Skip to content
OpenAdvisories

Archive

3 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /3 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2021-32665

    Verified groups not reliable

    wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user …

    wireapp wire-ios iOS
  • High 7.4
    CVE-2021-32923

    Invalid session token expiration

    HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. Fi…

    github.com/hashicorp/vault vault Alpine Go
  • High 7.8
    CVE-2021-24023

    An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access …

    Fortinet Fortinet FortiAI Network devices
  • High 8.8
    CVE-2021-28812

    Command Injection Vulnerability in Video Station

    A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.…

    QNAP Systems Video Station
  • High 7.7
    CVE-2021-28807

    Post-Authentication Reflected XSS Vulnerability in Q'center

    A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of…

    QNAP Systems Q'center