CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- openbsdIt was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd...7.5 High
- gitpodUnvalidated redirects6.1 Medium
- kaspersky lab vanilla forumsIt was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.6.1 Medium
- kaspersky lab vanilla forumsIt was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a...6.1 Medium
- icehrmA session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to...6.1 Medium
- icehrmCross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute...6.1 Medium
- icehrmA cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which...8.8 High
- icehrmA stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which...5.4 Medium
- dovecot, fedoraproject fedora +1 moreDovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem...7.5 High
ovmfSUSESecurity update for ovmfNo scoreovmfSUSESecurity update for ovmfNo score- owasp enterprise security api for javaPadding oracle attacks5.9 Medium
- linux kernelA flaw was discovered in gfs2 file system’s handling of acls (access control lists). An...7.8 High
- ec-cube co.,ltd. category contents plugin (for ec-cube 3.0 series), ec-cube business form output +1 moreCross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series)...6.1 Medium
- ec-cube email newsletters management, ec-cube co.,ltd. email newsletters management plugin (for ec-cube 3.0 series) +1 moreCross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3...6.1 Medium
- ec-cube business form output, ec-cube co.,ltd. business form output plugin (for ec-cube 3.0 series) +1 moreCross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series...6.1 Medium
- hitachi application server v10 manual, application server help +1 moreCross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server...6.1 Medium
- growi, inc. growiImproper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker...6.5 Medium
- growi, inc. growiNoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to...9.1 Critical
- ec-cube delivery slip number, delivery slip number csv bulk registration, delivery slip number mail +1 more +3 moreCross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0...6.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote...6.1 Medium
- asken, asken inc. あすけんダイエット (asken diet) for android +1 moreImproper authorization in handler for custom URL scheme vulnerability in ????????? (asken diet)...6.1 Medium
serenityOSS-FuzzUse-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo score- linux, linux kernel, canonical ubuntu linux +2 more +4 moreIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds...7.8 High
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow...9.8 Critical
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to...7.5 High
- theologeek manuskript** DISPUTED ** Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a...7.8 High
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the...9.8 Critical
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this...7.5 High
- nvidia jetson linux, jetson, tx2 series, tx2 nx, agx xavier series, xavier nx +1 moreTrusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in...5.0 Medium
- nvidia jetson linux, jetson tx1, tx2 series, tx2 nx, agx xavier series, xavier nx, nano and nano 2gb +1 moreBootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might allow an...6.3 Medium
- nvidia jetson linux, jetson tx1 +1 moreThe ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access...6.3 Medium
- nvidia jetson linux, jetson tx1 +1 moreTrusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the...6.3 Medium
- elabftwBlind Server-Side Request Forgery (SSRF) in eLabFTW6.8 Medium
- vfsjfilechooser2 project vfsjfilechooser2ReDOS in Vfsjfilechooser27.5 High
- prototypejs prototypeAn issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 version 1...7.5 High
- wp go maps (formerly wp google maps) google maps, codecabin wp go maps +1 moreWP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- unknown comments like dislikeComments Like Dislike < 1.1.4 - Add Like/Dislike Bypass5.3 Medium
- autoptimizeAutoptimize < 2.7.8 - Authenticated Stored XSS via File Upload4.8 Medium
- autoptimizeAutoptimize < 2.7.8 - Race Condition leading to RCE8.1 High
- autoptimizeAutoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"9.8 Critical
- automattic jetpack, jetpack – wp security, backup, speed, & growth +1 moreJetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak5.3 Medium
- getastra wp hardening, unknown wp hardening – fix your wordpress security +1 moreWP Hardening < 1.2.2 - Reflected XSS via historyvalue6.1 Medium
- getastra wp hardening, unknown wp hardening – fix your wordpress security +1 moreWP Hardening < 1.2.2 - Reflected XSS via URI6.1 Medium
- ayecode getpaid, ayecode ltd wordpress payments plugin | getpaid +1 moreGetPaid < 2.3.4 - Authenticated Stored XSS5.4 Medium
- unknown wp config file editor, wp config file editor project config file editor +1 moreWP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- admincolumns admin columns, unknown admin columns pro +1 moreAdmin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label5.4 Medium
- tielabs jannahJannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- ayecode location managerGeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections9.8 Critical
- pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 morePods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- Show moreLoading…