Skip to content
OpenAdvisories

Archive

1 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /1 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.6
    CVE-2021-32656

    Trusted servers exchange can be triggered by attacker

    Nextcloud Server is a Nextcloud package that handles data storage. A vulnerability in federated share exists in versions prior to 19.0.11, 20.0.10, and 21.0.2. An attacker can gain access to basic information about users of a server by accessing a public link…

    Nextcloud security-advisories
  • High 8.1
    CVE-2021-32654

    Attacker can obtain write access to any federated share/public link

    Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to receive write/read privileges on any Federated File Share. Since public links can be added as federated file share, th…

    Nextcloud security-advisories
  • High 7.6
    CVE-2021-22123 Public exploit EPSS 84%

    An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x…

    Fortinet Fortinet FortiWeb Network devices
  • High 8.8
    CVE-2021-32652

    Missing permission check on email metadata retrieval

    Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerabi…

    Nextcloud security-advisories
  • High 8.4
    CVE-2021-29740

    IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string…

    IBM Spectrum Scale
  • High 8.8
    CVE-2021-3495

    Access control flaw in Kiali

    An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allows an attacker with a basic level of access to the cluster (to deploy a kiali operand) to use this vulnerability and deploy a given ima…

    github.com/kiali/kiali Go
  • High 7.5
    CVE-2020-1920

    Regular expression denial of service in react-native

    A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.

    Facebook react-native react-native npm
  • High 7.7
    CVE-2021-33184

    Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.1…

    Synology Synology Download Station
  • High 7.9
    CVE-2021-33183

    Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume managemen…

    Synology Synology Docker
  • High 7.8
    CVE-2021-29088

    Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation…

    Synology Synology DiskStation Manager (DSM)
  • High 8.8
    CVE-2021-29092

    Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station be…

    Synology Synology Photo Station
  • High 7.3
    CVE-2021-33180

    Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in …

    Synology Synology Media Server
  • High 7.5
    CVE-2021-31684

    Out of bounds read in json-smart

    A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

    net.minidev:json-smart json-smart json-smart Debian Ubuntu Maven