Skip to content
OpenAdvisories

Archive

21 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /21 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.0
    CVE-2021-34389

    Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorr…

    NVIDIA NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX
  • Medium 6.3
    CVE-2021-34388

    Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to cont…

    NVIDIA NVIDIA Jetson TX1, TX2 series, TX2 NX, AGX Xavier series, Xavier NX, Nano and Nano 2GB
  • Medium 6.3
    CVE-2021-34387

    The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where t…

    NVIDIA NVIDIA Jetson TX1
  • Medium 6.3
    CVE-2021-34386

    Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation c…

    NVIDIA NVIDIA Jetson TX1
  • Medium 6.8
    CVE-2021-32698

    Blind Server-Side Request Forgery (SSRF) in eLabFTW

    eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW…

    elabftw elabftw
  • Medium 5.3
    CVE-2021-24374

    Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak

    The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that…

    Automattic Jetpack – WP Security, Backup, Speed, & Growth automattic/jetpack Web / CMS Packagist
  • Medium 5.4
    CVE-2021-24366

    Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label

    The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the …

    Web / CMS
  • Medium 6.5
    CVE-2021-32697

    Form validation can be skipped

    neos/forms is an open source framework to build web forms. By crafting a special `GET` request containing a valid form state, a form can be submitted without invoking any validators. Form state is secured with an HMAC that is still verified. That means that t…

    neos form neos/form Packagist
  • Medium 5.3
    CVE-2021-29060

    Regular Expression Denial of Service (ReDOS)

    A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.

    color-string node-color-string node-color-string Debian Ubuntu npm
  • Medium 6.1
    CVE-2021-28833

    qiita-markdown Cross-site Scripting vulnerability

    Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.

    qiita-markdown RubyGems