Skip to content
OpenAdvisories

Archive

30 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /30 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.1
    CVE-2021-21531

    Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authentica…

    Dell Unisphere for PowerMax
  • High 8.8
    CVE-2021-21507

    Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware vers…

    Dell VRTX Switch Modules
  • High 8.3
    CVE-2021-21530

    Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authen…

    Dell OpenManage Enterprise
  • High 7.2
    CVE-2021-31933 Public exploit EPSS 14%

    A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a paramet…

  • High 7.4
    CVE-2021-21535

    Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A loca…

    Dell Dell Hybrid Client (DHC)
  • High 7.5
    CVE-2021-29486

    Improper Input Validation and Loop with Unreachable Exit Condition ('Infinite Loop') in cumulative-distribution-function

    cumulative-distribution-function is an open source npm library used which calculates statistical cumulative distribution function from data array of x values. In versions prior to 2.0.0 apps using this library on improper data may crash or go into an infinite…

    DrPaulBrewer cumulative-distribution-function cumulative-distribution-function npm
  • High 7.5
    CVE-2020-7731

    Denial of Service (DoS)

    This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

  • High 8.6
    CVE-2020-4039

    Directory Traversal Vulnerability in SUSI.AI Server

    SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furth…

    fossasia susi_server
  • High 8.2
    CVE-2020-15153

    Unauthenticated SQL injection in Ampache

    Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch.

    ampache ampache ampache Ubuntu
  • High 7.5
    CVE-2021-31919

    Use of uninitialized buffer in rkyv

    An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.

    rkyv crates.io