Skip to content
OpenAdvisories

Archive

10 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /10 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 4.4
    CVE-2021-32489

    An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not…

  • Medium 5.3
    CVE-2021-32053

    Uncontrolled Resource Consumption in JPA Server in HAPI FHIR

    JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large …

    ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base Maven
  • Medium 6.2
    CVE-2021-21430

    Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code

    OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that…

    OpenAPITools openapi-generator org.openapitools:openapi-generator Maven
  • Medium 6.4
    CVE-2020-27232

    An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3. A special…

  • Medium 4.0
    CVE-2020-28588

    An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  • Medium 6.4
    CVE-2020-27226

    An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted…

  • Medium 6.4
    CVE-2020-27231

    A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applica…

  • Medium 6.4
    CVE-2020-27230

    A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applica…

  • Medium 6.4
    CVE-2020-27229

    A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 applica…

  • Medium 4.3
    CVE-2021-20577

    IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows …

    IBM Cloud Pak for Security
  • Medium 5.4
    CVE-2021-20559

    IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

    IBM Control Desk
  • Medium 4.8
    CVE-2021-20538

    IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform act…

    IBM Cloud Pak for Security
  • Medium 6.1
    CVE-2020-13529

    An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can ca…

    systemd systemd Debian Ubuntu
  • Medium 6.3
    CVE-2021-24011

    A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges…

    Fortinet Fortinet FortiNAC Network devices
  • Medium 6.1
    CVE-2021-20717 Public exploit

    EC-CUBE Cross-site scripting vulnerability

    Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution…

    EC-CUBE EC-CUBE ec-cube/ec-cube Packagist