Skip to content
OpenAdvisories

Archive

20 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /20 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low —
    GHSA-x5c7-x7m2-rhmf

    Local directory executable lookup in sops (Windows-only)

    ### Impact Windows users using the sops direct editor option (`sops file.yaml`) can have a local executable named either `vi`, `vim`, or `nano` executed if running sops from `cmd.exe` This attack is only viable if an attacker is able to place a malicious bina…

    go.mozilla.org/sops/v3 go.mozilla.org/sops Go
  • Low 2.4
    CVE-2021-32632

    CSRF allowing modification of commands, modules, banphrases through hidden iFrames

    Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery (CSRF). Hosters of the bot should upgrade to `v1.52` or `stable` to install the patch or, as a workaround, can add one modern dependency.

    pajbot pajbot
  • Low 3.1
    CVE-2021-29692

    IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failur…

    IBM Security Identity Manager
  • Low 3.7
    CVE-2021-29687

    IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses f…

    IBM Security Identity Manager
  • Low 3.8
    CVE-2021-3536

    Cross-site Scripting in Wildfly

    A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.

    org.wildfly:wildfly-parent Maven