Skip to content
OpenAdvisories

Archive

26 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /26 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.1
    CVE-2021-21273

    Open redirects on some federation and push requests

    Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external…

    Matrix synapse matrix-synapse matrix-synapse Ubuntu PyPI
  • Low 3.5
    CVE-2021-21298

    Path traversal in Node-Red

    Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the Projects feature is enabled, a user with `projects.read` per…

    node-red node-red @node-red/runtime npm
  • Low 3.5
    CVE-2019-18947

    information disclosure

    Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.

    Micro Focus Solutions Business Manager
  • Low 3.1
    CVE-2021-21330

    Open redirect vulnerability in aiohttp

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different websit…

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu Azure Linux PyPI