Skip to content
OpenAdvisories

Archive

13 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /13 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2021-37705

    Improper Authorization and Origin Validation Error in OneFuzz

    OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable On…

    Microsoft onefuzz onefuzz PyPI
  • Critical 9.8
    CVE-2021-36380 Exploited EPSS 98%

    Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dn…

    KEV Mar 5, 2024
  • Critical 9.8
    CVE-2021-38553

    HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0

    HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.

    github.com/hashicorp/vault Go