Skip to content
OpenAdvisories

Archive

22 June 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-32644 Public exploit

    Cross-site Scripting in Random.php

    Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code injection in random.php. The attack requires user authentication to access the random.php page unles…

  • Low 2.9
    CVE-2021-34428 Public exploit

    SessionListener can prevent a session from being invalidated breaking logout

    For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple con…