CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- zammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive...5.3 Medium
- zammadIncorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers...5.3 Medium
- zammadCross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute...6.1 Medium
- syliusList of order ids, number, items total and token value exposed for unauthorized uses via new API5.3 Medium
- enhancesoft osticketCross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue...6.1 Medium
- prismjs prism, oracle application express +1 moreRegular Expression Denial of Service (ReDoS) in Prism7.4 High
- enhancesoft osticketCross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name...6.1 Medium
- limesurveyCross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2)...6.1 Medium
shopware/corePackagist,shopware/platformPackagist +1 morenon-admin users can create integration role with administrator roleNo score- postsrsd project postsrsdPostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long...5.3 Medium
- shopex ecshopCross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the...6.1 Medium
shopware/corePackagist,shopware/platformPackagist +1 moreCanceling of orders not related to the logged-in userNo score- webport cms project cmsDirectory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file...8.6 High
com.vaadin:flow-serverMavenReflected cross-site scripting in development mode handler in Vaadin2.5 Low- securepoint openvpn-clientSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged local user can modify the Open…7.8 High
- golang goGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 High
- golang goGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 Medium
- golang go, debian linux +1 moreGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 High
- golang go, netapp cloud insights telegraf agent +1 moreGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 High
- ibm security identity manager adapters, security identity manager adapter +1 moreIBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to...7.5 High
- ibm security identity manager adapters, security identity manager adapter +1 moreIBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow...6.5 Medium
- ibm security identity manager adapters, security identity manager adapter +1 moreIBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer...6.5 Medium
- ibm security identity manager adapters, security identity manager adapter +1 moreIBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow...6.5 Medium
- naviwebs navigate cmsSQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate...9.8 Critical
- ibm business automation workflow, cloud pak for automation +1 moreIBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002...6.4 Medium
- ibm business automation workflow, business process manager, cloud pak for automation +2 moreIBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8...3.1 Low
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group...4.9 Medium
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive...4.3 Medium
- chamilomain/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField,...9.8 Critical
- umbraco cmsUmbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization...6.1 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin3.1 Low
- limesurveyCross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications &...5.4 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI3.1 Low
- online pet shop web application project pet shop web applicationOnline Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload9.8 Critical
- adobe premiere, premiere elements +1 moreAdobe Premiere Elements Privilege Escalation Vulnerability6.2 Medium
- adobe photoshop elementsAdobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link6.2 Medium
- adobe robohelp serverAdobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability8.8 High
- adobe connectAdobe Connect improper access control could lead to privilege escalation4.3 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code execution7.3 High
- adobe after effectsAdobe After Effects PDF file parsing out-of-bounds write could lead to remote code execution vulnerability8.8 High
- adobe animateAdobe Animate out-of-bounds read vulnerability could lead to information exposure4.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce path traversal vulnerability in child theme store creation5.4 Medium
- adobe after effectsAdobe After Effects uncontrolled search path element vulnerability could lead to remote code execution8.3 High
- adobe animateAdobe Animate out-of-bounds read vulnerability could lead to information exposure4.3 Medium
- adobe after effectsAdobe After Effects TIF file parsing out-of-bounds read information disclosure vulnerability4.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce improper input validation in customer customer webapi5.3 Medium
- adobe animateAdobe Animate out-of-bounds read vulnerability could lead to information exposure4.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce insecure storage of sensitive documentation7.5 High
- opensuse factory, leap 15.2, suse arpwatch +3 more +5 morearpwatch: Local privilege escalation from runtime user to root7.8 High
- adobe animateAdobe Animate out-of-bounds read vulnerability could lead to information exposure4.3 Medium
- Show moreLoading…