Skip to content
OpenAdvisories

Archive

1 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /1 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.1
    CVE-2021-27884

    Weak JSON Web Token in yapi-vendor

    Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs because Math.random in Node.js is used.

    yapi-vendor npm
  • Medium 5.3
    CVE-2021-22114

    Path Traversal in Spring-integration-zip

    Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z),…

    org.springframework.integration:spring-integration-zip Maven
  • Medium 4.9
    CVE-2018-25004

    Invariant failure when explaining a find with a UUID

    A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2020-7929

    Specially crafted regex query can cause DoS

    A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20.

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.4
    CVE-2021-27225

    In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have co…