Skip to content
OpenAdvisories

Archive

3 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /3 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • Unscored —
    CVE-2021-3569

    A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. …

    libtpms Debian
  • Unscored —
    CVE-2021-26584

    A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scri…

    Virtualization
  • Unscored —
    CVE-2021-28847

    MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change reques…

  • High 7.4
    CVE-2021-32923

    Invalid session token expiration

    HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. Fi…

    k3d k3d-proxy k3d-tools github.com/hashicorp/vault Alpine Wolfi Go
  • Unscored —
    CVE-2021-32460

    The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability …

    Trend Micro Trend Micro Maxmium Security (Consumer)
  • High 7.8
    CVE-2021-24023

    An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access …

    Fortinet Fortinet FortiAI Network devices
  • Medium 6.7
    CVE-2021-22130

    A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 …

    Fortinet Fortinet FortiProxy Network devices
  • Medium 5.9
    CVE-2021-31830

    Cross site Scripting (XSS) vulnerability in McAfee DBSec

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. Thi…

    McAfee McAfee Database Security (DBSec)
  • Medium 4.9
    CVE-2021-31831

    Incorrect access to deleted scripts vulnerability in McAfee DBSec

    Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. Th…

    McAfee McAfee Database Security (DBSec)
  • High 8.8
    CVE-2021-28812

    Command Injection Vulnerability in Video Station

    A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.…

    QNAP Systems Video Station
  • High 7.7
    CVE-2021-28807

    Post-Authentication Reflected XSS Vulnerability in Q'center

    A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of…

    QNAP Systems Q'center
  • Medium 5.7
    CVE-2021-28806

    DOM-Based XSS Vulnerability in QTS and QuTS hero

    A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QN…

    QNAP Systems QTS QuTS hero QuTScloud
  • Unscored —
    CVE-2021-33815

    dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly …

    ffmpeg ffmpeg4 Alpine