Skip to content
OpenAdvisories

Archive

30 March 2021

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • High 8.0
    CVE-2021-21413 Public exploit

    Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

    isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isol…

  • Unscored —
    CVE-2021-28935 Public exploit

    CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > …

  • Unscored —
    CVE-2021-25161 Public exploit EPSS 16%

    A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

  • Unscored —
    CVE-2021-25162 Public exploit EPSS 26%

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

  • Unscored —
    CVE-2021-25160 Public exploit

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —
    CVE-2021-25159 Public exploit EPSS 13%

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —
    CVE-2021-25157 Public exploit EPSS 10%

    A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(…

  • Unscored —
    CVE-2021-25158 Public exploit EPSS 30%

    A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(…

  • Unscored —
    CVE-2021-25156 Public exploit EPSS 40%

    A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

  • Unscored —
    CVE-2021-25155 Public exploit EPSS 12%

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …