Skip to content
OpenAdvisories

Archive

9 April 2021

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.5

    Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary co…

  • High 7.5

    Reject unauthorized access with GitHub PATs

    Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. An authentication mechanism added in version 0.7.0 enables some malicious user to obtain secrets utilizing the injected credentials within the `~/.netrc` fi…

  • High 7.2
    CVE-2021-20022 Exploited · Ransomware EPSS 17%

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …

    KEV Nov 3, 2021
  • High 8.6
    CVE-2021-25374 Public exploit

    An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in…

  • High 7.9

    An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to rea…

  • High 7.1

    An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged appl…

  • High 7.6

    Improper Input Validation in sopel-plugins.channelmgnt

    sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have …