Skip to content
OpenAdvisories

Archive

9 March 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.0

    TIBCO Spotfire Cross Site Scripting Vulnerability

    The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theoretically allows a low privileged attacke…

  • High 8.6

    Command Injection

    This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image(), .svg() or .dot() functions are called, is executed by the childprocess.exec function.

  • High 8.8
    CVE-2021-21166 Exploited EPSS 24%

    Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupt…

    KEV Nov 3, 2021
  • High 7.7

    LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configure…

  • High 8.0
    CVE-2021-21300 Public exploit EPSS 89%

    malicious repositories can execute remote code while cloning

    Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed w…