CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- rc project rc, rcpro project rcpro +1 moreAn issue was discovered in function addMeByRC in the smart contract implementation for RC, an...6.5 Medium
- evernoteAn issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler....8.8 High
- runzero platform, shopware +1 moreCreation of order credits was not validated by acl in admin orders4.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreDb2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of...7.5 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...5.9 Medium
- ibm db2, db2 for linux and unix +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an...6.5 Medium
- ibm db2, db2 for linux and unix +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user...6.2 Medium
- roundcube webmailCross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer...5.4 Medium
- roundcube webmailCross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in ...5.4 Medium
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreOpening a maliciously crafted project file may cause an out-of-bounds write, which may allow an...7.8 High
- webport web portCross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to...5.4 Medium
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreThe affected product is vulnerable to memory corruption condition due to lack of proper...7.8 High
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreParsing a maliciously crafted project file may cause a heap-based buffer overflow, which may...7.8 High
- dell biosconnect, alienware m15 r6 firmware, chengming 3990 firmware +126 more +128 moreDell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious...7.2 High
- dell biosconnect, alienware m15 r6 firmware, chengming 3990 firmware +126 more +128 moreDell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious...7.2 High
- dell biosconnect, alienware m15 r6 firmware, chengming 3990 firmware +126 more +128 moreDell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious...7.2 High
- dell uefi bios https stack, alienware m15 r6 firmware, chengming 3990 firmware +126 more +128 moreDell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature...5.9 Medium
- thephpleague flysystem, fedoraproject fedora +1 moreTime-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem9.8 Critical
- dhis2 dhis2-core, dhis 2 +1 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core8.5 High
- webportSQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.9.8 Critical
- webport web portDirectory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.5.3 Medium
- phpwcmsphpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php.9.8 Critical
- webport web portCross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in...5.4 Medium
- ibosIn IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.8.8 High
- ibosIn IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard...9.8 Critical
- ibosIn IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody...6.1 Medium
- jfinalJFinal Java Deserialization Vulnerability9.8 Critical
- sir gnuboardCross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the act parameter in bbs...6.1 Medium
- dlink dsl-2888a firmwareThere is an arbitrary password modification vulnerability in a D-LINK DSL-2888A router product....9.8 Critical
- sir gnuboardSQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db...9.8 Critical
- react-bootstrap-table project react-bootstrap-tableCross-site Scripting (XSS)6.1 Medium
- sir gnuboardCross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs...6.1 Medium
- crmebCRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.9.8 Critical
- crmebIn CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The...4.3 Medium
- jfinalCross-site scripting in jfinal6.1 Medium
- johnson controls exacqvision web serviceexacqVision Web Service CSS5.3 Medium
- johnson controls exacqvision enterprise managerexacqVision Enterprise Manager CSS4.3 Medium
- mozilla firefoxLack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content...6.1 Medium
- mozilla firefox, firefox for android +1 moreA malicious webpage could have forced a Firefox for Android user into executing attacker...6.1 Medium
- mozilla hubs cloud, hubs cloud reticulum +1 moreProxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs,...9.8 Critical
- mozilla firefox, firefox for ios +1 moreWhen a download was initiated, the client did not check whether it was in normal or private...4.3 Medium
- mozilla firefoxFirefox for Android would become unstable and hard-to-recover when a website opened too many...4.3 Medium
- mozilla firefoxAddress bar search suggestions in private browsing mode were re-using session data from normal...4.3 Medium
- mozilla firefoxA malicious website that causes an HTTP Authentication dialog to be spawned could trick the built...5.3 Medium
- mozilla firefoxWhen drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This...8.1 High
- linux kernel, netapp cloud backup, h300e firmware +7 more +9 moreThe vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a...5.9 Medium
- flow flow-server, vaadin flow, vaadin +2 morePossible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-195.3 Medium
- flow flow-server, vaadin +1 moreReflected cross-site scripting in development mode handler in Vaadin 14, 15-192.5 Low
- hewlett packard enterprise hpe oneview global dashboard, hpe oneview global dashboard +1 moreA potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which...5.5 Medium
- Show moreLoading…