CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- microsoft enhanced cryptographic provider, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability5.2 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows DCOM Server Security Feature Bypass4.8 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Print Spooler Remote Code Execution Vulnerability7.8 High
- mendix saml, siemens mendix saml module +1 moreA vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The...8.8 High
- siemens solid edge se2020 firmware, solid edge se2021 firmware +1 moreA vulnerability has been identified in Solid Edge SE2020 (All Versions < 2020MP14), Solid Edge...8.8 High
- siemens solid edge se2020 firmware, solid edge se2021 firmware +1 moreA vulnerability has been identified in Solid Edge SE2020 (All Versions < 2020MP14), Solid Edge...8.8 High
- siemens simatic reader rf610r cmiit, simatic reader rf610r etsi, simatic reader rf610r fcc +47 more +49 moreA vulnerability has been identified in SIMATIC RF166C (All versions > V1.1 and < V1.3.2), SIMATIC...7.5 High
- siemens simcenter femap 2020.2, simcenter femap 2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3),...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization...7.8 High
- siemens simcenter femap 2020.2, simcenter femap 2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3),...7.8 High
- silverstripeAuthentication bypass in SilverStripe GraphQL6.5 Medium
- gitlabA denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was...6.1 Medium
- nightowlsp smart doorbell firmwareIncorrect access control in push notification service in Night Owl Smart Doorbell FW version...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5...6.5 Medium
- vembu bdr suite, offsite dr +1 moreUNAUTHENTICATED SERVER SIDE REQUEST FORGERY IN VEMBU PRODUCTS8.6 High
- vembu bdr suite, offsite dr +1 moreUnauthenticated arbitrary file upload and command execution in Vembu products9.8 Critical
- gitlabGitLab CE/EE since version 9.5 allows a high privilege user to obtain sensitive information from...4.4 Medium
- vembu bdr suite, offsite dr +1 moreUnauthenticated remote command execution with SYSTEM privileges in Vembu products10.0 Critical
- vembu bdr suite, offsite dr +1 moreUnauthenticated remote command execution in Vembu products9.8 Critical
- nextcloud, kiteworks security-advisories +1 moreSensitive data may not be removed from storage on account removal4.7 Medium
- gitlabA denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13...6.5 Medium
- dell emc networker, networker +1 moreDell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper...7.1 High
- dell emc networker, networker +1 moreDell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information...8.2 High
- gitlabA cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10...8.8 High
- seceon aisiemSeceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover...9.8 Critical
- silverstripeSilverStripe XXE Vulnerability in CSSContentParser4.8 Medium
- zopeRemote Code Execution via traversal in TAL expressions8.8 High
- silverstripeFormField with square brackets in field name skips validation5.3 Medium
- reg-keygen-git-hash project reg-keygen-git-hash, reg-viz reg-suit +1 moreRemote Command Execution in reg-keygen-git-hash-plugin8.8 High
- bluez, debian linux, redhat enterprise linux +2 moreImproper access control in BlueZ may allow an authenticated user to potentially enable...5.7 Medium
- nuvoton npct75x firmwareIn Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high...6.0 Medium
- gitlabAn information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project...7.5 High
- apache apisix dashboardBypass network access control5.3 Medium
- gitlabAll versions of GitLab CE/EE starting with 12.8 were affected by an issue in the handling of x509...2.6 Low
- gitlabWhen requests to the internal network for webhooks are enabled, a server-side request forgery...6.8 Medium
vlcMageiaUpdated vlc packages fix security vulnerabilitiesNo score- octavolabs vernemqVerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a...7.5 High
- emq technologies x broker, emqx emq x broker +1 moreEMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of...7.5 High
- polarisoffice polaris officePolaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in...7.8 High
- checkpoint ssl network extenderSSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the...5.3 Medium
- google asyloEnclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer6.5 Medium
- google asyloArbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall6.5 Medium
- google asyloArbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall6.5 Medium
- intland codebeamerAn insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x...7.5 High
- intland codebeamerA cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4...4.8 Medium
- icecoderCross-site scripting in ICEcoder5.4 Medium
- intland codebeamerA CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the...8.8 High
- ntpsec, fedoraproject fedora +1 morentpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate...4.0 Medium
- Show moreLoading…