Skip to content
OpenAdvisories

Archive

19 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /19 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-32773

    Confused deputy attack in sandbox module resolution

    Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their inte…

    racket racket racket racket Debian Ubuntu
  • Medium 5.4
    CVE-2020-5323

    Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to …

    Dell Dell OpenManage Enterprise
  • Medium 4.1
    CVE-2020-29503

    Dell EMC PowerStore versions prior to 1.0.3.0.5.xxx contain a file permission Vulnerability. A locally authenticated at…

    Dell PowerStore
  • Medium 6.4
    CVE-2020-29499

    Dell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability in PowerStore X envir…

    Dell PowerStore
  • Medium 4.7
    CVE-2021-29780

    IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should n…

    IBM Resilient OnPrem
  • Medium 5.4
    CVE-2021-20507

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager
  • Medium 5.4
    CVE-2020-5031

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

    IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager
  • Medium 6.1
    CVE-2021-35043

    Cross-site Scripting in OWASP AntiSamy

    OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.

    libowasp-antisamy-java org.owasp.antisamy:antisamy libowasp-antisamy-java Debian Ubuntu Maven
  • Medium 5.5
    CVE-2021-32014

    Denial of Service in SheetJS Pro

    SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.

    xlsx org.webjars.npm:xlsx npm Maven
  • Medium 5.5
    CVE-2021-32013

    Denial of Service in SheetsJS Pro

    SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).

    xlsx org.webjars.npm:xlsx npm Maven
  • Medium 5.5
    CVE-2021-32012

    Denial of Service in SheetJS Pro

    SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).

    xlsx org.webjars.npm:xlsx npm Maven
  • Medium 4.3
    CVE-2021-35968

    Learningdigital.com, Inc. Orca HCM - Path Traversal-2

    The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.

    Learningdigital.com Orca HCM
  • Medium 5.3
    CVE-2021-35967

    Learningdigital.com, Inc. Orca HCM - Path Traversal-1

    The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal without logging in.

    Learningdigital.com Orca HCM
  • Medium 6.1
    CVE-2021-35966

    Learningdigital.com, Inc. Orca HCM - URL Redirection to Untrusted Site ('Open Redirect')

    The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any website. Remote attackers can use the vulnerability to execute phishing attacks.

    Learningdigital.com Orca HCM
  • Medium 5.3
    CVE-2020-36421

    An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA priv…

    mbedtls mbedtls Debian Ubuntu
  • Medium 5.0
    CVE-2021-32760

    Archive package allows chmod of file outside of unpack target directory

    containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes…

    containerd containerd containerd containerd Debian Ubuntu Alpine Go