CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- palo alto networks bridgecrew checkovBridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution6.7 Medium
- palo alto networks prisma cloud compute, paloaltonetworks prisma cloud +1 morePrisma Cloud Compute: User role authorization secret for Console leaked through log file export3.8 Low
- set-getter project set-getterset-getter Prototype Pollution Vulnerability9.8 Critical
- expand-hash project expand-hashPrototype Pollution9.8 Critical
- opensuse factory, leap 15.2, python-hyperkitty project python-hyperkitty +2 morepython-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root6.8 Medium
- cerberusftp ftp serverThe Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS...6.1 Medium
- opensuse factory, leap 15.2, python-postorius +2 morepython-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root6.8 Medium
- zte zxhn hs562 firmwareA smart camera product of ZTE is impacted by a permission and access control vulnerability. Due...7.2 High
- zte zxhn h168n, zxhn h168n firmware +1 moreA ZTE product has an information leak vulnerability. Due to improper permission settings, an...6.5 Medium
- red hat resteasy, netapp oncommand insight +1 moreCross-Site Scripting6.1 Medium
- zoho manageengine servicedesk plusIncomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows...7.2 High
- cubecoders ampAn issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java...7.2 High
- the fuck project fuck, fedoraproject fedora +1 moreThe Fuck Arbitrary File Deletion via Path Traversal9.1 Critical
- gnome caribouA flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this...7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflow9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereference7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byte7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereference7.5 High
- apache http server, mcafee epolicy orchestrator, netapp cloud backup +2 moreImproper Handling of Insufficient Privileges5.5 Medium
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connections5.3 Medium
- bluezmemory contents disclosure in cli_feat_read_cb3.3 Low
c-blosc2OSS-FuzzHeap-buffer-overflow in frame_get_vlmetalayersNo score- [unknown] nettle, debian linux, netapp ontap select deploy administration utility +4 more +6 moreA flaw was found in the way nettle's RSA decryption functions handled specially crafted...7.5 High
- ipfirelfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned...8.8 High
- intel rapid storage technologyUncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology...7.8 High
- intel ipmctlIncorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows...7.8 High
- intel ssd data center toolIncorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions...7.8 High
- intel computing improvement program, intel corporation intel(r) computing improvement program +1 moreIncorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4...7.8 High
- intel computing improvement programImproper permissions in the installer for the Intel(R) Computing Improvement Program software...7.8 High
- intel secl-dcImproper input validation in an API for the Intel(R) Security Library before version 3.3 may...4.9 Medium
- intel secl-dcUse of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R)...6.5 Medium
- intel secl-dcMissing release of resource after effective lifetime in an API for the Intel(R) Security Library...4.9 Medium
- intel secl-dcKey exchange without entity authentication in the Intel(R) Security Library before version 3.3...8.1 High
- intel vtune profilerInsecure inherited permissions in the installer for the Intel(R) VTune(TM) Profiler before...7.8 High
- debian linux, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreObservable response discrepancy in some Intel(R) Processors may allow an authorized user to...6.5 Medium
- intel brand verification tool, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreImproper permissions in the installer for the Intel(R) Brand Verification Tool before version 11...6.5 Medium
- intel nuc 10 performance kit nuc10i3fnh firmware, nuc 10 performance kit nuc10i3fnhf firmware, nuc 10 performance kit nuc10i3fnk firmware +74 more +76 moreImproper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged...6.7 Medium
- intel nuc 10 performance kit nuc10i3fnh firmware, nuc 10 performance kit nuc10i3fnhf firmware, nuc 10 performance kit nuc10i3fnk firmware +74 more +76 more Improper access control in system firmware for some Intel(R) NUCs may allow a privileged...6.7 Medium
- intel driver \& support assistantUncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an...7.3 High
- intel driver \& support assistantInsufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an...7.8 High
- intel driver \& support assistantImproper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreIncorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreUncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreInsecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before...7.8 High
- intel uniteInsecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031...7.8 High
- intel uniteUncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may...7.3 High
- intel uniteImproper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may...7.8 High
- intel uniteUnquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow...7.3 High
- intel lapqc71a firmware, lapqc71b firmware, lapqc71c firmware +1 more +3 moreInsecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before...7.8 High
- Show moreLoading…