CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
- ibm planning analyticsIBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could...4.3 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of...4.0 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- machformMachform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an...6.1 Medium
- machformMachform prior to version 16 is vulnerable to unauthenticated remote code execution due to...8.1 High
- machformMachform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient...6.1 Medium
- machformMachform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF...8.8 High
- machformMachform prior to version 16 is vulnerable to HTTP host header injection due to improperly...6.1 Medium
- powerisoA memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO...8.8 High
- fatek winproladderFATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write,...9.8 Critical
- fatek winproladderFATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within...9.8 Critical
- fatek winproladderFATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read,...9.8 Critical
- ratpackCached redirect poisoning via X-Forwarded-Host header7.0 High
- vector 35 binary ninjaThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- vector 35 binary ninjaThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- opentext brava! desktop, brava\! desktop +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- arlo q plus, q plus firmware +1 moreThis vulnerability allows attackers with physical access to escalate privileges on affected...6.8 Medium
resource-agentsAlmaLinux,resource-agents-aliyunAlmaLinux,resource-agents-gcpAlmaLinux +2 moreresource-agents bug fix and enhancement updateNo scorebind-dyndb-ldapAlmaLinux,custodiaAlmaLinux,opendnssecAlmaLinux +9 more +11 moreidm:DL1 bug fix updateNo score- mastersoft zookAn improper input validation vulnerability of ZOOK software (remote administration tool) could...9.0 Critical
NetworkManager-libnm-develAlmaLinuxNetworkManager bug fix and enhancement updateNo scoresanlock-develAlmaLinuxsanlock bug fix and enhancement updateNo scorelibsss_nss_idmap-develAlmaLinuxsssd bug fix and enhancement updateNo score- helpu, helpu helpu.ocx +1 moreHelpu remote code execution vulnerability9.6 Critical
- istioIstio before 1.9.6 and 1.10.x before 1.10.2 has Incorrect Access Control.8.8 High
- unidocs ezpdf editor, ezpdf reader +1 moreA memory corruption vulnerability exists when ezPDF improperly handles the parameter. This...6.4 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery ...9.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.7.5 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.7.5 High
- cnesty helpcomA vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command....7.5 High
- google bindiffUse-after-free in BinDiff7.5 High
- apache traffic server, debian linux +1 moreHTTP Request Smuggling, content length with invalid charters7.5 High
- apache traffic server, debian linux +1 moreIncorrect handling of url fragment leads to cache poisoning7.5 High
- nodemailerHTTP Header Injection6.3 Medium
- mcafee mvision edrCommand injection through environment variable in MVISION EDR8.4 High
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Certificate Validation Vulnerability7.4 High
- uclouvain openjpeg, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when...7.8 High
- miraheze globalnewfilesUncontrolled Resource Consumption in GlobalNewFiles6.5 Medium
- ipfireCross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.6.1 Medium
- zammadCross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute...6.1 Medium
- zammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive...7.5 High
- zammadText injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote...4.3 Medium
- Show moreLoading…