Skip to content
OpenAdvisories

Archive

5 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /5 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-27257

    This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected …

    NETGEAR R7800 Network devices
  • Medium 6.3
    CVE-2021-27255

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmwar…

    NETGEAR R7800 Network devices
  • Medium 6.3
    CVE-2021-27254

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R780…

    NETGEAR R7800 Network devices
  • Medium 6.3
    CVE-2020-29028

    Reflected XSS issues

    Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.

    Secomea GateManager
  • Medium 6.1
    CVE-2021-3377

    ansi_up cross-site scripting vulnerability

    The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is f…

    node-ansi-up node-ansi-up ansi_up Debian Ubuntu npm
  • Medium 5.4
    CVE-2021-27907 EPSS 86%

    Apache Superset stored XSS on Dashboard markdown

    Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the …

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Medium 5.3
    CVE-2019-25025

    Activerecord-session_store Vulnerable to Timing Attack

    The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed session ID is valid. Consequently, remote attackers can levera…

    activerecord-session_store ruby-activerecord-session-store Ubuntu RubyGems