Skip to content
OpenAdvisories

Archive

25 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /25 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium —
    CVE-2021-25934

    OpenNMS Horizon vulnerable to XSS

    In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to …

    org.opennms:opennms Maven
  • Medium 5.5
    CVE-2021-27562 Exploited

    In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the prin…

    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2021-32640

    ReDoS in Sec-Websocket-Protocol header

    ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. The vulnerability has been fixed in ws@7.4.6 (https://github.com/websock…

    websockets ws ws node-ws Debian Ubuntu npm
  • Medium 4.4
    CVE-2021-32638

    CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated

    Github's CodeQL action is provided to run CodeQL-based code scanning on non-GitHub CI/CD systems and requires a GitHub access token to connect to a GitHub repository. The runner and its documentation previously suggested passing the GitHub token as a command-…

    GitHub codeql-action
  • Medium 6.7
    CVE-2021-29708

    IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic k…

    IBM Spectrum Scale
  • Medium 4.9
    CVE-2021-29695

    IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker…

    IBM 8335-GTA 8335-GTB 8335-GCA
  • Medium 4.9
    CVE-2020-4839

    IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checki…

    IBM 8335-GTA 8335-GTB 8335-GCA
  • Medium 5.4
    CVE-2021-21660

    XSS vulnerability in Jenkins Markdown Formatter Plugin

    Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to edit any description rendered using the configured mark…

    Jenkins Project Jenkins Markdown Formatter Plugin io.jenkins.plugins:markdown-formatter Web / CMS Maven