Skip to content
OpenAdvisories

Archive

16 August 2021

Vulnerabilities first published on this day (UTC), newest first.

← July 2021 2021 / August /16 September 2021 →
  1. 11
  2. 2123
  3. 3112
  4. 484
  5. 593
  6. 652
  7. 712
  8. 867
  9. 968
  10. 1096
  11. 11117
  12. 12168
  13. 1364
  14. 141
  15. 154
  16. 16107
  17. 1773
  18. 1899
  19. 1933
  20. 2073
  21. 211
  22. 228
  23. 2395
  24. 24222
  25. 2575
  26. 2661
  27. 2732
  28. 28 
  29. 298
  30. 3089
  31. 3169
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.8
    CVE-2021-37711

    Authenticated server-side request forgery in file upload via URL.

    Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available v…

    shopware platform shopware/platform shopware/core Packagist
  • High 8.0
    CVE-2021-37710

    Cross-Site Scripting via SVG media files

    Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a Cross-Site Scripting vulnerability via SVG media files. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measure…

    shopware platform shopware/platform shopware/core Packagist
  • High 7.5
    CVE-2021-36281

    Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability. A low privil…

    Dell PowerScale OneFS
  • High 7.8
    CVE-2021-36280

    Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulne…

    Dell PowerScale OneFS
  • High 7.8
    CVE-2021-36279

    Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulne…

    Dell PowerScale OneFS
  • High 8.1
    CVE-2021-36278

    Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability i…

    Dell PowerScale OneFS
  • High 8.2
    CVE-2021-21594

    Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnera…

    Dell PowerScale OneFS
  • High 8.8
    CVE-2021-37708

    Command injection in mail agent settings

    Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measure…

    shopware platform shopware/platform shopware/core Packagist
  • High 8.8
    CVE-2021-21861

    An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on …

    gpac gpac Debian Ubuntu
  • High 8.8
    CVE-2021-21860

    An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on …

    gpac gpac Debian Ubuntu
  • High 8.8
    CVE-2021-21859

    An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on …

    gpac gpac Debian Ubuntu
  • High 7.8
    CVE-2021-23422

    Arbitrary Code Injection

    This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.

    bikeshed bikeshed Ubuntu PyPI