Skip to content
OpenAdvisories

Archive

15 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /15 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.6
    CVE-2021-23338

    Deserialization of Untrusted Data

    This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

    pyqlib PyPI
  • Medium 4.8
    CVE-2020-4956

    IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows ce…

    IBM Spectrum Protect Operations Center
  • Medium 4.2
    CVE-2020-4954

    IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions,…

    IBM Spectrum Protect Operations Center
  • Medium 5.9
    CVE-2021-23336 EPSS 41%

    Web Cache Poisoning

    The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…

    python-django python-django python3.4 python3.5 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2020-28500

    Regular Expression Denial of Service (ReDoS)

    Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

    node-lodash lodash node-lodash lodash-es Debian Ubuntu npm RubyGems
  • Medium 5.3
    CVE-2020-7071

    FILTER_VALIDATE_URL accepts URLs with invalid userinfo

    In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2021-21702

    Null Dereference in SoapClient

    In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus c…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine