Skip to content
OpenAdvisories

Archive

24 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /24 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2021-32711

    Leak of information via Store-API

    Shopware is an open source eCommerce platform. Versions prior to 6.3.5.1 may leak of information via Store-API. The vulnerability could only be fixed by changing the API system, which involves a non-backward-compatible change. Only consumers of the Store-API …

    shopware platform shopware/platform Packagist
  • Critical 9.8
    CVE-2021-32708 Public exploit

    Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem

    Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. The condition…

    thephpleague flysystem league/flysystem php-league-flysystem Debian Ubuntu Packagist
  • Critical —
    CVE-2021-31649

    JFinal Java Deserialization Vulnerability

    In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute

    com.jfinal:jfinal Maven