Skip to content
OpenAdvisories

Archive

1 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /1 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-32657

    Malicious user could break user administration page

    Nextcloud Server is a Nextcloud package that handles data storage. In versions of Nextcloud Server prior to 10.0.11, 20.0.10, and 21.0.2, a malicious user may be able to break the user administration page. This would disallow administrators to administrate us…

    Nextcloud security-advisories
  • Medium 6.3
    GHSA-jq42-hfch-42f3

    Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint

    # Impact Due to incorrect use of a default URL, `singularity` action commands (`run`/`shell`/`exec`) specifying a container using a `library://` URI will always attempt to retrieve the container from the default remote endpoint (`cloud.sylabs.io`) rather than…

    github.com/hpcng/singularity Go
  • Medium —
    GHSA-h45p-w933-jxh3

    Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript

    ### Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before…

    @aws-crypto/client-node @aws-crypto/client-browser npm
  • Medium —
    GHSA-89v2-g37m-g3ff

    Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli

    ### Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before…

    aws-encryption-sdk-cli PyPI
  • Medium —
    GHSA-x5h4-9gqw-942j

    Improper Verification of Cryptographic Signature in aws-encryption-sdk

    ### Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before…

    aws-encryption-sdk PyPI
  • Medium 6.5
    CVE-2021-26111

    A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0…

    Fortinet Fortinet FortiSwitch Network devices
  • Medium 5.3
    CVE-2021-3424

    Keycloak is vulnerable to IDN homograph attack

    A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.

    org.keycloak:keycloak-services Maven
  • Medium 6.6
    CVE-2021-33181

    Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allow…

    Synology Synology Video Station
  • Medium 5.0
    CVE-2021-33182

    Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in…

    Synology Synology DiskStation Manager (DSM)