Skip to content
OpenAdvisories

Archive

2 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /2 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.3
    CVE-2021-21553

    Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific condi…

    Dell PowerScale OneFS
  • High 7.5
    CVE-2021-32811

    Remote Code Execution via Script (Python) objects under Python 3

    Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope 5 below …

    zopefoundation Zope zope accesscontrol Ubuntu PyPI
  • High 8.8
    CVE-2021-34632

    SEO Backlinks <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The SEO Backlinks WordPress plugin is vulnerable to Cross-Site Request Forgery via the loc_config function found in the ~/seo-backlinks.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 4.0.1.

    SEO Backlinks SEO Backlinks Web / CMS
  • High 8.8
    CVE-2021-34628

    Admin Custom Login <= 3.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found in the ~/includes/Login-form-setting/Login-form-background.php file which allows attackers to inject arbitrary web scripts, in versions up …

    weblizar Admin Custom Login Web / CMS
  • High 8.8
    CVE-2021-34637

    Post Index <= 0.7.5 Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the ~/php/settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.7.5.

    iTux Post Index Web / CMS
  • High 8.8
    CVE-2021-21866

    A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality …

  • High 8.8
    CVE-2021-21865

    A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of…

  • High 7.8
    CVE-2021-21864

    A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionali…

  • High 8.0
    CVE-2021-29696

    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authent…

    IBM Cloud Pak for Security
  • High 8.4
    CVE-2021-29741

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root pri…

    IBM AIX VIOS
  • High 7.5
    CVE-2021-34575

    Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0

    In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.

    MB connect line mymbCONNECT24 mbCONNECT24
  • High 7.8
    CVE-2021-33526

    Privilege escalation in mbDIALUP <= 3.9R0.0

    In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privil…

    MB connect line mbDIALUP
  • High 8.8
    CVE-2017-18113

    The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attacke…

    Atlassian Jira Server Jira Data Center Web / CMS