Skip to content
OpenAdvisories

Archive

27 July 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5
    CVE-2021-28966 EPSS 58%

    Tempfile on Windows path traversal vulnerability

    In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

  • High 8.8

    Adobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation

    Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitat…

  • High 8.8

    Improper Privilege Management in Neo4j Graph Database

    A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.

  • High 7.1

    IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) at…

  • High 7.1
    CVE-2021-32610 EPSS 73%

    Directory Traversal in Archive_Tar

    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.