Archive

16 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /16 April 2021 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.4

CVE-2021-20218

Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat fro…

io.fabric8:kubernetes-client Maven

Mar 16, 2021
High 7.5

CVE-2021-3127

nats-io/jwt not enforcing checking of Import token permissions

NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.

github.com/nats-io/nats-server/v2 github.com/nats-io/jwt golang-github-nats-io-jwt golang-github-nats-io-jwt Debian Ubuntu Go

Mar 16, 2021
High 8.8

CVE-2021-21193 Exploited Public exploit

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Mar 16, 2021
KEV Nov 3, 2021