Skip to content
OpenAdvisories

Archive

8 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /8 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-13947 EPSS 79%

    Cross-site scripting (XSS) in Apache ActiveMQ

    An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.

    activemq activemq org.apache.activemq:activemq-parent Debian Ubuntu Maven
  • Medium 5.3
    CVE-2021-21306

    Denial of Service in Marked

    Marked is an open-source markdown parser and compiler (npm package "marked"). In marked from version 1.1.1 and before version 2.0.0, there is a Regular expression Denial of Service vulnerability. This vulnerability can affect anyone who runs user generated co…

    markedjs marked marked npm
  • Medium 6.2
    CVE-2021-21290

    Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an…

    netty netty netty netty Debian Ubuntu Maven
  • Medium 4.3
    CVE-2021-21288

    Server-side request forgery in CarrierWave

    CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP…

    carrierwaveuploader carrierwave carrierwave ruby-carrierwave Debian RubyGems
  • Medium 5.3
    CVE-2021-26540

    Improper Input Validation in sanitize-html

    Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, r…

    sanitize-html npm
  • Medium 5.3
    CVE-2021-26539

    Improper Input Validation in sanitize-html

    Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.

    sanitize-html npm
  • Medium 6.5
    CVE-2021-20359

    IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potential…

    IBM Cloud Pak for Automation
  • Medium 6.5
    CVE-2021-20358

    IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connect…

    IBM Cloud Pak for Automation
  • Medium 5.7
    CVE-2021-21435

    Information exposure in PDF export

    Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.

    OTRS OTRS otrs2 Ubuntu
  • Medium 4.3
    CVE-2020-1779

    Dynamic templates reveal sensitive data when OTRS tags are used

    When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior …

    OTRS OTRSTicketForms otrs2 Ubuntu
  • Medium 6.8
    CVE-2020-11915

    An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&…