Skip to content
OpenAdvisories

Archive

5 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /5 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 5.4
    CVE-2020-22392

    Cross Site Scripting in Subrion CMS

    Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.

    intelliants/subrion Packagist
  • Medium 5.3
    CVE-2021-3642

    Observable Discrepancy in Wildfly Elytron

    A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.

    org.wildfly.security:wildfly-elytron Maven
  • Medium 4.3
    CVE-2021-32002

    SiteManager troubleshooter allows access without authentication from local network

    Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hard…

    Secomea SiteManager
  • Medium 6.5
    CVE-2021-34638

    WordPress Download Manager <= 3.1.24 Authenticated Directory Traversal

    Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file information, as well as allowing Author+ users to perform XSS attacks, by setting Download template to a…

    W3 Eden WordPress Download Manager Web / CMS
  • Medium 6.5
    CVE-2021-21785

    An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 1…

  • Medium 6.5
    CVE-2021-21792

    An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver hand…

  • Medium 6.5
    CVE-2021-21791

    An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver hand…

  • Medium 6.5
    CVE-2021-21790

    An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver hand…

  • Medium 4.2
    CVE-2021-22240

    Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign o…

    GitLab GitLab EE Web / CMS
  • Medium —
    GHSA-hxwm-x553-x359

    Arbitrary Command Injection due to Improper Command Sanitization

    ### Summary There exists a command injection vulnerability in `npmcli/git` versions <2.0.8 which may result in arbitrary shell command execution due to improper argument sanitization when `npmcli/git` is used to execute Git commands based on user controlled i…

    @npmcli/git npm
  • Medium 4.3
    CVE-2021-32598

    An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager …

    Fortinet Fortinet FortiAnalyzer, FortiManager Network devices
  • Medium 6.5
    CVE-2021-22922

    When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided…

    curl curl Debian Alpine
  • Medium 5.3
    CVE-2021-22925

    curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used…

    curl curl Ubuntu Alpine