Skip to content
OpenAdvisories

Archive

5 July 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    SmarterTools SmarterMail before Build 7776 allows XSS.

  • Unscored —

    In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attac…

  • Unscored —

    In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multipl…

  • Unscored —

    The Rocket.Chat desktop application 2.17.11 opens external links without user interaction.

  • Medium 5.4

    Open Redirect

    This affects all versions of package Flask-User. When using the make_safe_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as /////evil.com/path or \\\evil.com/path. This vul…

  • Medium 6.1

    Display information UI XSS

    A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).