Skip to content
OpenAdvisories

Archive

21 June 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.8

    Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a pro…

  • High 7.5

    ReDOS in Vfsjfilechooser2

    A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.

  • High 8.1

    XSS Vulnerability in mongo-express

    mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a cell grows larger than supported size, clicking on a row wi…

  • High 7.5

    ReDOS in IS-SVG

    A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.

  • High 7.5

    ReDOS in Mpmath

    A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called.