Skip to content
OpenAdvisories

Archive

18 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /18 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2020-28499

    Prototype Pollution

    All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .

    merge npm
  • High 7.5
    CVE-2021-23341

    Regular Expression Denial of Service (ReDoS)

    The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

    prismjs node-prismjs node-prismjs Debian Ubuntu npm
  • High 7.5
    CVE-2020-28491

    Denial of Service (DoS)

    This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.

    jackson-dataformat-cbor jackson-dataformat-cbor com.fasterxml.jackson.dataformat:jackson-dataformat-cbor Debian Ubuntu Maven
  • High 7.1
    CVE-2021-23340

    Local File Inclusion

    This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user…

    pimcore/pimcore Packagist
  • High 7.5
    CVE-2020-28496

    Regular Expression Denial of Service (ReDoS)

    This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function build_blank (n) { var ret = "rgb(" for (var i = 0; i < n; i++) { ret += " " } return ret + ""; } var Color = three.Color…

    three three.js Ubuntu npm