CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- contiki-ngOut-of-bounds write in RPL-Classic and RPL-Lite8.2 High
- contiki-ngInfinite loop in IPv6 neighbor solicitation processing7.5 High
- contiki-ngOut-of-bounds write when processing 6LoWPAN extension headers8.6 High
- contiki-ngBuffer overflow due to unvalidated TCP data offset7.0 High
- contiki-ngBuffer overflow in RPL source routing header processing8.6 High
- ericnorris striptagsPassing in a non-string 'html' argument can lead to unsanitized output3.7 Low
- moxa mgate mb3180 firmwareAn issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use...7.5 High
- moxa mgate mb3180 firmwareAn issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a...7.5 High
- sing4g 4gee router hh70vb firmwareAn issue was discovered on 4GEE ROUTER HH70VB Version HH70_E1_02.00_22. Attackers can use...7.5 High
- ui camera g3 flex firmwareAn issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use...7.5 High
- ui camera g3 flex firmwareAn issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could...7.5 High
- gdraheim zziplib, debian linux, fedoraproject fedora +2 moreInfinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the...3.3 Low
- primion digitek secure 8 (evalos), primion-digitek secure 8 +1 morePrimion-Digitek Secure 8 SQL injection vulnerability9.8 Critical
- advantech webaccess\/scadaAdvantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which...6.5 Medium
- advantech webaccess\/scadaAdvantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow...6.1 Medium
- bosch b426 firmware, b426 firmware +1 moreB426 Credential Disclosure8.8 High
- bosch b426 firmware, b426-cn/b429- cn firmware, b426-cn firmware +2 more +4 moreB426 Web Configuration Authentication Bypass8.0 High
- vmware tools, tools for windows +1 moreVMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in...5.5 Medium
- zettlrNo filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows...6.1 Medium
- znoteA cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads...5.4 Medium
- checksec canopyCheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the...4.8 Medium
- cleo lexicomAn issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message...5.3 Medium
- cleo lexicomAn issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a...9.8 Critical
- jpressAn issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template...5.4 Medium
- mcu technologies mcusystemMCU Technologies MCUsystem - Reflected XSS6.1 Medium
- jenkins generic webhook trigger, jenkins project generic webhook trigger plugin +1 moreXXE vulnerability in Jenkins Generic Webhook Trigger Plugin9.8 Critical
- plex media serverServer-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before...5.8 Medium
- qnap systems inc. download stationImproper neutralization of special elements used in a command ('Command Injection') vulnerability...9.9 Critical
- qnap systems inc. download stationImproper privilege management vulnerability in cgi component in Synology Download Station before...9.9 Critical
- qnap systems inc. download stationServer-Side Request Forgery (SSRF) vulnerability in task management component in Synology...5.0 Medium
- synology calendarUse of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0...5.8 Medium
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_set_detected_protocolNo scorelibjxlOSS-FuzzHeap-use-after-free in jxl::ImageBlender::PrepareBlendingNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_set_detected_protocolNo score- qemu, debian linux, fedoraproject fedora +2 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior...6.0 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...6.0 Medium
- qemu, debian linux +1 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs...6.5 Medium
- torproject torAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service...7.5 High
- torproject torAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for...7.5 High
- torproject torAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge...7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get...4.3 Medium
- sensiolabs symfonyAuthentication granted with multiple firewalls6.8 Medium
- trendnet tw100-s4w1ca firmwareIn TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's...6.1 Medium
- trendnet tw100-s4w1ca firmwareIn TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could...8.8 High
- nextcloud, kiteworks security-advisories +1 moreMalicious Android application can crash the Nextcloud Android Client4.1 Medium
- nextcloud, kiteworks security-advisories +1 moreMalicious Android app could access Shared Preferences of the Nextcloud Android client3.9 Low
- hashicorp nomadImproper network isolation in Hashicorp Nomad6.5 Medium
- mantisbtMantisBT allows XSS in manage_custom_field_edit_page.php6.1 Medium
- torchbox wagtailImproper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks5.4 Medium
- lutils project lutilsPrototype Pollution5.6 Medium
- Show moreLoading…