Skip to content
OpenAdvisories

Archive

9 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /9 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2021-20080 EPSS 93%

    Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer b…

  • Medium 4.0
    CVE-2021-29671

    IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audi…

    IBM Spectrum Scale
  • High 7.6
    CVE-2021-21431

    Improper Input Validation in sopel-plugins.channelmgnt

    sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have …

    MirahezeBots sopel-channelmgnt sopel-plugins-channelmgnt PyPI
  • Unscored —
    CVE-2021-29221

    A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an …

    Erlang Project Erlang/OTP
  • Unscored —
    CVE-2021-25328

    Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-st…

  • Unscored —
    CVE-2021-25327

    Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-…

  • Unscored —
    CVE-2021-25326

    Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_ve…

  • Unscored —
    CVE-2020-21884

    Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF…

  • Unscored —
    CVE-2020-21883

    Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerabil…

  • Unscored —
    CVE-2021-30159

    An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended …

    mediawiki mediawiki Debian Ubuntu
  • Unscored —
    CVE-2021-30156

    An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Special:Contributions can …

    mediawiki Ubuntu
  • Unscored —
    CVE-2021-30155

    An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does no…

    mediawiki Debian
  • Unscored —
    CVE-2021-30152

    An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki A…

    mediawiki mediawiki Debian Ubuntu
  • Medium 6.1
    CVE-2021-30458

    Wikimedia Parsoid vulnerable to Cross-site Scripting (XSS)

    An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS.

    mediawiki mediawiki wikimedia/parsoid Debian Ubuntu Packagist
  • Unscored —
    CVE-2020-36287 Public exploit

    The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center befo…

    Atlassian Jira Server Jira Data Center Web / CMS