Skip to content
OpenAdvisories

Archive

8 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /8 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2021-21506

    PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtent…

    Dell PowerScale OneFS
  • High 7.8
    CVE-2021-21503

    PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user c…

    Dell PowerScale OneFS
  • High 7.4
    CVE-2021-21354

    Open redirect in pollbot

    Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://po…

    Mozilla PollBot
  • High 7.7
    CVE-2021-21362

    Bypassing readOnly policy by creating a temporary 'mc share upload' URL

    MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share up…

    minio minio
  • High 8.7
    CVE-2021-21329

    Multi Factor Authentication Token Improperly Validated On User Login

    RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b.

    ractf core
  • High 7.7
    CVE-2021-21326

    Horizontal Privilege Escalation

    GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-service interface witho…

    glpi-project glpi glpi Ubuntu
  • High —
    GHSA-qxx8-292g-2w66

    Improper Authentication

    ### Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. ### Patches The problem has been …

    Microsoft.Bot.Connector NuGet