Skip to content
OpenAdvisories

Archive

5 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /5 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

93 results · Feed

  • Low 3.1
    GHSA-xh2p-7p87-fhgh

    Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode

    TCR is temporarily miscalculated in the `batchLiquidateTroves` function during Recovery Mode. The bug lies in [`batchLiquidateTroves` of `TroveManager`](https://github.com/liquity/dev/blob/7c83ea11378454629618b3808b16fbfda69ee3e5/packages/contracts/contracts/…

    @liquity/contracts npm
  • Unscored —
    CVE-2020-22732

    CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..

  • Unscored —
    CVE-2021-38138

    OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not …

  • Unscored —
    CVE-2021-37605

    In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating onl…

  • Unscored —
    CVE-2021-37604

    In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility o…

  • Unscored —
    CVE-2021-38095

    The REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive user accounts data, as…

  • High 8.8
    CVE-2021-32603

    A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and bel…

    Fortinet Fortinet FortiAnalyzer, FortiManager Network devices
  • Medium 4.3
    CVE-2021-32598

    An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager …

    Fortinet Fortinet FortiAnalyzer, FortiManager Network devices
  • Unscored —
    CVE-2021-3580

    A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could u…

    nettle nettle nettle nettle Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-22923

    When curl is instructed to get content using the metalink feature, and a user name and password are used to download th…

    curl curl curl Debian Azure Linux Alpine
  • Medium 6.5
    CVE-2021-22922

    When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided…

    curl curl curl Debian Azure Linux Alpine
  • High 7.5
    CVE-2021-22926 EPSS 15%

    libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `C…

    curl curl Azure Linux Alpine
  • Medium 5.3
    CVE-2021-22925

    curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used…

    curl curl curl Ubuntu Azure Linux Alpine