CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- academysoftwarefoundation openexrAn integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0...5.5 Medium
- vmware rabbitmq, debian linux +1 moreRabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to...7.5 High
- adiscon loganalyzerAdiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...7.1 High
shimSUSESecurity update for shimNo score- locutusRegular Expression Denial of Service (ReDoS)5.3 Medium
- roon labs server, roonlabs roon server +1 moreVulnerability in Roon Server7.2 High
- qnap roon server, roon labs server +1 moreVulnerability in Roon Server7.5 High
- gnupg libgcrypt, debian linux, fedoraproject fedora +8 more +10 moreLibgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...7.5 High
- academysoftwarefoundation openexr, fedoraproject fedora +1 moreA heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...8.8 High
- debian linux, intel atom c3308, atom c3336 +65 more +67 moreDomain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an...6.5 Medium
- debian linux, intel microcode, netapp fas\/aff bios +2 more +4 moreObservable timing discrepancy in some Intel(R) Processors may allow an authenticated user to...3.3 Low
- debian linux, intel microcode, netapp fas\/aff bios +2 more +4 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...6.5 Medium
- debian linux, intel atom x5-e3930, atom x5-e3940 +211 more +213 moreIncomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially...8.8 High
- atlassian data center, jira, jira data center +1 more +3 moreThe CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15,...6.1 Medium
- atlassian jira data center, jira server +1 moreEditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from...6.1 Medium
- atlassian data center, jira, jira data center +1 more +3 moreThe number range searcher component in Jira Server and Jira Data Center before version 8.5.14,...6.1 Medium
- flarum core, flarum +1 moreXSS vulnerability with translator10.0 Critical
- datasetteReflected cross-site scripting issue in Datasette7.2 High
- nagios xiNagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper...7.2 High
- calipso project calipsoArbitrary File Write via Archive Extraction (Zip Slip)7.3 High
- the foreman foreman, theforeman foremanfogproxmox +1 moreExposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox7.8 High
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.10 security, bug fix and enhancement update8.1 High
- redhat machine-config-operatorA flaw was found in the machine-config-operator that causes an OpenShift node to become...6.5 Medium
- nmstate kubernetes-nmstate, redhat openshift virtualization +1 moreWithdrawn Advisory: kubernetes-nmstate Insecure Privilege Management7.0 High
- redhat openstack-selinux, openstack platform +1 moreAn improper authorization flaw was discovered in openstack-selinux's applied policy where it does...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...8.8 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreAn issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp...7.8 High
- linux kernelAn issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab...7.1 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreAn issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free...7.8 High
- linux kernel, netapp aff 8300 firmware, aff 8700 firmware +19 more +21 moreAn issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after...7.8 High
- zblogcn z-blogphpOpen Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive...6.1 Medium
- simple-log project simple-logCross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege...8.8 High
- simple-log project simple-logCross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege...8.8 High
- dino, fedoraproject fedora +1 moreDino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new...5.3 Medium
gnome-autoarUbuntugnome-autoar regressionNo score- red hat wildflyPrivilege Context Switching Error in wildlfy5.4 Medium
- ibm websphere application server ndIBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote...6.4 Medium
- ibm datapower gatewayIBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores...3.7 Low
- sharp display solutions, ltd. c431, c501, c551 +65 more +67 moreSharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300...9.8 Critical
- sharp display solutions, ltd. c431, c501, c551 +65 more +67 moreSharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300...9.8 Critical
- the wireshark foundation wireshark, debian linux, oracle enterprise manager ops center +2 more +4 moreInfinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via...7.5 High
- debian linux, fedoraproject fedora, isync project isync +2 moreA flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a...7.8 High
- esri arcgis serverThere is a SQL injection vulnerability in ArcGIS Server5.3 Medium
- accela civic platformIn Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is...6.1 Medium
- easy preloader project preloader, unknown easy preloader +1 moreEasy Preloader <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- iflychat, iflychat team – wordpress chat, unknown iflychat – wordpress chat +2 moreiFlyChat – WordPress Chat < 4.7.0 - Admin+ Stored Cross-Site Scripting (XSS)4.8 Medium
- jegtheme jnewsJNews < 8.0.6 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- veronalabs wp statisticsWP Statistics < 13.0.8 - Unauthenticated SQL Injection7.5 High
- Show moreLoading…