Skip to content
OpenAdvisories

Archive

3 August 2021

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2021-30573 Public exploit

    Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap cor…

  • High 8.2
    CVE-2021-32804 Public exploit EPSS 15%

    Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

    The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning ab…

  • Unscored —
    CVE-2021-36654 Public exploit

    CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) whil…

  • Unscored —
    CVE-2021-31630 Public exploit EPSS 27%

    Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Co…

  • Unscored —
    CVE-2021-37833 Public exploit

    A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid appli…

  • Unscored —
    CVE-2021-37832 Public exploit

    A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application datab…

  • Medium 5.3
    CVE-2021-26085 Exploited · Ransomware Public exploit EPSS 100%

    Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriz…

    KEV Mar 28, 2022