Skip to content
OpenAdvisories

Archive

12 August 2021

Vulnerabilities first published on this day (UTC), newest first.

168 results · Feed

  • Unscored —

    Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the se…

  • Unscored —

    The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload …

  • Unscored —

    Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM.

  • Unscored —

    Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a deni…

  • Unscored —

    Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule).

  • High 8.8

    Cross-Site Request Forgery in express-cart

    Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.

  • Unscored —

    Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRast…

  • Unscored —

    FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavut…