Skip to content
OpenAdvisories

Archive

6 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /6 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2021-33898

    In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php…

  • Critical 9.8
    CVE-2017-20005

    NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modificat…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2021-33879 Public exploit

    Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM …

  • Unscored —
    CVE-2021-33881

    On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation (aka conduct a "tear off" attack) …

  • Medium 5.9
    CVE-2021-33880

    Observable Timing Discrepancy in aaugustin websockets library

    The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.

    websockets python-websockets python-websockets Debian Ubuntu PyPI
  • Unscored —
    CVE-2021-31701

    Mintty before 3.4.7 mishandles Bracketed Paste Mode.

  • Unscored —
    CVE-2021-32198

    EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service (Windows GUI hang) by telling the ZOC windo…