Skip to content
OpenAdvisories

Archive

20 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /20 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-3313

    Plone XSS in User Fullname Property and File Upload

    Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted…

    plone PyPI
  • Medium 5.3
    CVE-2021-29688

    IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn…

    IBM Security Identity Manager
  • Medium 5.9
    CVE-2021-29691

    IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it …

    IBM Security Identity Manager
  • Medium 5.4
    CVE-2021-29686

    IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they …

    IBM Security Identity Manager
  • Medium 5.3
    CVE-2021-29683

    IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated u…

    IBM Security Identity Manager
  • Medium 5.3
    CVE-2021-29682

    IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed techn…

    IBM Security Identity Manager
  • Medium 4.0
    CVE-2020-4850

    IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive …

    IBM Spectrum Scale
  • Medium 4.8
    CVE-2021-25933

    Cross-site Scripting in OpenNMS Horizon

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable t…

    org.opennms:opennms Maven
  • Medium 4.8
    CVE-2021-25929

    Cross-site Scripting in OpenNMS Horizon

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable t…

    org.opennms:opennms Maven
  • Medium 4.3
    CVE-2021-25930

    Cross-Site Request Forgery in OpenNMS Horizon

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable t…

    org.opennms:opennms org.opennms:opennms-config Maven
  • Medium 5.1
    CVE-2020-15522

    Timing based private key exposure in Bouncy Castle

    Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing i…

    bouncycastle bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on Debian Ubuntu Maven NuGet
  • Medium 5.7
    CVE-2021-3426

    There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or …

    python3.4 python3.5 python3.6 python3.8 Debian Ubuntu Alpine