Total
419455 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2021-26306 | 1 Raw-cpuid Project | 1 Raw-cpuid | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods. | |||||
| CVE-2021-26305 | 1 Cdr Project | 1 Cdr | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue was discovered in Deserializer::read_vec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness. | |||||
| CVE-2021-26304 | 1 Phpgurukul | 1 Daily Expense Tracker System | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter. | |||||
| CVE-2021-26303 | 1 Phpgurukul | 1 Daily Expense Tracker System | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field. | |||||
| CVE-2021-26296 | 2 Apache, Netapp | 2 Myfaces, Oncommand Insight | 2026-06-17 | 5.1 MEDIUM | 7.5 HIGH |
| In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is possible (although difficult) for an attacker to calculate a future CSRF token value and to use that value to trick a user into executing unwanted actions on an application. | |||||
| CVE-2021-26295 | 1 Apache | 1 Ofbiz | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz. | |||||
| CVE-2021-26294 | 1 Afterlogic | 2 Aurora, Webmail Pro | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password). | |||||
| CVE-2021-26293 | 1 Afterlogic | 2 Aurora, Webmail Pro | 2026-06-17 | 6.8 MEDIUM | 9.8 CRITICAL |
| An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an executable file under the web root). This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x. | |||||
| CVE-2021-26291 | 3 Apache, Oracle, Quarkus | 4 Maven, Financial Services Analytical Applications Infrastructure, Goldengate Big Data And Application Adapters and 1 more | 2026-06-17 | 6.4 MEDIUM | 9.1 CRITICAL |
| Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html | |||||
| CVE-2021-26281 | 2026-06-17 | N/A | 5.5 MEDIUM | ||
| Some parameters of the alarm clock module are improperly stored, leaking some sensitive information. | |||||
| CVE-2021-26280 | 2026-06-17 | N/A | 7.9 HIGH | ||
| Locally installed application can bypass the permission check and perform system operations that require permission. | |||||
| CVE-2021-26279 | 2026-06-17 | N/A | 5.9 MEDIUM | ||
| Some parameters of the weather module are improperly stored, leaking some sensitive information. | |||||
| CVE-2021-26278 | 2026-06-17 | N/A | 6.3 MEDIUM | ||
| The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device. | |||||
| CVE-2021-26277 | 2 Google, Vivo | 2 Android, Frame Service | 2026-06-17 | N/A | 5.6 MEDIUM |
| The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions. | |||||
| CVE-2021-26276 | 1 Godaddy | 1 Node-config-shield | 2026-06-17 | 5.0 MEDIUM | 5.3 MEDIUM |
| scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data | |||||
| CVE-2021-26275 | 1 Eslint-fixer Project | 1 Eslint-fixer | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted | |||||
| CVE-2021-26274 | 1 Ninjarmm | 1 Ninjarmm | 2026-06-17 | 3.6 LOW | 7.1 HIGH |
| The Agent in NinjaRMM 5.0.909 has Insecure Permissions. | |||||
| CVE-2021-26273 | 1 Ninjarmm | 1 Ninjarmm | 2026-06-17 | 4.6 MEDIUM | 7.8 HIGH |
| The Agent in NinjaRMM 5.0.909 has Incorrect Access Control. | |||||
| CVE-2021-26267 | 1 Cpanel | 1 Cpanel | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). | |||||
| CVE-2021-26266 | 1 Cpanel | 1 Cpanel | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). | |||||