Skip to content
OpenAdvisories

Archive

19 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /19 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium —
    GHSA-7h5v-85w9-pq6c

    Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint

    ### Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. ### Patches The issue is fixed by https://github.com/matrix-org/…

    matrix-synapse PyPI
  • Medium 6.5
    CVE-2021-29624

    Lack of protection against cookie tossing attacks in fastify-csrf

    fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify-csrf prior to 3.1.0 have a "double submit" mechanism using cookies with an application deployed across multiple subdomains, e.g. "her…

    fastify fastify-csrf fastify-csrf npm
  • Medium 6.5
    CVE-2021-29622 EPSS 20%

    Arbitrary redirects under /new endpoint

    Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL's prefixed by /new redirect to /. Due to a bug in the code, it is possible for an att…

    prometheus prometheus prometheus prometheus Ubuntu Alpine
  • Medium 5.3
    CVE-2021-20529

    IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further att…

    IBM Control Center
  • Medium 6.5
    CVE-2021-20374

    IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows use…

    IBM Maximo Asset Management
  • Medium 5.4
    CVE-2021-20528

    IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Control Center
  • Medium 4.0
    CVE-2020-4765

    IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another…

    IBM Cloud Pak for Multicloud Management
  • Medium 4.3
    CVE-2020-4646

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.…

    IBM Sterling B2B Integrator