Skip to content
OpenAdvisories

Archive

11 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /11 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-22903

    Possible Open Redirect Vulnerability in Action Pack

    The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a mal…

    actionpack rails Ubuntu RubyGems
  • Medium 5.3
    CVE-2021-22897

    curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURL…

  • Medium 6.0
    CVE-2021-23211

    Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-…

    Gallagher Command Centre
  • Medium 6.0
    CVE-2021-23182

    Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reade…

    Gallagher Command Centre
  • Medium 6.5
    CVE-2021-23136

    Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an un…

    Gallagher Command Centre
  • Medium 5.3
    CVE-2021-22764

    A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and …

  • Medium 5.3
    CVE-2021-22769

    A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.…

  • Medium 6.8
    CVE-2021-22175 Exploited EPSS 53%

    When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab a…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV Feb 18, 2026
  • Medium 6.1
    CVE-2020-13688

    Drupal Core Cross-site scripting vulnerability

    Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.X versions prior to 8.8.10; 8.9.X versions prior …

    Drupal Drupal core drupal/core Web / CMS Packagist
  • Medium 4.0
    CVE-2021-25390

    Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged a…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.4
    CVE-2021-25394 Exploited

    A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrar…

    Samsung Mobile Samsung Mobile Devices
    KEV Jun 29, 2023
  • Medium 4.0
    CVE-2021-25391

    Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privilege…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.8
    CVE-2021-25397

    An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.0
    CVE-2021-25392

    Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers …

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.4
    CVE-2021-25395 Exploited

    A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check…

    Samsung Mobile Samsung Mobile Devices
    KEV Jun 29, 2023
  • Medium 6.6
    CVE-2021-25393

    Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get p…

    Samsung Mobile Samsung Mobile Devices
  • Medium 6.7
    CVE-2021-25396

    An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory writ…

    Samsung Mobile Samsung Mobile Devices
  • Medium 4.2
    CVE-2021-29754

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when usin…

    IBM WebSphere Application Server
  • Medium 6.5
    CVE-2020-5003

    IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing …

    IBM Financial Transaction Manager
  • Medium 4.0
    CVE-2021-20396

    IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can …

    IBM QRadar Analyst Workflow
  • Medium 5.4
    CVE-2021-26829 Exploited EPSS 48%

    OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.

    KEV Nov 28, 2025