CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 morePods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- connectwise automateAn XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.9.8 Critical
- mongo-expressXSS Vulnerability in mongo-express8.1 High
- neos formForm validation can be skipped6.5 Medium
- typesettercms typesetterCross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description...6.1 Medium
- textpatternTextpattern 4.7.3 contains an aribtrary file load via the file_insert function in include...9.8 Critical
- apache nuttxmalloc, realloc and memalign implementations are vulnerable to integer wrap-arounds9.8 Critical
- is-svg project is-svgReDOS in IS-SVG7.5 High
- color-string project color-stringRegular Expression Denial of Service (ReDOS)5.3 Medium
- hisiphpCross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.6.1 Medium
- metinfoCross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.6.1 Medium
- greenbone os, security assistant +1 moreGreenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS...6.1 Medium
- greenbone os, security assistant +1 moreGreenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host...9.8 Critical
- akauntingAkaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function....8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to...8.8 High
- google chromeUse after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora, google chromium webgl +2 moreUse after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to...8.8 High
- increments qiita\qiita-markdown Cross-site Scripting vulnerability6.1 Medium
- powerarchiverThe XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external...4.3 Medium
- dovecot, debian linux, fedoraproject fedora +2 moreThe submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp....4.8 Medium
- dovecot, fedoraproject fedora +1 moreThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as...4.3 Medium
- msi dragon centerMODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and...7.8 High
- f-secure products, linux security, cloud protection for salesforce +2 more +4 moreDenial-of-Service (DoS) Vulnerability3.5 Low
- myq-solution myq serverMyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because...8.8 High
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from...7.5 High
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from...7.5 High
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The...5.3 Medium
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php,...8.8 High
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.5.3 Medium
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from...7.5 High
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password...6.5 Medium
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via...6.5 Medium
- white shark systems project shark systemsWhite Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php,...9.8 Critical
apache-commonsOSS-FuzzUncaught exceptionNo score- linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker...7.0 High
- mpmath, fedoraproject fedora +1 moreReDOS in Mpmath7.5 High
- radykal fancy product designerFancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE9.8 Critical
- expresstech quiz and survey master, quiz and survey master – best quiz, exam and survey plugin for wordpress +1 moreQuiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS)6.1 Medium
serenityOSS-FuzzUse-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo scoreprosodyDebianprosody - regression updateNo score- riot-os riotRIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow...7.5 High
- serenityosSerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal...9.8 Critical
- riot-os riotRIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow...7.5 High
- riot-os riotRIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow...7.5 High
- riot-os riotRIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow...7.5 High
- riot-os riotRIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow...7.5 High
- serenityosSerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow...7.5 High
- serenityosSerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to...7.5 High
- contiki-ngOut-of-bounds read in the 6LoWPAN implementation8.2 High
- Show moreLoading…