Skip to content
OpenAdvisories

Archive

17 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /17 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-g2qj-pmxm-9f8f

    User enumeration in authentication mechanisms

    Description ----------- The ability to enumerate users was possible without relevant permissions due to different exception messages depending on whether the user existed or not. It was also possible to enumerate users by using a timing attack, by comparing t…

    symfony/symfony symfony/security-http Packagist
  • Low —
    GHSA-2frx-j9hj-6c65

    User enumeration in authentication mechanisms

    Description ----------- The ability to enumerate users was possible without relevant permissions due to different exception messages depending on whether the user existed or not. Resolution ---------- We now ensure that a generic message is returned whether t…

    lexik/jwt-authentication-bundle Packagist
  • Low 3.1
    CVE-2021-32618 Scanner template

    Open Redirect Vulnerability

    The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow re…

    Flask-Middleware flask-security flask-security-too flask-security Ubuntu PyPI