Skip to content
OpenAdvisories

Archive

17 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /17 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.8
    CVE-2021-32693

    Authentication granted with multiple firewalls

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. A vulnerability related to firewall authentication is in Symfony starting with version 5.3.0 and prior to 5.3.2. When an application defines multiple firewalls, …

    symfony symfony symfony/symfony symfony/security-http Packagist
  • Medium 4.1
    CVE-2021-32694

    Malicious Android application can crash the Nextcloud Android Client

    Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1.

    Nextcloud security-advisories
  • Medium 6.5
    CVE-2021-32575

    Improper network isolation in Hashicorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 6.1
    CVE-2021-33557

    MantisBT allows XSS in manage_custom_field_edit_page.php

    An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

    mantisbt/mantisbt Packagist
  • Medium 5.4
    CVE-2021-32681

    Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks

    Wagtail is an open source content management system built on Django. A cross-site scripting vulnerability exists in versions 2.13-2.13.1, versions 2.12-2.12.4, and versions prior to 2.11.8. When the `{% include_block %}` template tag is used to output the val…

    wagtail wagtail wagtail PyPI
  • Medium 5.6
    CVE-2021-23396

    Prototype Pollution

    All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function.

    lutils npm
  • Medium 6.8
    CVE-2021-29706

    IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitiv…

    IBM AIX