Skip to content
OpenAdvisories

Archive

16 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /16 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2021-29452

    Any logged in user could edit any other logged in user.

    a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked …

    curveball a12n-server @curveball/a12n-server npm
  • High 7.8
    CVE-2020-9668

    AGSService program mishandling symbolic links

    Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.

    Adobe GoCart
  • High 8.2
    CVE-2021-22539

    Code execution in VSCode-bazel via malicious Bazel config files

    An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint *.bzl files to be set via this config file. As such the attacker is able to execute any executable on the …

    Google VSCode-Bazel
  • High 7.7
    CVE-2021-26073

    Broken Authentication in Atlassian Connect Express

    Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express a…

    Atlassian Atlassian Connect Express (ACE) atlassian-connect-express npm