CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- posimyth the plus addons for elementor, unknown the plus addons for elementor page builder +1 moreThe Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- unknown visitors, bestwebsoft visitors online +1 moreVisitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)6.1 Medium
- gallery from files project from files, unknown gallery from files +1 moreGallery From Files <= 1.6.0 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- unknown side menu – add fixed side buttons, wow-estore side menu +1 moreSide Menu < 3.1.5 - Authenticated (admin+) SQL Injection7.2 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <2 4.22 - Authenticated Shell Upload8.8 High
- unknown stock in & out, stock in \& out project in \& out +1 moreStock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)5.4 Medium
- sendit project sendit, unknown sendit wp newsletter +1 moreSendit WP Newsletter <= 2.5.1 - Authenticated (admin+) SQL Injection6.6 Medium
- unknown xllentech english islamic calendar, xllentech english islamic calendar +1 moreXllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection8.8 High
- otrs, otrs ag ((otrs)) community edition +1 morePossible DoS attack using a special crafted URL in email body6.5 Medium
fluent-bitOSS-FuzzHeap-buffer-overflow in mk_string_copy_substrNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in mk_rconf_readNo score- debian linux, linux kernel +1 morenet/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive...5.5 Medium
irssiMageiaUpdated irssi packages fix security vulnerabilitiesNo score- linux kernelnet/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a...5.5 Medium
- linux, linux kernel, netapp cloud backup +9 more +11 moreGuest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can...7.8 High
- std42 elfinderRemote Code Execution (RCE)8.1 High
libjxlOSS-FuzzHeap-buffer-overflow in jxl::ThreadPool::RunCallState<jxl::ConvertToExternalNo score- gov imposto de renda da pessoa fisica 2021Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.3.7 Low
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 moreA carefully crafted PDF file can trigger an infinite loop while loading the file5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file5.5 Medium
- amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +59 more +61 moreA potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.7.5 High
- amd radeon software, radeon pro software +1 moreA heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.5.5 Medium
- amd radeon software, radeon pro software +1 moreAn insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.7.8 High
- amd radeon software, radeon pro software +1 moreAn insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.7.8 High
- amd radeon software, radeon pro software +1 moreAn out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.7.8 High
- amd radeon software, radeon pro software +1 moreAn invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.7.8 High
- amd radeon software, radeon pro software +1 moreAn insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which…7.8 High
- amd radeon software, radeon pro software +1 moreAn out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.7.8 High
- wire restundUnsafe loopback forwarding interface in Restund8.6 High
- thycotic password reset serverThycotic Password Reset Server before 5.3.0 allows credential disclosure.10.0 Critical
- kuaifan kuaifancmsKuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the...6.5 Medium
- wowonderIn WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic...9.8 Critical
- estsoft uneggUnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user...7.8 High
- google androidIn /proc/net of the kernel filesystem, there is a possible information leak due to a permissions...5.5 Medium
- hillrom connex central station, connex integrated wall system, connex spot monitor +6 more +8 moreThe affected product is vulnerable to an out-of-bounds write, which may result in corruption of...9.8 Critical
- hillrom connex central station, connex integrated wall system, connex spot monitor +6 more +8 moreThe affected product is vulnerable to an out-of-bounds read, which can cause information leakage...7.5 High
- advantech iviewThe affected product’s configuration is vulnerable due to missing authentication, which may allow...9.8 Critical
- advantech iviewThe affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker...7.5 High
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality...9.8 Critical
- accusoft imagegearA memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft...8.1 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft...8.1 High
- accusoft imagegearAn improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack...9.8 Critical
- mitsubishi electric corporation melsec iq-r series cpu modules, mitsubishielectric r00cpu firmware, r01cpu firmware +18 more +20 moreUncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU...7.5 High
- nextcloud end-to-end encryptionNextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.6.5 Medium
- nextcloudNextcloud Android App (com.nextcloud.client) before v3.16.0 is vulnerable to information disclosure due to searches for sharees being performed by default on the lookup server instead of only using th…6.5 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an atta…9.8 Critical
- nextcloudNextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.4.3 Medium
- nextcloud desktop, debian linux +1 morenextcloud-desktop - security update5.9 Medium
- nextcloud deckNextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless…6.5 Medium
- nextcloudNextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a gl…6.5 Medium
- Show moreLoading…