CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition...7.5 High
- broadcom sannavThe OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes...5.3 Medium
- broadcom sannavWebtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to...9.8 Critical
- arena guild wars 2The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges...7.8 High
- cloverdxA cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7...6.1 Medium
- brocade fabric os, broadcom fabric operating system +1 moreRunning security scans against the SAN switch can cause config and secnotify processes within the...7.5 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak...7.2 High
- broadcom sannavBrocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows...7.5 High
- cloverdxA Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows...8.8 High
- bosch cpp firmware, cpp13 firmware, cpp6 firmware +2 more +4 moreReflected XSS in page parameter8.3 High
- bosch cpp firmware, cpp6 firmware, cpp7.3 firmware +1 more +3 moreUnauthenticated Information Extraction Vulnerability9.8 Critical
- bosch cpp firmware, cpp13 firmware, cpp4 firmware +3 more +5 moreImproper Input Validation of HTTP Headers8.3 High
- bosch cpp firmware, cpp13 firmware, cpp4 firmware +3 more +5 moreReflected XSS in URL handler8.3 High
- bosch cpp firmware, cpp13 firmware, cpp4 firmware +3 more +5 moreDenial of Service (DoS) due to invalid web parameter4.9 Medium
- hitachi id bravura security fabricAn issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0...8.8 High
- sap mobile sdk certificate providerUnder certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file storage. For a successful exploitation user interaction from an…7.8 High
- mcafee data loss prevention, mcafee,llc mcafee data loss prevention (dlp) endpoint for windows +1 moreCross site scripting vulnerability in DLP Endpoint for Windows5.2 Medium
- mcafee getsusp, mcafee,llc mcafee getsusp +1 moreOut of bounds write vulnerability in McAfee GetSusp8.8 High
- sap netweaver application server abap, sap se netweaver application server abap (applications based on sap gui for html) +1 moreSAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions -...5.4 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC -...5.8 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...4.3 Medium
- sap netweaver application server abap, sap se netweaver application server abap (applications based on web dynpro abap) +1 moreSAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI ...5.4 Medium
- sap commerce cloudWhen SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME...4.7 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received...4.3 Medium
- sap business oneUnder certain conditions, the installation of SAP Business One, version - 10.0, discloses...6.7 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received...4.3 Medium
- sap se netweaver as for java, sap netweaver application server for java +1 moreSAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker...9.0 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received...4.3 Medium
- sap enable now, sap se enable now (sap workforce performance builder - manager) +1 moreUnder certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions -...5.9 Medium
- sap netweaver application server for java, sap se netweaver as for java (useradmin) +1 moreInformation Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server...5.5 Medium
- sap manufacturing executionSAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP...5.4 Medium
- sap netweaver application server abap, sap se netweaver as abap and abap platform (srm rfc submit report) +1 moreSAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751,...6.3 Medium
- sap se netweaver as for abap (web survey), sap netweaver application server abap +1 moreSAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752,...6.1 Medium
libopenmptSUSESecurity update for libopenmptNo score- sap infraboxDue to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application.5.3 Medium
- circutor sge-plc1000, sge-plc1000 firmware +1 moreCircutor SGE-PLC1000 OS command Injection10.0 Critical
- circutor sge-plc1000, sge-plc1000 firmware +1 moreCircutor SGE-PLC1000 improper authentication8.8 High
- accela civic platformportlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote...6.5 Medium
- accela civic platformAccela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.6.1 Medium
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative execution with Floating-Point Value Injection5.5 Medium
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative Code Store Bypass5.5 Medium
- refined-github project refined-githubThe Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE...6.1 Medium
- intel connection manager, debian linux +1 moreConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +184 more +186 moreReachable assertion is possible while processing peer association WLAN message from host and...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +88 more +90 morePossible use after free in Display due to race condition while creating an external display in...8.4 High
- Show moreLoading…