CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability5.5 Medium
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities6.5 Medium
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities6.5 Medium
- cisco small business 220 series smart plus switches, sf220-24 firmware, sf220-24p firmware +7 more +9 moreCisco Small Business 220 Series Smart Switches Vulnerabilities7.2 High
- 74cmsSQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.9.8 Critical
- cisco small business 220 series smart plus switches, sf220-24 firmware, sf220-24p firmware +7 more +9 moreCisco Small Business 220 Series Smart Switches Vulnerabilities7.2 High
- cisco meeting serverCisco Meeting Server API Denial of Service Vulnerability4.3 Medium
- phpmailer project phpmailer, fedoraproject fedora +1 moreRemote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows8.1 High
- shopex ecshopSQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.9.8 Critical
- shopex ecshopSQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.9.8 Critical
- shopex ecshopSQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .9.8 Critical
- matrix olmMatrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is...9.8 Critical
- phpcmsSQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.9.8 Critical
- phpcmsphpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize...8.8 High
- phpcmsDirectory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to...5.3 Medium
- phpcmsSQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add...9.8 Critical
- ibm db2, db2 for linux- unix and windows +1 moreDb2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to...7.5 High
- ibm resilient soar, resilient security orchestration automation and response +1 moreIBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information...4.4 Medium
drupal/block_content_revision_uiPackagistThis module provides a revision UI to Block Content entities. The module doesn't sufficiently respect access restrictions to certain entities when used in conjunction with specific modules. This vulne…No score- ibm resilient soar, resilient security orchestration automation and response +1 moreIBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an...5.9 Medium
- ibm security identity managerIBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the...7.5 High
- ibm security identity managerIBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By...5.3 Medium
drupal/linky_revision_uiPackagistThis module provides a revision UI to Linky entities. The module doesn't sufficiently respect access restrictions to certain entities when used in conjunction with specific modules. This vulnerability…No scoredrupal/ctoolsPackagistChaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, its 8.x-3.x branch is a start from scratch to evaluate the features of ctools that didn't make it into Drupal Core…No score- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file...6.5 Medium
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload...9.8 Critical
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML...5.4 Medium
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows...2.7 Low
- stampit supermixerPrototype pollution in supermixer7.5 High
- openclinic project openclinicJact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the...7.2 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, ruggedcom apr1808 firmware +32 more +34 moreAn issue was discovered in IdeBusDxe in Insyde InsydeH2O 5.x. Code in system management mode...6.7 Medium
- dedecmsSQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup...9.8 Critical
- teamviewerTeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations.7.8 High
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752,...9.0 Critical
- valine.js valineDenial of service in Valine5.3 Medium
libopenmptopenSUSESecurity update for libopenmptNo score- jenkins scriptler, jenkins project scriptler plugin +1 moreStored XSS vulnerability in Jenkins Scriptler Plugin5.4 Medium
- jenkins scriptler, jenkins project scriptler plugin +1 moreStored XSS vulnerability in Jenkins Scriptler Plugin5.4 Medium
- citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 moreCitrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix...6.5 Medium
- citrix gateway, netscaler gateway, application delivery controller firmware +2 moreCitrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC...6.5 Medium
- citrix cloud connectorCitrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information...7.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due...5.3 Medium
- zohocorp manageengine password manager proIn Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve...5.9 Medium
- thales sentinel ldk run-time environmentThe Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule...9.8 Critical
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem...7.8 High
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their...7.5 High
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a...5.4 Medium
- apache cxf, tomee, oracle business intelligence +2 more +4 moreApache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter7.5 High
- actix actix-http, fedoraproject fedora +1 moreHTTP Request Smuggling in actix-http7.5 High
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in...5.5 Medium
- Show moreLoading…