Skip to content
OpenAdvisories

Archive

23 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /23 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-21323

    Regression in DNS leakage from Tor windows

    Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enab…

    Brave brave-browser
  • Medium 4.8
    CVE-2021-20220

    HTTP request smuggling in Undertow

    A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker t…

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  • Medium —
    CVE-2021-22113

    Incorrect Authorization in Spring Cloud Netflix Zuul

    Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spr…

    org.springframework.cloud:spring-cloud-netflix-zuul Maven
  • Medium 4.3
    CVE-2020-4953

    IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's in…

    IBM Planning Analytics
  • Medium —
    CVE-2020-13697

    NanoHTTPD Cross-site Scripting vulnerability

    An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic GET handler that prints debug information as an HTML page. Any web server that extends this class without implementing its own GET handler …

    org.nanohttpd:nanohttpd-nanolets Maven
  • Medium 5.9
    CVE-2021-27568 Public exploit

    Improper Check for Unusual or Exceptional Conditions in json-smart

    An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the l…

    net.minidev:json-smart net.minidev:json-smart-mini Maven