Skip to content
OpenAdvisories

Archive

26 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /26 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.2
    CVE-2021-20206

    containernetworking/cni improper limitation of path name

    An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to ref…

    buildah buildah golang-github-appc-cni github.com/containernetworking/cni Debian Ubuntu Azure Linux Alpine Go
  • High 7.5
    CVE-2021-21373

    Nimble falls back to insecure http url when fetching packages

    Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.ni…

    nim-lang security nim nim Debian Ubuntu
  • High 8.1
    CVE-2021-21374

    Nimble fails to validate certificates due to insecure httpClient defaults

    Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setti…

    nim-lang security nim nim Debian Ubuntu
  • High 8.3
    CVE-2021-21372

    Nimble arbitrary code execution for specially crafted package metadata

    Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the …

    nim-lang security nim nim Debian Ubuntu
  • High 8.1
    CVE-2021-21389 Public exploit Scanner template EPSS 15%

    BuddyPress privilege escalation via REST API

    BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint.…

    BuddyPress BuddyPress buddypress/buddypress Web / CMS Packagist
  • High 7.5
    CVE-2021-21403

    Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

    In github.com/kongchuanhujiao/server before version 1.3.21 there is an authentication Bypass by Primary Weakness vulnerability. All users are impacted. This is fixed in version 1.3.21.

    kongchuanhujiao server github.com/kongchuanhujiao/server Go
  • High 7.5
    CVE-2021-22506 Exploited EPSS 26%

    Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all ver…

    KEV Nov 3, 2021
  • High 7.2
    CVE-2021-20682

    OS Command Injection in baserCMS

    baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

    baserCMS Users Community BaserCMS baserproject/basercms Packagist
  • High 7.5
    CVE-2021-28248

    CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempt…

  • High 7.8
    CVE-2021-28246

    CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Obj…