Archive

28 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /28 August 2021 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Medium 5.4

CVE-2021-23416

Cross-site Scripting (XSS)

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input.

curly-bracket-parser npm

Jul 28, 2021
Medium 5.6

CVE-2021-23417

Prototype Pollution

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

deepmergefn npm

Jul 28, 2021
Medium 5.4

CVE-2020-5004

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jul 28, 2021
Medium 6.3

CVE-2020-4974

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated atta…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jul 28, 2021
Medium 6.5

CVE-2021-32001

K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority private keys, secrets encryption configuration passphrase, etc.) and…

SUSE Rancher k3s Alpine

Jul 28, 2021
Medium 6.5

CVE-2021-23414

Cross-site Scripting (XSS)

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.

video.js npm

Jul 28, 2021
Medium 6.3

CVE-2020-26180

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an…

Dell PowerScale OneFS

Jul 28, 2021