Skip to content
OpenAdvisories

Archive

1 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /1 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-32731

    The reset password form reveal users email address

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and including) versions 13.1RC1 and 13.1, the reset password form reveals the email address of users just by giving their username. The problem h…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web Maven
  • Medium 5.7
    CVE-2021-32730

    No CSRF protection on the password change form

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A cross-site request forgery vulnerability exists in versions prior to 12.10.5, and in versions 13.0 through 13.1. It's possible for forge an URL that, wh…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-administration-ui Maven
  • Medium 5.4
    CVE-2020-4935

    IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability al…

    IBM Datacap Navigator
  • Medium 6.3
    CVE-2020-4902

    IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could se…

    IBM Datacap Navigator
  • Medium 6.1
    CVE-2020-36194

    XSS Vulnerability in QTS and QuTS heroCommand Injection Vulnerabilities in QTS and QuTS hero

    An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202. QNAP System…

    QNAP Systems QTS QuTS hero