Skip to content
OpenAdvisories

Archive

7 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /7 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-30533 Exploited EPSS 17%

    Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to byp…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Jun 27, 2022
  • Medium 5.3
    CVE-2021-29621

    Observable Response Discrepancy in Flask-AppBuilder

    Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in database authentication in Flask-AppBuilder <= 3.2.3. Allows for a non authenticated user to enumerate existing accounts by timing the response time from the server when y…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI
  • Medium 5.4
    CVE-2020-1719

    Privilege Context Switching Error in wildlfy

    A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final ar…

    org.wildfly.bom:wildfly Maven
  • Medium 6.4
    CVE-2021-20517

    IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse…

    IBM WebSphere Application Server ND
  • Medium 5.3
    CVE-2021-29099

    There is a SQL injection vulnerability in ArcGIS Server

    A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed (not customer datasets). Web Services that use file based data…

    Esri ArcGIS Server
  • Medium 6.1
    CVE-2020-36383

    PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.

  • Medium 6.1
    CVE-2020-36384

    PageLayer before 1.3.5 allows reflected XSS via color settings.