Skip to content
OpenAdvisories

Archive

19 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /19 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2021-29455

    Missing validation of JWT signature in `grassrootza/grassroot-platform`

    Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people in low-income communities. Grassroot Platform before master deployment as of 2021-04-16 did not properly verify the signature of JSON Web T…

    grassrootza grassroot-platform
  • High 7.5
    GHSA-crh4-294p-vcfq

    Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

    Unsafe validation RegEx in `EmailField` component in `com.vaadin:vaadin-text-field-flow` versions 2.0.4 through 2.3.2 (Vaadin 14.0.6 through 14.4.3), and 3.0.0 through 4.0.2 (Vaadin 15.0.0 through 17.0.10) allows attackers to cause uncontrolled resource consu…

    com.vaadin:vaadin-text-field-flow Maven
  • High 8.6
    GHSA-j9wr-49vq-rm5g

    Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

    Vulnerability in OSGi integration in `com.vaadin:flow-server` versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to access application classes and resources on the server via crafted HTTP reque…

    com.vaadin:vaadin-bom Maven
  • High 7.5
    CVE-2021-20990

    Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode

    In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery …

    Fibar Group Fibaro Home Center
  • High 8.1
    CVE-2021-20992

    Fibaro Home Center Unencrypted management interface

    In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.

    Fibar Group Fibaro Home Center
  • High 7.8
    CVE-2020-7851

    Innorix File Transfer Solution File Download and Execution Vulnerability

    Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to …

    Innorix INNORIX Agent.exe