Skip to content
OpenAdvisories

Archive

8 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /8 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • High 8.8
    CVE-2021-32674

    Remote Code Execution via traversal in TAL expressions

    Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules…

    zopefoundation Zope zope PyPI
  • High 8.8
    CVE-2021-32673

    Remote Command Execution in reg-keygen-git-hash-plugin

    reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 o…

    reg-viz reg-suit reg-keygen-git-hash-plugin npm
  • High 7.5
    CVE-2021-22215

    An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak informati…

    GitLab GitLab Web / CMS
  • High 7.2
    CVE-2021-28811

    Vulnerability in Roon Server

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later

    Roon Labs Roon Server
  • High 7.5
    CVE-2021-28810

    Vulnerability in Roon Server

    If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later

    Roon Labs Roon Server
  • High 7.5
    CVE-2021-33571

    Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks

    In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addr…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2021-33560 Public exploit

    Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to addre…

    libgcrypt20 libgcrypt20 libgcrypt Debian Ubuntu Alpine