Skip to content
OpenAdvisories

Archive

16 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /16 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

88 results · Feed

  • Unscored —
    CVE-2021-20094

    A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker…

  • Unscored —
    CVE-2021-20093 EPSS 33%

    A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker …

  • High 7.5
    CVE-2021-21441

    XSS in the ticket overview screens

    There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any us…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  • Critical 9.8
    CVE-2020-9493

    Java deserialization in Chainsaw

    A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.

    Apache Software Foundation Apache Chainsaw
  • Medium 6.0
    CVE-2021-28815

    Insecure Storage of Sensitive Information in myQNAPcloud Link

    Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects…

    QNAP Systems myQNAPcloud Link
  • Medium 4.3
    CVE-2021-3535

    Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Fi…

    Rapid7 Rapid7 Nexpose
  • Critical 9.8
    CVE-2021-32685

    Improper Verification of Cryptographic Signature in tenvoy

    tEnvoy contains the PGP, NaCl, and PBKDF2 in node.js and the browser (hashing, random, encryption, decryption, signatures, conversions), used by TogaTech.org. In versions prior to 7.0.3, the `verifyWithMessage` method of `tEnvoyNaClSigningKey` always returns …

    TogaTech tEnvoy tenvoy npm
  • Medium 6.5
    CVE-2021-32676

    Session Fixation in Nextcloud Talk

    Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk before version 9.0.10, 10.0.8 and 11.2.2 did not rotate the session cookie after a successful authentication event. It is recommended tha…

    Nextcloud security-advisories