CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- gallagher command centreA SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote...9.9 Critical
- gallagher command centreCleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre...6.0 Medium
- gallagher command centreImproper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator...8.1 High
- gallagher command centreExposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command...8.1 High
- gallagher command centreCleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre...6.0 Medium
- gallagher command centreImproper Authorization vulnerability in Gallagher Command Centre Server allows command line...9.9 Critical
- gallagher command centreImproper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to...6.5 Medium
- gitlabA denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an...7.7 High
- schneider-electric easergy t300 firmwareA CWE-269: Improper Privilege Management vulnerability exists in EnerlinÕX ComÕX versions prior...4.3 Medium
- schneider-electric powerlogic egx100 firmware, powerlogic egx300 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** A CWE-20: Improper Input Validation vulnerability exists in...9.8 Critical
- schneider-electric powerlogic egx100 firmware, powerlogic egx300 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** A CWE-20: Improper Input Validation vulnerability exists in...9.8 Critical
- schneider-electric powerlogic egx100 firmware, powerlogic egx300 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** A CWE-20: Improper Input Validation vulnerability exists in...7.5 High
- schneider-electric powerlogic egx100 firmware, powerlogic egx300 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** A CWE-20: Improper Input Validation vulnerability exists in...9.8 Critical
- schneider-electric powerlogic pm5560 firmware, powerlogic pm5561 firmware, powerlogic pm5562 firmware +1 more +3 moreA CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC,...5.3 Medium
- schneider-electric powerlogic pm5560 firmware, powerlogic pm5561 firmware, powerlogic pm5562 firmware +2 more +4 moreA CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in...9.8 Critical
- schneider-electric interactive graphical scada systemA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def...7.8 High
- schneider-electric interactive graphical scada systemA CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0...7.8 High
- schneider-electric interactive graphical scada systemA CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and...7.8 High
- schneider-electric interactive graphical scada systemA CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and...7.8 High
- schneider-electric modicon x80 bmxnor0200h rtu firmwareA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in...5.3 Medium
- gitlabWhen requests to the internal network for webhooks are enabled, a server-side request forgery...6.8 Medium
- tianocore edk2, edk ii +1 moreExample EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.7.5 High
- samsung gear s, samsung mobile gear s plugin +1 moreInformation exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows...6.5 Medium
- samsung notesAn improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4...5.5 Medium
- samsung smartthings, smartthings firmware +1 moreInformation Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to...3.3 Low
- samsung accountIntent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0)...3.3 Low
- samsung notesInformation Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to...3.3 Low
- samsung healthIntent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to...7.8 High
- samsung internet, samsung mobile samsug internet +1 moreIntent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker...7.8 High
- samsung smart managerImproper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the...7.1 High
- samsung bixby voiceIntent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access...3.3 Low
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows...6.8 Medium
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows...6.7 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreA race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to...6.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreA use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021...6.4 Medium
- google android, samsung mobile devices +1 moreImproper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows...6.6 Medium
- google android, samsung mobile devices +1 moreImproper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreIntent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreIntent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers...4.0 Medium
- google android, samsung mobile devices +1 moreImproper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use...2.3 Low
- google android, samsung mobile devices +1 moreImproper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers...7.1 High
- Show moreLoading…