Skip to content
OpenAdvisories

Archive

13 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /13 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

207 results · Feed

  • High 7.5
    CVE-2021-29262

    Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings

    When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a se…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven
  • High 7.1
    CVE-2021-27905 Public exploit Scanner template EPSS 93%

    SSRF vulnerability with the Replication handler

    The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the loc…

    Apache Software Foundation Apache Solr lucene-solr lucene-solr Debian Ubuntu Maven
  • Unscored —
    CVE-2021-28938

    Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10…

  • Unscored —
    CVE-2021-29003 Public exploit EPSS 45%

    Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacte…

  • Unscored —
    CVE-2021-29054

    Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CM…

  • Unscored —
    CVE-2021-30637 Public exploit

    htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

  • Unscored —
    CVE-2021-30503

    The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted gl…