Skip to content
OpenAdvisories

Archive

June 2021

Vulnerabilities first published in this month (UTC), newest first.

← May 2021 2021 / June July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

1,711 results · Feed

  • Unscored —
    CVE-2021-22345

    There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may ca…

  • Unscored —
    CVE-2021-22346

    There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerab…

  • Unscored —
    CVE-2021-22348

    There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this v…

  • Unscored —
    CVE-2021-22349

    There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verifi…

  • Unscored —
    CVE-2021-22352

    There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may a…

  • Unscored —
    CVE-2021-22351

    There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabil…

  • Unscored —
    CVE-2021-22350

    There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this v…

  • Unscored —
    CVE-2021-34075

    In Artica Pandora FMS <=754 in the File Manager component, there is sensitive information exposed on the client side wh…

  • Unscored —
    CVE-2021-22367

    There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may …

  • High 7.5
    CVE-2021-32736

    Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in think-helper

    think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not proper…

    thinkjs think-helper think-helper npm
  • Unscored —
    CVE-2021-22368

    There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may aff…

  • Unscored —
    CVE-2021-22354

    There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability ma…

  • Unscored —
    CVE-2021-22353

    There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this v…

  • Unscored —
    DRUPAL-CONTRIB-2021-022

    This module provides a revision UI for Block Content entities. The module doesn't sufficiently respect access restricti…

    drupal/block_content_revision_ui Packagist
  • Medium 4.3
    CVE-2021-21676

    Missing permission check in Jenkins requests-plugin Plugin allows sending emails

    Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified email address.

    Jenkins Project Jenkins requests-plugin Plugin org.jenkins-ci.plugins:requests Web / CMS Maven
  • Medium 6.5
    CVE-2021-21675

    CSRF vulnerabilities in Jenkins requests-plugin Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests.

    Jenkins Project Jenkins requests-plugin Plugin org.jenkins-ci.plugins:requests Web / CMS Maven
  • Medium 4.3
    CVE-2021-21674

    Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests

    A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests.

    Jenkins Project Jenkins requests-plugin Plugin org.jenkins-ci.plugins:requests Web / CMS Maven
  • Medium 6.1
    CVE-2021-21673

    Open redirect vulnerability in Jenkins CAS Plugin

    Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

    Jenkins Project Jenkins CAS Plugin org.jenkins-ci.plugins:cas-plugin Web / CMS Maven
  • Medium 4.3
    CVE-2021-21672 EPSS 43%

    XXE vulnerability in Jenkins Selenium HTML report Plugin

    Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

    Jenkins Project Jenkins Selenium HTML report Plugin org.jenkins-ci.plugins:seleniumhtmlreport Web / CMS Maven
  • High 7.5
    CVE-2021-21671

    Session fixation vulnerability in Jenkins

    Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2021-21670

    Improper permission checks allow canceling queue items and aborting builds in Jenkins

    Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Unscored —
    DRUPAL-CONTRIB-2021-021

    This module provides a revision UI for Linky entities. The module doesn't sufficiently respect access restrictions to c…

    drupal/linky_revision_ui Packagist
  • Unscored —
    DRUPAL-CONTRIB-2021-020

    The Apigee Edge module allows connecting a Drupal site to Apigee Edge in order to build a developer portal. The module …

    drupal/apigee_edge Packagist
  • Unscored —
    CVE-2021-22371

    There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerab…

  • Unscored —
    CVE-2021-22323

    There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may e…

  • Unscored —
    CVE-2021-22369

    There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone. Successful exploitatio…

  • Unscored —
    CVE-2021-22374

    There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vuln…

  • Critical 9.8
    CVE-2021-35973

    NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/mini_httpd, …

  • Unscored —
    CVE-2021-35971

    Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserializat…

  • Unscored —
    CVE-2021-35970

    Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via …

  • Unscored —
    CVE-2021-22373

    There is a Defects Introduced in the Design Process Vulnerability in Huawei Smartphone. Successful exploitation of this…

  • Unscored —
    CVE-2021-22376

    A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulner…

    Huawei HarmonyOS Network devices
  • Unscored —
    CVE-2021-22372

    There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affe…

  • Unscored —
    CVE-2021-22370

    There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabil…

  • Unscored —
    CVE-2021-22375

    There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may …

  • Unscored —
    CVE-2021-22326

    A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this…

    Huawei HarmonyOS Network devices
  • Unscored —
    CVE-2021-22380

    There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Successful exploitation …

  • Unscored —
    CVE-2021-3630

    An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted dj…

    djvulibre djvulibre djvulibre Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2021-20461

    IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configur…

    IBM Cognos Analytics
  • Unscored —
    CVE-2021-20107

    There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, an…