CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in...5.5 Medium
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative...8.8 High
- eic e-document systemAn issue was discovered in EXCELLENT INFOTEK CORPORATION (EIC) E-document System 3.0. A remote...5.3 Medium
- i-doo veryfitproThe VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with...8.1 High
- protectimus slim nfc 70 firmwareProtectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict...4.6 Medium
- thalesgroup safenet keysecureSafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A...6.5 Medium
- jdom, apache solr, tika +3 more +5 moreXML External Entity (XXE) Injection in JDOM7.5 High
- wibu codemeter, siemens pss cape, sicam 230 firmware +2 moreA denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An...7.5 High
- wibu codemeter, siemens pss cape, sicam 230 firmware +7 more +9 moreA buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An...9.1 Critical
- otrs, otrs ag ((otrs)) community edition +1 moreXSS in the ticket overview screens7.5 High
- apache chainsaw, log4j, qos reload4j +2 moreJava deserialization in Chainsaw9.8 Critical
- qnap myqnapcloud linkInsecure Storage of Sensitive Information in myQNAPcloud Link6.0 Medium
- rapid7 nexposeRapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the...4.3 Medium
- togatech tenvoyImproper Verification of Cryptographic Signature in tenvoy9.8 Critical
- nextcloud talk, kiteworks security-advisories +1 moreSession Fixation in Nextcloud Talk6.5 Medium
serenityOSS-FuzzUse-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo score- apereo opencastOpencast vulnerable to billion laughs attack (XML bomb)8.1 High
- facebook hermesUse After Free in Hermes9.8 Critical
- tp-link tl-wpa4220 firmwareTP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.7.5 High
- tp-link tl-wpa4220 firmwareTP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the...5.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- razormist employee management systemA Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to...5.4 Medium
- alumni management system project management systemSQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to...9.8 Critical
- siemens sinamics sl150 firmware, sinamics sm150 firmware, sinamics sm150i firmware +2 moreSINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer...9.8 Critical
- nedb project nedbPrototype Pollution7.3 High
- wire wire-webappXSS through createObjectURL8.8 High
- ibm financial transaction managerIBM Financial Transaction Manager 3.0.2 and 3.2.4 is vulnerable to cross-site scripting. This...5.4 Medium
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- Show moreLoading…