Skip to content
OpenAdvisories

Archive

19 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /19 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.5
    CVE-2021-27906

    A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

    A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

    Apache Software Foundation Apache PDFBox libpdfbox-java org.apache.pdfbox:pdfbox Debian Ubuntu Maven
  • Medium 5.5
    CVE-2021-27807

    A carefully crafted PDF file can trigger an infinite loop while loading the file

    A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

    Apache Software Foundation Apache PDFBox libpdfbox-java org.apache.pdfbox:pdfbox Debian Ubuntu Maven
  • Medium 6.5
    CVE-2021-21390

    MITM modification of request bodies in MinIO

    MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-17T02-33-02Z, there is a vulnerability which enables MITM modification of request bodies tha…

    minio minio
  • Medium 6.5
    CVE-2021-25292

    Regular Expression Denial of Service (ReDoS) in Pillow

    An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.

    pillow pillow pillow pillow-python2 Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2020-6578

    Reflected XSS in Zen Cart before 1.5.7a

    Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.

    zencart/zencart Packagist