Skip to content
OpenAdvisories

Archive

23 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /23 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2021-21380 Public exploit

    Rating Script Service expose XWiki to SQL injection

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform (and only those with the Ratings API installed), the Rating Script Service expose an API to perform SQL requests wi…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-ratings-api Maven
  • High 7.7
    CVE-2021-21402 Public exploit EPSS 79%

    Unauthenticated Arbitrary File Access in Jellyfin

    Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. S…

    jellyfin jellyfin
  • High 7.1
    CVE-2021-21401 Public exploit

    Invalid free() call in Nanopb

    Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` calls if the message type contains an `oneof` field, and the `…

    nanopb nanopb nanopb nanopb Debian Ubuntu PyPI