CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in...6.5 Medium
- jerryscriptThere is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.9.8 Critical
- jerryscriptThere is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==...7.5 High
- jerryscriptThere is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in...9.8 Critical
- jerryscriptThere is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in...7.5 High
- jerryscriptThere is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || ...7.5 High
- jerryscriptThere is an Assertion 'block_found' failed at js-parser-statm.c:2003...7.5 High
- jerryscriptThere is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510...7.5 High
- jerryscriptThere is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c...7.5 High
- jerryscriptThere is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==...7.5 High
- jerryscriptThere is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at...7.5 High
- jerryscriptThere is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js...7.5 High
- jerryscriptThere is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c...7.5 High
- jerryscriptThere is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.9.8 Critical
- jerryscriptThere is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript...9.8 Critical
- jerryscriptThere is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in...9.8 Critical
rpcbindUbunturpcbind regressionNo scorerpcbindUbunturpcbind regressionNo score- mongodb go driverSpecific cstrings input may not be properly validated in the Go Driver6.8 Medium
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreDLL preload vulnerability in McAfee Agent for Windows7.3 High
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreIncorrect permissions on McAfee Agent for Windows event folder4.8 Medium
- xscreensaver project xscreensaver, fedoraproject fedora +1 moreXScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs....4.6 Medium
- debian linux, long range zip project range zip +1 moreA null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows...5.5 Medium
- debian linux, long range zip project range zip +1 moreA null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which...5.5 Medium
- debian linux, long range zip project range zip +1 moreUse after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to...5.5 Medium
- labcupIn LabCup before <v2_next_18022, it is possible to use the save API to perform unauthorized...3.1 Low
- tracefinanacial crestbridgeTrace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability,...8.8 High
- tracefinanacial crestbridgeTrace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability,...8.8 High
- tracefinanacial crestbridgeTrace Financial CRESTBridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3...5.4 Medium
- tracefinancial crestbridgeTrace Financial Crest Bridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6...5.4 Medium
- f5 big-ip access policy manager, big-ip access policy manager client, edge client for windows +2 moreOn version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client...7.8 High
- netsetmanAn unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0...6.8 Medium
- lancom-systems lcos fxLANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal.7.5 High
- annexcloud loyalty experience platformAn Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience...4.3 Medium
- trusteddomain opendmarc, fedoraproject fedora +1 moreOpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer...7.5 High
- f5 big-ip access policy manager, edge client for windows +1 moreOn version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists...7.8 High
- f5 big-iq, big-iq centralized management +1 moreOn version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility...7.2 High
- tp-link tl-sg2005 firmware, tl-sg2008 firmware +1 moreTP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site...8.8 High
- jenkins kiuwan, jenkins project kiuwan plugin +1 moreCross-site scripting in Jenkins Kiuwan Plugin6.1 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreCSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials8.8 High
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreIncorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials6.5 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreMissing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials4.3 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreMissing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs4.3 Medium
- jenkins kubernetes, jenkins project kubernetes cli plugin +1 moreMissing Authorization in Jenkins Kubernetes CLI Plugin4.3 Medium
- tp-link tl-sg2005 firmware, tl-sg2008 firmware +1 moreTP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index...8.1 High
- smartstream transaction lifecycle management reconciliations-premiumSmartStream Transaction Lifecycle Management (TLM) Reconciliation Premium (RP) <3.1.0 allows XSS....5.4 Medium
- annexcloud loyalty experience platformAnnex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate...8.8 High
- paessler prtg network monitorPRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation.4.3 Medium
- annexcloud loyalty experience platformAnnex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify...4.3 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation7.8 High
- Show moreLoading…