CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Reader use-after-free could lead to arbitrary code execution8.8 High
- adobe illustratorAdobe Illustrator DOCX file parsing directory traversal vulnerability could lead to remote code execution8.8 High
- adobe incopyAdobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution8.8 High
- adobe magento commerce, magento +1 moreMagento Commerce improper Authorization via the 'Create Customer' endpoint6.5 Medium
- adobe indesignAdobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution8.8 High
- adobe magento commerce, magento +1 moreMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution6.9 Medium
- adobe indesignAdobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution8.8 High
- adobe illustratorAdobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote code execution8.8 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service7.5 High
- infoblox niosInfoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related...6.5 Medium
- siemens sinamics sl150 firmware, sinamics sm150 firmware, sinamics sm150i firmware +2 moreThe Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does...9.8 Critical
- narou project narouCode injection in Narou9.8 Critical
- sick visionary-s cx firmwareSICK Visionary-S CX up version 5.21.2.29154R are vulnerable to an Inadequate Encryption Strength...5.3 Medium
- tenable nessus, nessus agent +1 moreNessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...6.7 Medium
- tenable nessus, nessus agent +1 moreNessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...6.7 Medium
- wincred project wincredArbitrary Command Injection7.3 High
- ec-cubeEC-CUBE Cross-site scripting vulnerability6.1 Medium
- ec-cubeEC-CUBE Cross-site scripting vulnerability6.1 Medium
- nendeb fudousan plugin, fudousan plugin pro multi-user, fudousan plugin pro single-user +1 more +3 moreCross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro...5.4 Medium
- hector cabrera wordpress popular posts, wordpress popular posts project popular posts +1 moreCross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote...5.4 Medium
- inkdropInkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the...7.8 High
- hitachi virtual file platform, hitachi and nec corporation virtual file platform and nec storage m series nas gateway which uses hitachi virtual file platform, nec nas gateway nh4a firmware +5 more +7 moreHitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC...8.8 High
- mermaid project mermaidCross-site Scripting in Mermaid6.1 Medium
freeradius-serveropenSUSESecurity update for freeradius-serverNo scoreunicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo scoreqtOSS-FuzzUNKNOWN WRITE in QOutlineMapper::convertPathNo scoreselinuxOSS-FuzzHeap-buffer-overflow in ebitmap_match_anyNo scorelibwebpOSS-FuzzNegative-size-param in WebPRescalerInitNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in ZSTD_decompressMultiFrameNo score- misp-project mispapp/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not...9.8 Critical
- avaya aura device services, aura devices services +1 moreAvaya Aura Device Services Arbitrary Code Execution Vulnerability6.2 Medium
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability where, if a user...8.3 High
- phoenix contact automation worx software suite, phoenixcontact pc worx, config\+ +1 more +3 morePhoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability7.8 High
- phoenix contact ilc1x, phoenixcontact ilc1x0 firmware, ilc1x1 firmware +2 morePhoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability7.5 High
- phoenix contact axl f bk, il, phoenixcontact axl f bk eip ef firmware +17 more +19 morePhoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices7.3 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by authentication bypass vulnerability7.2 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by improper access control vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability7.5 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by exploitable format string vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability7.2 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability7.5 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by privilege escalation vulnerability8.8 High
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreRace Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products7.5 High
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreCross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products7.4 High
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreDenial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products5.3 Medium
- Show moreLoading…