CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- unknown video embed, video-embed-box project video-embed-box +1 moreVideo Embed <= 1.0 - Authenticated (subscriber+) SQL Injection8.8 High
- unknown flightlogFlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection7.2 High
- pagelayerPageLayer before 1.3.5 allows reflected XSS via the font-size parameter.6.1 Medium
- pagelayerPageLayer before 1.3.5 allows reflected XSS via color settings.6.1 Medium
- zohocorp manageengine key manager plusZoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page...5.4 Medium
- 2sic 2sxcAn issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of...6.1 Medium
serenityOSS-FuzzHeap-use-after-free in AK::StringImpl::createNo scoreserenityOSS-FuzzUse-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo scorefluent-bitOSS-FuzzHeap-use-after-free in multiline_parser_conf_fileNo score- linux kernel, netapp h300e firmware, h300s firmware +8 more +10 moreAn issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use...7.8 High
- invoiceninja invoice ninjaIn Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories...8.1 High
- f5 nginx, debian linux +1 moreNGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a...9.8 Critical
- tencent gameloopTencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A...8.1 High
- nxp mifare ultralight c firmware, mifare ultralight ev1 firmware, mifare ultralight nano firmware +5 more +7 moreOn NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct...4.2 Medium
- websockets project websockets, oracle communications cloud native core policy, communications cloud native core security edge protection proxy +2 more +4 moreObservable Timing Discrepancy in aaugustin websockets library5.9 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found...6.4 Medium
- dimforge nalgebraOut of bounds write in nalgebra9.8 Critical
- mintty project minttyMintty before 3.4.7 mishandles Bracketed Paste Mode.7.5 High
- emtec zocEmTec ZOC before 8.02.2 allows \e[201~ pastes.9.8 Critical
serenityOSS-FuzzHeap-use-after-free in AK::Utf8CodePointIterator::operator*No score- chiyu-tech bf-430 firmware, bf-431 firmware, bf-450m firmware +2 moreA CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices...6.5 Medium
- chiyu-tech bf-430 firmware, bf-431 firmware, bf-450m firmware +2 moreMultiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP...5.4 Medium
- chiyu-tech bf-430 firmware, bf-431 firmware, bf-450m firmware +7 more +9 moreAn authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M...9.8 Critical
- chiyu-tech bf-430 firmware, bf-431 firmware, bf-450m firmware +11 more +13 moreAn open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W,...6.1 Medium
- nic bird** DISPUTED ** BIRD through 2.0.7 does not provide functionality for password authentication of...6.8 Medium
KernelLinuxNFC: nci: fix memory leak in nci_allocate_deviceNo scoreKernelLinuxmisc/uss720: fix memory leak in uss720_probeNo scoreKernelLinuxserial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'No scoreKernelLinuxnet: usb: fix memory leak in smsc75xx_bindNo scoreKernelLinuxBluetooth: cmtp: fix file refcount when cmtp_attach_device failsNo scoreKernelLinuxNFS: fix an incorrect limit in filelayout_decode_layout()No scoreKernelLinuxNFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()No scoreKernelLinuxtipc: skb_linearize the head skb when reassembling msgsNo scoreKernelLinuxi2c: i801: Don't generate an interrupt on bus resetNo scoreKernelLinuxnet: fujitsu: fix potential null-ptr-derefNo scoreKernelLinuxdrm/amdgpu: Fix a use-after-freeNo scoreKernelLinuxbtrfs: do not BUG_ON in link_to_fixup_dirNo scoreKernelLinuxmld: fix panic in mld_newpack()No score- bubble fireworks project fireworks, fxbin bubble-fireworks +1 moreMissing validation of JWT signature7.5 High
KernelLinuxNFC: nci: fix memory leak in nci_allocate_deviceNo scoreKernelLinuxNFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()No scoreKernelLinuxmisc/uss720: fix memory leak in uss720_probeNo scoreKernelLinuxnet: usb: fix memory leak in smsc75xx_bindNo scoreKernelLinuxNFS: fix an incorrect limit in filelayout_decode_layout()No scoreKernelLinuxserial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'No scoreKernelLinuxNFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()No scoreKernelLinuxBluetooth: cmtp: fix file refcount when cmtp_attach_device failsNo scoreKernelLinuxtipc: skb_linearize the head skb when reassembling msgsNo scoreKernelLinuxi2c: i801: Don't generate an interrupt on bus resetNo scoreKernelLinuxbtrfs: do not BUG_ON in link_to_fixup_dirNo score- Show moreLoading…