Skip to content
OpenAdvisories

Archive

23 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /23 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    GHSA-6rg3-8h8x-5xfv

    Unchecked hostname resolution could allow access to local network resources by users outside the local network

    ### Impact A newly implemented route allowing users to download files from remote endpoints was not properly verifying the destination hostname for user provided URLs. This would allow malicious users to potentially access resources on local networks that wou…

    github.com/pterodactyl/wings Go
  • Medium 5.3
    CVE-2021-29086

    Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Ma…

    Synology DiskStation Manager (DSM)
  • Medium 6.1
    CVE-2021-35210

    Cross site scripting in the system log

    Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject code into the tl_log table that will be executed in the browser when the system log is called in the back end.

    contao/core-bundle contao/contao Packagist