CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- fiyo cmsIn Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.6.1 Medium
- ibm aixIBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace...6.8 Medium
- ipfireAn authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via...5.4 Medium
- themify frameworkElemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework...9.8 Critical
- monstraA local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4...9.8 Critical
- linux kernelAn Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux...7.1 High
- quassel-irc quassel, fedoraproject fedora +1 moreQuassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a...7.5 High
- octopus serverAffected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in...4.3 Medium
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreA use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions...7.8 High
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreAn out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All...7.1 High
- phpmailer, fedoraproject fedora +1 moreInclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer8.1 High
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreAn out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK ...7.8 High
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreAn improper check for unusual or exceptional conditions issue exists within the parsing DGN files...7.8 High
- trend micro interscan web security virtual appliance, trend micro, inc. micro interscan web security virtual appliance +1 moreTrend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected...5.4 Medium
- connectwise automateAn issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection...7.5 High
- intel brand verification toolImproper permissions in the installer for the Intel(R) Brand Verification Tool before version 11...7.8 High
- opener project openerAn information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of...8.6 High
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker...5.5 Medium
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreAn out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All...7.8 High
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreAn out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All...7.1 High
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreDrawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to...7.1 High
- open design alliance drawings sdk, siemens comos, jt2go +1 more +3 moreAn out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All...7.8 High
- civicrmIn CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form...4.3 Medium
- civicrmIn CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and...8.8 High
- ge reason rpv311, reason rpv311 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...6.3 Medium
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- helmRepository credentials passed to alternate domain6.8 Medium
- apollosapp data-connector-rock, apollosproject apollos-apps +1 moreAuto-merging Person Records Compromised8.8 High
- pagekitCross-site scripting in PageKit5.4 Medium
- moodleMoodle Cross Site Scripting (XSS)5.4 Medium
- fogprojectFOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).8.8 High
libgdMageiaUpdated libgd packages fix a security vulnerabilityNo score- dlink dir-2640-us firmwareD-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR...6.8 Medium
- dlink dir-2640-us firmwareD-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds...7.1 High
- dlink dir-2640-us firmwareD-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us)...8.1 High
- dlink dir-2640-us firmwareThere are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1...7.8 High
- matrix matrix-appservice-bridgeAutomatic room upgrade handling can be used maliciously to bridge a room non-consentually6.5 Medium
- enphase envoy firmwareAn issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The...8.8 High
- enphase envoy firmwareAn issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for...7.5 High
- enphase envoy firmwareAn issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default...9.8 Critical
- enphase envoy firmwareAn issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel...5.3 Medium
- 74cmsSQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.9.8 Critical
- 74cmsSQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.9.8 Critical
- 74cmsSQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.9.8 Critical
- 74cmsSQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.9.8 Critical
- cisco unified intelligence center, unified contact center express, packaged contact center enterprise +1 more +3 moreCisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability4.7 Medium
- cisco small business 220 series smart plus switches, sf220-24 firmware, sf220-24p firmware +7 more +9 moreCisco Small Business 220 Series Smart Switches Vulnerabilities7.2 High
- cisco small business 220 series smart plus switches, sf220-24 firmware, sf220-24p firmware +7 more +9 moreCisco Small Business 220 Series Smart Switches Vulnerabilities7.2 High
- cisco asyncos, web security appliance (wsa), email security appliance +1 more +3 moreCisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability7.4 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability7.0 High
- Show moreLoading…