Skip to content
OpenAdvisories

Archive

19 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /19 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-10196

    Resource Exhaustion Denial of Service in http-proxy-agent

    A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resou…

    http-proxy-agent npm
  • Critical 9.8
    CVE-2021-28834

    Remote code execution in Kramdown

    Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.

    ruby-kramdown ruby-kramdown kramdown Debian Ubuntu RubyGems
  • Critical 9.8
    CVE-2021-25289

    Out of bounds write in Pillow

    An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2…

    pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI