Skip to content
OpenAdvisories

Archive

13 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /13 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.0
    CVE-2021-38302

    SQL injection in TYPO3 extension

    The Newsletter extension through 4.0.0 for TYPO3 allows SQL Injection.

    ecodev/newsletter Packagist
  • Medium 6.8
    CVE-2021-36793

    CSRF token exposure in TYPO3 extension

    The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information Disclosure because a session identifier is unsafely present in HTML output.

    lms/routes Packagist
  • Medium —
    CVE-2021-36787

    Cross-site Scripting in the femanager TYPO3 extension

    The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

    in2code/femanager Packagist
  • Medium 5.4
    CVE-2021-36788

    Cross-site Scripting in the yoast_seo TYPO3 extension

    The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.

    yoast-seo-for-typo3/yoast_seo Packagist
  • Medium 5.3
    CVE-2021-29880

    IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disc…

    IBM QRadar SIEM
  • Medium 5.3
    CVE-2021-38554

    Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault

    HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases.

    github.com/hashicorp/vault vault Alpine Go
  • Medium 4.3
    CVE-2021-37703

    Information exposure in Discourse

    Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed.

    Discourse Discourse
  • Medium 5.3
    CVE-2021-37693

    Re-use of email tokens in Discourse

    Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification …

    Discourse Discourse
  • Medium 4.6
    CVE-2021-31399

    On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.