Skip to content
OpenAdvisories

Archive

27 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /27 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.0
    CVE-2021-21429

    Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

    OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that can leave applic…

    OpenAPITools openapi-generator org.openapitools:openapi-generator-maven-plugin Maven
  • Medium 5.4
    CVE-2021-21365

    Cross-Site Scripting in Content Rendering

    Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwri…

    benjaminkott bootstrap_package bk2k/bootstrap-package Packagist
  • Medium 5.4
    CVE-2021-29666

    IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerab…

    IBM Spectrum Scale
  • Medium 5.4
    CVE-2021-20549

    IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

    IBM Content Navigator
  • Medium 5.4
    CVE-2021-20550

    IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

    IBM Content Navigator
  • Medium 5.4
    CVE-2021-20448

    IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

    IBM Content Navigator
  • Medium 4.4
    CVE-2020-4981

    IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input…

    IBM Spectrum Scale
  • Medium 5.5
    CVE-2021-3451

    A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow con…

    Lenovo PCManager
  • Medium 6.1
    CVE-2021-28125 EPSS 64%

    Apache Superset Open Redirect

    Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard…

    Apache Software Foundation Apache Superset apache-superset superset PyPI