Skip to content
OpenAdvisories

Archive

26 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /26 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-28170

    Improper Input Validation in Jakarta Expression Language

    In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

    The Eclipse Foundation Jakarta Expression Language Implementation com.sun.el:el-ri org.glassfish:javax.el Debian Ubuntu Maven
  • Medium 4.3
    CVE-2020-25724

    Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

    A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before re…

    org.jboss.resteasy:resteasy-bom Maven
  • Medium 6.5
    CVE-2021-20492

    IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injectio…

    IBM WebSphere Application Server
  • Medium 5.3
    CVE-2021-20486

    IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additi…

    IBM Cloud Pak for Data
  • Medium 5.4
    CVE-2021-27676

    Cross-site scripting in Centreon

    Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notific…

    centreon/centreon Packagist
  • Medium 5.1
    CVE-2021-29253

    The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential s…

  • Medium 5.4
    CVE-2021-29252

    RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer use…

  • Medium 5.5
    CVE-2021-20191

    Insertion of Sensitive Information into Log File in ansible

    A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest t…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI
  • Medium 5.5
    CVE-2021-20178

    Insertion of Sensitive Information into Log File in ansible

    A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials.…

    ansible ansible ansible Debian Ubuntu PyPI