Skip to content
OpenAdvisories

Archive

18 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /18 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2021-21318

    Removing access may not effect published series

    Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series …

    opencast opencast
  • Medium 6.5
    CVE-2020-28463

    Server-side Request Forgery (SSRF)

    All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts (see in Reportlab's documentation) Steps to reproduce by Karan Bamal: 1. Download and install the l…

    reportlab python-reportlab python-reportlab Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2021-20446

    IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to emb…

    IBM Maximo for Civil Infrastructure
  • Medium 6.5
    CVE-2021-20445

    IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage o…

    IBM Maximo for Civil Infrastructure
  • Medium 6.1
    CVE-2021-20444

    IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to emb…

    IBM Maximo for Civil Infrastructure
  • Medium 6.3
    CVE-2021-20443

    IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is o…

    IBM Maximo for Civil Infrastructure
  • Medium 5.9
    CVE-2021-20354

    IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker c…

    IBM WebSphere Application Server
  • Medium 5.4
    CVE-2020-4933

    IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability all…

    IBM Jazz Reporting Service