Skip to content
OpenAdvisories

Archive

14 April 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.3
    CVE-2021-29449 Public exploit

    Multiple Privilege Escalation Vulnerabilities Pihole

    Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.

  • Medium 6.5

    Infinite loop in Yubico yubihsm-connector

    An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in…

  • Medium 5.4

    Cross Site Scripting (XSS) in LavaLite 5.8.0

    Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field.

  • Medium 6.5
    CVE-2021-27250 EPSS 67%

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-L…

  • Medium 6.5

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeCha…

  • Medium 6.5

    SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Integration Builder Framework), versions - 7.10, 7.3…