Skip to content
OpenAdvisories

Archive

16 February 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.1
    CVE-2021-21315 Exploited Public exploit EPSS 91%

    Command Injection Vulnerability

    The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerabili…

    KEV Jan 18, 2022
  • High 7.5
    CVE-2021-23840 Public exploit EPSS 51%

    Integer overflow in CipherUpdate

    Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the …