Skip to content
OpenAdvisories

Archive

27 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /27 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-32796

    Misinterpretation of malicious XML input in xmldom

    xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may l…

    xmldom xmldom node-xmldom node-xmldom Debian Ubuntu npm
  • Medium 4.3
    CVE-2021-32788

    Post creator of a whisper post can be revealed to non-staff users in Discourse

    Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is revealed to n…

    Discourse Discourse
  • Medium 4.3
    CVE-2021-32748

    WOPI API not protected by credentials/IP check

    Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI ("Web Application Open Platform Interface") protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a cre…

    Nextcloud security-advisories
  • Medium 5.3
    CVE-2021-30483

    Directory Traversal in isomorphic-git

    isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.

    isomorphic-git npm
  • Medium 5.4
    CVE-2021-20562

    IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-…

    IBM Sterling B2B Integrator