Skip to content
OpenAdvisories

Archive

3 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /3 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-32662

    TechDocs mkdocs.yml path traversal

    Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In `@backstage/techdocs-common` versions prior to 0.6.3, a malicious actor could read sensitive files from the environm…

    backstage backstage @backstage/techdocs-common npm
  • Medium 6.5
    CVE-2021-32666

    Asset DoS vulnerability

    wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains…

    wireapp wire-ios iOS
  • Medium 6.8
    CVE-2021-32661

    TechDocs object element script injection

    Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin (`@backstage/plugin-techdocs`) prior to 0.9.5, a malicious internal actor can potentially upload documentation content with malicious scripts by embedding…

    backstage backstage @backstage/plugin-techdocs npm
  • Medium 6.8
    CVE-2021-32660

    TechDocs content sanitization bypass

    Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of `@backstage/tehdocs-common` prior to 0.6.4, a malicious internal actor is able to upload documentation c…

    backstage backstage @backstage/techdocs-common npm
  • Medium 5.3
    CVE-2020-28469

    Regular Expression Denial of Service (ReDoS)

    This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

    glob-parent node-glob-parent Debian npm
  • Medium 5.3
    CVE-2021-20380

    IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain s…

    IBM Qradar Advisor
  • Medium 5.9
    CVE-2021-32926

    When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the…

  • Medium 6.7
    CVE-2021-22130

    A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 …

    Fortinet Fortinet FortiProxy Network devices
  • Medium 5.9
    CVE-2021-31830

    Cross site Scripting (XSS) vulnerability in McAfee DBSec

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. Thi…

    McAfee,LLC McAfee Database Security (DBSec)
  • Medium 4.9
    CVE-2021-31831

    Incorrect access to deleted scripts vulnerability in McAfee DBSec

    Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. Th…

    McAfee,LLC McAfee Database Security (DBSec)
  • Medium 5.7
    CVE-2021-28806

    DOM-Based XSS Vulnerability in QTS and QuTS hero

    A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QN…

    QNAP Systems QTS QuTS hero QuTScloud