Skip to content
OpenAdvisories

Archive

6 April 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.8
    CVE-2021-21423 Public exploit

    Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen

    `projen` is a project generation tool that synthesizes project configuration files such as `package.json`, `tsconfig.json`, `.gitignore`, GitHub Workflows, `eslint`, `jest`, and more, from a well-typed definition written in JavaScript. Users of projen's `Node…

  • Unscored —
    CVE-2021-24027 Public exploit

    A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may h…

  • Unscored —
    CVE-2021-30146 Public exploit

    Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."

  • Unscored —
    CVE-2021-28142 Public exploit

    CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."

  • Unscored —
    CVE-2021-30149 Public exploit EPSS 10%

    Composr 10.0.36 allows upload and execution of PHP files.

  • Unscored —
    CVE-2021-30150 Public exploit

    Composr 10.0.36 allows XSS in an XML script.