CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- open-emr openemrIn OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not...8.1 High
- zte zxv10 b860h v5.0 firmwareA smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to...7.5 High
- helpu helpuftclient, helpuftserver, helpuserver +5 more +7 moreHelpU Overflow Vulnerability7.0 High
ovmfSUSESecurity update for ovmfNo scoreovmfSUSESecurity update for ovmfNo score- avaya aura experience portal, product +1 moreAvaya Aura Experience Portal XSS vulnerabilities5.3 Medium
- avaya aura experience portal, experience portal +1 moreURL redirection to untrusted site possible in Avaya Aura Experience Portal4.4 Medium
- avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 moreAvaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability8.0 High
- avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 moreAvaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability4.9 Medium
- avaya aura utility servicesAvaya Aura Utility Services Privilege Escalation Vulnerability8.0 High
- avaya aura utility servicesAvaya Aura Utility Services Privilege Escalation Vulnerability7.7 High
- avaya aura utility servicesAvaya Utility Services Sensitive Information Disclosure Vulnerability4.9 Medium
- qnap qts, qnap systems inc. quts hero, qutscloud +2 moreCommand Injection Vulnerability in QTS8.1 High
libsshOSS-FuzzHeap-buffer-overflow in explicit_bzeroNo scoreselinuxOSS-FuzzHeap-buffer-overflow in __cil_cat_expr_range_to_bitmap_helperNo score- fisco-bcosThe blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and...7.5 High
- bindata project bindata, gitlab +1 morePotential Denial-of-Service in bindata3.7 Low
- oracle opengrokVulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior....8.8 High
- tsmuxer project tsmuxerHeap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- tsmuxer project tsmuxerOut-of-bounds Read in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by...5.5 Medium
- tsmuxer project tsmuxerDivide-by-zero bug in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by...5.5 Medium
- tsmuxer project tsmuxerHeap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- tsmuxer project tsmuxerHeap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a...7.5 High
- moodleMoodle command execution vulnerability exists in the default legacy spellchecker plugin8.2 High
- get-simple getsimplecmsGetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to...6.1 Medium
- get-simple getsimplecmsCross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username,...6.1 Medium
- get-simple getsimplecmsCross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to...6.1 Medium
- get-simple getsimplecmsCross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via...6.1 Medium
- catfish-cms catfish cmsA cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute...6.1 Medium
github.com/pterodactyl/wingsGoUnchecked hostname resolution could allow access to local network resources by users outside the local network6.4 Medium- reportportal service-api, reportportal +1 moreXXE vulnerability on Launch import with externally-defined DTD file7.5 High
github.com/netlify/gotrueGoAuth bypass in SAML providerNo score- github.com/ecnepsnai/web, web project web +1 morePanic or authentication bypass in github.com/ecnepsnai/web9.8 Critical
kernel-linusMageiaUpdated kernel-linus packages fix security and other issuesNo scorekernelMageia,kmod-virtualboxMageia,kmod-xtables-addonsMageia +2 moreUpdated kernel packages fix security and other issuesNo scoredrupal/opigno_group_managerPackagistThis project is related to Opigno LMS distribution. It implements the group manager in the Opigno LMS. The module does not set X-Frame-Options and blocks ability of other modules (e.g Security Kit) to…No scoredrupal/opigno_learning_pathPackagistThis project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS. The module does not…No scorefreeradius-serverSUSESecurity update for freeradius-serverNo score- debian linux, linux kernel +1 moreIn kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g.,...4.7 Medium
- txjia imcatSQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.9.8 Critical
- get-simple getsimplecmsCross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add...5.4 Medium
- get-simple getsimplecmsCross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.4.8 Medium
- phpipamphpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip...6.1 Medium
- get-simple getsimplecmsCross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments...4.8 Medium
- get-simple getsimplecmsRemote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar...7.2 High
- opensuse cryptctl, suse linux enterprise server for sap 12-sp5, manager server 4.0 +2 morecryptctl: client side password hashing is equivalent to clear text password storage9.8 Critical
- accellion kiteworksAccellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via...8.8 High
- accellion kiteworksAccellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges...6.7 Medium
- vmware app volumes, remote console, tools +2 moreVMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior...7.8 High
- Show moreLoading…