Archive
2 April 2021
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
Medium 4.3
Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a de…
-
Medium 5.0
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be …
-
Medium 6.1
Docsify vulnerable to cross-site scripting due to mishandled encoding
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
-
Medium 6.1CVE-2021-1879 Exploited
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and …
KEV Nov 3, 2021 -
Medium 5.9
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it wa…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user …
-
Medium 6.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a st…
-
Medium 6.7CVE-2021-28113 EPSS 23%
A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3…
-
Medium 6.1
pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
-
Medium 6.3
JWT leak via Open Redirect in Programmatic access
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).
-
Medium 4.3
In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in t…