Skip to content
OpenAdvisories

Archive

12 July 2021

Vulnerabilities first published on this day (UTC), newest first.

88 results · Feed

  • High 7.5

    Incorrect Regular Expression in RestSharp

    RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck proces…

  • Unscored —

    OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authenticati…

  • Unscored —

    Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in …

  • Unscored —

    In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is install…

  • Unscored —

    Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain condition…

  • Medium 4.8

    Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

    Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.

  • Medium 4.4

    Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker wh…

  • Unscored —
    CVE-2021-22918 EPSS 23%

    Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to conve…