Skip to content
OpenAdvisories

Archive

16 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /16 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.9
    CVE-2021-29446

    Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime

    jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification an…

    panva jose-node-cjs-runtime jose-node-cjs-runtime npm
  • Medium 5.9
    CVE-2021-29445

    Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime

    jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification an…

    panva jose-node-esm-runtime jose-node-esm-runtime npm
  • Medium 5.9
    CVE-2021-29444

    Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime

    jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and…

    panva jose jose-browser-runtime npm
  • Medium 5.9
    CVE-2021-29443

    Padding Oracle Attack due to Observable Timing Discrepancy in jose

    jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either fa…

    panva jose jose npm
  • Medium 6.5
    CVE-2020-9681

    Adobe Genuine Service privilege escalation vulnerability

    Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of th…

    Adobe GoCart
  • Medium 6.5
    CVE-2020-9667

    Uncontrolled Search Path Element in AGSService.exe

    Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue …

    Adobe GoCart
  • Medium 4.4
    CVE-2021-20491

    IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking …

    IBM Spectrum Protect Server
  • Medium 6.5
    CVE-2021-26074

    Broken Authentication in Atlassian Connect Spring Boot

    Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian…

    Atlassian Atlassian Connect Spring Boot (ACSB) com.atlassian.connect:atlassian-connect-spring-boot-starter Maven