Skip to content
OpenAdvisories

Archive

February 2021

Vulnerabilities first published in this month (UTC), newest first.

← January 2021 2021 / February March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • Low —
    GHSA-w736-hf9p-qqh3

    Key Caching behavior in the DynamoDB Encryption Client.

    ### Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider…

    com.amazonaws:aws-dynamodb-encryption-java Maven
  • Low 3.5
    CVE-2021-21436

    Agent is able to link customer's Config Items without permission

    Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.

    OTRS OTRSCIsInCustomerFrontend otrs2 Ubuntu
  • Low 3.5
    CVE-2021-21434

    XSS in Survey Module

    Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x vers…

    OTRS Survey otrs2 Ubuntu
  • Low 3.1
    CVE-2020-5032

    IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent …

    IBM QRadar SIEM
  • Low 3.4
    CVE-2020-4640

    Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensi…

    IBM API Connect