Skip to content
OpenAdvisories

Archive

7 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /7 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2021-32670

    Reflected cross-site scripting issue in Datasette

    Datasette is an open source multi-tool for exploring and publishing data. The `?_trace=1` debugging feature in Datasette does not correctly escape generated HTML, resulting in a [reflected cross-site scripting](https://owasp.org/www-community/attacks/xss/#ref…

    simonw datasette datasette PyPI
  • High 7.3
    CVE-2021-23391

    Arbitrary File Write via Archive Extraction (Zip Slip)

    This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality.

    calipso npm
  • High 7.8
    CVE-2021-20259

    Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox

    A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as we…

    foreman_fog_proxmox RubyGems
  • High 7.5
    CVE-2021-22222

    Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or craft…

    The Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Alpine