Skip to content
OpenAdvisories

Archive

24 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /24 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium 4.8
    CVE-2021-33561 Public exploit

    Cross-site scripting in Shopizer

    A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any us…

    com.shopizer:shopizer Maven
  • Medium 4.8
    CVE-2021-33562 Public exploit

    Cross-site scripting in Shopizer

    A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL.

    com.shopizer:shopizer Maven
  • Medium 6.9
    CVE-2020-13603

    Integer Overflow in memory allocating functions

    Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45

    zephyrproject-rtos Zephyr
  • Medium 5.9
    CVE-2021-3320

    Type Confusion in 802154 ACK Frames Handling

    Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7

    zephyrproject-rtos Zephyr
  • Medium 4.0
    CVE-2020-13602

    Remote Denial of Service in LwM2M do_write_op_tlv

    Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr versions >= 1.14.2, >= 2.2.0 contain Improper Input Validation (CWE-20), Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835). For more information, see https://github.com/zephyrproject-rto…

    zephyrproject-rtos Zephyr
  • Medium 6.3
    CVE-2020-13598

    FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat

    FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GH…

    zephyrproject-rtos Zephyr
  • Medium 5.9
    CVE-2020-10072

    Improper Handling of Insufficient Permissions or Privileges in zephyr

    Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more information, see https://github.com/zephyrproject-rtos/zephyr/…

    zephyrproject-rtos Zephyr
  • Medium 4.3
    CVE-2020-10069

    Zephyr Bluetooth unchecked packet data results in denial of service

    Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-…

    zephyrproject-rtos Zephyr
  • Medium 5.4
    CVE-2021-23387

    Open Redirect

    The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example/). The vulnerable code is in index.js::createTraili…

    trailing-slash npm
  • Medium 5.3
    CVE-2021-20428

    IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical erro…

    IBM Security Guardium
  • Medium 5.9
    CVE-2021-20426

    IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for …

    IBM Security Guardium
  • Medium 5.1
    CVE-2021-20389

    IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force I…

    IBM Security Guardium
  • Medium 6.8
    CVE-2021-20419

    IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h…

    IBM Security Guardium
  • Medium 6.1
    CVE-2021-20386

    IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Security Guardium
  • Medium 6.4
    CVE-2021-3485

    Improper Input Validation in Bitdefender Endpoint Security Tools for Linux

    An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue…

    Bitdefender Endpoint Security Tools for Linux Linux
  • Medium 5.3
    CVE-2021-21000

    WAGO: PFC200 Denial of Service due to the number of connections to the runtime

    On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime.

    WAGO Series Ethernet Controller Series PFC200 Controller ICS / OT
  • Medium 6.1
    CVE-2021-33496

    Cross-site scripting in Dutchcoders transfer.sh

    Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.

    github.com/dutchcoders/transfer.sh Go