Skip to content
OpenAdvisories

Archive

28 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /28 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.5
    GHSA-8vfw-v2jv-9hwc

    Reflected cross-site scripting in development mode handler in Vaadin

    URL encoding error in development mode handler in `com.vaadin:flow-server` versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafte…

    com.vaadin:flow-server Maven
  • Low 3.1
    CVE-2021-29751

    IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authe…

    IBM Business Automation Workflow Business Process Manager Cloud Pak for Automation
  • Low 3.1
    CVE-2021-32719

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin

    RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script…

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu Alpine
  • Low 3.1
    CVE-2021-32718

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI

    RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially …

    rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu