Skip to content
OpenAdvisories

Archive

16 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /16 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.8
    CVE-2021-31476

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

    Foxit PhantomPDF
  • High 8.8
    CVE-2021-32691

    Auto-merging Person Records Compromised

    Apollos Apps is an open source platform for launching church-related apps. In Apollos Apps versions prior to 2.20.0, new user registrations are able to access anyone's account by only knowing their basic profile information (name, birthday, gender, etc). This…

    ApollosProject apollos-apps @apollosproject/data-connector-rock npm
  • High 7.2
    CVE-2021-1542

    Cisco Small Business 220 Series Smart Switches Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Co…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • High 7.2
    CVE-2021-1543

    Cisco Small Business 220 Series Smart Switches Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Co…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • High 7.4
    CVE-2021-1566

    Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability

    A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic betw…

    Cisco Cisco Web Security Appliance (WSA) Network devices
  • High 7.0
    CVE-2021-1567

    Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability

    A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the A…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • High 7.2
    CVE-2021-1571

    Cisco Small Business 220 Series Smart Switches Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Co…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • High 7.2
    CVE-2021-1541

    Cisco Small Business 220 Series Smart Switches Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Co…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • High 8.1
    CVE-2021-34551

    Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows

    PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.

    phpmailer/phpmailer Packagist
  • High 7.5
    CVE-2021-29702

    Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2021-20488

    IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users …

    IBM Security Identity Manager
  • High 7.5
    CVE-2020-24939

    Prototype pollution in supermixer

    Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.

    supermixer npm
  • High 7.5
    CVE-2021-30468

    Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

    A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prio…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  • High 7.5
    CVE-2021-33813 EPSS 19%

    XML External Entity (XXE) Injection in JDOM

    An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

    libjdom1-java libjdom2-java libjdom1-java org.jdom:jdom2 Debian Ubuntu Maven
  • High 7.5
    CVE-2021-21441

    XSS in the ticket overview screens

    There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any us…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu