CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior...9.0 Critical
- samsung healthImproper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read...5.3 Medium
- samsung galaxy watch 3 firmware, galaxy watch active 2 firmware, galaxy watch active firmware +7 more +9 moreImproper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021...8.8 High
- samsung watch active2 pluginImproper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version...5.5 Medium
- samsung watch active pluginImproper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151...5.5 Medium
- samsung mobile galaxy watch3 plugin, samsung galaxy watch 3 plugin +1 moreImproper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151...5.5 Medium
- samsung galaxy watch pluginImproper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151...5.5 Medium
- samsung internetNon-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62...6.5 Medium
- samsung internetImproper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows...7.8 High
- google android, samsung mobile devices +1 moreImproper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage.7.5 High
- google android, samsung mobile devices +1 moreAssuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release...6.5 Medium
- google android, samsung mobile devices +1 moreAssuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release...5.5 Medium
- google android, samsung mobile devices +1 moreImproper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1...7.8 High
- google android, samsung mobile devices +1 moreImproper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1...5.5 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1...7.8 High
- google android, samsung mobile devices +1 moreImproper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root...4.4 Medium
- google android, samsung mobile devices +1 moreImproper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows...7.1 High
- google android, samsung mobile devices +1 moreImproper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically...2.4 Low
- google android, samsung mobile devices +1 moreA possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows...7.8 High
- google android, samsung mobile devices +1 moreA possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows...7.8 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation...4.2 Medium
- ibm qradar analyst workflow, security qradar analyst workflow +1 moreIBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be...4.0 Medium
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE)...6.5 Medium
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a...5.3 Medium
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a...8.8 High
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a...7.5 High
- netapp e-series santricity os controllerE-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a...6.5 Medium
triton-vmcrates.ioTriton VM Soundness Vulnerability due to Missing Constraint6.9 Medium- westerndigital edgeroverWestern Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low...8.8 High
- advantech webaccessAdvantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of...6.1 Medium
- ripgrep project ripgrepOS command injection in ripgrep9.8 Critical
- openplc scadabrOpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated...8.8 High
- openplc scadabrOpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via...5.4 Medium
freeradius-serverSUSESecurity update for freeradius-serverNo scorefreeradius-serverSUSESecurity update for freeradius-serverNo score- gfi software helpdeskImproper Access Control Vulnerability in Helpdesk8.8 High
- qnap qssInclusion of Sensitive Information in QSS7.8 High
- qnap qssOut-of-Bounds Read Vulnerability in QSS3.1 Low
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13...9.1 Critical
wiresharkOSS-FuzzHeap-buffer-overflow in proto_item_append_textNo scoremrubyOSS-FuzzNegative-size-param in mrb_str_formatNo score- flask unchained project unchainedOpen Redirect5.4 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref...6.5 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma...6.5 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception...6.5 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in...8.8 High
- Show moreLoading…