Skip to content
OpenAdvisories

Archive

26 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /26 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.7
    CVE-2021-29474

    Relative Path Traversal Attack on note creation

    HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal…

    hedgedoc hedgedoc
  • Medium 5.9
    CVE-2021-29694

    IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an …

    IBM Spectrum Protect Plus
  • Medium 6.2
    CVE-2021-20546

    IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper…

    IBM Spectrum Protect for Space Management
  • Medium 6.2
    CVE-2021-20536

    IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files th…

    IBM Spectrum Protect Plus
  • Medium 6.5
    CVE-2021-20432

    IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker…

    IBM Spectrum Protect Plus
  • Medium 5.3
    CVE-2020-4562

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window commu…

    IBM Planning Analytics
  • Medium 5.3
    CVE-2021-23382

    Regular Expression Denial of Service (ReDoS)

    The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern \/\*\s* sourceMappingURL=(.*).

    node-postcss node-postcss postcss Debian Ubuntu npm
  • Medium 4.8
    CVE-2021-23365

    Authentication Bypass

    The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip …

    github.com/tyktechnologies/tyk-identity-broker Go