CVEs published in June 2021
16 tracked CVEs from 8 vendors had their first vendor advisory published in June 2021: 1 critical, 6 high, 1 in CISA KEV. Newest first.
- Added
CVE-2020-9493Unrated
Java deserialization in Chainsaw
Apache · 1 advisory - Added
CVE-2021-22175MediumCISA KEV
GitLab Server-Side Request Forgery (SSRF) Vulnerability
GitLab · 1 advisory - Added
CVE-2021-23022High
On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's…
F5 · 1 advisory - Added
CVE-2021-23024High
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote…
F5 · 1 advisory - Added
CVE-2021-23023High
BIG-IP: On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included…
F5 · 1 advisory - Added
CVE-2021-30357Medium
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied
Check Point · 1 advisory - Added
CVE-2021-26080Medium
EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6…
Atlassian · 1 advisory - Added
CVE-2021-26079Medium
The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before…
Atlassian · 1 advisory - Added
CVE-2021-26078Medium
The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version…
Atlassian · 1 advisory - Added
CVE-2021-20259High
Proxmox: flaw was found in the Foreman project.
Proxmox · 1 advisory - Added
CVE-2020-26693Medium
stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which
pfSense · 1 advisory - Added
CVE-2021-23021Medium
The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current…
F5 · 1 advisory - Added
CVE-2021-23020Medium
The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could
F5 · 1 advisory - Added
CVE-2021-23019High
The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password
F5 · 1 advisory - Added
CVE-2021-23017Critical
security issue in nginx resolver was identified, which might
F5, Veeam · 2 advisories - Added
CVE-2021-23018High
NGINX: Intra-cluster communication does not use TLS.
F5 · 1 advisory