Skip to content
OpenAdvisories

Archive

3 March 2021

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • High 8.8

    A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A s…

  • High 8.6

    An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libsl…

  • High 8.8

    An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCA…

  • High 7.5

    markdown2 Regular Expression Denial of Service

    markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.

  • High 7.5

    ThinkAdmin Admin Panel Access using Default Credentials

    ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboard access.

  • High 7.5

    Pillow Denial of Service by Uncontrolled Resource Consumption

    Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.

  • High 7.5

    Pillow Uncontrolled Resource Consumption

    Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

  • High 7.5

    Pillow Denial of Service by Uncontrolled Resource Consumption

    Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.