CVEs published in June 2021
2,245 vulnerabilities, 169 critical, 16 exploited.
KernelLinuxftrace: Do not blindly read the ip address in ftrace_bug()No scoreKernelLinuxkvm: avoid speculation-based attacks from out-of-range memslot accessesNo scoreKernelLinuxdrm: Lock pointer access in drm_master_release()No scoreKernelLinuxdrm: Fix use-after-free read in drm_getunique()No scoreKernelLinuxnet/qla3xxx: fix schedule while atomic in ql_sem_spinlockNo scoreKernelLinuxwq: handle VM suspension in stall detectionNo scoreKernelLinuxbonding: init notify_work earlier to avoid uninitialized useNo scoreKernelLinuxisdn: mISDN: netjet: Fix crash in nj_probe:No scoreKernelLinuxnet/nfc/rawsock.c: fix a permission check bugNo scoreKernelLinuxscsi: core: Fix error handling of scsi_host_alloc()No scoreKernelLinuxNFS: Fix a potential NULL dereference in nfs_get_client()No scoreKernelLinuxperf: Fix data race between pin_count increment/decrementNo scoreKernelLinuxusb: fix various gadget panics on 10gbps cablingNo scoreKernelLinuxusb: dwc3: ep0: fix NULL pointer exceptionNo scoreKernelLinuxusb: fix various gadgets null ptr deref on 10gbps cabling.No scoreKernelLinuxkvm: avoid speculation-based attacks from out-of-range memslot accessesNo scoreKernelLinuxdrm: Lock pointer access in drm_master_release()No scoreKernelLinuxnet/qla3xxx: fix schedule while atomic in ql_sem_spinlockNo scoreKernelLinuxwq: handle VM suspension in stall detectionNo scoreKernelLinuxtracing: Correct the length check which causes memory corruptionNo scoreKernelLinuxbonding: init notify_work earlier to avoid uninitialized useNo scoreKernelLinuxftrace: Do not blindly read the ip address in ftrace_bug()No scoreKernelLinuxisdn: mISDN: netjet: Fix crash in nj_probe:No scoreKernelLinuxnet/nfc/rawsock.c: fix a permission check bugNo scoreKernelLinuxNFS: Fix a potential NULL dereference in nfs_get_client()No scoreKernelLinuxperf: Fix data race between pin_count increment/decrementNo scoreKernelLinuxusb: dwc3: ep0: fix NULL pointer exceptionNo scoreKernelLinuxkvm: avoid speculation-based attacks from out-of-range memslot accessesNo scoreKernelLinuxftrace: Do not blindly read the ip address in ftrace_bug()No scoreKernelLinuxnet/qla3xxx: fix schedule while atomic in ql_sem_spinlockNo scoreKernelLinuxbonding: init notify_work earlier to avoid uninitialized useNo scoreKernelLinuxisdn: mISDN: netjet: Fix crash in nj_probe:No scoreKernelLinuxnet/nfc/rawsock.c: fix a permission check bugNo scoregithub.com/ethereum/go-ethereumGoDenial of service in go-ethereum due to CVE-2020-28362No score- westerndigital wd my book live duo firmware, wd my book live firmware +1 moreWestern Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an...7.5 High
- huawei ips module firmware, ngfw module firmware, nip6300 firmware +4 more +6 moreThere is a memory leak vulnerability in Huawei products. A resource management weakness exists in...4.9 Medium
- huawei s12700 firmware, s1700 firmware, s2700 firmware +4 more +6 moreThere has a license management vulnerability in some Huawei products. An attacker with high...4.9 Medium
- huawei ecns280 firmwareThere is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not...5.3 Medium
- huawei manageone, smc2.0 +1 moreThere is a multiple threads race condition vulnerability in Huawei product. A race condition...4.1 Medium
- andrewburian powermuxURL Redirection to Untrusted Site ('Open Redirect') in github.com/AndrewBurian/powermux4.7 Medium
- huawei anyofficeThere is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can...8.1 High
- ratpackRemote Code Execution Vulnerability in Session Storage9.9 Critical
- ratpackClient side sessions should not allow unencrypted storage6.5 Medium
- tenable nessusNessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability...6.7 Medium
- ratpackDefault client side session signing key is highly predictable4.4 Medium
- zrlogCross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters...6.1 Medium
- tibco enterprise runtime for r, spotfire analytics platform, spotfire server +3 more +5 moreTIBCO Spotfire Windows Platform Artifact Search vulnerability8.8 High
- tibco enterprise runtime for r, spotfire analytics platform, spotfire server +3 more +5 moreTIBCO Spotfire Windows Platform Installation vulnerability8.8 High
- crmebSQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1...8.8 High
- spring security, vmware spring security, oracle communications cloud native core policy +2 moreResource Exhaustion in Spring Security7.5 High
- Show moreLoading…