Skip to content
OpenAdvisories

Archive

22 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /22 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Unscored —
    CVE-2021-27962

    Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permissio…

    grafana Alpine
  • Medium 5.3
    CVE-2020-28501

    Regular Expression Denial of Service (ReDoS)

    This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators.

    es6-crawler-detect npm
  • Unscored —
    CVE-2021-26295 Public exploit Scanner template EPSS 98%

    RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

    Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.

    Apache Software Foundation Apache OFBiz
  • Low 3.5
    CVE-2021-21437

    Config Items are shown to users without permission

    Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions

    OTRS OTRSCIsInCustomerFrontend ITSMConfigurationManagement
  • Low 3.5
    CVE-2021-21438

    FAQ articles are shown to users without permission

    Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.

    OTRS OTRS FAQ
  • Unscored —
    CVE-2021-28964

    A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attac…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-28963

    Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled …

    shibboleth-sp shibboleth-sp shibboleth-sp2 Debian Ubuntu
  • Critical 9.8
    CVE-2021-28955

    Arbitrary code execution due to an uncontrolled search path for the git binary

    git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations (most often seen on Windows).

    github.com/MichaelMure/git-bug Go
  • Unscored —
    CVE-2021-28956

    The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to exec…

  • Unscored —
    CVE-2021-26069

    Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary…

    Atlassian Jira Server Jira Data Center Web / CMS
  • Unscored —
    CVE-2021-26070

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protecti…

    Atlassian Jira Server Jira Data Center Web / CMS