Skip to content
OpenAdvisories

Archive

6 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /6 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical —
    GHSA-prmc-5v5w-c465

    Client TLS credentials sent raw to server in npm package nats

    Nats is a Node.js client for the NATS messaging system. ## Problem Description _Preview versions_ of two NPM packages and one Deno package from the NATS project contain an information disclosure flaw, leaking options to the NATS server; for one package, this …

    nats npm
  • Critical 9.8
    CVE-2021-28173

    Vangene deltaFlow E-platform - Arbitrary File Upload

    The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login.

    Vangene deltaFlow E-platform
  • Critical 9.8
    CVE-2021-28171

    Vangene deltaFlow E-platform - Broken Authentication

    The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.

    Vangene deltaFlow E-platform