ASR 5000 Series Software Authorization Bypass Vulnerabilities8.1 High
- cisco asr 5000 series software, staros, virtualized packet core +2 moreCisco ASR 5000 Series Software Authorization Bypass Vulnerabilities8.1 High
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Command Injection Vulnerability4.7 Medium
- cisco thousandeyes recorder, thousandeyes recorder application +1 moreCisco ThousandEyes Recorder Information Disclosure Vulnerability6.2 Medium
- cisco webex teams, webex meetings desktop, webex meetings server +2 more +4 moreCisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability4.8 Medium
- cisco catalyst sd-wan manager, sd-wan solution, sd-wan vbond orchestrator +9 more +11 moreCisco SD-WAN Software Privilege Escalation Vulnerability7.8 High
- cisco webex player, webex meetings +1 moreCisco Webex Player Memory Corruption Vulnerability5.3 Medium
- cisco webex player, webex meetings +1 moreCisco Webex Player Memory Corruption Vulnerability7.8 High
- cisco webex meetings server, webex meetings online +1 moreCisco Webex Meetings and Webex Meetings Server File Redirect Vulnerability4.7 Medium
- cisco webex meetings server, webex meetings online +1 moreCisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability5.0 Medium
- cisco webex player, webex meetings, webex meetings server +2 moreCisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability7.8 High
- cisco webex network recording player, webex meetings, webex meetings desktop +3 more +5 moreCisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability7.8 High
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS...5.4 Medium
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as...6.5 Medium
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation...8.8 High
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within...6.5 Medium
- inverse sogo, debian linux +1 moreSOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any...7.5 High
- johnson controls metasysMetasys Improper Privilege Management8.8 High
- realtek rtl8195a firmware, rtl8710c firmware +1 moreA stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote...8.0 High
- realtek rtl8195a firmware, rtl8710c firmware +1 moreA stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote...8.0 High
- microfocus secure api managerInsertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager ...7.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1...7.5 High
- tpm2-software tpm2-tools, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a...5.9 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which...6.5 Medium
- openvpn access serverOpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user...7.5 High
- openvpn access serverOpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...6.5 Medium
- aomedia, fedoraproject fedora +1 moreaom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.9.8 Critical
- luca-app lucaLuca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID...7.5 High
- luca-app lucaLuca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID...7.5 High
- luca-app lucaThe server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion...7.5 High
- obottle project obottleOBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability.7.5 High
- Show moreLoading…