Skip to content
OpenAdvisories

Archive

9 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /9 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2021-36277

    Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Crypt…

    Dell Alienware Command Center (AWCC
  • High 8.8
    CVE-2021-36276

    Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead …

    Dell dbutil
  • High 7.7
    CVE-2021-21584

    Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclos…

    Dell Dell OpenManage Enterprise
  • High 7.8
    CVE-2021-38305

    Command injection in Yamale

    23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a crafted schema file. The schema parser uses eval as part of its processing, and tries to protect from malicious expressions by limiting the builtins that are passed to the eva…

    yamale PyPI
  • High 7.4
    CVE-2021-32797

    JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

    JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html `<form>`. U…

    jupyterlab jupyterlab notebook jupyterlab PyPI
  • High 7.4
    CVE-2021-37634

    LeafKit allows XSS with untrusted user input

    Leafkit is a templating language with Swift-inspired syntax. Versions prior to 1.3.0 are susceptible to Cross-site Scripting (XSS) attacks. This affects anyone passing unsanitised data to Leaf's variable tags. Before this fix, Leaf would not escape any string…

    vapor leaf-kit github.com/vapor/leaf-kit SwiftURL
  • High 7.4
    CVE-2021-37633

    XSS via d-popover and d-html-popover attribute

    Discourse is an open source discussion platform. In versions prior to 2.7.8 rendering of d-popover tooltips can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's default Content Security Policy. T…

    Discourse Discourse
  • High 8.8
    CVE-2021-37214

    Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-3

    The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modi…

    Larvata Digital Technology FLYGO