Skip to content
OpenAdvisories

Archive

11 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /11 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

96 results · Feed

  • Unscored —
    CVE-2021-22654 EPSS 12%

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attac…

  • Low 3.6
    CVE-2020-8030

    skuba: Insecure /tmp usage when joining node to cluster

    A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.

    SUSE SUSE CaaS Platform 4.5
  • Low 2.9
    CVE-2020-8029

    skuba: Insecure handling of private key

    A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/…

    SUSE SUSE CaaS Platform 4.5
  • High 7.0
    CVE-2021-20188

    Improper Authorization in github.com/containers/libpod

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if …

    libpod libpod github.com/containers/libpod Debian Ubuntu Go
  • Low 3.3
    CVE-2020-10734

    OIDC Logout redirect in keycloak

    A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.

    org.keycloak:keycloak-oidc-client-adapter-pom Maven
  • Low 2.7
    CVE-2020-1717

    Generation of Error Message Containing Sensitive Information in Keycloak

    A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.

    org.keycloak:keycloak-parent Maven
  • Unscored —
    CVE-2021-25688

    Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linu…

    Linux Windows
  • Unscored —
    CVE-2021-25689

    An out of bounds write in Teradici PCoIP soft client versions prior to version 20.10.1 could allow an attacker to remot…

    Linux Windows
  • Unscored —
    CVE-2021-25690

    A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the…

    Linux Windows
  • Unscored —
    CVE-2020-13186

    An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web …

  • Unscored —
    CVE-2020-13185

    Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were acc…

  • Medium 6.3
    CVE-2020-8031

    obs: Stored XSS

    A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue a…

    openSUSE open build service open-build-service open-build-service Debian Ubuntu
  • High 7.5
    CVE-2021-23335

    LDAP Injection

    All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure.

    is-user-valid npm
  • Medium 6.7
    CVE-2021-20335

    SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager

    For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB Ops Manager versions prior to and including 4.4.12 triggers a bug where Automation…

    MongoDB MongoDB Ops Manager
  • Unscored —
    CVE-2021-27184

    Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter e…

  • High 7.5
    CVE-2020-35498 Public exploit

    A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a ma…

    openvswitch openvswitch openvswitch Debian Ubuntu Alpine