Skip to content
OpenAdvisories

Archive

8 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /8 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.8
    CVE-2021-26910

    Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race conditi…

    firejail firejail firejail Debian Ubuntu Alpine
  • High 7.5
    CVE-2021-21240

    Regular Expression Denial of Service in httplib2

    httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header)…

    httplib2 httplib2 httplib2 python-httplib2 Debian Ubuntu Alpine PyPI
  • High 7.4
    CVE-2021-21305 EPSS 13%

    Code Injection vulnerability in CarrierWave

    CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately evals the…

    carrierwaveuploader carrierwave carrierwave ruby-carrierwave Debian Ubuntu RubyGems
  • High 7.5
    CVE-2021-25835

    Authentication bypass by capture-replay in github.com/cosmos/ethermint

    Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still val…

    github.com/cosmos/ethermint Go
  • High 7.5
    CVE-2021-25834

    Authentication bypass by capture-replay in github.com/cosmos/ethermint

    Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application.

    github.com/cosmos/ethermint Go
  • High 7.2
    CVE-2021-21304

    Prototype Pollution in Dynamoose

    Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout th…

    dynamoose dynamoose dynamoose npm
  • High 8.8
    CVE-2020-35700

    SQL Injection in librenms

    A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form…

    librenms/librenms Packagist