Skip to content
OpenAdvisories

Archive

29 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /29 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.7
    CVE-2021-32721

    URL Redirection to Untrusted Site ('Open Redirect') in github.com/AndrewBurian/powermux

    PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to craft phishing links and other open redirects by exploiting the trailing slash redirection feature. This may lead to users being redirected…

    AndrewBurian powermux github.com/AndrewBurian/powermux Go
  • Medium 6.5
    CVE-2021-29481

    Client side sessions should not allow unencrypted storage

    Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the default configuration of client side sessions results in unencrypted, but signed, data being set as cookie values. This means that if something sensitive goes into the session…

    ratpack ratpack io.ratpack:ratpack-session Maven
  • Medium 4.4
    CVE-2021-29480

    Default client side session signing key is highly predictable

    Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not al…

    ratpack ratpack io.ratpack:ratpack-session Maven
  • Medium 4.3
    CVE-2021-20580

    IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to ex…

    IBM Planning Analytics
  • Medium 4.0
    CVE-2021-20490

    IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure f…

    IBM Spectrum Protect Plus
  • Medium 5.4
    CVE-2021-20477

    IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Planning Analytics
  • Medium 6.8
    CVE-2021-31505

    This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plu…

    Arlo Q Plus
  • Medium 6.4
    CVE-2020-7870

    A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to …

    Unidocs ezPDF Reader ezPDF Editor
  • Medium 6.3
    CVE-2021-23400

    HTTP Header Injection

    The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object.

    nodemailer node-nodemailer node-nodemailer Debian Ubuntu npm